Edit tour

Windows Analysis Report
https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3

Overview

General Information

Sample URL:	https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3
Analysis ID:	1541237
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3968 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4108 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=766824288&timestamp=1729777541927
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=766824288&timestamp=1729777541927
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=766824288&timestamp=1729777541927
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=766824288&timestamp=1729777541927
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqdH8HX7f8fVEv_MG-hMcf13_6-FtWdgdfhTv30N8sWT1C-9VZvETyuxx1ui9UNXtjpGlcBg&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1291849437%3A1729777535100594&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.51:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:50004 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/ HTTP/1.1Host: drive.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
Source: global traffic	HTTP traffic detected: GET /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit HTTP/1.1Host: drive.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /drive-viewer/AKGpihabThmApgQYkpFXX_BzVDr-RKZ3HPHFPVHQoMHppnzBHBTdPGV8NLcxB_-ke_4_71XHUUTGub3hhHeAKKfohPNxAMNkL0-xz4Q=s1600-rw-v1 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
Source: global traffic	HTTP traffic detected: GET /drive-viewer/AKGpihabThmApgQYkpFXX_BzVDr-RKZ3HPHFPVHQoMHppnzBHBTdPGV8NLcxB_-ke_4_71XHUUTGub3hhHeAKKfohPNxAMNkL0-xz4Q=s1600-rw-v1 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
Source: global traffic	HTTP traffic detected: GET /auth_warmup HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
Source: global traffic	HTTP traffic detected: GET /drivesharing/clientmodel?id=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-02/meta?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-02/img?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0&page=0&skiphighlight=true&w=800&webp=true HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-02/presspage?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0&page=0 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-02/meta?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://content.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-02/presspage?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0&page=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://content.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-02/img?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0&page=0&skiphighlight=true&w=800&webp=true HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BCPLSTVwsPuYU48&MD=nZ+VTOXt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/docos/p/sync?resourcekey&id=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&reqid=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BCPLSTVwsPuYU48&MD=nZ+VTOXt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: Pf=w(["https://sandbox.google.com/tools/feedback/"]),Qf=w(["https://www.google.cn/tools/feedback/"]),Rf=w(["https://help.youtube.com/tools/feedback/"]),Sf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Tf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Uf=w(["https://localhost.corp.google.com/inapp/"]),Vf=w(["https://localhost.proxy.googlers.com/inapp/"]),Wf=U(yf),Xf=[U(zf),U(Af)],Yf=[U(Bf),U(Cf),U(Df),U(Ef),U(Ff),U(Gf),U(Hf),U(If),U(Jf),U(Kf)],Zf=[U(Lf),U(Mf)],$f= equals www.youtube.com (Youtube)
Source: chromecache_97.2.dr	String found in binary or memory: _.qq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.qq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.qq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.qq(_.zq(c))+"&hl="+_.qq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.qq(m)+"/chromebook/termsofservice.html?languageCode="+_.qq(d)+"&regionCode="+_.qq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: null?void 0:(u=t.eW)==null?void 0:u.Z2)&&a.length>0&&(c.length_seconds=Gsa(a[0]))}}return c};var E_b=function(a){GH.call(this,a.oa());this.context=a;this.L=new eg};R(E_b,GH);E_b.prototype.D=function(){return"onYouTubeIframeAPIReady"};E_b.prototype.H=function(){var a=ME(this.context.ja())\|\|new FH;return XJa(z(a,1,"https://www.youtube.com"),"iframe_api")};E_b.prototype.C=function(){return Xj("YT.Player",this.oa().getWindow())};E_b.prototype.Bg=function(){return this.L};var F_b=new ld("hrvDb","hrvDb");var G_b=function(){Wv.apply(this,arguments)};R(G_b,Wv);var ij={};var HJ=function(a){eg.call(this);var b=this;this.context=a;this.F=null;this.V=!1;this.H=0;this.L=null;this.sa(this.context);var c=a.ja();a=a.oa();yE(c)\|\|Xf(c,83);this.J=new jtb;var d=H_b(c);mtb(this.J,d,function(){return q$a(d,!0)});ltb(this.J,d);this.handler=new Tu(this);this.sa(this.handler);this.C=new CIb;this.sa(this.C);I_b(this,c,a);J_b(this);this.D&&Nh(c)&&(this.context.get(bB).start(),this.D.Fb({fa:1}),(c=si(c))&&this.context.get(bB).setEnabled(!!L(c,18,!1)));this.root=(c=We(this.context,aKb))&& equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: blobcomments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: peoplestackwebexperiments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 3799sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://drive.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec

Source: chromecache_125.2.dr, chromecache_154.2.dr, chromecache_141.2.dr, chromecache_175.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_137.2.dr, chromecache_164.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_137.2.dr, chromecache_164.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: chromecache_125.2.dr, chromecache_104.2.dr, chromecache_101.2.dr, chromecache_175.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_97.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_97.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_154.2.dr, chromecache_141.2.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_141.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_141.2.dr, chromecache_117.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_141.2.dr, chromecache_99.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_135.2.dr, chromecache_133.2.dr, chromecache_123.2.dr, chromecache_117.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_175.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_125.2.dr, chromecache_149.2.dr, chromecache_145.2.dr, chromecache_175.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_99.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_144.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_145.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://calendar.google.com/calendar
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_135.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_123.2.dr, chromecache_141.2.dr, chromecache_117.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_154.2.dr, chromecache_141.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_135.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_123.2.dr, chromecache_141.2.dr, chromecache_117.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_125.2.dr, chromecache_154.2.dr, chromecache_141.2.dr, chromecache_175.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_154.2.dr, chromecache_141.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_154.2.dr, chromecache_141.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_141.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_141.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview
Source: chromecache_135.2.dr, chromecache_133.2.dr, chromecache_117.2.dr, chromecache_110.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_97.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_145.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_109.2.dr, chromecache_156.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_115.2.dr, chromecache_131.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_170.2.dr, chromecache_124.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/
Source: chromecache_156.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlematerialicons/v142/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2)
Source: chromecache_109.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_104.2.dr, chromecache_101.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_104.2.dr, chromecache_101.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_104.2.dr, chromecache_101.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_104.2.dr, chromecache_101.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_176.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_176.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://gemini.google.com/gems/view
Source: chromecache_145.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_124.2.dr, chromecache_175.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_99.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_175.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_110.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_135.2.dr, chromecache_133.2.dr, chromecache_123.2.dr, chromecache_117.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_175.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_97.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_175.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_175.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_130.2.dr, chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_154.2.dr, chromecache_141.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_130.2.dr, chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_176.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_145.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_145.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_170.2.dr, chromecache_124.2.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_175.2.dr	String found in binary or memory: https://support.google.com/docs/answer/13447609
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/docs/answer/2494893?co=GENIE.Platform%3DDesktop#zippy=%2Cprevent-people-f
Source: chromecache_175.2.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_175.2.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_170.2.dr, chromecache_124.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129
Source: chromecache_170.2.dr, chromecache_124.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129?hl=en
Source: chromecache_170.2.dr, chromecache_124.2.dr	String found in binary or memory: https://support.google.com/docs?p=comments_guide
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/docs?p=vids-stock-content
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/drive/answer/13447401
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_175.2.dr	String found in binary or memory: https://support.google.com/drive?p=gemini_drive_pdf
Source: chromecache_175.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_terms
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_97.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://tasks.google.com/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_125.2.dr, chromecache_130.2.dr, chromecache_176.2.dr, chromecache_175.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_135.2.dr, chromecache_133.2.dr, chromecache_123.2.dr, chromecache_117.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_175.2.dr	String found in binary or memory: https://workspace.google.com/terms/google-workspace-individual-terms/esignature-signer/
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_125.2.dr, chromecache_126.2.dr, chromecache_97.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_97.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_145.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_149.2.dr, chromecache_145.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_145.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_141.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_110.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_110.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_154.2.dr, chromecache_141.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_154.2.dr, chromecache_141.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.profile
Source: chromecache_176.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_104.2.dr, chromecache_101.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_176.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_176.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_176.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_176.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_176.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/calendar_2020q4/v13/192px.svg
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/tasks/v10/192px.svg
Source: chromecache_104.2.dr, chromecache_101.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_104.2.dr, chromecache_101.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_101.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_104.2.dr, chromecache_101.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_170.2.dr, chromecache_124.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_170.2.dr, chromecache_124.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_175.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_145.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_125.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_123.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_126.2.dr, chromecache_97.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.51:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:50004 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@23/125@26/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3968 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4108 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3968 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4108 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://apis.google.com/js/googleapis.proxy.js?onload=startup	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://help.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/tools/feedback/	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://policies.google.com/terms/location	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://developers.google.com/	0%	URL Reputation	safe
https://developers.google.com/identity/gsi/web/guides/gis-migration)	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/tools/feedback/%	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/tools/feedback/	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/render_frame2.html	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/%	0%	URL Reputation	safe
https://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/inapp/	0%	URL Reputation	safe
https://fonts.google.com/license/googlerestricted	0%	URL Reputation	safe
https://play.google/intl/	0%	URL Reputation	safe
http://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://console.developers.google.com/	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	0%	URL Reputation	safe
https://support.google.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
blobcomments-pa.clients6.google.com	142.250.185.234	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0023.t-0009.t-msedge.net	13.107.246.51	true	false	unknown
play.google.com	142.250.186.46	true	false	unknown
plus.l.google.com	142.250.185.206	true	false	unknown
www3.l.google.com	142.250.185.174	true	false	unknown
s-part-0036.t-0009.fb-t-msedge.net	13.107.253.64	true	false	unknown
drive.google.com	142.250.185.206	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	unknown
peoplestackwebexperiments-pa.clients6.google.com	142.250.185.106	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs	false		unknown
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false	URL Reputation: safe	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1	false		unknown
https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/docos/p/sync?resourcekey&id=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&reqid=0	false		unknown
https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/	false		unknown
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png	false		unknown
https://drive.google.com/drivesharing/clientmodel?id=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com	false		unknown
https://www.google.com/favicon.ico	false		unknown
https://play.google.com/log?format=json&hasfast=true	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
http://www.broofa.com	chromecache_125.2.dr, chromecache_104.2.dr, chromecache_101.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_125.2.dr, chromecache_149.2.dr, chromecache_145.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://support.google.com	chromecache_125.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/googleapis.proxy.js	chromecache_99.2.dr	false		unknown
http://localhost.proxy.googlers.com/inapp/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_123.2.dr, chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_126.2.dr, chromecache_97.2.dr	false		unknown
https://policies.google.com/terms/service-specific	chromecache_126.2.dr, chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://g.co/recover	chromecache_126.2.dr, chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://help.youtube.com/tools/feedback/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_135.2.dr, chromecache_133.2.dr, chromecache_123.2.dr, chromecache_117.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	false	URL Reputation: safe	unknown
https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://policies.google.com/technologies/cookies	chromecache_126.2.dr, chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_125.2.dr, chromecache_126.2.dr, chromecache_97.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/drive/answer/2407404?hl=en	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://pay.google.com/gp/v/widget/save	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://workspace.google.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_126.2.dr, chromecache_97.2.dr	false		unknown
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/legal/answer/3110420	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/docs/answer/49114	chromecache_175.2.dr	false		unknown
https://support.google.com/drive/answer/2423694	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/google-workspace-individual/?p=esignature_signer_terms	chromecache_175.2.dr	false		unknown
https://drive-thirdparty.googleusercontent.com/	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://policies.google.com/terms/location	chromecache_126.2.dr, chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_123.2.dr, chromecache_99.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://developers.google.com/	chromecache_154.2.dr, chromecache_141.2.dr	false	URL Reputation: safe	unknown
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://calendar.google.com/calendar	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_141.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_145.2.dr, chromecache_175.2.dr	false		unknown
https://youtube.com/t/terms?gl=	chromecache_126.2.dr, chromecache_97.2.dr	false		unknown
https://sandbox.google.com/inapp/%	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://tasks.google.com/	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://www.google.com/intl/	chromecache_97.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/docs?p=vids-stock-content	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://www.google.com/tools/feedback/	chromecache_149.2.dr, chromecache_145.2.dr	false		unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_123.2.dr, chromecache_99.2.dr	false		unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://punctual-dev.corp.google.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://plus.google.com	chromecache_110.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://clients5.google.com/webstore/wall/widget	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/drive?p=gemini_drive_pdf	chromecache_175.2.dr	false		unknown
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/%	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://localhost.corp.google.com/inapp/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/drive/answer/7650301	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://drive.google.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_123.2.dr, chromecache_99.2.dr	false		unknown
https://policies.google.com/privacy	chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://drive.google.com/requestreview?id=	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/docs/answer/65129?hl=en	chromecache_170.2.dr, chromecache_124.2.dr	false		unknown
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://drive.google.com/drive/my-drive	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/docs/answer/13447609	chromecache_175.2.dr	false		unknown
https://fonts.google.com/license/googlerestricted	chromecache_109.2.dr, chromecache_156.2.dr	false	URL Reputation: safe	unknown
https://gemini.google.com/gems/view	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://clients6.google.com	chromecache_135.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_123.2.dr, chromecache_141.2.dr, chromecache_117.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	false		unknown
https://play.google/intl/	chromecache_126.2.dr, chromecache_97.2.dr	false	URL Reputation: safe	unknown
http://localhost.corp.google.com/inapp/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/technologies/location-data	chromecache_126.2.dr, chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://clients5.google.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://console.developers.google.com/	chromecache_154.2.dr, chromecache_141.2.dr	false	URL Reputation: safe	unknown
https://signaler-pa.youtube.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/inapp/%	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_149.2.dr, chromecache_145.2.dr	false	URL Reputation: safe	unknown
https://drivemetadata.clients6.google.com	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/docs/answer/148505	chromecache_125.2.dr, chromecache_175.2.dr	false		unknown
https://support.google.com/	chromecache_145.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/docs/answer/37603	chromecache_175.2.dr	false		unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_123.2.dr, chromecache_99.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.206	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541237
Start date and time:	2024-10-24 15:44:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/125@26/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.174, 142.250.110.84, 34.104.35.123, 216.58.206.74, 216.58.212.163, 216.58.206.35, 172.217.18.3, 142.250.186.170, 216.58.206.42, 142.250.185.234, 172.217.16.202, 172.217.18.106, 142.250.185.106, 142.250.185.138, 172.217.18.10, 142.250.185.74, 142.250.186.106, 142.250.186.42, 142.250.184.234, 142.250.181.234, 142.250.184.202, 142.250.185.202, 142.250.186.74, 142.250.186.138, 216.58.212.170, 142.250.185.170, 172.217.23.106, 172.217.16.138, 142.250.74.202, 217.20.57.34, 216.58.206.67, 74.125.71.84, 13.85.23.206, 192.229.221.95, 93.184.221.240, 20.242.39.171, 172.217.16.195
Excluded domains from analysis (whitelisted): ssl.gstatic.com, azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ogads-pa.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, content.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3

Input	Output
URL: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "requesting for the capital repayment to be made to my husbands account", "prominent_button_name": "unknown", "text_input_field_labels": [ "Account number", "Bank code", "Branch code", "Swift code", "Name" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "requesting for the capital repayment to be made to my husband's account", "prominent_button_name": "unknown", "text_input_field_labels": [ "Account number", "Bank code", "Branch code", "Swift code", "Name" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit Model: claude-3-haiku-20240307	```json { "brands": ["Star"] }
	```json { "brands": ["Star"] }
URL: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit Model: claude-3-haiku-20240307	```json { "brands": [ "Star" ] }
	```json { "brands": [ "Star" ] }
URL: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'drive.google.com' is a subdomain of 'google.com', which is a well-known and legitimate domain associated with Google services.", "The brand 'Star' does not have a known association with Google, which raises suspicion.", "The input fields requested (Account number, Bank code, Branch code, Swift code, Name) are sensitive and unusual for a Google Drive service, which typically does not require such information.", "The presence of sensitive banking information fields on a Google subdomain is highly suspicious and indicative of phishing." ], "riskscore": 8} Google indexed: True
URL: drive.google.com Brands: Star Input Fields: Account number, Bank code, Branch code, Swift code, Name
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "to continue to Google Drive", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'drive.google.com' is a subdomain of 'google.com', which is a well-known and legitimate domain associated with Google.", "The brand 'Star' is not directly associated with Google, which raises suspicion.", "The input fields requested (Account number, Bank code, Branch code, Swift code, Name) are sensitive and unusual for a Google Drive page, which typically does not require such information.", "The presence of sensitive banking information fields on a Google subdomain is highly suspicious and indicative of phishing." ], "riskscore": 8} Google indexed: True
URL: drive.google.com Brands: Star Input Fields: Account number, Bank code, Branch code, Swift code, Name
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "to continue to Google Drive", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are consistent with Google's account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "to continue to Google Drive", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "to continue to Google Drive", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&followup=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%2Fedit&hl=en&ifkv=ARpgrqd Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are consistent with Google's account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	1459
Entropy (8bit):	5.309536814830864
Encrypted:	false
SSDEEP:	24:kMYD7DObtudYqbYsNJ+YdJB/d+neNhz1iL0QhYn3M9Ih6u0hGbHEzGb0SFLM+OcK:o7DObg+5efNjqGhd0hGbkzGb0SC6Frw
MD5:	3B8C04E5267746EC50FAD82AC426FF50
SHA1:	E3EDD75E19D2568376F4B90CED3D47E4F9A1FD8C
SHA-256:	FE35087C88FB80E251F57E6FFA6EDDE9D70ED9C831B4439556230D8F6A0D9110
SHA-512:	21ECA120F86597859B0F046BEDAEFF56BC3DBDC87574221C9DE04F8F10BB4D589A9516632ED0CE9ECA4F737CDFF02C191C9FF31F1645592F3C4A503812941FF2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Xm);._.l();._.k("P6sQOc");.var A0a=!!(_.Uh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Aa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.uT(),function(e){b[e]=!0});var c=a.nT(),d=a.pT();return new C0a(a.fQ(),c.aa()1E3,a.QS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.AaMath.pow(a.ka,a.aa),a.Ca)},JH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var KH=function(a){_.X.call(this,a.Fa);this.da=a.Ea.nW;this.ea=a.Ea.metadata;a=a.Ea.Wha;this.fetch=a.fetch.bind(a)};_.K(KH,_.X);KH.Ba=function(){return{Ea:{nW:_.y0a,metadata:_.v0a,Wha:_.o0a}}};KH.prototype.aa=function(a,b){if(this.ea.getType(a.Od())!==1)return _.mn(a);var c=this.da.KV;return(c=c?D0a(c):null)&&JH(c)?_.dza(a,E0a(this,a,b,c)):_.mn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	dropped
Size (bytes):	215856
Entropy (8bit):	5.527539525534017
Encrypted:	false
SSDEEP:	6144:U7qgufqnIqzhkt0fvsYPB+q4hXAmwWVW11ujFCTQdp0K7S1kqUS4exvhBh59GL0:MqgufqnIqzhkt0fvsYPB+q4hXAmwWVWD
MD5:	C279643F8572C25F113B0745852AC1BA
SHA1:	36E66FC53E363000BFCA71ECF0E2F2CE805B49E1
SHA-256:	31F75F2F90B3BE17FD976E6D9BFFABE631ECD357371CCDE5FC675A86C7200325
SHA-512:	002A04FA80A50260481A0F27AEEB0CC6E66003B829537713F99C4A3C1830F3E41609C8D0F4831B3A3824BEC9E563E5E768F6401D878E5AF4D1465CEB1F387237
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Ke=function(a){return _.Qb(a)&&a.nodeType==1};_.Le=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.He(a),a.appendChild(_.we(a).createTextNode(String(b)))};var Me;_.Ne=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;c===""\|\|c==void 0?(Me\|\|(Me={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Me,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Re;_.Qe=function(a,b,c,d,e,f){if(_.tc&&e)return _.Oe(a);if(e&&!d)return!1;if(!_.rc){typeof b==="number"&&(b=_.Pe(b));var g=b==17\|\|b==18\|\|_.tc&&b==91;if((!c\|\|_.tc)&&g\|\|_.tc&&b

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9211
Entropy (8bit):	5.40130909479059
Encrypted:	false
SSDEEP:	192:DYUqtMklctN8yZZqZQGege1BQHSK1tj9e:DY9Mklq9HqXECZ1tj9e
MD5:	DE6205714FB6FC5CB852B61E299CC119
SHA1:	7D4FB91D961EAF952EE08661D674E142327A56E5
SHA-256:	0C0020D68375603F7A0A7EE1AA5CB49708D0DEA473BE26D91A4CFFFE2F671E08
SHA-512:	388068F1927CEEDEFDBCB86718DF15FBBD32770A34F1DD907A7E365DD3632333522CBD6BA4F14DFA1972F7CC5091ED103F9B1964B76264C7B4CCB35C2CFA19C4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.sOa=_.z("SD8Jgb",[]);._.oX=function(a,b){if(typeof b==="string")a.Lc(b);else if(b instanceof _.Sp&&b.ia&&b.ia===_.C)b=_.$a(b.qv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.pX=function(a){var b=_.Xo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Vo([_.pl("span")]);_.Yo(b,"jsslot","");a.empty().append(b);return b};_.YOb=function(a){return a===null\|\|typeof a==="string"&&_.Vi(a)};._.k("SD8Jgb");._.yX=function(a){_.Y.call(this,a.Fa);this.Va=a.controller.Va;this.jd=a.controllers.jd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.wa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.yX,_.Y);_.yX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.Qv},header:{jsname:"tJHJj",ctor:_.Qv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	215856
Entropy (8bit):	5.527539525534017
Encrypted:	false
SSDEEP:	6144:U7qgufqnIqzhkt0fvsYPB+q4hXAmwWVW11ujFCTQdp0K7S1kqUS4exvhBh59GL0:MqgufqnIqzhkt0fvsYPB+q4hXAmwWVWD
MD5:	C279643F8572C25F113B0745852AC1BA
SHA1:	36E66FC53E363000BFCA71ECF0E2F2CE805B49E1
SHA-256:	31F75F2F90B3BE17FD976E6D9BFFABE631ECD357371CCDE5FC675A86C7200325
SHA-512:	002A04FA80A50260481A0F27AEEB0CC6E66003B829537713F99C4A3C1830F3E41609C8D0F4831B3A3824BEC9E563E5E768F6401D878E5AF4D1465CEB1F387237
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.JsvYdB1VlTQ.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTt6VjuqvFHGTQ7vz8QgRv0QbbEJTQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Ke=function(a){return _.Qb(a)&&a.nodeType==1};_.Le=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.He(a),a.appendChild(_.we(a).createTextNode(String(b)))};var Me;_.Ne=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;c===""\|\|c==void 0?(Me\|\|(Me={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Me,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Re;_.Qe=function(a,b,c,d,e,f){if(_.tc&&e)return _.Oe(a);if(e&&!d)return!1;if(!_.rc){typeof b==="number"&&(b=_.Pe(b));var g=b==17\|\|b==18\|\|_.tc&&b==91;if((!c\|\|_.tc)&&g\|\|_.tc&&b

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	dropped
Size (bytes):	23454
Entropy (8bit):	5.408812355529545
Encrypted:	false
SSDEEP:	384:iSrtcyJgla5dQl7CPYjffLQEu0S1EF5MdgROwv5jsg2EbPdNbdp/q1L9f:iSrtcyJc7CgjffcEdQddwBjl2EbVNbvA
MD5:	498084FE30B6F1F7E18A17EEEA8FFCC9
SHA1:	C084CE0DA02D4BE12672F562C9EC7B62D4E28153
SHA-256:	C1CE8A67AA6DD7D2073057EAAD29E03BCD02BE8D2F8B116242E26B5806630C49
SHA-512:	5FBA713495B184C9DA02E257536C57C4555BFC37F178146E74C413164ADBAB325346983E58FC3036E71E9EFCFA63844750FDBF476156D72FEF952CFF68FBB35F
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Hj(this,3)});_.Fz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Fz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Gz=function(){this.ka=!0;var a=_.Mj(_.zk(_.Ge("TSDtV",window),_.gza),_.Uu,1,_.Gj())[0];if(a){var b={};for(var c=_.n(_.Mj(a,_.hza,2,_.Gj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.dk(e,1).toString();switch(_.Jj(e,_.Vu)){case 3:b[d]=_.bk(e,_.Aj(e,_.Vu,3));break;case 2:b[d]=_.dk(e,_.Aj(e,_.Vu,2));break;case 4:b[d]=_.fk(e,_.Aj(e,_.Vu,4));break;case 5:b[d]=_.kk(e,5,_.Vu);break;case 6:b[d]=_.lk(e,_.mf,6,_.Vu);break;case 8:e=_.Lj(e,_.iza,8,_.Vu);switch(_.Jj(e,_.Wu)){case 1:b[d]=_.kk(e,1,_.Wu);.break;default:throw Error("od`"+_.Jj(e,_.Wu));}break;default:throw Error("od`"+_.Jj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (684)
Category:	dropped
Size (bytes):	6365
Entropy (8bit):	5.392430899093267
Encrypted:	false
SSDEEP:	96:9w/MKBfJyx8sPPmLq+gdpda+LQOlmAqpOkcjRt2w:9b3usPPmLCQOlmAqpOkaRt2w
MD5:	75330D61FAE6A10E571256BCA3A67827
SHA1:	15AB0320F635D48F4655F780193816436A9619A5
SHA-256:	29B361D54B9BDEEE7BF9C119E2DB7E0A90D9C136EFABA0A28BC44CB88084F08A
SHA-512:	59898792B1B8B8053E26F84F8D9DB1B2F0EC67E8B0F43BB92AB3F3C60E45849DBB5C78CBB5401720FB9EE90B8657CF6A5120646BDCE463D7CE0B7734F3A520FD
Malicious:	false
Reputation:	low
Preview:	try{.A("MpJwZc");..B();.}catch(e){_DumpException(e)}.try{.A("UUJqVe");..B();.}catch(e){_DumpException(e)}.try{.Gf(jy);.}catch(e){_DumpException(e)}.try{.A("s39S4");.var Fnc=function(a){if(!Bva(a))throw Error("G``"+String(a));},Gnc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),cWa(b,!1))},Hnc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return dh(e,":.CLIENT")});Da(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);Kka(a)},Lnc=function(){Inc\|\|(Inc=!0,Jnc=xia,xia=function(a){Jnc&&.Jnc(a);for(var b=0;b<a.length;b++){var c=a[b];pf(c)&&Hf(yf(c)).pTa(c)}},Knc=yia,yia=function(a){Knc&&Knc(a);for(var b=0;b<a.length;b++){var c=a[b];pf(c)&&Hf(yf(c)).qTa(c)}})},Mnc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-c

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.272260972196049
Encrypted:	false
SSDEEP:	48:o7dNGEF1HN/EJShSZuLpfMxISN+oP7D8bBrw:o1sSEZumJcRw
MD5:	0823F12FAB09559EE0684B4B6F6F9329
SHA1:	D2AC8628F2CA985373CF0B6E9A9409288C9F0A52
SHA-256:	5DEAF459D657397CFDE8AB99C38E196624A0F1CCC4873EAC7C427E95CA5AD0C9
SHA-512:	2035BCC69738F041366DA6F9E5CC744BBE3BF89E1E413FD526D53C29C32556668F65BF07760714C7DCF300557913D45E00F56BA2DAF472A6E1FA2327569C793D
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.MA=function(a){_.X.call(this,a.Fa);this.aa=a.Xa.cache};_.K(_.MA,_.X);_.MA.Ba=function(){return{Xa:{cache:_.Ft}}};_.MA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.hb.jc(b.mb));c&&this.aa.tH(c)},this);return{}};_.Nu(_.dma,_.MA);._.l();._.k("ZDZcre");.var aI=function(a){_.X.call(this,a.Fa);this.Lm=a.Ea.Lm;this.Z4=a.Ea.metadata;this.aa=a.Ea.Rt};_.K(aI,_.X);aI.Ba=function(){return{Ea:{Lm:_.FH,metadata:_.v0a,Rt:_.CH}}};aI.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.Z4.getType(c.Od())===2?b.Lm.Pb(c):b.Lm.fetch(c);return _.bm(c,_.GH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,aI);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var IH=function(a){_.X.call(this,a.Fa);this.aa=a.Ea.jR};_.K(IH,_.X);IH.Ba=func

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	27641
Entropy (8bit):	5.573976695441575
Encrypted:	false
SSDEEP:	192:ocbBXTbrhho+7ySzhY7UVbqGIwVjqwKYqipd5HwBsIwAhuoxQ1VohjQ/VbqGIwVU:H1/5qY1YtT6qYivxTAqYMH
MD5:	2118F868FAE723EBC0C0674E8649E123
SHA1:	6A7759DD79CF76D2141585D0D6880DF9F0DF6FDB
SHA-256:	D9913CCE1102236ACD2DCBC26F0CD7A59C818F315B659704987AFBFA5BD46573
SHA-512:	2182404F2B47C3B1CCDB1F41697E9598459D63F72F7229479A464CCE220C256370D278CAF3FB48DEB0300296C25721B57199E1D9C43FA505DB6B4AE4348D2246
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans_old:300,400,500,700"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4328)
Category:	downloaded
Size (bytes):	75049
Entropy (8bit):	5.576237710933452
Encrypted:	false
SSDEEP:	1536:x5Wi1Q47yv1T9wv7568In7KCIvvr93VosRNgbuMAbae:D7yvvK9vzZ/NIuAe
MD5:	D2A9A3ACA69431DFBBD808E39EC1C257
SHA1:	2109F51C8400A7F5A1F33DC29500C34445796255
SHA-256:	31A4E95DDF84DEB57CA966CB9EC6724A8E23CC39CDDAD501F79D06BC0FCC3AFF
SHA-512:	5A3C79F07F3599A993AC2435C702F26741CB73DB1D95AF4E501B8CAA8799CB2A39C86C4B656EB3419198D939762B74CD3096CF9932CB9C1EFB7C9B4DAE5B92A3
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1259)
Category:	downloaded
Size (bytes):	15633
Entropy (8bit):	5.607322645025682
Encrypted:	false
SSDEEP:	384:VHAvzP93adHsvACJKwbt5aVkK+sBO54DqvjLk7k9:Vgb93ad1ALUkK+dHjLV
MD5:	BC8D10D511EC01D6CD1F3166506AB246
SHA1:	E320B7EDBA6A8A5FDF78B5AE385F119BE5CD9EC3
SHA-256:	EA1239A57E0B21E3498E0176F6B6E97CD2DF5008C3BC4E47C016CEBABECCBAFA
SHA-512:	193FCC99A2184A479171B7E2431FA5853FAEF753AE198B6FF19D1F8BABFDD9C1E61E2BFD7C0CD4F9DD9ED00ADCE20D18CD0BC7157A4C487877F55D8111AADB16
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.rLgA9lJPBq0.O/am=gME/d=0/rs=AO0039tbcsfCFVcdRQvwAZRWamjBEiMB5g/m=IiC5yd,sy3k,sye,sy3i,syf,sy3m,sy3l,sy3o,syg,sy81,qDbUCd"
Preview:	try{.A("IiC5yd");./*.. Copyright 2020 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	dropped
Size (bytes):	4068
Entropy (8bit):	5.352146509889801
Encrypted:	false
SSDEEP:	48:ve829NgX5wQZDX9Yl6NPcn5EwlIfXqHm4tWyc93tg5XZXGZXGWX3LqDYnysD27YZ:GFkNklIfAmmAYwt2Uny5A86CT9w
MD5:	E6AB948B09BC826B9AB84D04F7CEEB2C
SHA1:	C5E11654BB4E19F50396DBDAE9FC90C7DA732174
SHA-256:	273F792581B6E0A7616B57365618D7ABBD1346FCFFEFA2BEBB47E0522516D9CA
SHA-512:	CAEB0CEA164E954444ABB2B18872A6C48ED0D57018E153E2DBF51ABE49586EEEFFE6753DE0768DAE36039BCDC1F264D95B4C3EA82AB42B260121F5D46162329A
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Fa)};_.K(Tu,_.X);Tu.Ba=_.X.Ba;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.fza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var aAa=function(a){var b=function(d){_.lo(d)&&(_.lo(d).Mc=null,_.dv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},pv=function(a){_.Lt.call(this,a.Fa);this.Qa=this.dom=null;if(this.Ql()){var b=_.Wm(this.wh(),[_.bn,_.an]);b=_.zi([b[_.bn],b[_.an]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.Iu(this,b)}this.Ra=a.Om.Afa};_.K(pv,_.Lt);pv.Ba=function(){return{Om:{Afa:function(a){return _.Ze(a)}}}};pv.prototype.Tp=function(a){return this.Ra.Tp(a)};.pv.prototype.getData=function(a){return this.Ra.getData(a)};pv.prototype.Oo=function(){_.ku(this.d

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3274), with no line terminators
Category:	downloaded
Size (bytes):	3274
Entropy (8bit):	5.390471426059042
Encrypted:	false
SSDEEP:	48:lwBrcIGsrcIGyCGnllJ1ws15Tws15QZUxzVKLCJEcouyntAu1I5nEcJyZXE1eelB:lXTMb1db1hNY/cobkcsidqg3gcIOW
MD5:	33E4EF067E8DB248F4DFB3C7F76E02B5
SHA1:	D5D5979344C1D3F41A32A180ADC849D373196B6A
SHA-256:	89E059962059032E7A140D5739E8C9C197A55D7305ABD98466C9D6D300B07A02
SHA-512:	9A1F769697EE558640C298906A933259DE20D4CD01D0D485BAEA1B7274B8F951B6D56BF5DF1E54383482970245E2CC5F71EB833EA1C89E949E6948DB56A448AE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTuKvZ-nsYNivRzfGpm8QSi6tMFrvg"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258)
Category:	dropped
Size (bytes):	103697
Entropy (8bit):	5.676454622465744
Encrypted:	false
SSDEEP:	1536:n4kmf6hPfKybhJ02snYZoMDitECROshg2p8LHirA2NEupe+dJV:n4qjenYZoMDitECROshg2WkjI+bV
MD5:	F2D6BC305204996D114ED40DEB96B429
SHA1:	87A5F226354298C3F28C754253860BE53C0F585E
SHA-256:	356865E0203377BE57C6B24A18AE4261BD5167F714E5A9694AE8F1CA932E4076
SHA-512:	C11E2BEE061174518DF1A034E2A3ECBF19C01FB8296C3B148CBD5392EB37B16B68B2487E8A5CF5A15CF330C360D11B90F26C130EA9A174C154527E10B3C0DE73
Malicious:	false
Reputation:	low
Preview:	try{.var Q$d=function(a){for(var b=dd.apply(1,arguments),c=a[0],d=0;d<a.length-1;d++)c+=String(b[d])+a[d+1];if(/[<>]/.test(c))throw Error("ya`"+c);return c},R$d=function(){vH.apply(this,arguments)};R(R$d,vH);R$d.prototype.enqueue=function(a,b){this.insert(a,b)};var S$d=function(a,b){a%=b;return a*b<0?a+b:a},T$d=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var lvc=function(){return faa&&ia?!ia.mobile&&(la("iPad")\|\|la("Android")\|\|la("Silk")):la("iPad")\|\|la("Android")&&!la("Mobile")\|\|la("Silk")},zL=function(){return!(faa&&ia?ia.mobile:!lvc()&&(la("iPod")\|\|la("iPhone")\|\|la("Android")\|\|la("IEMobile")))&&!lvc()};.}catch(e){_DumpException(e)}.try{.var WQe=function(a,b){this.C=a instanceof Kt?a:new Kt(a,b)};ek(WQe,Cnb);WQe.prototype.be=function(a,b,c,d){var e=yf(a);var f=e.body;e=e.documentElement;e=new Kt(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=Dnb(a);f-=g.x;e-=g.y;JC(new Kt(f,e),a,b,c,null,null,d)};var XQe=function(

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604)
Category:	dropped
Size (bytes):	14509
Entropy (8bit):	5.7154757050537315
Encrypted:	false
SSDEEP:	384:i7tu/umhM8nXDKmL+LVaWw6LVDdlfkNCZ/uIw/fXp:x/pzbLUVCAdJwHp
MD5:	0C1CAFE786E45E3EE6484F240B9E0EEA
SHA1:	2987DCB8CD74DF138401316A3D65AF3F14728202
SHA-256:	11910A2E9265B1443B74A1372E14087CE645AA3C7AAE2566B9A0B88EDC612279
SHA-512:	052352E9A35FCBC8910DB465556CEF27BF6E5D8458EE786DD7D54749673C3A06A7C26A3764A085F578C8FC6957ABE959E408FA9C44166FE51967620DEE4F170F
Malicious:	false
Reputation:	low
Preview:	try{.var kM=Symbol();.}catch(e){_DumpException(e)}.try{.A("LBaJxb");.var aDc=function(a){a=a.rect;return Math.floor(Math.max(a.height,a.width).2)},bDc={pseudoElement:"::after",duration:450,fill:"forwards",easing:"cubic-bezier(0.2, 0, 0, 1)"};var vM=function(a){GK.call(this,a.Ea);this.Mg=!1;this[kM]=!0};R(vM,GK);vM.ua=GK.ua;.vM.prototype.jd=function(a){var b;if(!this.Mg&&(a instanceof KeyboardEvent?a.key==="Enter"\|\|a.key===" ":1)){this.Mg=!0;(b=this.animation)==null\|\|b.cancel();clearTimeout(this.timeout);this.ca().ub("RBHQF-ksKsZd-OWXEXe-QDgCrf");var c=this.ca().el().getBoundingClientRect();var d=aDc({rect:c});a=a instanceof MouseEvent?{x:a.clientX-c.left,y:a.clientY-c.top}:{x:c.width/2,y:c.height/2};b=a={x:a.x-d/2,y:a.y-d/2};a=(c.width-d)/2;d=(c.height-d)/2;var e={rect:c};var f=e.rect;c=f.width;f=f.height;e=aDc(e);c=.""+(Math.sqrt(Math.pow(c,2)+Math.pow(f,2))+10+Math.max(.35Math.max(f,c),75))/e;e+="px";a={top:[0,0],left:[0,0],height:[e,e],width:[e,e],transform:["translate("+b.x+"px,

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4328)
Category:	dropped
Size (bytes):	75049
Entropy (8bit):	5.576237710933452
Encrypted:	false
SSDEEP:	1536:x5Wi1Q47yv1T9wv7568In7KCIvvr93VosRNgbuMAbae:D7yvvK9vzZ/NIuAe
MD5:	D2A9A3ACA69431DFBBD808E39EC1C257
SHA1:	2109F51C8400A7F5A1F33DC29500C34445796255
SHA-256:	31A4E95DDF84DEB57CA966CB9EC6724A8E23CC39CDDAD501F79D06BC0FCC3AFF
SHA-512:	5A3C79F07F3599A993AC2435C702F26741CB73DB1D95AF4E501B8CAA8799CB2A39C86C4B656EB3419198D939762B74CD3096CF9932CB9C1EFB7C9B4DAE5B92A3
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	5.272260972196049
Encrypted:	false
SSDEEP:	48:o7dNGEF1HN/EJShSZuLpfMxISN+oP7D8bBrw:o1sSEZumJcRw
MD5:	0823F12FAB09559EE0684B4B6F6F9329
SHA1:	D2AC8628F2CA985373CF0B6E9A9409288C9F0A52
SHA-256:	5DEAF459D657397CFDE8AB99C38E196624A0F1CCC4873EAC7C427E95CA5AD0C9
SHA-512:	2035BCC69738F041366DA6F9E5CC744BBE3BF89E1E413FD526D53C29C32556668F65BF07760714C7DCF300557913D45E00F56BA2DAF472A6E1FA2327569C793D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.MA=function(a){_.X.call(this,a.Fa);this.aa=a.Xa.cache};_.K(_.MA,_.X);_.MA.Ba=function(){return{Xa:{cache:_.Ft}}};_.MA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.hb.jc(b.mb));c&&this.aa.tH(c)},this);return{}};_.Nu(_.dma,_.MA);._.l();._.k("ZDZcre");.var aI=function(a){_.X.call(this,a.Fa);this.Lm=a.Ea.Lm;this.Z4=a.Ea.metadata;this.aa=a.Ea.Rt};_.K(aI,_.X);aI.Ba=function(){return{Ea:{Lm:_.FH,metadata:_.v0a,Rt:_.CH}}};aI.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.Z4.getType(c.Od())===2?b.Lm.Pb(c):b.Lm.fetch(c);return _.bm(c,_.GH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,aI);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var IH=function(a){_.X.call(this,a.Fa);this.aa=a.Ea.jR};_.K(IH,_.X);IH.Ba=func

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	464
Entropy (8bit):	4.758217138015706
Encrypted:	false
SSDEEP:	12:uZC4v1CYZOgX8XP9GTBdA37dpXaGC8aLK:uZC4vgYZLPQ5C8a+
MD5:	BA6AB51487CFAEF8F7E56133C34AAE37
SHA1:	19DF244D1D07FF43020A7B001A5B27498507CB7D
SHA-256:	FB20FC7C1F7CFCF723EFCEE54434C316E05EE614F707502344330828FFC1CC98
SHA-512:	95EC94EE16487C430C45E98CF822425F2C7934F69CA257C5E20B1F9E659D6BBF6519E09AD65CE18DA8CA3786D477FC93286F3C6C6AAA1C08B319A4B9AAE854EA
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "blobcomments-pa.googleapis.com",. "consumer": "projects/298134251447". }. }. ]. }.}.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1259)
Category:	dropped
Size (bytes):	15633
Entropy (8bit):	5.607322645025682
Encrypted:	false
SSDEEP:	384:VHAvzP93adHsvACJKwbt5aVkK+sBO54DqvjLk7k9:Vgb93ad1ALUkK+dHjLV
MD5:	BC8D10D511EC01D6CD1F3166506AB246
SHA1:	E320B7EDBA6A8A5FDF78B5AE385F119BE5CD9EC3
SHA-256:	EA1239A57E0B21E3498E0176F6B6E97CD2DF5008C3BC4E47C016CEBABECCBAFA
SHA-512:	193FCC99A2184A479171B7E2431FA5853FAEF753AE198B6FF19D1F8BABFDD9C1E61E2BFD7C0CD4F9DD9ED00ADCE20D18CD0BC7157A4C487877F55D8111AADB16
Malicious:	false
Reputation:	low
Preview:	try{.A("IiC5yd");./*.. Copyright 2020 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	downloaded
Size (bytes):	14486
Entropy (8bit):	5.4718895434721855
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFc+5aiWQLHO91CIuW:IoqUAh8vz5W2E
MD5:	852EB28FFE70864E2DA7A630DB5EE2FD
SHA1:	E83A4A9E0FA2B15F5C3257ABDD6903AC3801BC49
SHA-256:	E6EA49B04FF853C39C64332558E2B75A04D16A57ED8533B1691102B27C0CB712
SHA-512:	494D2DCB3FEE90430CDBEAA5693A2B1D41DC5EF545B2EA0D438B68FCC9375943789930ED619B6979FE9CE14A5E00B10AA6C1D6851282172E64CF9DA61B696F2F
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4665)
Category:	downloaded
Size (bytes):	925878
Entropy (8bit):	5.553421365396893
Encrypted:	false
SSDEEP:	6144:Rfry0PXwFr5KaK3DOIYhKxMOhTE7xqhCSZyKJ3L/CBKC7Cdpc8HFlYHP/Ymd2QnI:RfGacK3Dg1xhKJ3zCDCdpcRH388FFe
MD5:	FEDEA9B3C672A7366396592146FEDEBE
SHA1:	06C0180F4B1FA4B3A7EA62A88B766515D788C868
SHA-256:	6EC173EA7A720C3BE62A3B74F40C7B2D7F64A2334CEC7C168E3709C7A9401278
SHA-512:	A8D74640BFFBF9794FF9D117BF5306653BACAA37D202D1CF7E056392CFEE20630F34A5DABEB009A939480C4CE8C9176FF5D08AA772A5D34761A07FF1D92E2062
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.rLgA9lJPBq0.O/am=gME/d=0/rs=AO0039tbcsfCFVcdRQvwAZRWamjBEiMB5g/m=dSirkf,sy82,sy41,sy4h,sy46,sy4u,n90YA,ZGAB2e,sLGWFe,sy34,sy48,sy66,sy1l,sy4d,sy4f,sy4v,sy26,M79aPc,sy1r,sy33,sy3c,sy49,sy4a,sy4k,sy88,sy85,syq,syr,sy11,sy1n,sy1y,sy2x,sy42,sy47,sy4b,sy4e,sy4l,sy4m,sy4x,sy5a,sy5p,sy5l,sy64,sy7u,nJ4XF,sy83,sy84,sy87,sy89,sy8a,UKcSG,AtsVYc"
Preview:	try{.A("dSirkf");..B();.}catch(e){_DumpException(e)}.try{.var aIc=function(a){if($Hc.has(a))return $Hc.get(a);throw Error("wh`"+a);},cIc=function(a){if(bIc.has(a))return bIc.get(a);throw Error("xh`"+a);},dIc=function(a){for(var b=new Map,c=n(Object.keys(a)),d=c.next();!d.done;d=c.next())d=d.value,b.set(a[d].string,a[d].Oj);return b},zN=function(a){this.aa=q(a)};R(zN,x);for(var eIc={ARROW_KEYS:{string:"arrow_keys",Oj:"Wxn7ub"},AUTOMATED:{string:"automated",Oj:"wjpLYc"},CLICK:{string:"click",Oj:"cOuCgd"},DRAGEND:{string:"dragend",Oj:"RlD3W"},DROP:{string:"drop",Oj:"DaY83b"},GENERIC_CLICK:{string:"generic_click",Oj:"szJgjc"},HOVER:{string:"hover",Oj:"ZmdkE"},IMPRESSION:{string:"impression",Oj:"xr6bB"},KEYBOARD_ENTER:{string:"keyboard_enter",Oj:"SYhH9d"},KEYPRESS:{string:"keypress",Oj:"Kr2w4b"},LONG_PRESS:{string:"long_press",Oj:"tfSNVb"},MOUSEOVER:{string:"mouseover",.Oj:"FrfE3b"},RIGHT_CLICK:{string:"rightclick",Oj:"CYQmze"},SCROLL:{string:"scroll",Oj:"XuHpsb"},SWIPE:{string:"swipe",Oj:"

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (611)
Category:	dropped
Size (bytes):	2119507
Entropy (8bit):	5.648895609476619
Encrypted:	false
SSDEEP:	24576:jEq7+httUpmitzwds5lGojQsAXRrNOgLbXIzx:jp7+h/itk25lGoj7ErNOU4N
MD5:	10E5B4E7513C4C79E9F024B3E9000B86
SHA1:	EAF0270CFF7F97DF24AB607F38DBC601A4B40A08
SHA-256:	08E98EF9D29EF9090B97D9AA3780460B7EE6961947573CCD6253984B2C04B4C9
SHA-512:	F9C24F8A2230C68D3C3D3AA8C3CDD2272FB9EA6528916FA29350E5202AD4A682099B6EEF4EA789A73A563EB57F3DBEAA93511F96936ED8672F012749FACA894B
Malicious:	false
Reputation:	low
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0xc180, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	704194
Entropy (8bit):	5.597586611893352
Encrypted:	false
SSDEEP:	6144:Tfq3MngtoytLBhooIc/qttkPlqYbppG2YKWMnpxp4BGS3T3vJyNLZA9:TMugtVLvh+kxI2YKWoU9
MD5:	2501D8D7F4827C828626D93C994D462A
SHA1:	4E30EE89AB4762F65B3850217AADD6919F2D6F22
SHA-256:	BE868C4776958EB3CF294FEEBADEB0CF46808D27100A792B682207386401DAA5
SHA-512:	450D89A303DD57834B88FC1655EE80BC591C68B6CE8A743A9AA19BEAE39AF73853AFFC1FA5FB83369516C30AA25A4232F50DB8E1CABABED49BC8A13F25051698
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5050
Entropy (8bit):	5.3019521130781655
Encrypted:	false
SSDEEP:	96:oMMRpyvkMmrDbBargZEi/PggzLmwC8Vh11PGmtjGTsECOFpw:ip7MQE4Ei/PgIBjmmepR6
MD5:	56879DD8886F803593865378D078E00A
SHA1:	7225C36DEEFBDFB2386747582CF19D17C480B724
SHA-256:	113A7E4489B214342173C9A39D2D6ACF444E13D9B61C05649B1FA3A21EBE018B
SHA-512:	26969E03C7CC01C747DA3BB25ECF7C0B8F3A9AF863BC5FA5FC20F12F7A1608265122701DA115184DAF285B3112F24228CDFEFE0E834055CD201B79A71CEE9BA1
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.aOa=_.z("wg1P6b",[_.DB,_.Vn,_.co]);._.k("wg1P6b");.var x7a;x7a=_.yh(["aria-"]);._.oK=function(a){_.Y.call(this,a.Fa);this.La=this.Aa=this.aa=this.viewportElement=this.Na=null;this.Kc=a.Ea.xf;this.ab=a.Ea.focus;this.Fc=a.Ea.Fc;this.ea=this.Ui();a=-1*parseInt(_.Ro(this.Ui().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Ro(this.Ui().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Vc(0),_.Iu(this,.y7a(this,this.aa.el())));_.nG(this.wa())&&(a=this.wa().el(),b=this.De.bind(this),a.__soy_skip_handler=b)};_.K(_.oK,_.Y);_.oK.Ba=function(){return{Ea:{xf:_.UF,focus:_.FF,Fc:_.Ru}}};_.oK.prototype.pz=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.kA)?(a=a.data.kA,this.Ca=a==="MOUS

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	6.7268503778685105
Encrypted:	false
SSDEEP:	6:6v/lhPeoMMphEt0Sa2AKhmC4cR5HIQoplQfQjy30up:6v/7bn2AKhmMjHv2lQfQjw0c
MD5:	AF848AEE503A57E479B0FB57318F3F2F
SHA1:	68FE7097531D492691C6FA3454C8192D13E8572F
SHA-256:	33DD0582F6972DDDB05BEE6FD5EA0312FBD782A8003F4C7876AFEBD0F08F49AD
SHA-512:	1225614BBD2BD8DCF57B31759093EC92096A16AB428DE43606A8F71367BF247B9ADFE1F2C18E5F7156A216CBC4B35CF5070A39E4740FBDE1BAE5709D43734619
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_3_pdf_x16.png
Preview:	.PNG........IHDR................a....IDATx.cx.l......+g.....N... ...=....D.\|Y8.......]Z...E.p....`5.....}.lD5..3.....?.......?..8..D......H.....n..(?..r.....L3....\|.....cm...@j@..j.8..\|T/ ....4...^..P>PC:<.>#......CBz.d..".^8.....h......V...Q......IEND.B`.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	dropped
Size (bytes):	747749
Entropy (8bit):	5.79182562273868
Encrypted:	false
SSDEEP:	3072:8TwIHOQcksvLwFzy0ltT4vzq20cy2eWzKRncURgoSdwInhPaZSvLGjCfDx/ludbZ:8rLWUzy0lVP9nz10BodLLMdUAUGiTjN
MD5:	307EA58474E1F23CAA31819E40AA02D0
SHA1:	FB38F19F49AC1B64C5BF2770739E7355E1D48D81
SHA-256:	1FE35E3C36592FA8EDE3925F929C03EF926BBEA7765EFD55DC60F83BE149E7D2
SHA-512:	BCB0BB75213A11CD89976F56B345FF188CB73D162077CC200B0B8700D2A1B12B3E368958768193C3D566C41D753DFCFF1A6B4BF28B55A85B1AB7A65BBAE5F3BC
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x11460ce4, 0x2046986, 0x1a784f88, 0x11406f40, 0x72102, 0x0, 0x4000000, 0x2000001b, 0x61e, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Rb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,mca,lca,oca,pca

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2258)
Category:	downloaded
Size (bytes):	103697
Entropy (8bit):	5.676454622465744
Encrypted:	false
SSDEEP:	1536:n4kmf6hPfKybhJ02snYZoMDitECROshg2p8LHirA2NEupe+dJV:n4qjenYZoMDitECROshg2WkjI+bV
MD5:	F2D6BC305204996D114ED40DEB96B429
SHA1:	87A5F226354298C3F28C754253860BE53C0F585E
SHA-256:	356865E0203377BE57C6B24A18AE4261BD5167F714E5A9694AE8F1CA932E4076
SHA-512:	C11E2BEE061174518DF1A034E2A3ECBF19C01FB8296C3B148CBD5392EB37B16B68B2487E8A5CF5A15CF330C360D11B90F26C130EA9A174C154527E10B3C0DE73
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.rLgA9lJPBq0.O/am=gME/d=0/rs=AO0039tbcsfCFVcdRQvwAZRWamjBEiMB5g/m=sy86,sy14,sy8c,sy8k,sy8l,sy8n,sy8m,sy8q,rj51oe,gypOCd"
Preview:	try{.var Q$d=function(a){for(var b=dd.apply(1,arguments),c=a[0],d=0;d<a.length-1;d++)c+=String(b[d])+a[d+1];if(/[<>]/.test(c))throw Error("ya`"+c);return c},R$d=function(){vH.apply(this,arguments)};R(R$d,vH);R$d.prototype.enqueue=function(a,b){this.insert(a,b)};var S$d=function(a,b){a%=b;return a*b<0?a+b:a},T$d=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var lvc=function(){return faa&&ia?!ia.mobile&&(la("iPad")\|\|la("Android")\|\|la("Silk")):la("iPad")\|\|la("Android")&&!la("Mobile")\|\|la("Silk")},zL=function(){return!(faa&&ia?ia.mobile:!lvc()&&(la("iPod")\|\|la("iPhone")\|\|la("Android")\|\|la("IEMobile")))&&!lvc()};.}catch(e){_DumpException(e)}.try{.var WQe=function(a,b){this.C=a instanceof Kt?a:new Kt(a,b)};ek(WQe,Cnb);WQe.prototype.be=function(a,b,c,d){var e=yf(a);var f=e.body;e=e.documentElement;e=new Kt(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=Dnb(a);f-=g.x;e-=g.y;JC(new Kt(f,e),a,b,c,null,null,d)};var XQe=function(

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=hjmy5puhknlt
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	4068
Entropy (8bit):	5.352146509889801
Encrypted:	false
SSDEEP:	48:ve829NgX5wQZDX9Yl6NPcn5EwlIfXqHm4tWyc93tg5XZXGZXGWX3LqDYnysD27YZ:GFkNklIfAmmAYwt2Uny5A86CT9w
MD5:	E6AB948B09BC826B9AB84D04F7CEEB2C
SHA1:	C5E11654BB4E19F50396DBDAE9FC90C7DA732174
SHA-256:	273F792581B6E0A7616B57365618D7ABBD1346FCFFEFA2BEBB47E0522516D9CA
SHA-512:	CAEB0CEA164E954444ABB2B18872A6C48ED0D57018E153E2DBF51ABE49586EEEFFE6753DE0768DAE36039BCDC1F264D95B4C3EA82AB42B260121F5D46162329A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Fa)};_.K(Tu,_.X);Tu.Ba=_.X.Ba;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.fza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var aAa=function(a){var b=function(d){_.lo(d)&&(_.lo(d).Mc=null,_.dv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},pv=function(a){_.Lt.call(this,a.Fa);this.Qa=this.dom=null;if(this.Ql()){var b=_.Wm(this.wh(),[_.bn,_.an]);b=_.zi([b[_.bn],b[_.an]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.Iu(this,b)}this.Ra=a.Om.Afa};_.K(pv,_.Lt);pv.Ba=function(){return{Om:{Afa:function(a){return _.Ze(a)}}}};pv.prototype.Tp=function(a){return this.Ra.Tp(a)};.pv.prototype.getData=function(a){return this.Ra.getData(a)};pv.prototype.Oo=function(){_.ku(this.d

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	dropped
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	33443
Entropy (8bit):	5.389809714020298
Encrypted:	false
SSDEEP:	768:EhGGx5LfgRPng7Yt1w7XPrAMF3lt2BQRGRXfL1L6G9ik0iO9:msP1w4MF3ltdmP52CxO9
MD5:	7E832F2E0C641A19A3505AEAF6FBBF5C
SHA1:	F992C7917227358FD12297967F91742AC430D29B
SHA-256:	63E38F87AAC6D5C759B1743602FCEDF588B4CD3CE1C6CD43E421CEA4784AE048
SHA-512:	DCDA5A43F02830CAA982915B16BE1087B133C0ECF8E75922976246AE9A08282619E9C4F707EA855FAB1866CB30A705933193E22BAA863D05F875C5899DB27277
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Yua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.qp("//www.google.com/images/cleardot.gif");_.Bp(c)}this.ka=c};_.h=Yua.prototype;_.h.Yc=null;_.h.g_=1E4;_.h.nB=!1;_.h.cR=0;_.h.sK=null;_.h.HV=null;_.h.setTimeout=function(a){this.g_=a};_.h.start=function(){if(this.nB)throw Error("hc");this.nB=!0;this.cR=0;Zua(this)};_.h.stop=function(){$ua(this);this.nB=!1};.var Zua=function(a){a.cR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Im((0,_.gg)(a.LH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Eka,a),a.aa.onerror=(0,_.gg)(a.Dka,a),a.aa.onabort=(0,_.gg)(a.Cka,a),a.sK=_.Im(a.Fka,a.g_,a),a.aa.src=String(a.ka))};_.h=Yua.prototype;_.h.Eka=function(){this.LH(!0)};_.h.Dka=function(){this.LH(!1)};_.h.Cka=function(){this.LH(!1)};_.h.Fka=function(){this.LH(!1)};._.h.LH=function(a){$ua(this);a?(this.nB=!1,this.da.call(this.ea,!0)):this.cR<=0?Zua(this):(this.nB=!1,

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	121112
Entropy (8bit):	5.837130305275228
Encrypted:	false
SSDEEP:	3072:kyW/Za21hsq1xCLqrQcS8xriAX7E1fbaRrcjSbPxtKDY/Ji/JPvhv:kyWhvHCLqEcS8xOAX7E1f2BPM
MD5:	EAAA71ED8F32B85F24FD3EBC43535BCC
SHA1:	CFFB0A1096D61DC0BA476D19381806BEC8264EF4
SHA-256:	AF2F1227E6BE9926C8A5E9FC5FCE394C150E19412248A3C8F9BC65076E3AECBB
SHA-512:	F178343DFD51C11A326D2322830436188122A3F56BF964C8075291F0D41489048735A356A605579F28B7DA67FFFDB87C2D390D82CE8AB61A54A907AD02CE49C2
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="4060px" viewBox="0 0 31 4060" preserveAspectRatio="none"><g transform="translate(0,2170)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2428)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,3396)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	33443
Entropy (8bit):	5.389809714020298
Encrypted:	false
SSDEEP:	768:EhGGx5LfgRPng7Yt1w7XPrAMF3lt2BQRGRXfL1L6G9ik0iO9:msP1w4MF3ltdmP52CxO9
MD5:	7E832F2E0C641A19A3505AEAF6FBBF5C
SHA1:	F992C7917227358FD12297967F91742AC430D29B
SHA-256:	63E38F87AAC6D5C759B1743602FCEDF588B4CD3CE1C6CD43E421CEA4784AE048
SHA-512:	DCDA5A43F02830CAA982915B16BE1087B133C0ECF8E75922976246AE9A08282619E9C4F707EA855FAB1866CB30A705933193E22BAA863D05F875C5899DB27277
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Yua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.qp("//www.google.com/images/cleardot.gif");_.Bp(c)}this.ka=c};_.h=Yua.prototype;_.h.Yc=null;_.h.g_=1E4;_.h.nB=!1;_.h.cR=0;_.h.sK=null;_.h.HV=null;_.h.setTimeout=function(a){this.g_=a};_.h.start=function(){if(this.nB)throw Error("hc");this.nB=!0;this.cR=0;Zua(this)};_.h.stop=function(){$ua(this);this.nB=!1};.var Zua=function(a){a.cR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Im((0,_.gg)(a.LH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Eka,a),a.aa.onerror=(0,_.gg)(a.Dka,a),a.aa.onabort=(0,_.gg)(a.Cka,a),a.sK=_.Im(a.Fka,a.g_,a),a.aa.src=String(a.ka))};_.h=Yua.prototype;_.h.Eka=function(){this.LH(!0)};_.h.Dka=function(){this.LH(!1)};_.h.Cka=function(){this.LH(!1)};_.h.Fka=function(){this.LH(!1)};._.h.LH=function(a){$ua(this);a?(this.nB=!1,this.da.call(this.ea,!0)):this.cR<=0?Zua(this):(this.nB=!1,

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	dropped
Size (bytes):	208991
Entropy (8bit):	5.5222563123974515
Encrypted:	false
SSDEEP:	3072:zhowDRxNrA//e9ItRxaeLWl+ASbhvNi5QpPLHNzqN2NIuOtU3FyGPDBms8:6wpkBOeSlPSKOLHNziA1pPDBms8
MD5:	610B5B8B695F5C485199F902CF8BF365
SHA1:	C0BDD53303B1B3EEBBABFAEB0470D8FB256CD53B
SHA-256:	FBFDB6975EEA988C823D2F7935E1238DC0D03CBDAC1898314573ACE61A8B5333
SHA-512:	94578B62B37DA1D68CC753CCED759BD14EDE6AFBA9F40BE96DDC63B47DC8595671BF70DD62BE3BA82E889B6C7CB9FAA077176C575392703A302CA9C53D20B11B
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_1(function(_){var window=this;._.zg=(window.gapi\|\|{}).load;._.Rn=_.xe(_.Ie,"rw",_.ye());.var Sn=function(a,b){(a=_.Rn[a])&&a.state<b&&(a.state=b)};var Tn=function(a){a=(a=_.Rn[a])?a.oid:void 0;if(a){var b=_.ue.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Rn[a];Tn(a)}};_.Un=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Vn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Wn=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Sn(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.Ie.oa){var k=d.id;if(k){f=(f=_.Rn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Tn(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (604)
Category:	downloaded
Size (bytes):	14509
Entropy (8bit):	5.7154757050537315
Encrypted:	false
SSDEEP:	384:i7tu/umhM8nXDKmL+LVaWw6LVDdlfkNCZ/uIw/fXp:x/pzbLUVCAdJwHp
MD5:	0C1CAFE786E45E3EE6484F240B9E0EEA
SHA1:	2987DCB8CD74DF138401316A3D65AF3F14728202
SHA-256:	11910A2E9265B1443B74A1372E14087CE645AA3C7AAE2566B9A0B88EDC612279
SHA-512:	052352E9A35FCBC8910DB465556CEF27BF6E5D8458EE786DD7D54749673C3A06A7C26A3764A085F578C8FC6957ABE959E408FA9C44166FE51967620DEE4F170F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.rLgA9lJPBq0.O/am=gME/d=0/rs=AO0039tbcsfCFVcdRQvwAZRWamjBEiMB5g/m=sy2e,LBaJxb,sy29,pxafOd,sy2d,sy2f,sy2k,sy2l,GI8h7,nAFL3,sy2m,sy6r,O626Fe"
Preview:	try{.var kM=Symbol();.}catch(e){_DumpException(e)}.try{.A("LBaJxb");.var aDc=function(a){a=a.rect;return Math.floor(Math.max(a.height,a.width).2)},bDc={pseudoElement:"::after",duration:450,fill:"forwards",easing:"cubic-bezier(0.2, 0, 0, 1)"};var vM=function(a){GK.call(this,a.Ea);this.Mg=!1;this[kM]=!0};R(vM,GK);vM.ua=GK.ua;.vM.prototype.jd=function(a){var b;if(!this.Mg&&(a instanceof KeyboardEvent?a.key==="Enter"\|\|a.key===" ":1)){this.Mg=!0;(b=this.animation)==null\|\|b.cancel();clearTimeout(this.timeout);this.ca().ub("RBHQF-ksKsZd-OWXEXe-QDgCrf");var c=this.ca().el().getBoundingClientRect();var d=aDc({rect:c});a=a instanceof MouseEvent?{x:a.clientX-c.left,y:a.clientY-c.top}:{x:c.width/2,y:c.height/2};b=a={x:a.x-d/2,y:a.y-d/2};a=(c.width-d)/2;d=(c.height-d)/2;var e={rect:c};var f=e.rect;c=f.width;f=f.height;e=aDc(e);c=.""+(Math.sqrt(Math.pow(c,2)+Math.pow(f,2))+10+Math.max(.35Math.max(f,c),75))/e;e+="px";a={top:[0,0],left:[0,0],height:[e,e],width:[e,e],transform:["translate("+b.x+"px,

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	464
Entropy (8bit):	4.758217138015706
Encrypted:	false
SSDEEP:	12:uZC4v1CYZOgX8XP9GTBdA37dpXaGC8aLK:uZC4vgYZLPQ5C8a+
MD5:	BA6AB51487CFAEF8F7E56133C34AAE37
SHA1:	19DF244D1D07FF43020A7B001A5B27498507CB7D
SHA-256:	FB20FC7C1F7CFCF723EFCEE54434C316E05EE614F707502344330828FFC1CC98
SHA-512:	95EC94EE16487C430C45E98CF822425F2C7934F69CA257C5E20B1F9E659D6BBF6519E09AD65CE18DA8CA3786D477FC93286F3C6C6AAA1C08B319A4B9AAE854EA
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "blobcomments-pa.googleapis.com",. "consumer": "projects/298134251447". }. }. ]. }.}.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.395826444787819
Encrypted:	false
SSDEEP:	6:hxuJLzLMb038GJsgU5Fo37fVBeQDXY2F6YkAbvOm/esHeOJsgUPNV4Nhdx434QL:hYA0Rek79hLFBkAb2m/esHz8NV4Nbx4j
MD5:	FEF70404F601DB5136F597AA9FEEB783
SHA1:	2777ECCDD8386262E22268ACFC47F141631365A9
SHA-256:	BB9B5A22B177CF408FCD76D0EE854157561675D2A968BEA35F5C942DC03D5ECC
SHA-512:	79FA2AF4151404171DF123DEA10389261C20F12A7476C82FBA64C16CD924F1485F6D1C6A8B13408DCBDDCB21B6C0EF3B444D8D4A16A9C55D32570ACB9081993A
Malicious:	false
Reputation:	low
URL:	https://content.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SGzW6IeCawI.O%2Fam%3DAACA%2Fd%3D1%2Frs%3DAHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script nonce="K7Ce4bj_YCiMGf10SwD0qQ">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async defer nonce="K7Ce4bj_YCiMGf10SwD0qQ"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4009)
Category:	downloaded
Size (bytes):	122767
Entropy (8bit):	5.471559936982107
Encrypted:	false
SSDEEP:	1536:KXIcfKjLlaGhfI2kgnfd89QV/G0O5viV/bcFAVY5shJN7yvy9m/De3qsU9MC++6Q:YIyKXnt9GVXFAVmYU9MCvlx8I
MD5:	4B031CDE8D1A9763EB4DC8387E9EDCD6
SHA1:	26C15A9C7F3D092F4F87A77EF0AE9898850E57BB
SHA-256:	1D692F4BB15602118362C5BFB1E0C8434489269DF541DBF2B92F28871713E410
SHA-512:	9A5E762043CB7452A73A2E2210DC6A384F5C9CC459DEF8F3E6215E90BA1164376E432FD8A0BAD91E9B70018355798EF2E7BF511F23885A873C75A2E84A061551
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	downloaded
Size (bytes):	1964
Entropy (8bit):	5.298383529084959
Encrypted:	false
SSDEEP:	48:o7L7NMmtL3ADFNPcpOXAV7D74OpFqfW3X/rV+Y9rw:oNLwFVcpOXOJXcudhw
MD5:	4C66442B5D484EC334493800EF99A9BE
SHA1:	85301278BDCCE3ED0A4F455D2474969811C6D7A7
SHA-256:	8E507422B8D311344CBFB89C9673E15E86031A9AE5F99B2F9DA6C3EED12F56B4
SHA-512:	5C6D8295769B4A5477DA31A4F55C4896D3DB6E3F30D92B383A6266E3276592F8A07D0AEC3002AA45673E7437A2914BD6CEB8383BAFA7FBB22404C74740810FA9
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.zZ=function(a){_.X.call(this,a.Fa);this.window=a.Ea.window.get();this.Hc=a.Ea.Hc};_.K(_.zZ,_.X);_.zZ.Ba=function(){return{Ea:{window:_.Qu,Hc:_.yF}}};_.zZ.prototype.yp=function(){};_.zZ.prototype.addEncryptionRecoveryMethod=function(){};_.AZ=function(a){return(a==null?void 0:a.op)\|\|function(){}};_.BZ=function(a){return(a==null?void 0:a.f4)\|\|function(){}};_.NSb=function(a){return(a==null?void 0:a.oq)\|\|function(){}};._.OSb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PSb=function(a){setTimeout(function(){throw a;},0)};_.zZ.prototype.fP=function(){return!0};_.zZ.prototype.aa=function(a,b,c){b=this.Hc;var d=b.bJ,e=new _.nF;a=_.mF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Tn,_.zZ);._.l();._.k("ziXSP");.var TZ=function(a){_.zZ.call(

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4009)
Category:	dropped
Size (bytes):	122767
Entropy (8bit):	5.471559936982107
Encrypted:	false
SSDEEP:	1536:KXIcfKjLlaGhfI2kgnfd89QV/G0O5viV/bcFAVY5shJN7yvy9m/De3qsU9MC++6Q:YIyKXnt9GVXFAVmYU9MCvlx8I
MD5:	4B031CDE8D1A9763EB4DC8387E9EDCD6
SHA1:	26C15A9C7F3D092F4F87A77EF0AE9898850E57BB
SHA-256:	1D692F4BB15602118362C5BFB1E0C8434489269DF541DBF2B92F28871713E410
SHA-512:	9A5E762043CB7452A73A2E2210DC6A384F5C9CC459DEF8F3E6215E90BA1164376E432FD8A0BAD91E9B70018355798EF2E7BF511F23885A873C75A2E84A061551
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.280394654123195
Encrypted:	false
SSDEEP:	3:WZoSISHmn:WZoSfmn
MD5:	4708D1B37F72B842EFE4238A9825064B
SHA1:	889321990FC6854DD351DF9DE8D41D2C9253BAF0
SHA-256:	10B772A54149F2086265D2CAF0C434B7CABE913BBE3665CB9DE5FAEC5EB2FB7F
SHA-512:	1285F4AEFE4F061D9D53FE96509AD93070843265C306123D197DF3603EEFF92FC6017019410015203B2DF139CC9594E387246D4211EADE320A7E77CCCA6EFDDA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwncHhV_nsiGYRIFDZFhlU4SBQ0G7bv_?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw0G7bv/GgA=

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.532497526299779
Encrypted:	false
SSDEEP:	96:oUvuxTBvdhUoGnHVPGjtwtaK8+0g/Ikhw:Hu5Bvdh8VJn0gxy
MD5:	3ED8C8DB9640906244F3E3D4572E5FC5
SHA1:	20E1A5F9D100820D3F5BA5BE64EC30BEACA759E0
SHA-256:	CDC1418D81D8BB2E5F6352531DDAE3D35F41E88D62BB16990F52D831DE6C98B2
SHA-512:	95AB6EEBDA369F61E9E5AD7A6C703101B8DA27AA420915D9A3A5631593DC4BF07B3EBB9F88FE30A4D6B7E68347A8A95CAC63157B9DDD6A87B94CA7742143C347
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.gk(a,1)},yu=function(a){this.Da=_.u(a,0,yu.messageId)};_.K(yu,_.w);yu.prototype.Ha=function(){return _.Sj(this,1)};yu.prototype.Ua=function(a){return _.rk(this,1,a)};yu.messageId="f.bo";var zu=function(){_.Fm.call(this)};_.K(zu,_.Fm);zu.prototype.zd=function(){this.sU=!1;Kya(this);_.Fm.prototype.zd.call(this)};zu.prototype.aa=function(){Lya(this);if(this.KD)return Mya(this),!1;if(!this.vW)return Au(this),!0;this.dispatchEvent("p");if(!this.oQ)return Au(this),!0;this.xN?(this.dispatchEvent("r"),Au(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.qp(a.R5);a.fR!=null&&_.bo(b,"authuser",a.fR);return b},Mya=function(a){a.KD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Qk(a.oQ);_.wn(b,(0,_.gg)(a.ea,a),"POST",c)};.zu.prototype.ea=function(a){a=a.target;Lya(this);if(_.zn(a)){this.WK=0;if(this.xN)this.KD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://blobcomments-pa.clients6.google.com/v1/pdfFields?docId=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&key=AIzaSyCMp6sr4oTC18AWkE2Ii4UBZHTHEpGZWZM&%24unique=gc797
Preview:	{}.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9211
Entropy (8bit):	5.40130909479059
Encrypted:	false
SSDEEP:	192:DYUqtMklctN8yZZqZQGege1BQHSK1tj9e:DY9Mklq9HqXECZ1tj9e
MD5:	DE6205714FB6FC5CB852B61E299CC119
SHA1:	7D4FB91D961EAF952EE08661D674E142327A56E5
SHA-256:	0C0020D68375603F7A0A7EE1AA5CB49708D0DEA473BE26D91A4CFFFE2F671E08
SHA-512:	388068F1927CEEDEFDBCB86718DF15FBBD32770A34F1DD907A7E365DD3632333522CBD6BA4F14DFA1972F7CC5091ED103F9B1964B76264C7B4CCB35C2CFA19C4
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.sOa=_.z("SD8Jgb",[]);._.oX=function(a,b){if(typeof b==="string")a.Lc(b);else if(b instanceof _.Sp&&b.ia&&b.ia===_.C)b=_.$a(b.qv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.pX=function(a){var b=_.Xo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Vo([_.pl("span")]);_.Yo(b,"jsslot","");a.empty().append(b);return b};_.YOb=function(a){return a===null\|\|typeof a==="string"&&_.Vi(a)};._.k("SD8Jgb");._.yX=function(a){_.Y.call(this,a.Fa);this.Va=a.controller.Va;this.jd=a.controllers.jd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.wa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.yX,_.Y);_.yX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.Qv},header:{jsname:"tJHJj",ctor:_.Qv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	208991
Entropy (8bit):	5.5222563123974515
Encrypted:	false
SSDEEP:	3072:zhowDRxNrA//e9ItRxaeLWl+ASbhvNi5QpPLHNzqN2NIuOtU3FyGPDBms8:6wpkBOeSlPSKOLHNziA1pPDBms8
MD5:	610B5B8B695F5C485199F902CF8BF365
SHA1:	C0BDD53303B1B3EEBBABFAEB0470D8FB256CD53B
SHA-256:	FBFDB6975EEA988C823D2F7935E1238DC0D03CBDAC1898314573ACE61A8B5333
SHA-512:	94578B62B37DA1D68CC753CCED759BD14EDE6AFBA9F40BE96DDC63B47DC8595671BF70DD62BE3BA82E889B6C7CB9FAA077176C575392703A302CA9C53D20B11B
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.zg=(window.gapi\|\|{}).load;._.Rn=_.xe(_.Ie,"rw",_.ye());.var Sn=function(a,b){(a=_.Rn[a])&&a.state<b&&(a.state=b)};var Tn=function(a){a=(a=_.Rn[a])?a.oid:void 0;if(a){var b=_.ue.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Rn[a];Tn(a)}};_.Un=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Vn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Wn=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Sn(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.Ie.oa){var k=d.id;if(k){f=(f=_.Rn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Tn(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.415855705012616
Encrypted:	false
SSDEEP:	48:o7sNi+ANA3yPwR5jNQ8jse8sw5oO/A3NPA3SjpG6LEzX9TW5BnXkMQJIPlLt1lL8:ogHyY5jOTjT2ltvLKNinSJQttw
MD5:	AE39AA2753F5BE40292E997B553AB30F
SHA1:	036CB8D65465045CC0EBD597F7664CF088C3F0C6
SHA-256:	DE82B874D2ECB868246E96494BF4C373618C25A5E04E4FF33B39B2CA8E2D29D6
SHA-512:	BCC4825891B1760F9104D937E4E7FF86EE42D3D89342AF08D70D4E86E9B15A89CCCE5B70C89D684090318C1CA3F8007BA8FE657CA131164DB0B2511CC71007A0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var OA=function(a){_.X.call(this,a.Fa)};_.K(OA,_.X);OA.Ba=_.X.Ba;OA.prototype.dT=function(a){return _.cf(this,{Xa:{bU:_.Pl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.xi(function(e){window._wjdc=function(f){d(f);e(NKa(f,b,a))}}):NKa(c,b,a)})};var NKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.bU.dT(c)};.OA.prototype.aa=function(a,b){var c=_.Ura(b).zk;if(c.startsWith("$")){var d=_.Em.get(a);_.Fq[b]&&(d\|\|(d={},_.Em.set(a,d)),d[c]=_.Fq[b],delete _.Fq[b],_.Gq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Vfa,OA);._.l();._.k("SNUn3");._.MKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var OKa=function(a){var b=_.Eq(a);return b?new _.xi(function(c,d){var e=function(){b=_.Eq(a);var f=_.bga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	671
Entropy (8bit):	4.971238198753172
Encrypted:	false
SSDEEP:	12:UJO694211FfgsO6ZRoT6pWihKhhxkmgs6ZmOHc9n+5cMK00k14enEPCedG:G9JFfbOYssIVkmbYmOOk4TfenEPCD
MD5:	BC3F66658BF1AAC5E93DEFF528B6E90E
SHA1:	E02939B6F5A9EAA666CDFDA5E5D99F876614E666
SHA-256:	FE0994BDC329280ADE3268FE5554F3ECA4A725676CC0427C85526AC8E89342AE
SHA-512:	CD601FC0F5FC34E0377262BA7C84C062DAE7AF76DD955D6F9309224DDA18CE5013A1CA4FCD0A910F56138E8C3246A592C24322CDF59BD917FB6F1E6CC16661A7
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Material+Icons:wght@400;500;700
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ fallback */.@font-face {. font-family: 'Google Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlematerialicons/v142/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2) format('woff2');.}...google-material-icons {. font-family: 'Google Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.852645816977233
Encrypted:	false
SSDEEP:	3:DZFJu0+WVTBCq2xCKsJJuYHSKnZ:lFJuuVTBpnu4SKZ
MD5:	3D76DE7C583DA8ED6D1D5AB91239F88B
SHA1:	A0818EFD94EFC525EBF513EDE7CADE6D038DF57A
SHA-256:	E9FBC4E9A936269D7CC25B32C7910F3861CA3D3AE84907A34D613442E44A01E1
SHA-512:	0DA8AD357DFCEB655865C834BFAF7EABE3762DB13EF9BE681F2426540E767C8F3779D1E90D9DACB3040363F72A263DA9FA4F61EEA72C21DC07DED17488207504
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj0KBw0ZARP6GgAKKQ3oIX6GGgQISxgCKhwIClIYCg5AIS4kI18qLSY/Ky8lLBABGP////8PCgcN05ioBxoA

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	dropped
Size (bytes):	1964
Entropy (8bit):	5.298383529084959
Encrypted:	false
SSDEEP:	48:o7L7NMmtL3ADFNPcpOXAV7D74OpFqfW3X/rV+Y9rw:oNLwFVcpOXOJXcudhw
MD5:	4C66442B5D484EC334493800EF99A9BE
SHA1:	85301278BDCCE3ED0A4F455D2474969811C6D7A7
SHA-256:	8E507422B8D311344CBFB89C9673E15E86031A9AE5F99B2F9DA6C3EED12F56B4
SHA-512:	5C6D8295769B4A5477DA31A4F55C4896D3DB6E3F30D92B383A6266E3276592F8A07D0AEC3002AA45673E7437A2914BD6CEB8383BAFA7FBB22404C74740810FA9
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.zZ=function(a){_.X.call(this,a.Fa);this.window=a.Ea.window.get();this.Hc=a.Ea.Hc};_.K(_.zZ,_.X);_.zZ.Ba=function(){return{Ea:{window:_.Qu,Hc:_.yF}}};_.zZ.prototype.yp=function(){};_.zZ.prototype.addEncryptionRecoveryMethod=function(){};_.AZ=function(a){return(a==null?void 0:a.op)\|\|function(){}};_.BZ=function(a){return(a==null?void 0:a.f4)\|\|function(){}};_.NSb=function(a){return(a==null?void 0:a.oq)\|\|function(){}};._.OSb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PSb=function(a){setTimeout(function(){throw a;},0)};_.zZ.prototype.fP=function(){return!0};_.zZ.prototype.aa=function(a,b,c){b=this.Hc;var d=b.bJ,e=new _.nF;a=_.mF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Tn,_.zZ);._.l();._.k("ziXSP");.var TZ=function(a){_.zZ.call(

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	downloaded
Size (bytes):	23454
Entropy (8bit):	5.408812355529545
Encrypted:	false
SSDEEP:	384:iSrtcyJgla5dQl7CPYjffLQEu0S1EF5MdgROwv5jsg2EbPdNbdp/q1L9f:iSrtcyJc7CgjffcEdQddwBjl2EbVNbvA
MD5:	498084FE30B6F1F7E18A17EEEA8FFCC9
SHA1:	C084CE0DA02D4BE12672F562C9EC7B62D4E28153
SHA-256:	C1CE8A67AA6DD7D2073057EAAD29E03BCD02BE8D2F8B116242E26B5806630C49
SHA-512:	5FBA713495B184C9DA02E257536C57C4555BFC37F178146E74C413164ADBAB325346983E58FC3036E71E9EFCFA63844750FDBF476156D72FEF952CFF68FBB35F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Hj(this,3)});_.Fz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Fz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Gz=function(){this.ka=!0;var a=_.Mj(_.zk(_.Ge("TSDtV",window),_.gza),_.Uu,1,_.Gj())[0];if(a){var b={};for(var c=_.n(_.Mj(a,_.hza,2,_.Gj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.dk(e,1).toString();switch(_.Jj(e,_.Vu)){case 3:b[d]=_.bk(e,_.Aj(e,_.Vu,3));break;case 2:b[d]=_.dk(e,_.Aj(e,_.Vu,2));break;case 4:b[d]=_.fk(e,_.Aj(e,_.Vu,4));break;case 5:b[d]=_.kk(e,5,_.Vu);break;case 6:b[d]=_.lk(e,_.mf,6,_.Vu);break;case 8:e=_.Lj(e,_.iza,8,_.Vu);switch(_.Jj(e,_.Wu)){case 1:b[d]=_.kk(e,1,_.Wu);.break;default:throw Error("od`"+_.Jj(e,_.Wu));}break;default:throw Error("od`"+_.Jj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	259
Entropy (8bit):	6.7268503778685105
Encrypted:	false
SSDEEP:	6:6v/lhPeoMMphEt0Sa2AKhmC4cR5HIQoplQfQjy30up:6v/7bn2AKhmMjHv2lQfQjw0c
MD5:	AF848AEE503A57E479B0FB57318F3F2F
SHA1:	68FE7097531D492691C6FA3454C8192D13E8572F
SHA-256:	33DD0582F6972DDDB05BEE6FD5EA0312FBD782A8003F4C7876AFEBD0F08F49AD
SHA-512:	1225614BBD2BD8DCF57B31759093EC92096A16AB428DE43606A8F71367BF247B9ADFE1F2C18E5F7156A216CBC4B35CF5070A39E4740FBDE1BAE5709D43734619
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDATx.cx.l......+g.....N... ...=....D.\|Y8.......]Z...E.p....`5.....}.lD5..3.....?.......?..8..D......H.....n..(?..r.....L3....\|.....cm...@j@..j.8..\|T/ ....4...^..P>PC:<.>#......CBz.d..".^8.....h......V...Q......IEND.B`.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.532497526299779
Encrypted:	false
SSDEEP:	96:oUvuxTBvdhUoGnHVPGjtwtaK8+0g/Ikhw:Hu5Bvdh8VJn0gxy
MD5:	3ED8C8DB9640906244F3E3D4572E5FC5
SHA1:	20E1A5F9D100820D3F5BA5BE64EC30BEACA759E0
SHA-256:	CDC1418D81D8BB2E5F6352531DDAE3D35F41E88D62BB16990F52D831DE6C98B2
SHA-512:	95AB6EEBDA369F61E9E5AD7A6C703101B8DA27AA420915D9A3A5631593DC4BF07B3EBB9F88FE30A4D6B7E68347A8A95CAC63157B9DDD6A87B94CA7742143C347
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.gk(a,1)},yu=function(a){this.Da=_.u(a,0,yu.messageId)};_.K(yu,_.w);yu.prototype.Ha=function(){return _.Sj(this,1)};yu.prototype.Ua=function(a){return _.rk(this,1,a)};yu.messageId="f.bo";var zu=function(){_.Fm.call(this)};_.K(zu,_.Fm);zu.prototype.zd=function(){this.sU=!1;Kya(this);_.Fm.prototype.zd.call(this)};zu.prototype.aa=function(){Lya(this);if(this.KD)return Mya(this),!1;if(!this.vW)return Au(this),!0;this.dispatchEvent("p");if(!this.oQ)return Au(this),!0;this.xN?(this.dispatchEvent("r"),Au(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.qp(a.R5);a.fR!=null&&_.bo(b,"authuser",a.fR);return b},Mya=function(a){a.KD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Qk(a.oQ);_.wn(b,(0,_.gg)(a.ea,a),"POST",c)};.zu.prototype.ea=function(a){a=a.target;Lya(this);if(_.zn(a)){this.WK=0;if(this.xN)this.KD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	121112
Entropy (8bit):	5.837130305275228
Encrypted:	false
SSDEEP:	3072:kyW/Za21hsq1xCLqrQcS8xriAX7E1fbaRrcjSbPxtKDY/Ji/JPvhv:kyWhvHCLqEcS8xOAX7E1f2BPM
MD5:	EAAA71ED8F32B85F24FD3EBC43535BCC
SHA1:	CFFB0A1096D61DC0BA476D19381806BEC8264EF4
SHA-256:	AF2F1227E6BE9926C8A5E9FC5FCE394C150E19412248A3C8F9BC65076E3AECBB
SHA-512:	F178343DFD51C11A326D2322830436188122A3F56BF964C8075291F0D41489048735A356A605579F28B7DA67FFFDB87C2D390D82CE8AB61A54A907AD02CE49C2
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/viewer/v3/v-sprite60.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="4060px" viewBox="0 0 31 4060" preserveAspectRatio="none"><g transform="translate(0,2170)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2428)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,3396)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.415855705012616
Encrypted:	false
SSDEEP:	48:o7sNi+ANA3yPwR5jNQ8jse8sw5oO/A3NPA3SjpG6LEzX9TW5BnXkMQJIPlLt1lL8:ogHyY5jOTjT2ltvLKNinSJQttw
MD5:	AE39AA2753F5BE40292E997B553AB30F
SHA1:	036CB8D65465045CC0EBD597F7664CF088C3F0C6
SHA-256:	DE82B874D2ECB868246E96494BF4C373618C25A5E04E4FF33B39B2CA8E2D29D6
SHA-512:	BCC4825891B1760F9104D937E4E7FF86EE42D3D89342AF08D70D4E86E9B15A89CCCE5B70C89D684090318C1CA3F8007BA8FE657CA131164DB0B2511CC71007A0
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var OA=function(a){_.X.call(this,a.Fa)};_.K(OA,_.X);OA.Ba=_.X.Ba;OA.prototype.dT=function(a){return _.cf(this,{Xa:{bU:_.Pl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.xi(function(e){window._wjdc=function(f){d(f);e(NKa(f,b,a))}}):NKa(c,b,a)})};var NKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.bU.dT(c)};.OA.prototype.aa=function(a,b){var c=_.Ura(b).zk;if(c.startsWith("$")){var d=_.Em.get(a);_.Fq[b]&&(d\|\|(d={},_.Em.set(a,d)),d[c]=_.Fq[b],delete _.Fq[b],_.Gq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Vfa,OA);._.l();._.k("SNUn3");._.MKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var OKa=function(a){var b=_.Eq(a);return b?new _.xi(function(c,d){var e=function(){b=_.Eq(a);var f=_.bga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1325, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	14900
Entropy (8bit):	7.980017634543265
Encrypted:	false
SSDEEP:	384:EOig8BMNOU3x9djuDVH/vJeHMRnVBhmc+29d5d:xwyLsDpvJciIZ2j5d
MD5:	E7492CE5CD12AC00FA056063024EAE38
SHA1:	8F0F266D684440CEA1F7AD1BEB143C58877C414C
SHA-256:	F7BFE0989EF0E9B2E180888AB1ED29FE3B17DDDBC8DFEDCDBD2BFFFC9DE8847C
SHA-512:	A2D6455A903D5E4B7AAA69E2C0FB0A77ADAE32F09E4AD4BA625BC7DF98821318571E2E3514468FF25BD867CB128B19EE0A591F66D776CBE2BCFAD43105100E33
Malicious:	false
Reputation:	low
Preview:	RIFF,:..WEBPVP8 :..pF.....-.>.Z.O.%$#!T8....in...`.~....'i.}Df....MM..s............+.\|......?Y........%.?.....hj..m.....x.....3....6...p.r.3...s>..3...s>..3...s>..3...s>..3...s>..3...s>..3...s>..3...s>..3...s>..3.....A.0 }.L.K.........cs"$9.C..7s#..~?.`..)CfdJ.6G...X.f\.@-..a.z.......uv.g.3.s.............e.l)....[.t.nV.....n...[.......~..6..........gn...M...,q...~..).\|b..+.i......._....p/?.....+s?5.xJ..w\|.qLR.e.-ty.....Qu}&.x]...?.P....Z.#M..qtR../3..b......}..ng...b.4i.gS.#Q......D...P....i~..o".G...m..:9u...mD..F.m...=.......&.CzF..G..X........9...N..H...w9...j....(.^./B....;R....1v.G+3C.=.-L.,...q..r...f..t8...../..6.p...'........\|.}.W."\.T.bB.....sB.i..2......D..J.......R5.....^P4..5.[.pJ.L.I5..K^...IFF..(.++.....Ld?.7/...!..l....F._g......FA=;..>..FID.(..a. ........z\|C.C..j\xw..k.d.f.C..xS5.-.`\|..{..a.1..../3....~V..u?_.^.y....{[..0..rR....................`......d.f.k+.)x$.w+4....."...Tl..^~{...&n..X..t..z\.....WA.t.!.$.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (684)
Category:	downloaded
Size (bytes):	6365
Entropy (8bit):	5.392430899093267
Encrypted:	false
SSDEEP:	96:9w/MKBfJyx8sPPmLq+gdpda+LQOlmAqpOkcjRt2w:9b3usPPmLCQOlmAqpOkaRt2w
MD5:	75330D61FAE6A10E571256BCA3A67827
SHA1:	15AB0320F635D48F4655F780193816436A9619A5
SHA-256:	29B361D54B9BDEEE7BF9C119E2DB7E0A90D9C136EFABA0A28BC44CB88084F08A
SHA-512:	59898792B1B8B8053E26F84F8D9DB1B2F0EC67E8B0F43BB92AB3F3C60E45849DBB5C78CBB5401720FB9EE90B8657CF6A5120646BDCE463D7CE0B7734F3A520FD
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.rLgA9lJPBq0.O/am=gME/d=0/rs=AO0039tbcsfCFVcdRQvwAZRWamjBEiMB5g/m=MpJwZc,UUJqVe,sy3,s39S4,syl,pw70Gc"
Preview:	try{.A("MpJwZc");..B();.}catch(e){_DumpException(e)}.try{.A("UUJqVe");..B();.}catch(e){_DumpException(e)}.try{.Gf(jy);.}catch(e){_DumpException(e)}.try{.A("s39S4");.var Fnc=function(a){if(!Bva(a))throw Error("G``"+String(a));},Gnc=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,a.tagName==="C-DATA"&&(b=a.parentElement),cWa(b,!1))},Hnc=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return dh(e,":.CLIENT")});Da(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);Kka(a)},Lnc=function(){Inc\|\|(Inc=!0,Jnc=xia,xia=function(a){Jnc&&.Jnc(a);for(var b=0;b<a.length;b++){var c=a[b];pf(c)&&Hf(yf(c)).pTa(c)}},Knc=yia,yia=function(a){Knc&&Knc(a);for(var b=0;b<a.length;b++){var c=a[b];pf(c)&&Hf(yf(c)).qTa(c)}})},Mnc=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-c

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	dropped
Size (bytes):	1459
Entropy (8bit):	5.309536814830864
Encrypted:	false
SSDEEP:	24:kMYD7DObtudYqbYsNJ+YdJB/d+neNhz1iL0QhYn3M9Ih6u0hGbHEzGb0SFLM+OcK:o7DObg+5efNjqGhd0hGbkzGb0SC6Frw
MD5:	3B8C04E5267746EC50FAD82AC426FF50
SHA1:	E3EDD75E19D2568376F4B90CED3D47E4F9A1FD8C
SHA-256:	FE35087C88FB80E251F57E6FFA6EDDE9D70ED9C831B4439556230D8F6A0D9110
SHA-512:	21ECA120F86597859B0F046BEDAEFF56BC3DBDC87574221C9DE04F8F10BB4D589A9516632ED0CE9ECA4F737CDFF02C191C9FF31F1645592F3C4A503812941FF2
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Xm);._.l();._.k("P6sQOc");.var A0a=!!(_.Uh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Aa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.uT(),function(e){b[e]=!0});var c=a.nT(),d=a.pT();return new C0a(a.fQ(),c.aa()1E3,a.QS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.AaMath.pow(a.ka,a.aa),a.Ca)},JH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var KH=function(a){_.X.call(this,a.Fa);this.da=a.Ea.nW;this.ea=a.Ea.metadata;a=a.Ea.Wha;this.fetch=a.fetch.bind(a)};_.K(KH,_.X);KH.Ba=function(){return{Ea:{nW:_.y0a,metadata:_.v0a,Wha:_.o0a}}};KH.prototype.aa=function(a,b){if(this.ea.getType(a.Od())!==1)return _.mn(a);var c=this.da.KV;return(c=c?D0a(c):null)&&JH(c)?_.dza(a,E0a(this,a,b,c)):_.mn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.47887345911425
Encrypted:	false
SSDEEP:	3:pPX38/ZoSISHN87lSNDr1d:pPn8/ZoSfN87lSBBd
MD5:	844E7AD848816441E2F3D9E9D6E63047
SHA1:	D30409FA96F74212C26ABAEB5DE8D2857246EBA8
SHA-256:	963371AAD7DF37F73FC1DE7742D11DF335B339721B2C3308DA44188594F27F4B
SHA-512:	33C66E4109D085D6481F33744520A461FA8819852975A23EF7297B772D9AFB506A855FC738935DAD8FD1D6CBAD2F0BFEE88183AEA3A87F5276E34DCE41FEC9DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQm4AQ_njqwvuhIFDZFhlU4SBQ0G7bv_EgUNkWGVThIFDQbtu_8=?alt=proto
Preview:	CjAKBw2RYZVOGgAKBw0G7bv/GgAKDQ2RYZVOGgQIVhgCIAEKDQ0G7bv/GgQIVhgCIAE=

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4665)
Category:	dropped
Size (bytes):	925878
Entropy (8bit):	5.553421365396893
Encrypted:	false
SSDEEP:	6144:Rfry0PXwFr5KaK3DOIYhKxMOhTE7xqhCSZyKJ3L/CBKC7Cdpc8HFlYHP/Ymd2QnI:RfGacK3Dg1xhKJ3zCDCdpcRH388FFe
MD5:	FEDEA9B3C672A7366396592146FEDEBE
SHA1:	06C0180F4B1FA4B3A7EA62A88B766515D788C868
SHA-256:	6EC173EA7A720C3BE62A3B74F40C7B2D7F64A2334CEC7C168E3709C7A9401278
SHA-512:	A8D74640BFFBF9794FF9D117BF5306653BACAA37D202D1CF7E056392CFEE20630F34A5DABEB009A939480C4CE8C9176FF5D08AA772A5D34761A07FF1D92E2062
Malicious:	false
Reputation:	low
Preview:	try{.A("dSirkf");..B();.}catch(e){_DumpException(e)}.try{.var aIc=function(a){if($Hc.has(a))return $Hc.get(a);throw Error("wh`"+a);},cIc=function(a){if(bIc.has(a))return bIc.get(a);throw Error("xh`"+a);},dIc=function(a){for(var b=new Map,c=n(Object.keys(a)),d=c.next();!d.done;d=c.next())d=d.value,b.set(a[d].string,a[d].Oj);return b},zN=function(a){this.aa=q(a)};R(zN,x);for(var eIc={ARROW_KEYS:{string:"arrow_keys",Oj:"Wxn7ub"},AUTOMATED:{string:"automated",Oj:"wjpLYc"},CLICK:{string:"click",Oj:"cOuCgd"},DRAGEND:{string:"dragend",Oj:"RlD3W"},DROP:{string:"drop",Oj:"DaY83b"},GENERIC_CLICK:{string:"generic_click",Oj:"szJgjc"},HOVER:{string:"hover",Oj:"ZmdkE"},IMPRESSION:{string:"impression",Oj:"xr6bB"},KEYBOARD_ENTER:{string:"keyboard_enter",Oj:"SYhH9d"},KEYPRESS:{string:"keypress",Oj:"Kr2w4b"},LONG_PRESS:{string:"long_press",Oj:"tfSNVb"},MOUSEOVER:{string:"mouseover",.Oj:"FrfE3b"},RIGHT_CLICK:{string:"rightclick",Oj:"CYQmze"},SCROLL:{string:"scroll",Oj:"XuHpsb"},SWIPE:{string:"swipe",Oj:"

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2318
Entropy (8bit):	4.307245210558998
Encrypted:	false
SSDEEP:	48:GDFyTY1jSTsC1qZ+LyLJw/gB2OFqmob9BFsiBxRMm:GRy0TZ+LyLJR8OCBcm
MD5:	E4BEF5B2EC5BED3AB0173DFC52C7FFC2
SHA1:	932D506CC5F1E085A4178624B99287E6283915DA
SHA-256:	D4B6F84C2E210ABA59696F558C4BA918378C21A0418A3AFADC01361536C5CE0F
SHA-512:	C818F4F3E19F817AAA4927D3C2B2A57A5BCCEC68145E1716344D2A03FC10D71BA6EDA81F6ABB3512AF69343E58E378701812441EF67ADE1ED5AAE5661224DF0D
Malicious:	false
Reputation:	low
URL:	https://blobcomments-pa.clients6.google.com/v1/metadata?docId=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&revisionId=0B19-vI59S25OWHpKSXZVN0JHM1J4aUhnNmV5b1drbTdsK0cwPQ&userLocale=en&timeZoneId=Etc%2FGMT%2B4&documentResourceKey.resourceKey&forceImportEnabled=true&key=AIzaSyCMp6sr4oTC18AWkE2Ii4UBZHTHEpGZWZM&%24unique=gc797
Preview:	{. "serializedDocosKeyData": "[null,null,0,null,null,null,null,1,[\"Anonymous\",null,\"//ssl.gstatic.com/docs/common/blue_silhouette96-0.png\",\"ANONYMOUS_105250506097979753968\",1,null,1,null,1],1,\"AAHRpnXtHE3L8CTh0Ukzr6mZkG4GvmBOhLY8oyprL5i_ntxitIUW_LsVVQ5fLbOuQxKeUAc785VuldMJXK048ih49wNbgd3BZ8g\",null,null,null,null,null,1,null,null,1,null,null,null,null,1,0,null,null,null,0,null,null,0,null,null,null,null,1,0,null,null,null,null,[\"tf\",60000,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,1,null,null,null,null,null,null,0,null,null,\"\",null,0,null,null,null,null,0],[[5703839,5704621,5704695,5704745,5705891,5707899,5711538,5712270,5712639,5712647,5713195,5714051,5737800,5792878,5799034,48966262,49372463,49375342,49472091,49622751,49623141,49643716,49643963,497693

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2914810
Entropy (8bit):	5.654845485285404
Encrypted:	false
SSDEEP:	24576:pCnjT4BZ7KPOoNuFBFdmjF9tHpZ4b3Uw+X+g:hBZ7KPOoNOB3gF9tHpZ4b3Uw9g
MD5:	AEF872D32D909944C4644C943E5A84ED
SHA1:	9778B5F0B4158D2FA152F0FC412C13C838C59300
SHA-256:	BBC9F3FB059FB5EF81E24AAE5E3CB5F752F21D624DFD5DA9DBDB804E44F1489E
SHA-512:	A1F6160A590575EDA0D21CB2FC607864C47E6C1F75DD595775BAC79AA61C382567A87893B2A7E76EB72E99CCE51495ABC6F55391382B22A1124509B538F99570
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/apps-fileview/_/ss/k=apps-fileview.v.oDPJWT35qs0.L.W.O/am=gME/d=0/rs=AO0039sMe4eDS17xY6ZiW533HCzb2SJHGg
Preview:	.Fng7d{width:100%;border-radius:50%}.TW497b{height:56px}.TW497b.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend{height:72px}.mVuend.znIWoc{border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5)}.mVuend .W7g1Rb-rymPhb-Gtdoyb{gap:8px}.WgAPob{margin-top:8px;margin-bottom:8px}.OiePBf-zPjgPe{display:var(--gm3-focus-ring-outward-display,none);pointer-events:none;position:absolute;z-index:1;border-start-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-start-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-start-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-end-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-end, 0px) + var(--gm3-focus-ring-outward-offset, 2px));border-end-start-radius:calc(var(--gm3-focus-ring-outward-target-shape-end-start, 0px) + var(--gm3-focus-ring-outward-offset, 2px));inset:calc(var(--gm3-focus-ring-out

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmlNHcUu78_khIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1325, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14900
Entropy (8bit):	7.980017634543265
Encrypted:	false
SSDEEP:	384:EOig8BMNOU3x9djuDVH/vJeHMRnVBhmc+29d5d:xwyLsDpvJciIZ2j5d
MD5:	E7492CE5CD12AC00FA056063024EAE38
SHA1:	8F0F266D684440CEA1F7AD1BEB143C58877C414C
SHA-256:	F7BFE0989EF0E9B2E180888AB1ED29FE3B17DDDBC8DFEDCDBD2BFFFC9DE8847C
SHA-512:	A2D6455A903D5E4B7AAA69E2C0FB0A77ADAE32F09E4AD4BA625BC7DF98821318571E2E3514468FF25BD867CB128B19EE0A591F66D776CBE2BCFAD43105100E33
Malicious:	false
Reputation:	low
URL:	https://drive.google.com/drive-viewer/AKGpihabThmApgQYkpFXX_BzVDr-RKZ3HPHFPVHQoMHppnzBHBTdPGV8NLcxB_-ke_4_71XHUUTGub3hhHeAKKfohPNxAMNkL0-xz4Q=s1600-rw-v1
Preview:	RIFF,:..WEBPVP8 :..pF.....-.>.Z.O.%$#!T8....in...`.~....'i.}Df....MM..s............+.\|......?Y........%.?.....hj..m.....x.....3....6...p.r.3...s>..3...s>..3...s>..3...s>..3...s>..3...s>..3...s>..3...s>..3...s>..3.....A.0 }.L.K.........cs"$9.C..7s#..~?.`..)CfdJ.6G...X.f\.@-..a.z.......uv.g.3.s.............e.l)....[.t.nV.....n...[.......~..6..........gn...M...,q...~..).\|b..+.i......._....p/?.....+s?5.xJ..w\|.qLR.e.-ty.....Qu}&.x]...?.P....Z.#M..qtR../3..b......}..ng...b.4i.gS.#Q......D...P....i~..o".G...m..:9u...mD..F.m...=.......&.CzF..G..X........9...N..H...w9...j....(.^./B....;R....1v.G+3C.=.-L.,...q..r...f..t8...../..6.p...'........\|.}.W."\.T.bB.....sB.i..2......D..J.......R5.....^P4..5.[.pJ.L.I5..K^...IFF..(.++.....Ld?.7/...!..l....F._g......FA=;..>..FID.(..a. ........z\|C.C..j\xw..k.d.f.C..xS5.-.`\|..{..a.1..../3....~V..u?_.^.y....{[..0..rR....................`......d.f.k+.)x$.w+4....."...Tl..^~{...&n..X..t..z\.....WA.t.!.$.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	2119507
Entropy (8bit):	5.648895609476619
Encrypted:	false
SSDEEP:	24576:jEq7+httUpmitzwds5lGojQsAXRrNOgLbXIzx:jp7+h/itk25lGoj7ErNOU4N
MD5:	10E5B4E7513C4C79E9F024B3E9000B86
SHA1:	EAF0270CFF7F97DF24AB607F38DBC601A4B40A08
SHA-256:	08E98EF9D29EF9090B97D9AA3780460B7EE6961947573CCD6253984B2C04B4C9
SHA-512:	F9C24F8A2230C68D3C3D3AA8C3CDD2272FB9EA6528916FA29350E5202AD4A682099B6EEF4EA789A73A563EB57F3DBEAA93511F96936ED8672F012749FACA894B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.rLgA9lJPBq0.O/am=gME/d=1/rs=AO0039tbcsfCFVcdRQvwAZRWamjBEiMB5g/m=v,wb"
Preview:	try{.var _F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0xc180, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	747749
Entropy (8bit):	5.79182562273868
Encrypted:	false
SSDEEP:	3072:8TwIHOQcksvLwFzy0ltT4vzq20cy2eWzKRncURgoSdwInhPaZSvLGjCfDx/ludbZ:8rLWUzy0lVP9nz10BodLLMdUAUGiTjN
MD5:	307EA58474E1F23CAA31819E40AA02D0
SHA1:	FB38F19F49AC1B64C5BF2770739E7355E1D48D81
SHA-256:	1FE35E3C36592FA8EDE3925F929C03EF926BBEA7765EFD55DC60F83BE149E7D2
SHA-512:	BCB0BB75213A11CD89976F56B345FF188CB73D162077CC200B0B8700D2A1B12B3E368958768193C3D566C41D753DFCFF1A6B4BF28B55A85B1AB7A65BBAE5F3BC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlHdQe3zYngE9-K0aBEhKxsEwRr9WQ/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x11460ce4, 0x2046986, 0x1a784f88, 0x11406f40, 0x72102, 0x0, 0x4000000, 0x2000001b, 0x61e, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Rb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,mca,lca,oca,pca

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	704194
Entropy (8bit):	5.597586611893352
Encrypted:	false
SSDEEP:	6144:Tfq3MngtoytLBhooIc/qttkPlqYbppG2YKWMnpxp4BGS3T3vJyNLZA9:TMugtVLvh+kxI2YKWoU9
MD5:	2501D8D7F4827C828626D93C994D462A
SHA1:	4E30EE89AB4762F65B3850217AADD6919F2D6F22
SHA-256:	BE868C4776958EB3CF294FEEBADEB0CF46808D27100A792B682207386401DAA5
SHA-512:	450D89A303DD57834B88FC1655EE80BC591C68B6CE8A743A9AA19BEAE39AF73853AFFC1FA5FB83369516C30AA25A4232F50DB8E1CABABED49BC8A13F25051698
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5050
Entropy (8bit):	5.3019521130781655
Encrypted:	false
SSDEEP:	96:oMMRpyvkMmrDbBargZEi/PggzLmwC8Vh11PGmtjGTsECOFpw:ip7MQE4Ei/PgIBjmmepR6
MD5:	56879DD8886F803593865378D078E00A
SHA1:	7225C36DEEFBDFB2386747582CF19D17C480B724
SHA-256:	113A7E4489B214342173C9A39D2D6ACF444E13D9B61C05649B1FA3A21EBE018B
SHA-512:	26969E03C7CC01C747DA3BB25ECF7C0B8F3A9AF863BC5FA5FC20F12F7A1608265122701DA115184DAF285B3112F24228CDFEFE0E834055CD201B79A71CEE9BA1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4mIZXjiNLbM.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AxGkWEagYD4hKcBvQFFAiEHAAAAAAAAAEBsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEYATDmAU0yQJavPYJTZ1rCkeMtfA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.aOa=_.z("wg1P6b",[_.DB,_.Vn,_.co]);._.k("wg1P6b");.var x7a;x7a=_.yh(["aria-"]);._.oK=function(a){_.Y.call(this,a.Fa);this.La=this.Aa=this.aa=this.viewportElement=this.Na=null;this.Kc=a.Ea.xf;this.ab=a.Ea.focus;this.Fc=a.Ea.Fc;this.ea=this.Ui();a=-1*parseInt(_.Ro(this.Ui().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Ro(this.Ui().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Vc(0),_.Iu(this,.y7a(this,this.aa.el())));_.nG(this.wa())&&(a=this.wa().el(),b=this.De.bind(this),a.__soy_skip_handler=b)};_.K(_.oK,_.Y);_.oK.Ba=function(){return{Ea:{xf:_.UF,focus:_.FF,Fc:_.Ru}}};_.oK.prototype.pz=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.kA)?(a=a.data.kA,this.Ca=a==="MOUS

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	dropped
Size (bytes):	14486
Entropy (8bit):	5.4718895434721855
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFc+5aiWQLHO91CIuW:IoqUAh8vz5W2E
MD5:	852EB28FFE70864E2DA7A630DB5EE2FD
SHA1:	E83A4A9E0FA2B15F5C3257ABDD6903AC3801BC49
SHA-256:	E6EA49B04FF853C39C64332558E2B75A04D16A57ED8533B1691102B27C0CB712
SHA-512:	494D2DCB3FEE90430CDBEAA5693A2B1D41DC5EF545B2EA0D438B68FCC9375943789930ED619B6979FE9CE14A5E00B10AA6C1D6851282172E64CF9DA61B696F2F
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 15:45:13.317470074 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:13.317545891 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:13.317636013 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:13.317902088 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:13.317987919 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:13.318063021 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:13.318118095 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:13.318135977 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:13.318314075 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:13.318336964 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.170514107 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.170825958 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.170881987 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.172259092 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.172353983 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.174856901 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.174921036 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.175971031 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.176126003 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.176165104 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.176443100 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.176656961 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.176688910 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.177268982 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.177334070 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.177997112 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.178051949 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.178189039 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.178261995 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.219352961 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.222160101 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.222230911 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.230709076 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.230742931 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.276510000 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.276510954 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.813047886 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.855786085 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.855864048 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.859019041 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.859174967 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:14.859260082 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.860773087 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:14.903343916 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:15.241385937 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:15.241451979 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:15.241556883 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:15.241858006 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:15.241875887 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:15.857842922 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:15.857968092 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:15.858155966 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:15.859935999 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:15.859961987 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:15.988905907 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.030805111 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.030874014 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.051690102 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.052006960 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.052095890 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.057189941 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.057301044 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.057405949 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.058713913 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.058751106 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.100979090 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:16.101243019 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:16.101272106 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:16.102937937 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:16.103038073 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:16.104875088 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:16.104958057 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:16.152507067 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:16.152517080 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:16.200239897 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:16.724097013 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:16.724164009 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:16.729202032 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:16.729219913 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:16.729449987 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:16.775804996 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:16.788379908 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:16.831334114 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:16.913978100 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.914380074 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.914457083 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.914998055 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.915087938 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.916096926 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.916182041 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.916426897 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.916517973 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.916801929 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:16.916821957 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:16.963069916 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.035070896 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.035135984 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.035226107 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.035469055 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.035499096 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.035538912 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.035556078 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.080029011 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.080091000 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.084433079 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.087493896 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.087524891 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.367701054 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.367738962 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.367767096 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.367784977 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.369493961 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.369560003 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.376106024 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.383905888 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.383974075 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.384816885 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.385061026 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.385061026 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.385137081 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.385164022 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.385508060 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.385508060 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.385590076 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.440138102 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.440213919 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.482971907 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.484308958 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.484364033 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.484428883 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.484493017 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.484527111 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.485398054 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.488281965 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.490595102 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.490629911 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.490674973 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.490694046 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.491945028 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.498605013 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.507792950 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.507869005 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.507920027 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.507936001 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.507951975 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.508790016 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.516386986 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.518354893 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.518408060 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.525329113 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.531071901 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.531107903 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.552277088 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.552325010 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.557096004 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.557151079 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.557950974 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.604500055 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604573011 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604604006 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604646921 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604686022 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604737043 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.604758978 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604775906 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604830027 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604863882 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.604885101 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604919910 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.604959965 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.604990959 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.605668068 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.605715036 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.605731010 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.606065989 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.607989073 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.608129025 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.608144999 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.610775948 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.611076117 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.611092091 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.617239952 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.617640018 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.617657900 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.620507002 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.623672009 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.623688936 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.626327991 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.626394987 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.626413107 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.631234884 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.631493092 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.631509066 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.636784077 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.637011051 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.637027979 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.642035961 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.642410040 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.642425060 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.647739887 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.647978067 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.648000002 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.653106928 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.653209925 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.653225899 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.658706903 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.658735037 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.659475088 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.659491062 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.660018921 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.660018921 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.660084009 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.660276890 CEST	443	49741	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:17.660310984 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.661854029 CEST	49741	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:17.928355932 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.928639889 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.929987907 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.930002928 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.930231094 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:17.935257912 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:17.975346088 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:18.178282022 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:18.178354025 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:18.178487062 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:18.180768013 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:18.180818081 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:18.180896997 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 15:45:18.180918932 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 15:45:18.249866962 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:18.300714970 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:18.306452990 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:18.306483984 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:18.307162046 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:18.307178974 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:18.307264090 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:18.308238983 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:18.308324099 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:18.314754009 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:18.314866066 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:18.314934015 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:18.355048895 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:18.355072021 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:18.402858019 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.254945040 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.255088091 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.255156994 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.255182028 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.255259991 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.255328894 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.255336046 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.262665987 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.262746096 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.262754917 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.271194935 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.271260977 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.271269083 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.322144032 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.322151899 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.368741035 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.372723103 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.372895002 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.372955084 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.372966051 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.373523951 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.373614073 CEST	443	49743	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:19.373682976 CEST	49743	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:19.389925957 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:19.389990091 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:19.390062094 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:19.390394926 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:19.390413046 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.233695984 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.275216103 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.286762953 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.286798954 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.287307978 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.287403107 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.288048029 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.288111925 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.289125919 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.289218903 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.291965008 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.291985035 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.342039108 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.888802052 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.888937950 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.889024019 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.889095068 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.889133930 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.889172077 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.889189959 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.896990061 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.897067070 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.897085905 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.905724049 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.905787945 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.905808926 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.947215080 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:20.947241068 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:20.993968010 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:21.003200054 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:21.004384995 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:21.004472017 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:21.004504919 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:21.028124094 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:21.028242111 CEST	443	49753	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:21.028335094 CEST	49753	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:22.575037003 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:22.575073957 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:22.575141907 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:22.576011896 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:22.576023102 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.029392004 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.029416084 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.029480934 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.030558109 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.030572891 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.031069040 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.031156063 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.031300068 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.031476021 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.031500101 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.190661907 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.190762043 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.190869093 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.191097975 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.191186905 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.191292048 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.191700935 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.191736937 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.192219019 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.192250013 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.455889940 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.456825018 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:23.456902027 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.458233118 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.458334923 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:23.460899115 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.460987091 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:23.462827921 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:23.463040113 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.463581085 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:23.463604927 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.464148998 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:23.464205027 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.787260056 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.846736908 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 24, 2024 15:45:23.846765041 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 24, 2024 15:45:23.893840075 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:23.893897057 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:23.894121885 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:23.895463943 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:23.895484924 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:23.920115948 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.920191050 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:23.921021938 CEST	49757	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:23.921037912 CEST	443	49757	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:23.936476946 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.936690092 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.936702013 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.937211990 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.937289000 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.938208103 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.938275099 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.938395023 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.938477039 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.938519001 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.977886915 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.978144884 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.978183985 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.979441881 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.980051041 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.980238914 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.980300903 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.983349085 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:23.986996889 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:23.987029076 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.027339935 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.029448986 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.074703932 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.074829102 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.075031042 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.075062037 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.075160027 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.075226068 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.076534033 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.076623917 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.076734066 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.076802969 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.153770924 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.321536064 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.363785982 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.363851070 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.369859934 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.369936943 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:24.370007992 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.370562077 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.370836973 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.371867895 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.371948957 CEST	443	49760	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.372112036 CEST	49760	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.373231888 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.373596907 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.374577045 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.374608040 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:24.375310898 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.375344992 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.375729084 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.375782967 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.409195900 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.409220934 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.409298897 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.409332991 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.427582979 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.427666903 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.427826881 CEST	443	49761	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.427867889 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.427917957 CEST	49761	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.464494944 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.505491972 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.622160912 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.622230053 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.622268915 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.622308016 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.622364998 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.622412920 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.622452974 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.622524023 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.622586966 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.622601986 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.627161980 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.627234936 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.627279997 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.627338886 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.627384901 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.627430916 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.627432108 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.627505064 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.627563000 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.627707958 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.630402088 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.630557060 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.630570889 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.632273912 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.632369995 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.632448912 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.632838964 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.632873058 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.635544062 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.635605097 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.635643005 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.666471004 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.666507006 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:24.666594982 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.667162895 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.667172909 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:24.670730114 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.670737982 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.678141117 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.678164959 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:24.678473949 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.679272890 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:24.679284096 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:24.713623047 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.713664055 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.720491886 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:24.720649958 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:24.738965988 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.739046097 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.739101887 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.739172935 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.739304066 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.742877007 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.744636059 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.744679928 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.744739056 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.744810104 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.744956017 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.747375965 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.747447968 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.747479916 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.747497082 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.748171091 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.748312950 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.752654076 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.752692938 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.752744913 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.752770901 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.752865076 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.755743027 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.761394024 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.764700890 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.764767885 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.764775991 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.764796019 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.764851093 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.770153046 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.770239115 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.770236969 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.770324945 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.770482063 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.773704052 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.779053926 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.782221079 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.782304049 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.782311916 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.787964106 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.788000107 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.788028955 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.788062096 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.788146019 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.790955067 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.791013956 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.791028023 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.796483994 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.799288034 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.799376011 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.799388885 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.804853916 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.804950953 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.804981947 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.807490110 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.807558060 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.807578087 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.813106060 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.813225985 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.813257933 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.820573092 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:24.820647955 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:24.821626902 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:24.856087923 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.856188059 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.856189966 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.856215000 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.856267929 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.856306076 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.856447935 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.856503963 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.856517076 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.859904051 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.859982967 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.859992981 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.862195015 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.862252951 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.862278938 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.862287998 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.862318039 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.862338066 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.862582922 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.862636089 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.862643957 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.863637924 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.863713026 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.863724947 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.865657091 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.865689993 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.865710020 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.865720034 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.865770102 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.867089033 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.867197990 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.867254972 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.867266893 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.867335081 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.869105101 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.872858047 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.872901917 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.872920036 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.872953892 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.873006105 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.873892069 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.879654884 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.879977942 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.880045891 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.880053043 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.880079031 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.880178928 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.885742903 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.885834932 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.885895967 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.886049986 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.891781092 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.891839981 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.891869068 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.892343044 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.892381907 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.892409086 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.892431021 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.892501116 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.897917986 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.897977114 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.898030043 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.898060083 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.898232937 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.898262978 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.904072046 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.904308081 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.904340982 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.904386044 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.904405117 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.904459000 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.910152912 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.910298109 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.910326958 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.910403967 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.916570902 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.916635036 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.916661024 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.916729927 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.916793108 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.916795015 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.916812897 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.916877031 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.922487020 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.922538042 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.922544956 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.922544003 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.922569990 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.922617912 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.928659916 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.928720951 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.928750992 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.928817987 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.928837061 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.928976059 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.934514046 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.934601068 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.934623957 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.934668064 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.940665960 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.940716028 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.940728903 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.940742970 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.940783024 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.940808058 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.940872908 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.940891027 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.947002888 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.947011948 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.947088957 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.947107077 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.953018904 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.953037977 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.953048944 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.953080893 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.953113079 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.953118086 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.953135967 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.953157902 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.959054947 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.962991953 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:24.973043919 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.973082066 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.973124981 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.973139048 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.973149061 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.973185062 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.973297119 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.973330021 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.973372936 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.973381996 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.973424911 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.976201057 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.979737997 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.979798079 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.979824066 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.979836941 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.979849100 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.979883909 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.979902983 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.979945898 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.980614901 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.981697083 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.981775999 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.981806993 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.981837988 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.981888056 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.982497931 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.982542992 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.982556105 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.982573032 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.982767105 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.987147093 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.988009930 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.992434025 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.992455959 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.992491007 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.992522001 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.992583036 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.993350983 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.993387938 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.993433952 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.993462086 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.993516922 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:24.998022079 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:24.998617887 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.001128912 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.001163006 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.001223087 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.001238108 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.001296043 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.001972914 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.002022982 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.002085924 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.002114058 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.002193928 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.004419088 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.005073071 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.007647991 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.007675886 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.007760048 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.007775068 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.007829905 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.010898113 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.014154911 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.014179945 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.014211893 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.014260054 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.014275074 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.014305115 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.017227888 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.018588066 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.018599987 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.020445108 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.023451090 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.023511887 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.023521900 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.023545027 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.023578882 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.026698112 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.028439045 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.028465033 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.029757977 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.031615019 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.031627893 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.032716990 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.034765005 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.034778118 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.051906109 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.051929951 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.052076101 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.052088976 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.052189112 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.052200079 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.052241087 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.052268982 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.052335978 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.052349091 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.052405119 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.052953005 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.053025961 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.053828955 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.053849936 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.053891897 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.053906918 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.053934097 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.054109097 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.054158926 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.054171085 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.056149006 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.058880091 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.058907032 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.058943033 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.058950901 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.058964014 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.061685085 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.063671112 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.063677073 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.064537048 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.064872026 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.064877987 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.067154884 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.067200899 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.067208052 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.069839954 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.072135925 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.072143078 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.072519064 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.073996067 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.074002981 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.075278997 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.075860977 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.075866938 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.077966928 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.078012943 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.078021049 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.080641031 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.080688000 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.080693960 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.083316088 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.083908081 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.083914995 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.086019993 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.086086988 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.086100101 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.088551998 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.091118097 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.091171980 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.091176033 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.091186047 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.091233969 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.093815088 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.095603943 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.095617056 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.126729965 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.126822948 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.171036005 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.171045065 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.217284918 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.217369080 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.242151022 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.278101921 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.278170109 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.279834986 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.491350889 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.493519068 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.520011902 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.522640944 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.522746086 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.522770882 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.522821903 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.523462057 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.523536921 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.524482965 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.524537086 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.528561115 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.528656960 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.531668901 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.535557985 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.535567999 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.547584057 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.549520016 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.550229073 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.550293922 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.550458908 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.550468922 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.550734043 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.550801039 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.551035881 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.551501989 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.551554918 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.551611900 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.551620007 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.553102970 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.553172112 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.555558920 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.555653095 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.555743933 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.555762053 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.555799007 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.555816889 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.555841923 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.555872917 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.555896044 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.557487965 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.557496071 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.576916933 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.577018976 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.577331066 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.577877045 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.577907085 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.589278936 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.591409922 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.591449976 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.606172085 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.606192112 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.630507946 CEST	49765	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.630561113 CEST	443	49765	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.817673922 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.844537020 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.916872978 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.916933060 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.916941881 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.916944027 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.921030045 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.921117067 CEST	443	49767	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.921175957 CEST	49767	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.923924923 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.923990965 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:25.924055099 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:25.940057039 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.940140009 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.940222979 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.940232992 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.950691938 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.950737000 CEST	443	49772	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:25.950788975 CEST	49772	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:25.983855009 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.083431005 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:26.083604097 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:26.083723068 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:26.086011887 CEST	49739	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:26.086036921 CEST	443	49739	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:26.091856003 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.091887951 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.092272043 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.092502117 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.092515945 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.094372034 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.094407082 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.094538927 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.095210075 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.095232964 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.103821993 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.103842974 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.104857922 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.104926109 CEST	443	49775	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.104996920 CEST	49775	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.444447994 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.444804907 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.444828033 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.445190907 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.445241928 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.445907116 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.445950985 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.446161985 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.446208954 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.446361065 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.446367025 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.446407080 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.446429014 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.572391033 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.729125977 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:26.729140043 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:26.729201078 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:26.729726076 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:26.729738951 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:26.731201887 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.743417025 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:26.743449926 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:26.743504047 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:26.747822046 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:26.747833967 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:26.749265909 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:26.749315977 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:26.749378920 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:26.749464035 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:26.749517918 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:26.749582052 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:26.749833107 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:26.749864101 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:26.749968052 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:26.750003099 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:26.852755070 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.852826118 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.853247881 CEST	49778	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.853288889 CEST	443	49778	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.967202902 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.968065023 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.968137980 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.968317986 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.968590021 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.968605995 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.968952894 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.969129086 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.969223976 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.969547033 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.969629049 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.970139980 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.970231056 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.970349073 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.970550060 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.970635891 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:26.970683098 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:26.981832981 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.981887102 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:26.981950998 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.982388020 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:26.982403994 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:27.015331984 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.015347004 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.110054016 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.110069990 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.143600941 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:27.143640041 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:27.143862963 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:27.144097090 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:27.144113064 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:27.214318037 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.344181061 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.344249010 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.344273090 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.349014044 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.349102020 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.349119902 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.349189043 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.349248886 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.349277973 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.349292040 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.349356890 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.358530998 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.358603001 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.368108988 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.368186951 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.368213892 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.368238926 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.368295908 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.464828968 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.465044022 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.465101004 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.465146065 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.465342999 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.465430021 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.465435982 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.465764999 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.465827942 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.465954065 CEST	49782	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.465976000 CEST	443	49782	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.471844912 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.471906900 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.471990108 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.472167969 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.472182989 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.481306076 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.481396914 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.481410980 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.486097097 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.486175060 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.486186981 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.495718002 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.495773077 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.495784998 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.505438089 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.505492926 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.505506992 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.515208006 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.515290022 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.515304089 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.524772882 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.524844885 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.524863958 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.534614086 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.534671068 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.534688950 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.581752062 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.581789017 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.581898928 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.581968069 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.582000017 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.582036018 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.582067013 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.582374096 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.582776070 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.582802057 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.582823038 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.582838058 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.583062887 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.583076000 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.584018946 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.584239960 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:27.584249020 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.584755898 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.584815025 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:27.585760117 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.585810900 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:27.586251020 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:27.586332083 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.586611986 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:27.586623907 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.597528934 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.597583055 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.597592115 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.597675085 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.597723007 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.597729921 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.604278088 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.604451895 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.604475021 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.606352091 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.606553078 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.606570959 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.606939077 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.607006073 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.607618093 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.607675076 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.607839108 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.607903004 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.608031034 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.608035088 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.608047962 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.608100891 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.608488083 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.608570099 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.608697891 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.608710051 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.614011049 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.614083052 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.614095926 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.617304087 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.617405891 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.617412090 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.623701096 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.623768091 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.623780012 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.626530886 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.627701044 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.627722025 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.629168987 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.629228115 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.629229069 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.629241943 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.629277945 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.631351948 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.631438971 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.631779909 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.631791115 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.635472059 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.635515928 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.635571003 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.635586023 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.635637045 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.641091108 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.648791075 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.648864985 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.648880959 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.652970076 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.653031111 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.653044939 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.658734083 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.658808947 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.658823013 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.664722919 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.664797068 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.664812088 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.670744896 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.670819044 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.670834064 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.676955938 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.677026987 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.677042961 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.682564974 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.682749033 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.682768106 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.697983980 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.698049068 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.698064089 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.698153019 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.698199034 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.698204994 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.698313951 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.698390961 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.698395967 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.700242996 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.700541019 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.700547934 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.705955982 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.706020117 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.706026077 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.711962938 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.712028027 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.712034941 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.712451935 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:27.712474108 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.717658043 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.717701912 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.717706919 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.724358082 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.724411964 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.724417925 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.729351997 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.729772091 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.729784966 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.734941959 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.735130072 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.735143900 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.740211964 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.740272045 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.740286112 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.745724916 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.749510050 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.749527931 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.759546995 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.759610891 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.759665012 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.759687901 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.759711981 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.759741068 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.760514975 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.761497021 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.761512041 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.764075994 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.765513897 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.765530109 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.767117977 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.769315958 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.769390106 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.769407034 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.769469023 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.769480944 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.771186113 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.771311998 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.772608995 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.772690058 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.772702932 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.775762081 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.775823116 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.775841951 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.778923988 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.778974056 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.778991938 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.782176971 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.783081055 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.783098936 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.785164118 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.785244942 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.785259008 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.788374901 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.788515091 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.788528919 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.791522026 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.791604996 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.791618109 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.794408083 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.794517994 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.794580936 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.794595957 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.794692993 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.797452927 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.800734997 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.800779104 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.800841093 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.800851107 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.800887108 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.803303957 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.806339979 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.806377888 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.806431055 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.806437016 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.806471109 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.810339928 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.811686993 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.811717987 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.811758995 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.811764956 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.811799049 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.814702034 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.817246914 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.817332983 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.817337990 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.820082903 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.820118904 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.820169926 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.820175886 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.820211887 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.822851896 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.826240063 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.826272964 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.826344013 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.826349974 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.826399088 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.828110933 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.830950975 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.830990076 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.831002951 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.833755970 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.833790064 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.833826065 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.833839893 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.833885908 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.836273909 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.838767052 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.838818073 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.838881969 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.838896990 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.838953018 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.841255903 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.844048023 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.844086885 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.844146013 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.844158888 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.844217062 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.846564054 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.849551916 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.849594116 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.849606991 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.852487087 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.852561951 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.852574110 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.854485989 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.854556084 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.854602098 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.854610920 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.854630947 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.854671001 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.854679108 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.854691982 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.854743958 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.854749918 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.854778051 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.854795933 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.854808092 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.856637955 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.856724024 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.856736898 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.859055042 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.859164953 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.859222889 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.859236956 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.859359026 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.861341953 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.862620115 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.862685919 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.862740040 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.863543987 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.863569021 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.863606930 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.863663912 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.863677025 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.863712072 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:27.863723040 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:27.864327908 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.864353895 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.864494085 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:27.864567995 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.866106987 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:27.866130114 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:27.866509914 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:27.866576910 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.867335081 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:27.867402077 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:27.868199110 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:27.868221998 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:27.868232012 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:27.868431091 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.868485928 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.868498087 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.870910883 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.870950937 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.870980978 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.870995045 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.871042013 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.873338938 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.875843048 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.875881910 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.875972986 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.875986099 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.876065016 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.878206015 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.880250931 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.880290985 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.880322933 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.880336046 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.880378008 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.882534981 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.884954929 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.884999037 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.885025024 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.885039091 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.885499001 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.887219906 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.888650894 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.888796091 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.888869047 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.888879061 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.888969898 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.889069080 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.889117956 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.889127970 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.889168024 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.889174938 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.889180899 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.889233112 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.889238119 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.889256954 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.889477015 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.891356945 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.893464088 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.893533945 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.893543005 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.893558025 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.894587040 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.895622015 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.897500038 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.897542953 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.897594929 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.897615910 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.897674084 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.898096085 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.898156881 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.898165941 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.899626970 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.901566029 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.901684046 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.901726961 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.901745081 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.901946068 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.903491020 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.905535936 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.905591011 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.905639887 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.905653000 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.905698061 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.907283068 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.909234047 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.909286976 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.909337044 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.909348011 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.909379959 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.917197943 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.917567015 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.917606115 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.917644024 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.917658091 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.917666912 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.917695999 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.917716026 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.917752028 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.917764902 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.917769909 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.919064045 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.919106960 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.919112921 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.919152975 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.921221018 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.922470093 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.922506094 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.922538996 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.922555923 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.922560930 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.922585011 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.924562931 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.925506115 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.925510883 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.926187992 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.927874088 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.927911997 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.928103924 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.928105116 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.928122997 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.929790974 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.931426048 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.931469917 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.931490898 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.931504011 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.931526899 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.933132887 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.933486938 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.933499098 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.934731007 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.936546087 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.936611891 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.936647892 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.936666965 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.936701059 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.938281059 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.938745022 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.938755989 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.939961910 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.941479921 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.941493988 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.941622019 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.942939043 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.942996025 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.942998886 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.943068981 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:27.943103075 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:27.965975046 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.965996027 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.971466064 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.971571922 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.971615076 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.971642017 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.971667051 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.971719027 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.975367069 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.977502108 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.977519989 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.978805065 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.978954077 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.978971004 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.979020119 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:27.979037046 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:27.979052067 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.979064941 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.987958908 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.989499092 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.989515066 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.997684956 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:27.997741938 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:27.997756004 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.003956079 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:28.003964901 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:28.004159927 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:28.005631924 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.005680084 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.005691051 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.005707026 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.005800962 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.005846024 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.005923986 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.005939007 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.011845112 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:28.014255047 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.015326023 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.015340090 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.015584946 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.019876003 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.023222923 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.023283958 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.023303032 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.024667978 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.024708986 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.024722099 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.024733067 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.025486946 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.031358957 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.031430960 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.031445980 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.034643888 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.049757957 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:28.049880981 CEST	443	49783	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:28.049989939 CEST	49783	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:28.051350117 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.051362991 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.051884890 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:28.052010059 CEST	443	49793	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:28.052104950 CEST	49793	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:28.052973986 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.053029060 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.054311991 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.054419994 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.056583881 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.056596041 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.060241938 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.060300112 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.060316086 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.060323000 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.060369015 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.060415030 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.060422897 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.060466051 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.063566923 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.072587967 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.072679996 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.072693110 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.082978010 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.083163977 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.083220005 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.083231926 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.083276033 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.088584900 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.088685989 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.088747025 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.088767052 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.088860989 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.088917017 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.088928938 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.088979959 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.088993073 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.092509985 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.094896078 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.094980955 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.094990969 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.095007896 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.095107079 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.095120907 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.096275091 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:28.096374989 CEST	443	49789	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:28.096434116 CEST	49789	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:28.097362041 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:28.097446918 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.097460032 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:28.097508907 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.097522974 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.097568035 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:28.100220919 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.100287914 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.100302935 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.104604959 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:28.104648113 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:28.106940031 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.106993914 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.107016087 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.111633062 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.111706018 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.111746073 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.117819071 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.117877960 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.117904902 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.122541904 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.122592926 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.122632027 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.122641087 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.122662067 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.122678995 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.122994900 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.123034954 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.123044014 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.123759031 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.123806000 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.123833895 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.129901886 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.129967928 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.129987001 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.134399891 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:28.134464025 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:28.134582043 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:28.136080980 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:28.136112928 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:28.136214018 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.136267900 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.136281013 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.136791945 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.136847973 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.136895895 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.136907101 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.136957884 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.142291069 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.142355919 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.142384052 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.148294926 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.148364067 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.148395061 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.150618076 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:28.151737928 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.154247046 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.154367924 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.154397011 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.155328989 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.155385971 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.155432940 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.155450106 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.155572891 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.160310984 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.160391092 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.160423040 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.162755013 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.166461945 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.166610956 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.166637897 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.169342995 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.169393063 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.169399977 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.169413090 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.169730902 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.172393084 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.172441959 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.172452927 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.175721884 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.176103115 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.178762913 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.178824902 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.178848028 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.183309078 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.183388948 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.183407068 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.183418989 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.183568001 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.189383984 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.195982933 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.196032047 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.196034908 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.196048021 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.196091890 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.202538013 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.205218077 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.205291986 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.205312967 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.205389977 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.205423117 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.205441952 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.205459118 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.205570936 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.205585003 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.206113100 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.206170082 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.206185102 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.208031893 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.208097935 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.208112955 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.209156036 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.209209919 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.209212065 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.209227085 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.209268093 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.213191986 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.213263988 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.213304043 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.215718985 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.218592882 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.218679905 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.218719959 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.222626925 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.222675085 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.222687006 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.222701073 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.222790956 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.224073887 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.224129915 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.224167109 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.229079962 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.229424000 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.229475021 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.229497910 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.232739925 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.232821941 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.232837915 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.234076977 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.234127045 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.234220028 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.235832930 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.235878944 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.235898972 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.235913992 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.235963106 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.242244005 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.249093056 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.249135971 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.249139071 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.249154091 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.249195099 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.255606890 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.261948109 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.261993885 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.262011051 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.262022972 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.262069941 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.268377066 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.272855997 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:28.272914886 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:28.273041010 CEST	49801	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:28.273056984 CEST	443	49801	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:28.274631023 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.274684906 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.274733067 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.274749041 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.274848938 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.280688047 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.286540985 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.286600113 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.286623001 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.286638021 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.286684036 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.292144060 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.298257113 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.298304081 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.298319101 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.301810980 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.301877022 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.301888943 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.305233955 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.305298090 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.305313110 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.308736086 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.308785915 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.308796883 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.312417984 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.312477112 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.312495947 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.312509060 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.312577963 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.315853119 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.315967083 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.316051006 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.316062927 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.319341898 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.319428921 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.319438934 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.322766066 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.322921038 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.322931051 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.326072931 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.326122999 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.326133013 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.329679012 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.329739094 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.329749107 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.332849026 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.332901001 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.332911968 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.333061934 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.333215952 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.333278894 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.333287954 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.333373070 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.333427906 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.333435059 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.333524942 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.333575964 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.333583117 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.336189032 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.336244106 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.336256027 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.337948084 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:28.339109898 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:28.339173079 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:28.339544058 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.339610100 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.339621067 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.339747906 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:28.340100050 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:28.340193033 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:28.340425014 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:28.341314077 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.341399908 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.341408014 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.342726946 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.342798948 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.342808962 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.345899105 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.345952988 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.345963955 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.349076986 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.349215031 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.349225044 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.352368116 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.352449894 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.352463007 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.355741978 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.355797052 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.355808973 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.358407974 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.358453035 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.358465910 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.361602068 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.361665964 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.361675024 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.364593029 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.364654064 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.364664078 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.367691040 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.367816925 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.367832899 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.370692968 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.370740891 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.370754004 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.373668909 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.373723984 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.373737097 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.376885891 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.376995087 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.377007008 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.380804062 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.380865097 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.380877018 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.382955074 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.383018970 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.383028984 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.385596991 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.385669947 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.385680914 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.387327909 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:28.388259888 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.388302088 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.388314009 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.391087055 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.391134024 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.391144991 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.394032955 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.394287109 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.394296885 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.396820068 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.396876097 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.396884918 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.399625063 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.399750948 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.399760962 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.402379990 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.402431965 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.402441978 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.415184975 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.415195942 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.453080893 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.453130007 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.453140020 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.453149080 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.453187943 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.460371017 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.460427999 CEST	443	49803	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.460481882 CEST	49803	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.469822884 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.469850063 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.469916105 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.470218897 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:28.470228910 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:28.474375963 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.474394083 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.475732088 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.475847960 CEST	443	49796	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.475991011 CEST	49796	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.487957001 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:28.488007069 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:28.488099098 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:28.488765955 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:28.488794088 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:28.578083038 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:28.578124046 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:28.578197002 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:28.578618050 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:28.578633070 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:28.612365961 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.612397909 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:28.612490892 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.612832069 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:28.612844944 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:29.644804955 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.644884109 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.644907951 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.644974947 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.645040989 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.647325039 CEST	49805	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.647344112 CEST	443	49805	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.652086973 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.652524948 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.652535915 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.652771950 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.653079987 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.653207064 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.653371096 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:29.653393030 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.653697968 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.653865099 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.653873920 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.654057026 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.654500008 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.654526949 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.655195951 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.655200005 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:29.655276060 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.655286074 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.655873060 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:29.655982971 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.655988932 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.656127930 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.656315088 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.656939030 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.656991959 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.656999111 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.657067060 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.659037113 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.659574986 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.659595013 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.660234928 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.660312891 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.661273003 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.661336899 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.661932945 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.662110090 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.662507057 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.662518024 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:29.699367046 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.805150986 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.805155993 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.805165052 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.805166006 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:29.906426907 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.906500101 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.906794071 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.906819105 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.906835079 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.907071114 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.907078028 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.907151937 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.907157898 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.913083076 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.913147926 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.913186073 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.913347006 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:29.913376093 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.913829088 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:29.914899111 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:29.914946079 CEST	443	49811	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:29.914951086 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.915033102 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:29.915036917 CEST	49811	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:29.915040016 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:29.933393955 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.933515072 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.933964968 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.933996916 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.936435938 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.936470032 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.936830997 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.936830997 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.936867952 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.939502954 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.939579010 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.939913034 CEST	443	49806	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:29.939995050 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:29.939995050 CEST	49806	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:30.014816999 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:30.014883995 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:30.015013933 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:30.015757084 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:30.015774012 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:30.026386976 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.026433945 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.026433945 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.026457071 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.026494980 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.026500940 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.026957989 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.026995897 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.027002096 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.031785011 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.031847000 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.031852961 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.033999920 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.034135103 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.034190893 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.034229994 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.034286022 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.034343004 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.034398079 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.052798033 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.052841902 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.052871943 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.052892923 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.052896976 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.052901030 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.052913904 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.052942038 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.052952051 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.052977085 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.052983046 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.053009033 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.057828903 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.057881117 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.057894945 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.066768885 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.066829920 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.066837072 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.075654984 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.075722933 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.075731039 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.083940983 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.084002018 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.084009886 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.146982908 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147083998 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.147094965 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147209883 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147258997 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.147264957 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147391081 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147444010 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.147449970 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147578001 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147625923 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.147631884 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147735119 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.147780895 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.147788048 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.151556969 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.151616096 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.151623011 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.151810884 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.151864052 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.151870966 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.154531002 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.154705048 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.154774904 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.154793024 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.154819965 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.154865026 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.155196905 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.159168005 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.159240961 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.159264088 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.160074949 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.160130024 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.160137892 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.164526939 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.164594889 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.164608955 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.168123007 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.168179035 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.168189049 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.172456980 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.172509909 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.172517061 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.172538042 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.172585011 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.172600031 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.176779985 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.176827908 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.176835060 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.179596901 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.179653883 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.179667950 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.182584047 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.182657003 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.182665110 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.188487053 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.188544035 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.188560009 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.188658953 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.188700914 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.188708067 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.194590092 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.194641113 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.194648027 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.197012901 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.197073936 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.197089911 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.206902027 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.206954002 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.206969976 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.275362968 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.275451899 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.275489092 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.275516987 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.275577068 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.275624037 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.275778055 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.275824070 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.275855064 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.276170015 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.276218891 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.276232004 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.276334047 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.276377916 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.276390076 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.276868105 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.276925087 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.276936054 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.280244112 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.280294895 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.280307055 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.284347057 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.284404039 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.284415960 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.285913944 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.285964966 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.285979033 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.292501926 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.292551041 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.292562962 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.297853947 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.297904968 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.297915936 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.303636074 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.303695917 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.303708076 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.309226036 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.309310913 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.309328079 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.309345961 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.309405088 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.313735008 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.315860987 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.315921068 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.318114042 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.318166971 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.318182945 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.323020935 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.323079109 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.323091030 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.328222036 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.328277111 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.328289032 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.332163095 CEST	49810	443	192.168.2.4	142.250.186.142
Oct 24, 2024 15:45:30.332179070 CEST	443	49810	142.250.186.142	192.168.2.4
Oct 24, 2024 15:45:30.333668947 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.333724022 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.333735943 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.339498997 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.339553118 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.339565039 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.344890118 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.344938993 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.344949961 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.350359917 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.350445986 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.350469112 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.400293112 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.400361061 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.400388002 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.400413990 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.400459051 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.400501966 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.400656939 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.400705099 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.400738001 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.400839090 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.400897980 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.400912046 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.401106119 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.401158094 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.401170015 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.401259899 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.401323080 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.401333094 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.401990891 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.402062893 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.402074099 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.402162075 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.402225018 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.402235031 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.402642965 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.402705908 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.402717113 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.404979944 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.405033112 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.405050039 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.409830093 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.409991026 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.410006046 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.414510012 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.414586067 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.414597988 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.419544935 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.419611931 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.419622898 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.421889067 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.421957016 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.421967983 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.424808979 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.424875021 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.424886942 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.428301096 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.428375959 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.428388119 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.430918932 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.430975914 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.430983067 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.432250023 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.432296991 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.432301998 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.435425997 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.435492992 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.435498953 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.438227892 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.438283920 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.438290119 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.441128969 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.441231012 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.441236973 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.441262007 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.441315889 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.444135904 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.450463057 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.450516939 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.450524092 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.451993942 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.452054977 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.452059984 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.452142954 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.452189922 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.452197075 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.454746962 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.454808950 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.454817057 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.457598925 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.457739115 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.457747936 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.460329056 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.460401058 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.460414886 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.462941885 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.463016033 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.463031054 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.465699911 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.465775967 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.465792894 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.468641996 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.468714952 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.468729019 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.471210957 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.471302986 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.471317053 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.473582983 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.473645926 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.473659039 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.475841999 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.475913048 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.475929976 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.478324890 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.478394032 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.478408098 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.481070995 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.481151104 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.481165886 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.482026100 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.482101917 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.482115030 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.484198093 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.484268904 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.484282970 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.487040043 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.487108946 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.487121105 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.489027023 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.489093065 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.489104033 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.492300034 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:30.514077902 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:30.519222021 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.519330978 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.519444942 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.519484043 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.519539118 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.519547939 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.519637108 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.519687891 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.519695044 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.519808054 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.519876957 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.519882917 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.520266056 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.520318985 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.520325899 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.520426035 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.520486116 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.520493031 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.521083117 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.521137953 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.521143913 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.521250010 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.521296978 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.521302938 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.521872997 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.521924973 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.521930933 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.522038937 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.522083998 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.522089958 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.522907972 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.522963047 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.522969007 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.523073912 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.523122072 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.523128033 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.523649931 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.523703098 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.523709059 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.524271965 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.524327993 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.524334908 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.526197910 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.526257038 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.526263952 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.528242111 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.528297901 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.528305054 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.530457973 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.530508995 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.530515909 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.532264948 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.532314062 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.532321930 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.535222054 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.535285950 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.535295963 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.537111998 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.537185907 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.537194967 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.538239002 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.538304090 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.538317919 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.541310072 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.541366100 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.541378975 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.543112040 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.543170929 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.543184042 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.543306112 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.543354988 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.543365955 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.544744015 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.544795036 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.544806957 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.550522089 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.550589085 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.550602913 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.550905943 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.550956964 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.550967932 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.552767038 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.552819967 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.552834034 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.554474115 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.554529905 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.554543972 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.556638002 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.556708097 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.556723118 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.558525085 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.558590889 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.558604956 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.560605049 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.560669899 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.560683966 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.561657906 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.561722994 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.561734915 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.563579082 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.563652039 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.563667059 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.563788891 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:30.565176010 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.565241098 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.565256119 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.567105055 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.567162991 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.567176104 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.568695068 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.568748951 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.568773985 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.571249962 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.571306944 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.571321011 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.573546886 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.573599100 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.573612928 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.575284004 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.575356007 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.575368881 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.576354980 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.576421976 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.576433897 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.577676058 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.577748060 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.577763081 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.579351902 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.579420090 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.579432011 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.580646992 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.580696106 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.580708981 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.580813885 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.580868006 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.580878973 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.582123041 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.582176924 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.582187891 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.582269907 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.582340002 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.582350969 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.583699942 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.583759069 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.583771944 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.584850073 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.584897995 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.584909916 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.589883089 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.589951038 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.589963913 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.590101004 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.590157986 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.590168953 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.591573954 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.591635942 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.591648102 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.699372053 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:30.699477911 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:30.710390091 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.710541964 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.807537079 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:30.881568909 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.884073019 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:30.884090900 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:30.884231091 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:30.884237051 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:30.884388924 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:30.884447098 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:30.885032892 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:30.885046959 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:30.885091066 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:30.885735989 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:30.885823011 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:30.885876894 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:30.886051893 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:30.886101961 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:30.886109114 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:30.888430119 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:30.888623953 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:30.889834881 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:30.889890909 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:30.889945030 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:30.890396118 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:30.890474081 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:30.890535116 CEST	49809	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:30.890552044 CEST	443	49809	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:30.892457008 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:30.892467976 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:30.892699003 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:30.892745018 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:30.892797947 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:30.892805099 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:30.892882109 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:30.892887115 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:30.892888069 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:30.895994902 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:30.896068096 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:30.918642044 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:30.918848991 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:30.919596910 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:30.919624090 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:30.932544947 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:30.962898970 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:30.992060900 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:31.085931063 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.085987091 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.086071014 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.086399078 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.086412907 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.149372101 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.149446964 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.149522066 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.149533987 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.149548054 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.149599075 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.149956942 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.150640965 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.150690079 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.150697947 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.157927990 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.157987118 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.157994986 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.171283960 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:31.171406984 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:31.171560049 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:31.171588898 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:31.175770044 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:31.177129984 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:31.177263975 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:31.177340031 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:31.177355051 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:31.177395105 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:31.177453995 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:31.198410034 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.198419094 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.211946964 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:31.212028980 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:31.212104082 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:31.212461948 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:31.212481976 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:31.212836027 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:31.213015079 CEST	443	49816	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:31.213145971 CEST	49816	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:31.214967966 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:31.215111971 CEST	443	49815	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:31.215183973 CEST	49815	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:31.248584986 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.269397020 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.269560099 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.269617081 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.269625902 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.270221949 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.270272017 CEST	443	49813	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.270334959 CEST	49813	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.293150902 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:31.293159962 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:31.293612003 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:31.293771029 CEST	443	49812	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:31.293898106 CEST	49812	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:31.941819906 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.942682981 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.942723989 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.946116924 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.946190119 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.951303959 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.951380968 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.951550007 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.995330095 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:31.995336056 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:31.995368958 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.042368889 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.063399076 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.063761950 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.063796997 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.065088987 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.065220118 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.071603060 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.071943045 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.071943045 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.072128057 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.072691917 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.072711945 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.120019913 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.197508097 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.197654963 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.197748899 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.197804928 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.197840929 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.198016882 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.198059082 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.198072910 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.202213049 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.202230930 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.205851078 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.213478088 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.213499069 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.261909962 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.261930943 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.310066938 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.314191103 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.314399958 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.314912081 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.314934015 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.318312883 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.318506002 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.318521023 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.323247910 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.323426008 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.323438883 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.331566095 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.332053900 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.332066059 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.340317965 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.340583086 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.340595007 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.346824884 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.346926928 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.347381115 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.347398043 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.348526001 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.348588943 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.349457979 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.349565029 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.349591970 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.350008011 CEST	443	49822	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.350017071 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.350044012 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.350044012 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:32.350157022 CEST	49822	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:32.353545904 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.354013920 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.354027033 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.357955933 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.358510017 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.358521938 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.366723061 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.366841078 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.366852045 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.375128031 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.375227928 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.375240088 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.418359041 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.418389082 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.431385040 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.431478024 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.431583881 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.431617975 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.431638002 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.431763887 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.435133934 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.435287952 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.435345888 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.435359001 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.435473919 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.435488939 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.439445019 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.439913988 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.439933062 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.442819118 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.442934036 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.442976952 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.442990065 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.443150043 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.449759960 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.455890894 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.455975056 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.456012964 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.456026077 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.456166983 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.461677074 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.468063116 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.468175888 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.468219995 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.468234062 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.468883991 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.474237919 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.480181932 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.480298042 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.480557919 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.480566025 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.480891943 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.486021042 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.527337074 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.527354002 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.529397964 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.529596090 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.530061007 CEST	443	49819	142.250.185.110	192.168.2.4
Oct 24, 2024 15:45:32.530364990 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:32.530364990 CEST	49819	443	192.168.2.4	142.250.185.110
Oct 24, 2024 15:45:33.219046116 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.264935017 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.308334112 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.308394909 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.309911013 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.309951067 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.310008049 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.312470913 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.312526941 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.312546015 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.319207907 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.319426060 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.319571018 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.319587946 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.360980034 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.598073959 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.598187923 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.598246098 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.598299980 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.612026930 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.612155914 CEST	443	49825	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.612234116 CEST	49825	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.613607883 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.613647938 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.613718033 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.613960028 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:33.613981009 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:33.650733948 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:33.650752068 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:33.650804996 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:33.652354956 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:33.652373075 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:33.845823050 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:33.845881939 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:33.845944881 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:33.854569912 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:33.854588032 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:34.500386000 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.500694036 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.500711918 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.501238108 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.501311064 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.502264977 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.502362967 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.502523899 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.502616882 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.502723932 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.502733946 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.555067062 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.644963026 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:34.645317078 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:34.645328045 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:34.645958900 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:34.646262884 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:34.646322012 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:34.646384001 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:34.687354088 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:34.697391987 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:34.713028908 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:34.714586020 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:34.714656115 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:34.716140985 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:34.716212988 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:34.717150927 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:34.717212915 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:34.717461109 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:34.717551947 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:34.717659950 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:34.717684031 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:34.717719078 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:34.717803001 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:34.760602951 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:34.793793917 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.793900967 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.793956041 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.793971062 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.795053005 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.795130968 CEST	443	49826	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.795203924 CEST	49826	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.795780897 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.795845032 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.795913935 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.796197891 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:34.796217918 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:34.900202990 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:34.947343111 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.002533913 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:35.055983067 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:35.056018114 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:35.056478024 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:35.056679010 CEST	443	49832	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:35.056749105 CEST	49832	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:35.172831059 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.172863007 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.172873020 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.172923088 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.172945023 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.172969103 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.172975063 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.172990084 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.172993898 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.173003912 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.173017025 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.173039913 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.173480988 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.173491001 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.173527956 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.173548937 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.173599005 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.173599005 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.174081087 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.174137115 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:35.174190998 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:35.816957951 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:35.872123003 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:35.872137070 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:35.916460037 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:36.005417109 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:36.005474091 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:36.005534887 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:36.076926947 CEST	49829	443	192.168.2.4	142.250.185.206
Oct 24, 2024 15:45:36.076944113 CEST	443	49829	142.250.185.206	192.168.2.4
Oct 24, 2024 15:45:36.121496916 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.125633955 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.125652075 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.126931906 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.127006054 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.129446030 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.129503965 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.130271912 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.130451918 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.130796909 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.130810976 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.180974960 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.199457884 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:36.199501991 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:36.199578047 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:36.215646982 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:36.215670109 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:36.409219027 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.409332037 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.409518957 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.409538984 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.449522972 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.460171938 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.460294008 CEST	443	49835	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.460369110 CEST	49835	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.461886883 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.461925983 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.462040901 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.462446928 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:36.462464094 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:36.494136095 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:36.494177103 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:36.494237900 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:36.494631052 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:36.494648933 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:36.496965885 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:36.497014999 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:36.497206926 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:36.497767925 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:36.497793913 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.067163944 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:37.067377090 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:37.067409039 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:37.067774057 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:37.068171978 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:37.068239927 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:37.068459034 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:37.111357927 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:37.308255911 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.308629036 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.308667898 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.309247017 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.309452057 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.310287952 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.310350895 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.310564041 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.310652971 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.310756922 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.355330944 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.359983921 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.360003948 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.363260984 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.363609076 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.363636017 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.364175081 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.364255905 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.365242004 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.365317106 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.365736961 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.365829945 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.368573904 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.368906021 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.368926048 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.369494915 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.370546103 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.370639086 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.407150984 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.409137011 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.409147978 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:37.411876917 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.458895922 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:37.586610079 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.586673975 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.586903095 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.586983919 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.590981007 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.591052055 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.591239929 CEST	443	49844	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:37.591278076 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:37.591336012 CEST	49844	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:38.208770037 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:38.208811998 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:38.208827019 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:38.208853960 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:38.208893061 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:38.208981037 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:38.209491968 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:38.264194965 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:38.295758009 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:38.295864105 CEST	443	49842	142.250.186.78	192.168.2.4
Oct 24, 2024 15:45:38.295919895 CEST	49842	443	192.168.2.4	142.250.186.78
Oct 24, 2024 15:45:43.849131107 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:43.849174023 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:43.849246025 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:43.849845886 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:43.849860907 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:43.999504089 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:43.999547958 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:43.999696970 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.016516924 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.016536951 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.722742081 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.723104000 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.723134995 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.724473000 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.724548101 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.727072954 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.727171898 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.727411985 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.727596045 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.727854013 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.727869987 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.776737928 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.893408060 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.893646002 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.893670082 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.894898891 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.894964933 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.897397995 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.897468090 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.897701025 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.897850037 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.897862911 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.897886992 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.937978029 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:44.938014030 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:44.979588985 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.006742954 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.007420063 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.007483006 CEST	443	49871	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.007549047 CEST	49871	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.008958101 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.009042978 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.009078026 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.184005976 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.184699059 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.184813976 CEST	443	49873	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.185084105 CEST	49873	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.186002970 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.186002970 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.186202049 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.296005964 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.338831902 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.338856936 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.339142084 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.339236021 CEST	443	49845	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.339339972 CEST	49845	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.344989061 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:45.345033884 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:45.345277071 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:45.345673084 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:45.345695972 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:45.473989010 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.524607897 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.524672985 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.525186062 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:45.525300026 CEST	443	49846	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:45.525377035 CEST	49846	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:46.214816093 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.224612951 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.224644899 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.225204945 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.225287914 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.226247072 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.226319075 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.226520061 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.226600885 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.226666927 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.226681948 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.275335073 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.535865068 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.535937071 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.536125898 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.536143064 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.536593914 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.536645889 CEST	443	49879	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.536725998 CEST	49879	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.537437916 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.537533998 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.537620068 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.538041115 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:46.538078070 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:46.604743958 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:46.604784012 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:46.604866982 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:46.605043888 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:46.605070114 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.390923023 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.391232014 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.391299009 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.391858101 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.391937017 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.392903090 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.392961025 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.393202066 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.393295050 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.393619061 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.393635988 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.446732998 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.463404894 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.463613033 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.463645935 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.464685917 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.464771986 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.465218067 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.465282917 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.465466976 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.465477943 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.509227037 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.672244072 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.672308922 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.672374964 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.672424078 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.673446894 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.673520088 CEST	443	49882	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:47.673599005 CEST	49882	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:47.727550030 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.727684021 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.727747917 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.727782965 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.727880955 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.727957010 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.727961063 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.727987051 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.728041887 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.728410006 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.728514910 CEST	443	49884	142.250.185.228	192.168.2.4
Oct 24, 2024 15:45:47.728667021 CEST	49884	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:45:47.732505083 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:47.732539892 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:47.732867956 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:47.732867956 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:47.732902050 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.426493883 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.426822901 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.426834106 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.427737951 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.427834988 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.428203106 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.428246021 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.428374052 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.428379059 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.478403091 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.701910973 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.701946020 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.701973915 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.702064037 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.702075005 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.702084064 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.702161074 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.744050026 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.744057894 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.744694948 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.744724989 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.744868040 CEST	443	49885	172.217.16.196	192.168.2.4
Oct 24, 2024 15:45:49.744947910 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:49.744947910 CEST	49885	443	192.168.2.4	172.217.16.196
Oct 24, 2024 15:45:50.199887037 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:50.199970007 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:50.200010061 CEST	49766	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:45:50.200030088 CEST	443	49766	20.109.210.53	192.168.2.4
Oct 24, 2024 15:45:51.279691935 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:51.279793978 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:51.279889107 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:51.280194998 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:51.280235052 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.148768902 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.149066925 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.149108887 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.149648905 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.149728060 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.150687933 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.150748014 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.151650906 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.151737928 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.152028084 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.152050972 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.152089119 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.195372105 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.212616920 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.435288906 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.493864059 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.493921041 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.495418072 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.495495081 CEST	443	49886	142.250.186.46	192.168.2.4
Oct 24, 2024 15:45:52.495556116 CEST	49886	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:45:52.502701044 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:52.502737045 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:52.502804995 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:52.503197908 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:52.503215075 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.364893913 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.365371943 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.365389109 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.365915060 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.366147995 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.366933107 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.367024899 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.367222071 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.367290020 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.367552042 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.411356926 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.417644024 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.417659998 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.465468884 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.649607897 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.649668932 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.657455921 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.657464027 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.673470974 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.673517942 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.673707962 CEST	443	49887	142.250.185.78	192.168.2.4
Oct 24, 2024 15:45:53.673804045 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:45:53.673804045 CEST	49887	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:05.309087992 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:05.309154987 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:05.309274912 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:05.309732914 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:05.309768915 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.068610907 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.068700075 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.072503090 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.072535038 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.072896004 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.082112074 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.123348951 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.309968948 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.309999943 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.310022116 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.310070992 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.310113907 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.310136080 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.310163021 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.334440947 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.334491968 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.334520102 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.334534883 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.334574938 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.334682941 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.430031061 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.430068970 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.430120945 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.430150032 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.430166960 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.430329084 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.454600096 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.454626083 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.454672098 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.454684973 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.454730034 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.454747915 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.459913969 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.459935904 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.459991932 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.460062027 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.460103989 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.460129976 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.464409113 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.464432955 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.464474916 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.464499950 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.464531898 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.464550972 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.552664042 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.552690983 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.552742958 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.552767992 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.552798033 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.552814960 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.576621056 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.576642990 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.576698065 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.576709986 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.576754093 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.578478098 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.578506947 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.578547001 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.578555107 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.578588963 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.578612089 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.579375982 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.579397917 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.579447031 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.579453945 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.579480886 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.579500914 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.582132101 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.582156897 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.582197905 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.582205057 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.582227945 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.582247019 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.584398031 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.584423065 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.584451914 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.584459066 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.584486008 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.584501028 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.586287975 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.586317062 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.586359978 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.586366892 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.586388111 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.586409092 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.669286013 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.669401884 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.669487953 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.669487953 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.669584036 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.669625044 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.669666052 CEST	49890	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.669682980 CEST	443	49890	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.810779095 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.810883999 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.810973883 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.811721087 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.811834097 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.812005997 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.812839985 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.812879086 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.813816071 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.813848972 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.814068079 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.814415932 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.814430952 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.857829094 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.857897043 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.977211952 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.977313995 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.977412939 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.986241102 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.986305952 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.986402035 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.989223957 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.989264965 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:06.992811918 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:06.992845058 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.545270920 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.546016932 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.546056032 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.546696901 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.546713114 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.565663099 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.566149950 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.566190958 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.566587925 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.566595078 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.607656002 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.608263969 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.608303070 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.609009027 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.609018087 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.674952030 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.674993038 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.675065994 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.675153017 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.675153017 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.675406933 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.675406933 CEST	49893	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.675453901 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.675486088 CEST	443	49893	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.679120064 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.679177999 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.679239988 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.679404020 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.679415941 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.707271099 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.707297087 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.707357883 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.707379103 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.707425117 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.707756042 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.707782984 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.707798004 CEST	49891	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.707806110 CEST	443	49891	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.712209940 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.712246895 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.712313890 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.712457895 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.712467909 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.729856968 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.730448008 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.730479002 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.730825901 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.730834961 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.741388083 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.741489887 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.741543055 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.741744995 CEST	49892	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.741766930 CEST	443	49892	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.745490074 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.745526075 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.745589018 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.745760918 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.745770931 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.749042988 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.749448061 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.749479055 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.750001907 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.750008106 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.863379002 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.863782883 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.863954067 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.863954067 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.863954067 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.866847992 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.866895914 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.866966009 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.867100000 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.867113113 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.924190044 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.924211979 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.924266100 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.924263000 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.924304962 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.924496889 CEST	49894	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.924515009 CEST	443	49894	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.927527905 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.927576065 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:07.927756071 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.927815914 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:07.927825928 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.170473099 CEST	49895	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.170500994 CEST	443	49895	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.432264090 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.435556889 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.435642958 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.436958075 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.436978102 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.493253946 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.543159962 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.562510014 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.562566996 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.563607931 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.563622952 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.574517965 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.574615955 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.574675083 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.574975967 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.574975967 CEST	49896	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.575014114 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.575038910 CEST	443	49896	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.578810930 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.578849077 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.578934908 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.579194069 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.579205990 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.599180937 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.600048065 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.600068092 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.601140976 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.601145983 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.665534019 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.668132067 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.668212891 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.669167042 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.669181108 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.691411972 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.691658974 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.691736937 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.691941023 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.691991091 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.692018986 CEST	49898	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.692037106 CEST	443	49898	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.694936037 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.694977045 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.695122957 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.695363998 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.695380926 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.732084036 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.732213974 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.732286930 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.732469082 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.732480049 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.732533932 CEST	49899	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.732538939 CEST	443	49899	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.736603975 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.736633062 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.736768007 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.736887932 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.736896992 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.798017025 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.799293041 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.799392939 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.799477100 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.799523115 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.799556017 CEST	49900	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.799575090 CEST	443	49900	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.804342031 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.804363966 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.804461956 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.804722071 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.804733992 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.858540058 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.859420061 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.859435081 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:08.860415936 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:08.860419989 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.002494097 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.002717018 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.003212929 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.003212929 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.003238916 CEST	49897	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.003251076 CEST	443	49897	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.007960081 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.008055925 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.008141994 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.008421898 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.008465052 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.324646950 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.332428932 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.332462072 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.335920095 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.335933924 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.425949097 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.430074930 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.430157900 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.436491013 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.436511993 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.464308023 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.464449883 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.464504004 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.464745045 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.464745045 CEST	49901	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.464762926 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.464772940 CEST	443	49901	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.468044043 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.468086958 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.468174934 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.468473911 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.468493938 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.471081018 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.471587896 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.471611023 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.472157001 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.472168922 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.543009043 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.543811083 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.543842077 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.544285059 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.544289112 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.560863972 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.560935974 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.561146975 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.561235905 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.561237097 CEST	49902	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.561283112 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.561311960 CEST	443	49902	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.564276934 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.564374924 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.564457893 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.564621925 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.564666986 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.603298903 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.603570938 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.603634119 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.603796959 CEST	49903	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.603823900 CEST	443	49903	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.608021975 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.608053923 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.608308077 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.608308077 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.608330965 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.674276114 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.674505949 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.674592972 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.675282955 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.675282955 CEST	49904	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.675306082 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.675309896 CEST	443	49904	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.681885958 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.681983948 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.682075977 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.682317019 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.682346106 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.744137049 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.745090961 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.745165110 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.746391058 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.746406078 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.876770020 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.877002954 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.877110004 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.881944895 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.881944895 CEST	49905	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.882006884 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.882036924 CEST	443	49905	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.893014908 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.893050909 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:09.893170118 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.893452883 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:09.893467903 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.214281082 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.230005980 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.230041981 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.231424093 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.231435061 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.304589987 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.305948019 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.306039095 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.307934999 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.307950020 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.359338999 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.359435081 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.359488010 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.359699965 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.359720945 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.359733105 CEST	49906	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.359738111 CEST	443	49906	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.365525961 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.367892027 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.367947102 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.368010044 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.368937969 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.368948936 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.370786905 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.370791912 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.371546984 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.371576071 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.431374073 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.433121920 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.433170080 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.433702946 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.433782101 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.433856010 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.434739113 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.434760094 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.435386896 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.435436964 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.435471058 CEST	49907	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.435487032 CEST	443	49907	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.443392992 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.443449974 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.443571091 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.443753004 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.443770885 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.500257969 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.500397921 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.500494957 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.564280987 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.564656019 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.564712048 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.602520943 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.602555990 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.602567911 CEST	49908	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.602574110 CEST	443	49908	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.609565020 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.609565020 CEST	49909	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.609617949 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.609636068 CEST	443	49909	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.620480061 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.620534897 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.620594025 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.622596979 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.622632980 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.624424934 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.624511003 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.624574900 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.624897957 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.624928951 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.639115095 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.640199900 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.640212059 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.641226053 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.641231060 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.775598049 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.775676012 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.775724888 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.776007891 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.776007891 CEST	49910	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.776025057 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.776034117 CEST	443	49910	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.779237032 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.779342890 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:10.779416084 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.779604912 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:10.779633999 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.497962952 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.501101971 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.501102924 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.501146078 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.501163006 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.502509117 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.502543926 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.503720999 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.503720999 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.503739119 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.503751993 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.504199982 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.504235029 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.507481098 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.507500887 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.512902021 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.516706944 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.516706944 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.516738892 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.516757965 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.548314095 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.549263000 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.549314022 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.550031900 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.550038099 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.630491018 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.630763054 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.633562088 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.633562088 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.635845900 CEST	49912	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.635869026 CEST	443	49912	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.638675928 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.638715982 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.638766050 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.638931036 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.638961077 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.639319897 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.639339924 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.639339924 CEST	49914	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.639347076 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.639358044 CEST	443	49914	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.640588045 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.640623093 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.642389059 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.642429113 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.642744064 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.642744064 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.642771006 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.643507004 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.643646002 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.648891926 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.648932934 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.648932934 CEST	49915	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.648948908 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.648960114 CEST	443	49915	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.652246952 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.652287960 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.652432919 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.652602911 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.652616978 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.657237053 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.657404900 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.661752939 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.665719986 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.665719986 CEST	49913	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.665750027 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.665755987 CEST	443	49913	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.673455000 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.673506975 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.673613071 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.674047947 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.674061060 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.701873064 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.701997995 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.702112913 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.702685118 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.702685118 CEST	49911	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.702709913 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.702724934 CEST	443	49911	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.709462881 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.709518909 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:11.709686995 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.710105896 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:11.710124969 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.368527889 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.369112968 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.369178057 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.370068073 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.370080948 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.375154972 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.375662088 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.375740051 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.376132965 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.376149893 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.427943945 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.428508997 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.428533077 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.428991079 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.429001093 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.434719086 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.435127020 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.435159922 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.435632944 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.435642958 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.450581074 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.450973034 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.451008081 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.451513052 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.451519966 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.501132011 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.501209021 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.501286983 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.501523018 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.501523018 CEST	49917	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.501563072 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.501586914 CEST	443	49917	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.504877090 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.504918098 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.504975080 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.505131960 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.505145073 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.507536888 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.507649899 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.507705927 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.507757902 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.507771969 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.507782936 CEST	49918	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.507786989 CEST	443	49918	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.510426044 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.510477066 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.510559082 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.510687113 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.510706902 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.560662031 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.560719013 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.560770035 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.561142921 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.561166048 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.561178923 CEST	49920	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.561183929 CEST	443	49920	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.564479113 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.564508915 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.564579010 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.564764023 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.564780951 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.571522951 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.571635008 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.571702003 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.571748972 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.571768999 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.571805954 CEST	49919	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.571821928 CEST	443	49919	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.575531960 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.575596094 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.575661898 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.575890064 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.575911999 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.580676079 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.580863953 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.580931902 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.581016064 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.581041098 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.581058025 CEST	49921	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.581065893 CEST	443	49921	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.583713055 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.583723068 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:12.583785057 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.583944082 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:12.583952904 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.242964029 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.243763924 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.243850946 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.245471001 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.245486021 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.263278008 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.264431953 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.264431953 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.264466047 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.264472008 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.303004026 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.304152012 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.304152012 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.304171085 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.304183960 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.318641901 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.319222927 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.319235086 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.319497108 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.319508076 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.330926895 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.331711054 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.331711054 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.331795931 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.331828117 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.374366045 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.374517918 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.374742031 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.374742031 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.374789953 CEST	49923	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.374814034 CEST	443	49923	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.377954006 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.378001928 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.378264904 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.378427982 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.378448963 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.398521900 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.398720026 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.398854971 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.398854971 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.399034023 CEST	49922	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.399049997 CEST	443	49922	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.401729107 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.401778936 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.401930094 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.402026892 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.402038097 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.434331894 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.434531927 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.434695959 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.434695959 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.434849977 CEST	49924	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.434870958 CEST	443	49924	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.437482119 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.437578917 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.437792063 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.437863111 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.437884092 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.450752974 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.451042891 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.451149940 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.451149940 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.451178074 CEST	49926	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.451193094 CEST	443	49926	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.453838110 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.453886032 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.454164982 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.454164982 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.454209089 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.464014053 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.464504004 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.464632034 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.464632034 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.464859962 CEST	49925	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.464901924 CEST	443	49925	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.467052937 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.467086077 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:13.467427969 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.467427969 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:13.467490911 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.119070053 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.119738102 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.119827032 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.120688915 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.120706081 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.135277033 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.135807991 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.135878086 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.136293888 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.136307955 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.183698893 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.184313059 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.184403896 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.184782028 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.184801102 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.189266920 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.189624071 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.189667940 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.189968109 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.189977884 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.196639061 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.197031021 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.197056055 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.197978973 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.197985888 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.258302927 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.258375883 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.258701086 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.258702040 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.258702040 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.263178110 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.263214111 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.263279915 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.263478041 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.263485909 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.266870975 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.267019033 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.267106056 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.267139912 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.267162085 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.267175913 CEST	49928	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.267183065 CEST	443	49928	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.269632101 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.269680023 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.269881010 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.270009995 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.270023108 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.321470022 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.321716070 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.321775913 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.321825027 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.321842909 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.321856022 CEST	49929	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.321861982 CEST	443	49929	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.322958946 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.323096991 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.323318958 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.323355913 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.323355913 CEST	49930	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.323370934 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.323383093 CEST	443	49930	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.325906038 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.325961113 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.325974941 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.326008081 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.326039076 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.326069117 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.326195002 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.326208115 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.326330900 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.326353073 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.326711893 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.327040911 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.327105999 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.327135086 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.327140093 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.327159882 CEST	49931	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.327162981 CEST	443	49931	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.329220057 CEST	49936	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.329240084 CEST	443	49936	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.329334974 CEST	49936	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.329489946 CEST	49936	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.329509020 CEST	443	49936	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:14.563714027 CEST	49927	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:14.563790083 CEST	443	49927	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.017963886 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.018532991 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.018595934 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.019013882 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.019027948 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.028444052 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.028825045 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.028904915 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.029212952 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.029227018 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.074028969 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.074467897 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.074501038 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.074891090 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.074903011 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.080588102 CEST	443	49936	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.080920935 CEST	49936	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.080962896 CEST	443	49936	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.081288099 CEST	49936	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.081295013 CEST	443	49936	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.089462996 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.089793921 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.089833021 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.090189934 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.090204954 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.152462006 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.152607918 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.152762890 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.152786970 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.152786970 CEST	49932	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.152800083 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.152807951 CEST	443	49932	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.155714035 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.155762911 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.156025887 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.156116962 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.156127930 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.181907892 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.182125092 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.182552099 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.182552099 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.182624102 CEST	49933	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.182657957 CEST	443	49933	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.184880972 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.184969902 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.185091019 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.185168982 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.185189962 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.207024097 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.207158089 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.207274914 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.207274914 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.207500935 CEST	49935	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.207518101 CEST	443	49935	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.209304094 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.209330082 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.209454060 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.209530115 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.209541082 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.225548029 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.225792885 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.225938082 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.225939035 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.226002932 CEST	49934	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.226021051 CEST	443	49934	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.227858067 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.227901936 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.228063107 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.228290081 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.228321075 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.236860991 CEST	443	49936	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.236943007 CEST	443	49936	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.237198114 CEST	49936	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.237198114 CEST	49936	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.237394094 CEST	49936	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.237437010 CEST	443	49936	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.238997936 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.239053965 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.239207983 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.239267111 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:15.239283085 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:15.293457031 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:15.293486118 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:15.297775984 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:15.297775984 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:15.297801971 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:15.397466898 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:15.397536993 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:15.397679090 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:15.401460886 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:15.401503086 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.141746998 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:16.142180920 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:16.142194986 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:16.143717051 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:16.143820047 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:16.144237041 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:16.144289017 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:16.184920073 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:16.184927940 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:16.226536036 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:16.255846024 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.256103039 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.256148100 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.256748915 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.256819963 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.257477045 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.257531881 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.257714033 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.257785082 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.257879019 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.257900953 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.257936001 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.264972925 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.265650034 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.265669107 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.266299963 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.266313076 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.266588926 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.266982079 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.267010927 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.267355919 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.267365932 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.272711039 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.273107052 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.273166895 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.273380041 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.273547888 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.273572922 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.273710966 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.273767948 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.274164915 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.274178028 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.303328037 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.306977987 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.396528006 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.396959066 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.397032022 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.397070885 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.397070885 CEST	49937	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.397095919 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.397106886 CEST	443	49937	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.398101091 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.398283958 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.398334980 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.398453951 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.398464918 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.398468971 CEST	49939	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.398495913 CEST	443	49939	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.400897980 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.400994062 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.401093006 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.401284933 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.401284933 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.401321888 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.401349068 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.401408911 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.401490927 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.401504993 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.402390957 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.403124094 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.403183937 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.403243065 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.403243065 CEST	49940	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.403280020 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.403304100 CEST	443	49940	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.405117035 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.405143023 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.405210972 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.405318975 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.405344009 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.406537056 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.406961918 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.407018900 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.407087088 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.407087088 CEST	49941	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.407124043 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.407160044 CEST	443	49941	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.409046888 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.409063101 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.409140110 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.409233093 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.409240961 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.537170887 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.584745884 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.584774971 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.585144997 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.585361958 CEST	443	49943	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:16.585427046 CEST	49943	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:16.789388895 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.789973021 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.790052891 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:16.790457010 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:16.790477037 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.143021107 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.143549919 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.143632889 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.144013882 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.144030094 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.145302057 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.145617962 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.145633936 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.145720959 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.146020889 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.146034956 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.146334887 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.146338940 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.146425009 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.146429062 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.165661097 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.166050911 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.166090012 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.166505098 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.166517019 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.166836023 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.167521000 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.167648077 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.167710066 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.167740107 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.167768955 CEST	49938	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.167784929 CEST	443	49938	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.170783043 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.170871973 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.171293020 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.171462059 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.171487093 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.274466991 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.274698973 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.274763107 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.274843931 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.274843931 CEST	49944	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.274887085 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.274915934 CEST	443	49944	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.277163982 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.277492046 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.277595997 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.277596951 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.277632952 CEST	49945	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.277646065 CEST	443	49945	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.277970076 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.278001070 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.278121948 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.278270006 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.278280973 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.280235052 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.280267954 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.280430079 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.280550957 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.280579090 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.304630041 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.304769993 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.304830074 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.304882050 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.304908037 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.304932117 CEST	49946	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.304946899 CEST	443	49946	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.307149887 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.307163000 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.307333946 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.307333946 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.307353020 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.324672937 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.325203896 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.325289011 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.325320005 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.325320005 CEST	49947	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.325328112 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.325335979 CEST	443	49947	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.327235937 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.327286959 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.327372074 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.327466965 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.327493906 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.904872894 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.948641062 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.978636980 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.978672981 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:17.986407042 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:17.986423969 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.012177944 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.012722969 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.012773991 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.013168097 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.013180971 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.017136097 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.017870903 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.017884016 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.018726110 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.018729925 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.065099001 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.065835953 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.065903902 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.067044020 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.067058086 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.084361076 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.084764957 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.084778070 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.085172892 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.085186958 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.110127926 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.110284090 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.110346079 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.110518932 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.110558987 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.110590935 CEST	49948	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.110613108 CEST	443	49948	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.114197969 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.114252090 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.114348888 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.114561081 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.114578962 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.141052961 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.141355991 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.141408920 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.141422987 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.141427994 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.141436100 CEST	49950	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.141441107 CEST	443	49950	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.144581079 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.144639015 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.144712925 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.144869089 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.144900084 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.148519993 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.148854971 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.148905039 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.149126053 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.149139881 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.149149895 CEST	49949	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.149157047 CEST	443	49949	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.157202005 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.157217026 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.157269955 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.157594919 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.157610893 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.200766087 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.200803041 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.200856924 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.201060057 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.201061010 CEST	49952	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.201092005 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.201114893 CEST	443	49952	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.203578949 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.203671932 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.203754902 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.204030991 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.204070091 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.243122101 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.243273973 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.243329048 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.243518114 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.243529081 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.243541002 CEST	49951	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.243545055 CEST	443	49951	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.248599052 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.248663902 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.248737097 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.249124050 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.249146938 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.889189959 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.889791965 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.889841080 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.890296936 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.890302896 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.896157026 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.896491051 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.896507025 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.896975994 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.896981001 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.926211119 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.926634073 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.926680088 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.927046061 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.927054882 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.956547022 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.956857920 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.956926107 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:18.957297087 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:18.957314014 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.006917953 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.007267952 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.007288933 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.007658005 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.007664919 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.056680918 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.056731939 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.056905031 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.056997061 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.056997061 CEST	49956	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.057041883 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.057071924 CEST	443	49956	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.061543941 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.061595917 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.061686993 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.061943054 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.061985970 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.062019110 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.062019110 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.062074900 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.062341928 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.062366009 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.062381029 CEST	49955	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.062388897 CEST	443	49955	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.065926075 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.065996885 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.066075087 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.066417933 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.066448927 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.070885897 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.077517033 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.077593088 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.079778910 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.079798937 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.079812050 CEST	49953	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.079818964 CEST	443	49953	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.082393885 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.082494020 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.082573891 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.082696915 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.082720041 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.088736057 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.088871956 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.088933945 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.088989973 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.089025974 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.089051008 CEST	49954	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.089068890 CEST	443	49954	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.090939999 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.090967894 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.091021061 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.091133118 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.091144085 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.139924049 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.140139103 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.140224934 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.140224934 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.140315056 CEST	49957	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.140335083 CEST	443	49957	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.141952991 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.142038107 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.142127037 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.142241955 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.142277002 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.802701950 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.806034088 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.806087971 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.806615114 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.806629896 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.812560081 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.813304901 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.813306093 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.813364983 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.813384056 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.835848093 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.836190939 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.836276054 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.836572886 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.836586952 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.878952980 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.879264116 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.879342079 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.879596949 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.879612923 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.936034918 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.936101913 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.936350107 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.936350107 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.936444998 CEST	49959	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.936476946 CEST	443	49959	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.939070940 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.939096928 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.939302921 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.939302921 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.939332962 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.947335005 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.947390079 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.947669983 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.947669983 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.947669983 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.949367046 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.949404955 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.949577093 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.949675083 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.949690104 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.971462011 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.971545935 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.971692085 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.971692085 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.971693039 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.973356009 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.973396063 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:19.973526955 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.973598003 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:19.973613024 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.009968996 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.010109901 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.010298014 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.010298014 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.010401011 CEST	49962	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.010438919 CEST	443	49962	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.011996984 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.012013912 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.012159109 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.012250900 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.012262106 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.032891989 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.033910036 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.033910036 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.033934116 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.033942938 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.191378117 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.191524029 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.191586018 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.191893101 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.191906929 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.191919088 CEST	49961	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.191924095 CEST	443	49961	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.197324038 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.197350025 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.197412014 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.198286057 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.198301077 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.260714054 CEST	49958	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.260796070 CEST	443	49958	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.275777102 CEST	49960	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.275856972 CEST	443	49960	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.692029953 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.692656994 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.692699909 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.694761038 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.694767952 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.700385094 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.703135967 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.703156948 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.703840971 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.703846931 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.729703903 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.734492064 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.734517097 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.735840082 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.735847950 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.746423006 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.748930931 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.748955965 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.750205040 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.750211954 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.822926044 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.823120117 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.823184013 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.839005947 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.839371920 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.839428902 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.876138926 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.876312017 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.876377106 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.876487970 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.877839088 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.877887011 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.938549995 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.938594103 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.938642979 CEST	49964	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.938652039 CEST	443	49964	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.938745975 CEST	49963	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.938762903 CEST	443	49963	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.954329014 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.954350948 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.954365969 CEST	49965	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.954372883 CEST	443	49965	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.958822012 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.958832979 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.958847046 CEST	49966	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.958852053 CEST	443	49966	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.960499048 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.972105980 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.972126007 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.972177982 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.975270033 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.975286007 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.977638006 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.977643013 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.978663921 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.978678942 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.987735033 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.987827063 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.987903118 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.988925934 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.988964081 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.993957996 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.993976116 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.994028091 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.996376038 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.996392012 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.998280048 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.998303890 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:20.998373032 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.999007940 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:20.999034882 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.108874083 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.109034061 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.109113932 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.125521898 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.125539064 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.125545979 CEST	49967	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.125554085 CEST	443	49967	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.131597042 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.131618977 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.133312941 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.133312941 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.133341074 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.494003057 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:21.494107962 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:21.494371891 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:21.497479916 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:21.497519970 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:21.736432076 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.736964941 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.736985922 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.737736940 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.737740993 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.742294073 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.742646933 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.742727995 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.743177891 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.743194103 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.797333002 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.797753096 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.797765970 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.798470020 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.798474073 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.870409012 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.870718002 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.870961905 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.870982885 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.870982885 CEST	49968	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.870995998 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.871002913 CEST	443	49968	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.874130964 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.874530077 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.874557018 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.874581099 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.874587059 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.874821901 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.874821901 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.874842882 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.874841928 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.874865055 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.874921083 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.874963999 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.875164032 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.875178099 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.875200987 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.875201941 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.875354052 CEST	49969	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.875396013 CEST	443	49969	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.877701998 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.877799034 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.877947092 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.878066063 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.878101110 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.933221102 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.933377981 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.933510065 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.933510065 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.933546066 CEST	49970	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.933553934 CEST	443	49970	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.935678959 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.935762882 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:21.936036110 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.936036110 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:21.936120987 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.003561974 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.003618002 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.003772974 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.003788948 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.003983974 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.003999949 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.004030943 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.004386902 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.004475117 CEST	443	49972	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.006395102 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.006474972 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.006547928 CEST	49972	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.006705046 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.006705046 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.006784916 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.080605984 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.080689907 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.080848932 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.083875895 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.083909988 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.427649021 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.428997040 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.429080009 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.429414034 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.430327892 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.430347919 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.430917025 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.430933952 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.431308031 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.431394100 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.432019949 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.432075977 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.433906078 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.433983088 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.434948921 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.434967041 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.435233116 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.475332022 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.614609957 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.614936113 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.627659082 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.627734900 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.627804995 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.656043053 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.658377886 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.682626009 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.716841936 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.729731083 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.746826887 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.761403084 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.761466980 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.793011904 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.808588028 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.842995882 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.843060017 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.843334913 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.949598074 CEST	49973	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:22.949664116 CEST	443	49973	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:22.956988096 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.957062960 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.958363056 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.958378077 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.959106922 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.959153891 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.959892035 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.959907055 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.961010933 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.961028099 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.961714029 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.961719036 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.962119102 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.962193012 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.964711905 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.964725018 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.965657949 CEST	49971	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.965679884 CEST	443	49971	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.983839989 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.983910084 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.983993053 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.984117031 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:22.984132051 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:22.995176077 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:22.995242119 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:22.995340109 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:22.996392012 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:22.996423960 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:23.277684927 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:23.278578997 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:23.278616905 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:23.279141903 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:23.279566050 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:23.279644012 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:23.279906034 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:23.279999971 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:23.280011892 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:23.328454971 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.328481913 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.328530073 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.328560114 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.328587055 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.329312086 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.329334021 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.329345942 CEST	49975	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.329353094 CEST	443	49975	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.329363108 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.329459906 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.329480886 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.329524994 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.329544067 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.329547882 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.329591036 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.329612970 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.330286980 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.331007004 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.331075907 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.332036972 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.332057953 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.332071066 CEST	49974	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.332077980 CEST	443	49974	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.333332062 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.333333015 CEST	49977	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.333369970 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.333394051 CEST	443	49977	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.335396051 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.335396051 CEST	49976	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.335424900 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.335455894 CEST	443	49976	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.340128899 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.340243101 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.340354919 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.341850042 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.341907978 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.342071056 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.342287064 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.342331886 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.342952967 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.342983961 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.345103025 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.345144033 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.345268011 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.345408916 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.345448971 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.346363068 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.346380949 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.346509933 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.346947908 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.346981049 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.561502934 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:23.607340097 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:23.607400894 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:23.618679047 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:23.618788004 CEST	443	49978	142.250.186.46	192.168.2.4
Oct 24, 2024 15:46:23.618850946 CEST	49978	443	192.168.2.4	142.250.186.46
Oct 24, 2024 15:46:23.953978062 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.954639912 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.954725981 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:23.955204964 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:23.955221891 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.072925091 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.074732065 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.082159042 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.082195997 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.082734108 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.083194017 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.083265066 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.085196972 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.085256100 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.088742018 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.088816881 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.088877916 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.091783047 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.098613977 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.098752022 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.098764896 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.098861933 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.099502087 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.099584103 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.100236893 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.100250959 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.100743055 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.100774050 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.101471901 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.101483107 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.102118015 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.102149963 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.102629900 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.102641106 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.102818966 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.102818966 CEST	49979	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.102869034 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.102940083 CEST	443	49979	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.106602907 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.106656075 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.106741905 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.106883049 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.106909037 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.130255938 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.141757011 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.141794920 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.142229080 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.142314911 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.147531986 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.147548914 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.191951036 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.227253914 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.227437019 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.227804899 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.231543064 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.231596947 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.231733084 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.235344887 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.235346079 CEST	49981	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.235392094 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.235435009 CEST	443	49981	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.235663891 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.235701084 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.235728979 CEST	49982	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.235744953 CEST	443	49982	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.236331940 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.236486912 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.236552954 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.239897013 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.239916086 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.239938974 CEST	49984	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.239953995 CEST	443	49984	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.246937037 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.246984959 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.247035980 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.247049093 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.247076988 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.247214079 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.271584034 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.271631002 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.272900105 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.272996902 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.273159027 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.273341894 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.273377895 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.273505926 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.273540020 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.307653904 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.307950020 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.308044910 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.308433056 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.308433056 CEST	49983	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.308510065 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.308546066 CEST	443	49983	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.313427925 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.313481092 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.313673973 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.313832998 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.313873053 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.378268003 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.378387928 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.378452063 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.378498077 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.380620956 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.380723953 CEST	443	49980	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.380851030 CEST	49980	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.382211924 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.382306099 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.382380962 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.383338928 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:24.383368969 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:24.842356920 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.844430923 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.844521046 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.845526934 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.845544100 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.985953093 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.986284971 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.986449957 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.986449957 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.986449957 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.989563942 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.989628077 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:24.989720106 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.989892006 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:24.989923954 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.005070925 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.005553961 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.005620003 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.005966902 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.005975008 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.019342899 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.019798994 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.019880056 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.020298958 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.020317078 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.032102108 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.032457113 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.032551050 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.032819033 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.032840014 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.068229914 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.068551064 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.068597078 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.068913937 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.068927050 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.133764982 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.133917093 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.133990049 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.134469032 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.134517908 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.134553909 CEST	49988	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.134589911 CEST	443	49988	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.138008118 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.138092995 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.138163090 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.138307095 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.138329029 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.150032043 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.150106907 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.150212049 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.150285006 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.150362968 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.150362968 CEST	49987	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.150404930 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.150430918 CEST	443	49987	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.152491093 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.152545929 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.152681112 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.152803898 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.152828932 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.206231117 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.206398010 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.206459999 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.206521988 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.206521988 CEST	49989	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.206549883 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.206573963 CEST	443	49989	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.208520889 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.208554029 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.208628893 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.208724022 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.208743095 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.259613991 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.259999037 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.260061026 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.261351109 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.261483908 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.264009953 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.264072895 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.264234066 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.264396906 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.264410973 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.286267042 CEST	49985	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.286333084 CEST	443	49985	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.310286999 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.310357094 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.356698990 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.425256968 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.425471067 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.425565958 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.425678968 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.425678968 CEST	49986	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.425726891 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.425753117 CEST	443	49986	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.428738117 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.428772926 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.428945065 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.429127932 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.429140091 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.543070078 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.543210030 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.543298006 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.543375969 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.544651985 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.544744015 CEST	443	49990	142.250.185.78	192.168.2.4
Oct 24, 2024 15:46:25.544816017 CEST	49990	443	192.168.2.4	142.250.185.78
Oct 24, 2024 15:46:25.727122068 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.727725029 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.727816105 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.728321075 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.728338003 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.863054991 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.863277912 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.863346100 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.863354921 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.863399982 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.863464117 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.863502979 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.863531113 CEST	49991	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.863545895 CEST	443	49991	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.866419077 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.866501093 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.866609097 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.866784096 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.866811037 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.895122051 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.895751953 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.895771980 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.896053076 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.896059036 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.897351980 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.897682905 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.897723913 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.898220062 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.898228884 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.945895910 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.946376085 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.946408987 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:25.946794987 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:25.946801901 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.033410072 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.033576012 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.033632040 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.033819914 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.033844948 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.033863068 CEST	49992	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.033869982 CEST	443	49992	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.036994934 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.037029982 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.037097931 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.037288904 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.037301064 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.037767887 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.037947893 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.038042068 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.038106918 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.038106918 CEST	49993	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.038124084 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.038151026 CEST	443	49993	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.040132999 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.040204048 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.040273905 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.040399075 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.040420055 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.078583956 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.078746080 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.078819990 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.078850031 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.078850985 CEST	49994	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.078865051 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.078876019 CEST	443	49994	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.080929995 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.080955982 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.081257105 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.081257105 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.081283092 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.157377005 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:26.157551050 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:26.157603025 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:26.278130054 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.278722048 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.278738976 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.279205084 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.279210091 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.412079096 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.412400007 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.412456036 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.412467957 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.412511110 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.412578106 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.412616968 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.412631989 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.412652016 CEST	49995	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.412657022 CEST	443	49995	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.415569067 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.415590048 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.415867090 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.416049957 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.416059971 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.615257978 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.615889072 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.615969896 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.616348028 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.616365910 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.747592926 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.747680902 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.747756004 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.747996092 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.748022079 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.748035908 CEST	49996	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.748043060 CEST	443	49996	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.751286983 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.751352072 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.751425028 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.751612902 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.751633883 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.778568029 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.779150009 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.779231071 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.779596090 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.779602051 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.797967911 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.798322916 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.798347950 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.798711061 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.798716068 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.851283073 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.851732016 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.851751089 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.852109909 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.852114916 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.908067942 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.908201933 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.908279896 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.908418894 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.908442974 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.908463955 CEST	49998	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.908472061 CEST	443	49998	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.911612034 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.911653042 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.911792994 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.911907911 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.911921024 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.928453922 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.928630114 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.928811073 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.928877115 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.928893089 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.928901911 CEST	49997	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.928906918 CEST	443	49997	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.931133986 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.931188107 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:26.931324959 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.931467056 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:26.931489944 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.005589962 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:27.005702019 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:27.005804062 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:27.006283998 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:27.006321907 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:27.009795904 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.009857893 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.009913921 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.009934902 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.009963989 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.010005951 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.010531902 CEST	49999	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.010543108 CEST	443	49999	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.015199900 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.015229940 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.015295029 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.015592098 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.015619993 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.504256964 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.505371094 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.505371094 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.505430937 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.505453110 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.623631954 CEST	49942	443	192.168.2.4	142.250.185.228
Oct 24, 2024 15:46:27.623658895 CEST	443	49942	142.250.185.228	192.168.2.4
Oct 24, 2024 15:46:27.638484955 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.638520002 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.638571978 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.638608932 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.638645887 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.638892889 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.638892889 CEST	50001	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.638920069 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.638935089 CEST	443	50001	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.642051935 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.642098904 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.642539978 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.642539978 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.642579079 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.688493013 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.689538002 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.689559937 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.689611912 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.689621925 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.722697973 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.723166943 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.723206997 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.723702908 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.723711967 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.768166065 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.768830061 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.768910885 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.773469925 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.773488045 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.824007034 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.824172020 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.824341059 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.824341059 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.824369907 CEST	50002	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.824397087 CEST	443	50002	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.827204943 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.827272892 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.827358007 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.827487946 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.827505112 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.848886967 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:27.849123955 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:27.850661039 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:27.850675106 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:27.851161003 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:27.860197067 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:27.861890078 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.862075090 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.862174988 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.862175941 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.862325907 CEST	50003	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.862348080 CEST	443	50003	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.864768982 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.864855051 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.865143061 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.865212917 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.865231991 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.905097961 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.905246019 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.905369997 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.905503988 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.905503988 CEST	50005	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.905538082 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.905565023 CEST	443	50005	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.907331944 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:27.908760071 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.908853054 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:27.908993959 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.909269094 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:27.909305096 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.134099960 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.134208918 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.134268045 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.134289026 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:28.134311914 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.134340048 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:28.134478092 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:28.138899088 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.138950109 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.138988018 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:28.138998985 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.139019966 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:28.139151096 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.139210939 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:28.163086891 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:28.163111925 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.163130045 CEST	50004	443	192.168.2.4	20.109.210.53
Oct 24, 2024 15:46:28.163139105 CEST	443	50004	20.109.210.53	192.168.2.4
Oct 24, 2024 15:46:28.393085957 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.393560886 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.393580914 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.394325018 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.394330025 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.421103001 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.428378105 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.428411961 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.429060936 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.429068089 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.520898104 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.521037102 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.521100044 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.523610115 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.523632050 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.523646116 CEST	50000	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.523655891 CEST	443	50000	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.532701969 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.532778978 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.532857895 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.533207893 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.533242941 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.562474012 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.562514067 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.562561989 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.562577009 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.562660933 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.562995911 CEST	50006	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.563009024 CEST	443	50006	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.567481041 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.567574978 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.567730904 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.568150997 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.568202019 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.576487064 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.577716112 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.577742100 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.578345060 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.578351974 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.603746891 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.604619980 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.604705095 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.605156898 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.605171919 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.683581114 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.684182882 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.684230089 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.684628963 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.684640884 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.708343983 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.708467960 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.708519936 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.708689928 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.708710909 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.708723068 CEST	50007	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.708729982 CEST	443	50007	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.713184118 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.713229895 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.713495970 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.713836908 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.713857889 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.734513998 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.734599113 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.734920979 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.735095024 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.735133886 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.735165119 CEST	50008	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.735182047 CEST	443	50008	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.740161896 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.740228891 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.740411043 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.740842104 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.740860939 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.819873095 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.820095062 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.820151091 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.820533037 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.820563078 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.820581913 CEST	50009	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.820590019 CEST	443	50009	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.826423883 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.826481104 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:28.826556921 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.826992035 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:28.827028036 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.290452957 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.291364908 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.291398048 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.291990995 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.291999102 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.301347017 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.302148104 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.302239895 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.302390099 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.302433968 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.424766064 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.424815893 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.424906969 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.425052881 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.425173044 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.425201893 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.425240040 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.425250053 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.425282001 CEST	50010	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.425295115 CEST	443	50010	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.428325891 CEST	50015	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.428375006 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.428508043 CEST	50015	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.428644896 CEST	50015	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.428653955 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.431683064 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.431740999 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.432059050 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.432059050 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.432059050 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.434322119 CEST	50016	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.434360027 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.434962988 CEST	50016	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.434962988 CEST	50016	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.434995890 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.450371027 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.450844049 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.450890064 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.451353073 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.451364040 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.500132084 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.500699043 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.500747919 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.501349926 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.501362085 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.744396925 CEST	50011	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.744457006 CEST	443	50011	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.926520109 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.926640987 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.926683903 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.926820993 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.926867008 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.926964998 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.927145958 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.927145958 CEST	50013	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.927187920 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.927217960 CEST	443	50013	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.927382946 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.927382946 CEST	50012	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.927405119 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.927418947 CEST	443	50012	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.930793047 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.930881977 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.930951118 CEST	50018	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.930972099 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.930989027 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.931220055 CEST	50018	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.931255102 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.931288958 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.931328058 CEST	50018	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.931344032 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.933404922 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.933908939 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.933931112 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:29.934416056 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:29.934421062 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.152688980 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.152776957 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.152832985 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.152863026 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.152901888 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.153048038 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.153198957 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.153225899 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.153274059 CEST	50014	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.153287888 CEST	443	50014	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.157017946 CEST	50019	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.157109022 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.157215118 CEST	50019	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.157382965 CEST	50019	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.157418013 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.160248041 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.160801888 CEST	50016	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.160816908 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.161365032 CEST	50016	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.161369085 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.193377018 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.193850994 CEST	50015	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.193912983 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.194412947 CEST	50015	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.194427967 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.289463997 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.289628983 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.289868116 CEST	50016	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.290019035 CEST	50016	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.290019035 CEST	50016	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.290034056 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.290041924 CEST	443	50016	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.297683954 CEST	50020	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.297732115 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.297801018 CEST	50020	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.297988892 CEST	50020	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.298005104 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.324959040 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.325162888 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.325239897 CEST	50015	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.331043959 CEST	50015	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.331087112 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.331135988 CEST	50015	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.331152916 CEST	443	50015	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.333600044 CEST	50021	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.333659887 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.333731890 CEST	50021	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.333930016 CEST	50021	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.333956003 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.676101923 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.676918983 CEST	50018	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.676949978 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.677994013 CEST	50018	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.677999973 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.689321041 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.689806938 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.689870119 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.690376043 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.690391064 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.808042049 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.808191061 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.808307886 CEST	50018	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.808536053 CEST	50018	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.808536053 CEST	50018	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.808549881 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.808558941 CEST	443	50018	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.811888933 CEST	50022	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.811928034 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.812202930 CEST	50022	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.812397003 CEST	50022	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.812403917 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.821269989 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.821345091 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.821456909 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.821497917 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.821561098 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.821605921 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.821605921 CEST	50017	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.821645021 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.821667910 CEST	443	50017	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.824035883 CEST	50023	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.824088097 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.824225903 CEST	50023	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.824363947 CEST	50023	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.824383020 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.925297022 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.925749063 CEST	50019	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.925795078 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:30.926356077 CEST	50019	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:30.926367998 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.063359976 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.063532114 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.063760042 CEST	50019	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.063854933 CEST	50019	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.063889980 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.063926935 CEST	50019	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.063941956 CEST	443	50019	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.064030886 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.064568043 CEST	50020	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.064594030 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.065330982 CEST	50020	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.065337896 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.067543030 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.067578077 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.067714930 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.067903042 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.067913055 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.094858885 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.095340014 CEST	50021	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.095377922 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.095953941 CEST	50021	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.095971107 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.197953939 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.197988987 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.198045969 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.198107958 CEST	50020	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.198369026 CEST	50020	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.198389053 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.198404074 CEST	50020	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.198410988 CEST	443	50020	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.201308012 CEST	50025	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.201359034 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.201670885 CEST	50025	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.201884985 CEST	50025	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.201903105 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.231096029 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.231261015 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.231359005 CEST	50021	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.231395960 CEST	50021	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.231395960 CEST	50021	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.231415987 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.231429100 CEST	443	50021	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.234061003 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.234143972 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.234234095 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.234405994 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.234438896 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.564466000 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.565093040 CEST	50023	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.565119028 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.565562963 CEST	50023	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.565567970 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.570589066 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.571104050 CEST	50022	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.571142912 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.572149992 CEST	50022	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.572156906 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.703593969 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.703756094 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.703876972 CEST	50023	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.703923941 CEST	50023	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.703941107 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.703949928 CEST	50023	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.703954935 CEST	443	50023	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.707446098 CEST	50027	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.707489014 CEST	443	50027	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.707568884 CEST	50027	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.707717896 CEST	50027	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.707726955 CEST	443	50027	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.712138891 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.712213039 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.712318897 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.712378979 CEST	50022	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.712449074 CEST	50022	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.712467909 CEST	443	50022	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.715651989 CEST	50028	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.715693951 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.715771914 CEST	50028	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.716057062 CEST	50028	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.716077089 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.830233097 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.831253052 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.831294060 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.832295895 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.832314014 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.941768885 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.942567110 CEST	50025	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.942647934 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.943442106 CEST	50025	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.943456888 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.967974901 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.969125032 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.969208956 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.969243050 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.969329119 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.969358921 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.969400883 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.969428062 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.969428062 CEST	50024	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.969449997 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.969471931 CEST	443	50024	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.975639105 CEST	50029	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.975739002 CEST	443	50029	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.975828886 CEST	50029	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.976020098 CEST	50029	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.976056099 CEST	443	50029	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.989856958 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.990305901 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.990351915 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:31.991085052 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:31.991096973 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.077049971 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.077260971 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.077359915 CEST	50025	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.077424049 CEST	50025	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.077424049 CEST	50025	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.077462912 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.077492952 CEST	443	50025	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.080569029 CEST	50030	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.080611944 CEST	443	50030	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.080671072 CEST	50030	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.080821991 CEST	50030	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.080830097 CEST	443	50030	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.128165960 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.129168034 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.129214048 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.129254103 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.129329920 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.129329920 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.129376888 CEST	50026	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.129414082 CEST	443	50026	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.132198095 CEST	50031	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.132262945 CEST	443	50031	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.132324934 CEST	50031	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.132455111 CEST	50031	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.132486105 CEST	443	50031	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.446435928 CEST	443	50027	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.447279930 CEST	50027	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.447365999 CEST	443	50027	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.448817968 CEST	50027	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.448832989 CEST	443	50027	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.456212997 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.457184076 CEST	50028	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.457184076 CEST	50028	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.457226992 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.457246065 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.588356972 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.588520050 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.588597059 CEST	50028	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.589118004 CEST	50028	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.589118004 CEST	50028	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.589143991 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.589159012 CEST	443	50028	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.592114925 CEST	50032	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.592145920 CEST	443	50032	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.592442989 CEST	50032	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.592442989 CEST	50032	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.592469931 CEST	443	50032	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.717068911 CEST	443	50029	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.717648029 CEST	50029	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.717698097 CEST	443	50029	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.718143940 CEST	50029	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.718156099 CEST	443	50029	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.793090105 CEST	443	50027	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.793236017 CEST	443	50027	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.793406963 CEST	50027	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.793406963 CEST	50027	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.793507099 CEST	50027	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.793524027 CEST	443	50027	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.796554089 CEST	50033	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.796622038 CEST	443	50033	13.107.246.51	192.168.2.4
Oct 24, 2024 15:46:32.796843052 CEST	50033	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.796843052 CEST	50033	443	192.168.2.4	13.107.246.51
Oct 24, 2024 15:46:32.796924114 CEST	443	50033	13.107.246.51	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 15:45:11.104325056 CEST	53	65494	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:11.281388998 CEST	53	63290	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:12.499639988 CEST	53	52425	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:13.308124065 CEST	62492	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:13.308553934 CEST	61849	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:13.316909075 CEST	53	62492	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:13.316926956 CEST	53	61849	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:15.229654074 CEST	50485	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:15.229654074 CEST	55209	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:15.237401962 CEST	53	55209	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:15.237847090 CEST	53	50485	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:17.460302114 CEST	53	51527	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:19.381901026 CEST	51795	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:19.382160902 CEST	60207	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:19.389239073 CEST	53	51795	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:19.389285088 CEST	53	60207	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:22.478502989 CEST	52543	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:22.479136944 CEST	61482	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:22.485966921 CEST	53	52543	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:22.487054110 CEST	53	61482	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:23.040539980 CEST	53	55068	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:23.127357960 CEST	53	60776	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:23.172267914 CEST	64029	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:23.172825098 CEST	61663	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:23.179905891 CEST	53	64029	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:23.181611061 CEST	53	61663	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:24.790188074 CEST	53	60764	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:25.734240055 CEST	62115	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:25.734549046 CEST	54950	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:25.742964029 CEST	53	62115	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:25.743415117 CEST	53	54950	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:25.758152008 CEST	53	57232	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:26.718822002 CEST	50164	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:26.719407082 CEST	49246	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:26.726219893 CEST	53	50164	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:26.726710081 CEST	53	49246	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:26.739746094 CEST	53899	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:26.740031004 CEST	50976	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:26.746243954 CEST	53	62707	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:26.747116089 CEST	53	53899	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:26.748781919 CEST	53	50976	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:26.749454975 CEST	53	62411	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:27.134192944 CEST	51322	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:27.134428978 CEST	49409	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:27.142709017 CEST	53	49409	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:27.142779112 CEST	53	51322	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:27.491024971 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 15:45:29.648941040 CEST	53	58439	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:29.663182974 CEST	60295	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:29.663641930 CEST	49508	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:29.673064947 CEST	53	60295	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:29.674005032 CEST	53	49508	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:30.003007889 CEST	52744	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:30.003009081 CEST	65533	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:30.010333061 CEST	53	52744	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:30.010349989 CEST	53	65533	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:33.638396025 CEST	62398	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:33.638540030 CEST	54637	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:33.646627903 CEST	53	62398	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:33.646997929 CEST	53	54637	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:42.703330040 CEST	64872	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:42.703330040 CEST	52939	53	192.168.2.4	1.1.1.1
Oct 24, 2024 15:45:42.710745096 CEST	53	64872	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:42.711561918 CEST	53	52939	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:44.133801937 CEST	53	51359	1.1.1.1	192.168.2.4
Oct 24, 2024 15:45:49.428322077 CEST	53	50572	1.1.1.1	192.168.2.4
Oct 24, 2024 15:46:11.371862888 CEST	53	54631	1.1.1.1	192.168.2.4
Oct 24, 2024 15:46:11.388499975 CEST	53	57681	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 15:45:13.308124065 CEST	192.168.2.4	1.1.1.1	0xfc23	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:13.308553934 CEST	192.168.2.4	1.1.1.1	0xb266	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:15.229654074 CEST	192.168.2.4	1.1.1.1	0xa0d3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:15.229654074 CEST	192.168.2.4	1.1.1.1	0xc8fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:19.381901026 CEST	192.168.2.4	1.1.1.1	0xea6d	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:19.382160902 CEST	192.168.2.4	1.1.1.1	0x26e2	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:22.478502989 CEST	192.168.2.4	1.1.1.1	0x680a	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:22.479136944 CEST	192.168.2.4	1.1.1.1	0x317b	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:23.172267914 CEST	192.168.2.4	1.1.1.1	0x79f3	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:23.172825098 CEST	192.168.2.4	1.1.1.1	0x2368	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:25.734240055 CEST	192.168.2.4	1.1.1.1	0xbeb0	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:25.734549046 CEST	192.168.2.4	1.1.1.1	0x6211	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:26.718822002 CEST	192.168.2.4	1.1.1.1	0x735c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:26.719407082 CEST	192.168.2.4	1.1.1.1	0xa082	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:26.739746094 CEST	192.168.2.4	1.1.1.1	0x1161	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:26.740031004 CEST	192.168.2.4	1.1.1.1	0xcac4	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:27.134192944 CEST	192.168.2.4	1.1.1.1	0xa7e	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:27.134428978 CEST	192.168.2.4	1.1.1.1	0xbba5	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:29.663182974 CEST	192.168.2.4	1.1.1.1	0x5d59	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:29.663641930 CEST	192.168.2.4	1.1.1.1	0x1044	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:30.003007889 CEST	192.168.2.4	1.1.1.1	0x67	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:30.003009081 CEST	192.168.2.4	1.1.1.1	0x710d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:33.638396025 CEST	192.168.2.4	1.1.1.1	0x4fcb	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:33.638540030 CEST	192.168.2.4	1.1.1.1	0xf1a0	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	65	IN (0x0001)	false
Oct 24, 2024 15:45:42.703330040 CEST	192.168.2.4	1.1.1.1	0xd72b	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:42.703330040 CEST	192.168.2.4	1.1.1.1	0x5c42	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 15:45:13.316909075 CEST	1.1.1.1	192.168.2.4	0xfc23	No error (0)	drive.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:15.237401962 CEST	1.1.1.1	192.168.2.4	0xc8fa	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 15:45:15.237847090 CEST	1.1.1.1	192.168.2.4	0xa0d3	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:19.389239073 CEST	1.1.1.1	192.168.2.4	0xea6d	No error (0)	drive.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:22.485966921 CEST	1.1.1.1	192.168.2.4	0x680a	No error (0)	play.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:23.179905891 CEST	1.1.1.1	192.168.2.4	0x79f3	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:23.179905891 CEST	1.1.1.1	192.168.2.4	0x79f3	No error (0)	plus.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:23.181611061 CEST	1.1.1.1	192.168.2.4	0x2368	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:25.742964029 CEST	1.1.1.1	192.168.2.4	0xbeb0	No error (0)	blobcomments-pa.clients6.google.com		142.250.185.234	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:26.126394987 CEST	1.1.1.1	192.168.2.4	0xc67a	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:26.126394987 CEST	1.1.1.1	192.168.2.4	0xc67a	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:26.726219893 CEST	1.1.1.1	192.168.2.4	0x735c	No error (0)	play.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:26.747116089 CEST	1.1.1.1	192.168.2.4	0x1161	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:26.747116089 CEST	1.1.1.1	192.168.2.4	0x1161	No error (0)	plus.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:26.748781919 CEST	1.1.1.1	192.168.2.4	0xcac4	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:27.142709017 CEST	1.1.1.1	192.168.2.4	0xbba5	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:27.142779112 CEST	1.1.1.1	192.168.2.4	0xa7e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:27.142779112 CEST	1.1.1.1	192.168.2.4	0xa7e	No error (0)	plus.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:29.673064947 CEST	1.1.1.1	192.168.2.4	0x5d59	No error (0)	blobcomments-pa.clients6.google.com		172.217.18.106	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:30.010333061 CEST	1.1.1.1	192.168.2.4	0x67	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:30.010349989 CEST	1.1.1.1	192.168.2.4	0x710d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 15:45:33.646627903 CEST	1.1.1.1	192.168.2.4	0x4fcb	No error (0)	peoplestackwebexperiments-pa.clients6.google.com		142.250.185.106	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:42.710745096 CEST	1.1.1.1	192.168.2.4	0xd72b	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:42.710745096 CEST	1.1.1.1	192.168.2.4	0xd72b	No error (0)	www3.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:42.711561918 CEST	1.1.1.1	192.168.2.4	0x5c42	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:44.553039074 CEST	1.1.1.1	192.168.2.4	0xa912	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:44.553039074 CEST	1.1.1.1	192.168.2.4	0xa912	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:45:54.601840019 CEST	1.1.1.1	192.168.2.4	0xd173	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:45:54.601840019 CEST	1.1.1.1	192.168.2.4	0xd173	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:46:05.307550907 CEST	1.1.1.1	192.168.2.4	0xcf65	No error (0)	shed.dual-low.s-part-0023.t-0009.t-msedge.net	s-part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:46:05.307550907 CEST	1.1.1.1	192.168.2.4	0xcf65	No error (0)	s-part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Oct 24, 2024 15:46:25.142579079 CEST	1.1.1.1	192.168.2.4	0xee19	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:46:25.142579079 CEST	1.1.1.1	192.168.2.4	0xee19	No error (0)	dual.s-part-0036.t-0009.fb-t-msedge.net	s-part-0036.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 15:46:25.142579079 CEST	1.1.1.1	192.168.2.4	0xee19	No error (0)	s-part-0036.t-0009.fb-t-msedge.net		13.107.253.64	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

fs.microsoft.com

https:

play.google.com

apis.google.com

www.google.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:14 UTC	836	OUT	GET /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 13:45:14 UTC	985	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:14 GMT Location: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/ P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec; expires=Fri, 25-Apr-2025 13:45:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:14 UTC	282	IN	Data Raw: 31 31 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 2f 31 36 30 66 67 51 2d 47 73 53 35 68 30 76 56 6e 38 67 66 71 66 77 43 67 63 31 61 55 74 31 66 54 33 2f 22 3e 68 Data Ascii: 113<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/">h
2024-10-24 13:45:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:14 UTC	1034	OUT	GET /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/ HTTP/1.1 Host: drive.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:15 UTC	956	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:15 GMT Location: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit Content-Security-Policy: script-src 'report-sample' 'nonce-WJHJKGNvV0RVi_uHR1mcIw' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:15 UTC	286	IN	Data Raw: 31 31 37 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 2f 31 36 30 66 67 51 2d 47 73 53 35 68 30 76 56 6e 38 67 66 71 66 77 43 67 63 31 61 55 74 31 66 54 33 2f 65 64 69 Data Ascii: 117<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edi
2024-10-24 13:45:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 13:45:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=10773 Date: Thu, 24 Oct 2024 13:45:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:16 UTC	1038	OUT	GET /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit HTTP/1.1 Host: drive.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:17 UTC	953	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:17 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: script-src 'report-sample' 'nonce-dYDzEYQd2Vvs2A7QmmsOzA' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:17 UTC	425	IN	Data Raw: 34 32 62 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 64 59 44 7a 45 59 51 64 32 56 76 73 32 41 37 51 6d 6d 73 4f 7a 41 22 3e 20 77 69 6e 64 6f 77 5b 27 5f 44 52 49 56 45 5f 56 49 45 57 45 52 5f 63 74 69 6d 69 6e 67 27 5d 3d 7b 7d 3b 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 64 59 44 7a 45 59 51 64 32 56 76 73 32 41 37 51 6d 6d 73 4f 7a 41 22 3e 20 77 69 6e 64 6f 77 5b 27 5f 44 52 49 56 45 5f 56 49 45 57 45 52 5f 63 74 69 6d 69 6e 67 27 5d 5b 27 74 66 73 27 5d 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 20 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 69 64 3d 22 74 65 78 6d 65 78 2d 74 68 75 6d 62 22 20 72 65 6c 3d 22 70 Data Ascii: 42b7<!DOCTYPE html><html><head><script nonce="dYDzEYQd2Vvs2A7QmmsOzA"> window['_DRIVE_VIEWER_ctiming']={}; </script><script nonce="dYDzEYQd2Vvs2A7QmmsOzA"> window['_DRIVE_VIEWER_ctiming']['tfs']=performance.now(); </script><link id="texmex-thumb" rel="p
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 30 30 2d 72 77 2d 76 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 3b 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 53 4d 6d 32 71 59 67 47 57 34 50 6c 7a 49 48 34 79 79 70 62 72 77 22 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6b Data Ascii: 00-rw-v1"><meta name="google" content="notranslate"><meta http-equiv="X-UA-Compatible" content="IE=edge;"><style nonce="SMm2qYgGW4PlzIH4yypbrw">@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOk
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6b 43 6e 71 45 75 39 32 46 72 31 4d 75 35 31 78 47 49 7a 49 46 4b 77 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 42 46 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 Data Ascii: :italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+2
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 53 55 35 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 Data Ascii: 18/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 Data Ascii: :'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weig
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 Data Ascii: CnqEu92Fr1Mu4mxK.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:norma
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 Data Ascii: +0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02F
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b Data Ascii: nt-style:normal;font-weight:700;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 44 52 49 56 45 5f 56 49 45 57 45 52 5f 49 56 49 53 27 5d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3b 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 2e 20 4d 61 72 67 61 72 69 74 61 20 4d 61 72 6b 61 72 69 61 6e 2c 20 61 73 20 73 68 61 72 65 68 6f 6c 64 65 72 20 61 6c 20 53 74 61 72 2c 2e 70 64 66 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 6f 6f 67 6c 65 20 44 6f 63 73 22 3e 3c 6d 65 74 61 20 70 Data Ascii: DRIVE_VIEWER_IVIS'] = document.visibilityState; </script><meta property="og:title" content="I. Margarita Markarian, as shareholder al Star,.pdf"><meta property="og:type" content="article"><meta property="og:site_name" content="Google Docs"><meta p
2024-10-24 13:45:17 UTC	1378	IN	Data Raw: 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 51 76 6e 79 34 62 5c 22 5d 2c 5b 34 35 36 35 38 31 39 38 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 76 76 59 35 64 63 5c 22 5d 2c 5b 34 35 36 35 34 32 39 31 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 72 68 50 35 75 66 5c 22 5d 2c 5b 34 35 36 35 33 34 32 31 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 4b 32 43 37 6f 64 5c 22 5d 2c 5b 34 35 36 36 30 39 34 32 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 4b 64 47 59 70 62 5c 22 5d 2c 5b 34 35 36 35 37 32 36 33 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c Data Ascii: l,true,null,null,null,\"Qvny4b\"],[45658198,null,false,null,null,null,\"vvY5dc\"],[45654291,null,false,null,null,null,\"rhP5uf\"],[45653421,null,false,null,null,null,\"K2C7od\"],[45660942,null,false,null,null,null,\"KdGYpb\"],[45657263,null,false,null,nul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 13:45:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=10757 Date: Thu, 24 Oct 2024 13:45:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 13:45:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:18 UTC	1084	OUT	GET /drive-viewer/AKGpihabThmApgQYkpFXX_BzVDr-RKZ3HPHFPVHQoMHppnzBHBTdPGV8NLcxB_-ke_4_71XHUUTGub3hhHeAKKfohPNxAMNkL0-xz4Q=s1600-rw-v1 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/edit Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:19 UTC	858	IN	HTTP/1.1 200 OK Content-Type: image/webp Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp Content-Security-Policy: default-src 'none' Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: private, max-age=86400, no-transform Content-Disposition: inline;filename="I. Margarita Markarian, as shareholder al Star,.pdf.webp" Date: Thu, 24 Oct 2024 13:45:19 GMT Server: fife Content-Length: 14900 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:19 UTC	520	IN	Data Raw: 52 49 46 46 2c 3a 00 00 57 45 42 50 56 50 38 20 20 3a 00 00 70 46 02 9d 01 2a 00 04 2d 05 3e b5 5a aa 4f a7 25 24 23 21 54 38 88 e0 16 89 69 6e fb ee d0 60 a4 7e 1b ff fb d1 27 69 ea 7d 44 66 16 dd 07 ef 4d 4d ff 86 73 db fa f3 7f f4 be bd f3 0f f9 1f f0 9e 2b ff 7c ff 97 e2 8f 96 0f b4 e7 a7 91 3f 59 ff 0f cd 1f e6 1f 8a fd 25 ed 3f fa 7f d9 9f 1a fe 68 6a 11 e7 6d ed 10 03 fa a7 78 ae ad de 17 e9 33 c0 b2 82 1e 36 9a 98 13 70 0b 72 b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb b4 10 41 dc 30 20 7d 18 4c 0d 4b 83 b8 fa bb ac c9 ba 06 1c 0a 63 73 Data Ascii: RIFF,:WEBPVP8 :pF*->ZO%$#!T8in`~'i}DfMMs+\|?Y%?hjmx36pr3s>3s>3s>3s>3s>3s>3s>3s>3s>3A0 }LKcs
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: 81 50 e4 a4 04 98 89 69 7e 1e 1b 6f 22 90 47 94 8e 8c 6d ea 13 3a 39 75 e3 8d 9e ca 12 6d 44 d3 f4 46 d2 6d 17 b8 9b 3d b2 95 b6 90 94 f2 aa b4 fa 26 fd 43 7a 46 8b bf 47 8a 07 58 0d ef bf 91 f3 f7 b0 8a 19 9f 39 b8 ff 16 4e a0 db 48 da c0 96 2a 77 39 e0 8d ce 6a 0b e2 b4 88 da 1f 28 08 5e 9a 2f 42 e4 ac db c7 12 3b 52 c4 f8 a3 f4 31 76 dd 47 2b 33 43 a9 3d 95 2d 4c 05 2c da e2 b6 a8 ce 71 d0 95 b9 72 df d2 e2 66 9b a3 74 38 e1 e6 10 a7 f2 2f 85 e1 36 0c 70 ce 1b 93 2a 27 13 e8 19 90 d8 d9 c0 e5 af a2 7c 9c 7d ba 57 88 22 5c 9b 54 c2 62 42 a7 d2 dc ad cc fb 73 42 d1 69 f4 fa 32 f5 c4 db ee a4 f3 cb 44 c3 81 00 4a f8 b9 b3 a9 dc b0 ad d5 52 35 88 84 9a e5 e3 5e 50 34 e4 c9 35 ae 5b aa 70 4a c4 4c cb 97 49 35 97 17 4b 5e a0 f9 a0 49 46 46 b7 a0 28 e0 2b 2b Data Ascii: Pi~o"Gm:9umDFm=&CzFGX9NHw9j(^/B;R1vG+3C=-L,qrft8/6p'\|}W"\TbBsBi2DJR5^P45[pJLI5K^IFF(++
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: 0d cc 1f 2c 43 09 b2 ea 18 92 46 d0 9e 82 26 7e a0 66 38 51 65 d5 68 4c 19 cb a8 06 b2 1e f1 10 cf 12 43 b3 b8 a7 f9 01 c9 21 6a ab 2e a9 f6 0f 7a 8d 53 88 c9 92 ca 40 b9 79 52 c8 21 1b 61 4e 61 7a c0 ce 16 e5 6e 68 3c 0b 03 df 30 bd a1 d1 01 7a 6b a4 19 42 06 1f 6e 02 1d 6b 17 c8 da 60 27 a3 8e 21 9d 64 1d 85 c8 82 d8 c6 f7 df a2 04 cb 9f 3e b7 9e 47 eb 0f d9 f1 8c cd 16 02 e7 ed d2 ad 2d 4e e9 cb ca 2d cc fb 73 63 9b b4 ca 61 3d 7a 8c 17 01 b1 40 b1 d0 fe c5 83 2b 39 80 03 51 79 f6 77 f0 7d 26 85 13 81 ce bc e1 12 58 23 a8 57 12 57 7d e5 b4 c3 01 b5 cc 9b df 81 eb a0 a9 b1 61 93 8a 08 18 45 d9 9c 76 a9 7f 3f d6 69 b9 97 2b 63 f7 a2 bf d0 1a 25 6c 01 5e 64 ee 45 58 12 9b 0a 01 6e 56 e6 dc fd ba c2 32 f5 36 14 f0 65 08 cd 59 73 aa 7d b9 fb 73 b5 c0 09 b2 Data Ascii: ,CF&~f8QehLC!j.zS@yR!aNaznh<0zkBnk`'!d>G-N-sca=z@+9Qyw}&X#WW}aEv?i+c%l^dEXnV26eYs}s
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: b2 a6 e9 cb 8c 3a cc fb 73 3e ec 5c bd 46 c1 59 00 b9 6e e6 f5 43 4f 86 fc 3a cc fb 73 3e dc cf b7 25 91 8a df 2a 97 17 ac 23 43 01 e0 df ad f1 ba 72 e2 f2 77 40 b8 bc d0 af 95 27 f7 cb a7 2e 2f 26 40 de 81 71 3f f8 52 6f 41 54 6c 33 3f 30 8c cf 23 b5 44 4c a0 12 4d 8f be 5d 39 71 79 9f 6d 16 da 59 18 21 bc 9d ce 5c 5f 0b 4d 72 50 0b 72 b8 8e dc dc b3 08 cd 14 ee 9c b8 bc cf b7 33 d5 e3 cd d3 70 ce 93 79 b0 a7 86 bd 92 75 28 05 b7 51 09 03 c5 01 6e 76 76 e6 7a fe 62 f3 3e da 2d 84 a7 63 19 a2 9d 2d 64 d3 c1 13 dd b9 5b 93 cd c2 e1 98 41 08 d4 14 e9 6a 40 dd 39 71 73 ed bf 6a 23 90 c1 9f 15 ff ed cc fb 01 56 27 5b 83 48 e2 b4 14 df bc 4a 5c b4 e9 ca 74 5e d6 e6 7d b4 1d 7d ba 72 fe 40 dc c8 46 e9 cb 8b cd 15 82 32 f5 83 36 15 a9 26 12 f2 67 50 2a 22 05 28 Data Ascii: :s>\FYnCO:s>%#Crw@'./&@q?RoATl3?0#DLM]9qymY!\_MrPr3pyu(Qnvvzb>-c-d[Aj@9qsj#V'[HJ\t^}}r@F26&gP"(
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: 67 db 99 f6 e6 7d b9 9f 6e 67 db 99 f6 e6 7d b9 9f 6e 67 db 99 f6 e6 7d b9 9f 6e 67 db 99 f6 e6 7a 40 00 fe ff 53 08 00 00 00 00 00 00 00 00 00 15 73 be c8 66 22 16 a2 91 a1 ba 64 39 fe f4 12 8a d9 59 8b 68 34 36 5c 48 1d b5 df 52 c6 84 b3 9d 94 fb c1 10 4a 14 8e 2f 82 1b fc 39 fb 48 ba a6 7a b6 21 2c 05 32 be 3d 9f 1c 36 69 69 4b b5 32 d1 60 6d 43 6c 62 6f c3 b1 0c 25 63 9f 40 92 94 30 e4 3b 01 a5 a4 62 3c be 10 3e 15 83 4c 9a d4 c2 3b b1 8f d9 48 0e 96 f4 ca c3 59 e8 fc 17 8f 37 20 44 f1 e4 10 18 a3 5a 8e 23 73 41 ee 8e 10 c9 7b b5 7a 64 28 cb f5 30 e0 8f 0c 2b 02 19 33 ac 70 02 be 0b 3f 7f 27 60 04 a1 64 cf c1 d8 61 48 6b 31 55 0a 3d 93 f2 a3 34 8e a1 09 29 66 83 c5 61 7a 2b 20 aa 3a 5c 1e d8 65 04 28 72 ce 64 10 79 fa e5 ed bc 6c ef 9a d1 0a 38 d6 55 Data Ascii: g}ng}ng}ngz@Ssf"d9Yh46\HRJ/9Hz!,2=6iiK2`mClbo%c@0;b<>L;HY7 DZ#sA{zd(0+3p?'`daHk1U=4)faz+ :\e(rdyl8U
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: 46 f5 61 34 5a 18 96 d3 fd 42 b2 d0 c2 12 c6 cb 22 dd a4 1c df b5 64 49 94 1d 6c 85 d8 cf 01 fa f6 b0 18 92 80 12 31 25 38 21 36 8c 71 8b e3 02 01 bc de 5f c9 90 e1 bf c6 bf c9 16 c5 d7 c3 99 87 71 c3 15 05 b1 af 09 61 e2 bf a5 97 f3 8d ed 61 fb 1a 5a 1d bd 46 b1 52 a6 47 24 75 bd 08 9c d2 5c 8a 2c 16 7c d3 ab 8a 49 da 66 16 3d b7 46 09 98 6a 15 72 12 30 a6 34 7c 47 74 20 eb a3 8b b2 a3 ff 81 a9 71 2e 05 f4 fd c0 83 cd 2d 3e 08 7a 47 f7 c7 35 3c a4 43 ea 10 ea 41 d2 70 85 d4 33 74 f9 2c 22 86 07 22 e6 aa 4b 2a bd 2c 4f 81 5f b4 db ce 6c 36 29 18 d0 01 b6 df c4 89 eb 3f 6b e3 6e b9 51 d0 09 be 88 5b 42 2d 78 70 d1 f9 32 e1 8d 62 64 42 08 d0 9e be 0e 1c 5d 98 1a c9 b3 9f 2b 9b af f0 17 bc 66 fe f1 70 9c 16 c1 ae cc 06 b5 1a a6 7e 82 92 1b 6d a1 0b 02 27 36 Data Ascii: Fa4ZB"dIl1%8!6q_qaaZFRG$u\,\|If=Fjr04\|Gt q.->zG5<CAp3t,""K*,O_l6)?knQ[B-xp2bdB]+fp~m'6
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: ee 06 ed 24 32 38 9d 48 c0 c2 87 69 a5 b7 71 57 a5 0d 3d 37 00 29 86 56 bb 56 1a 6d b3 33 56 57 71 25 52 30 cf f7 a8 ed 5f ee f3 08 87 d3 ba 9d 81 29 15 c4 5d 71 12 67 63 a7 31 19 b2 1c 77 ca 39 86 f4 c1 79 ba 5e ba 3f 59 9f 75 e3 04 b3 15 e0 ec 25 64 a2 fb 10 a2 51 48 6c ea 68 f5 88 ef 43 dd fb 86 49 da b4 f0 0a 32 80 b8 d1 62 67 28 5d ef 33 c2 5f ad 0f 53 e4 4f 4b 82 bc 7d 44 e5 66 2b 15 13 e7 2c 91 01 ea ae 6f 9c 01 43 3f 04 17 2a 4b 41 93 1e 8f 8c 8b 4b 59 2d 4d b2 6a ce 1b 3c 93 28 17 31 c0 4d 10 a8 6f 34 5b 03 0f 4c 81 aa 21 ec dd 73 19 a7 67 a2 95 11 b1 41 ed 95 b5 12 5c 34 aa 0b f1 55 62 90 5e f9 f1 4d 90 ea 46 b0 80 8b e7 93 fd 78 11 84 b3 44 0d 9f d7 73 67 17 f9 c0 8f f4 15 3f 84 07 58 34 fc 9c 1c ba bc 41 24 3b 71 5b cc 0a 86 8d 23 9f 9e 2d 83 Data Ascii: $28HiqW=7)VVm3VWq%R0_)]qgc1w9y^?Yu%dQHlhCI2bg(]3_SOK}Df+,oC?*KAKY-Mj<(1Mo4[L!sgA\4Ub^MFxDsg?X4A$;q[#-
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: 71 4e be 85 da c1 6b a3 a0 1a 7e 8e fc aa 16 2c b6 84 66 5a a6 b7 31 ce 59 b7 d4 c9 ef 5d 8f 21 cb 7b db 5a 05 b9 04 b8 44 ce d5 5c 27 a7 46 9b e3 9a 4f 14 1c 48 7f 70 e1 4d 1a 5e 60 e5 48 2d f8 85 e8 2a 35 34 66 e1 bd 2f ec bf dd c9 4b 9a ce 6e a5 b3 29 8d 65 f8 2b 26 1f 6a cf b8 16 09 b7 88 b3 32 f4 25 90 13 ec 43 93 ba 93 a9 20 7e 14 01 ff 84 ea 60 d5 09 17 46 a7 1b 0e 4c e4 3c d8 54 d4 f6 8d b9 7a 2a 1b 68 39 5f 4e 64 a9 fd aa ef 0a ea 21 94 24 3d 17 99 d3 48 2c e6 6c eb da 5a b4 0c 19 c2 ae 15 4a 77 2d ac 49 fd e6 6f b0 2d 67 84 7e dd d1 6c 77 36 a8 fb 42 13 47 b4 83 ce 80 1c 20 65 37 c3 1f b1 2d 17 f8 d9 4f 1b 51 3d e4 d7 66 0c 00 f2 db a8 93 7c 25 28 af 5a c3 9d 79 36 5d 32 55 96 e2 64 2c 94 7e 4a 36 bd 2f 11 da d4 f0 f7 28 ed 6f e8 e7 11 51 41 8d Data Ascii: qNk~,fZ1Y]!{ZD\'FOHpM^`H-54f/Kn)e+&j2%C ~`FL<Tzh9_Nd!$=H,lZJw-Io-g~lw6BG e7-OQ=f\|%(Zy6]2Ud,~J6/(oQA
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: f3 ea 10 ff c1 06 96 ae 5e 98 fa 50 3e 3e de 6c 54 bc 3b 67 e0 9a 0f 44 6d 28 74 ff 38 9c 9e da 02 d8 c6 89 93 44 64 d5 fe 1f 58 9f 2f 00 1c 02 31 92 4f b9 cd ee 22 72 78 ce d8 4c 92 cc bc 78 2f 4e 8d 1b 26 e9 da ec d9 75 42 fa 91 21 1a f5 20 0e 59 f1 8f 79 0e 2b 7e 80 28 e9 2a 20 29 92 53 f4 23 a0 9d 9b 57 04 b5 0c 92 1c c0 f9 0d b3 6c da 90 4b 98 b4 cb 7f f4 8b 2c ca 65 e6 ab 6c 6a b5 38 5c e8 a6 be 25 00 ff 17 b9 1f 63 4b 79 ba 7c e3 d4 0a 4b 5b 38 cf 64 a2 fc 83 dc 90 36 ef f2 2b e0 7a 8a 1d 98 23 aa 5b 4c ca 2b 00 4d f6 24 9e 57 5d 84 18 4b dc 1e 76 37 8b 03 4c 48 c1 5f 09 18 0d 3d fa 09 37 0a a7 3b 8b c4 2a d6 75 ef 12 ab 97 65 ff 06 d1 f3 29 62 1f b0 8a c0 30 f9 df e5 8a 45 de d5 0b 9f 5f 13 fc 35 4e c4 c5 c6 70 de 7e f7 6f 2f 49 90 c3 14 73 93 bf Data Ascii: ^P>>lT;gDm(t8DdX/1O"rxLx/N&uB! Yy+~(* )S#WlK,elj8\%cKy\|K[8d6+z#[L+M$W]Kv7LH_=7;*ue)b0E_5Np~o/Is
2024-10-24 13:45:19 UTC	1378	IN	Data Raw: d4 a9 45 60 6a a9 bf 35 dd 8a d5 9f ae f5 5d c1 4a 7c 18 68 99 05 99 06 f8 44 7a 27 bc 43 34 22 44 8f 5b bb 25 0c c7 6e c3 15 1b a5 15 ec bf b7 cc db 67 9e 68 e3 2e 36 12 6d ba 24 0a cc 8d 9a f2 e5 c9 31 5c 2e 4b 50 b7 61 f3 73 6c 09 e3 e9 14 25 08 81 82 7b de be 20 db 75 28 e9 b9 02 8b e2 e8 f4 b6 05 fe 82 a0 02 54 42 d7 59 2e aa 33 d3 0c c8 27 8d 86 c5 fa 0d e6 fc ff d9 44 51 84 2f b3 bd af ef 5d 60 a9 f8 c3 a8 ed 85 a9 58 fc 63 46 f0 da 42 3b 3f 41 fa f9 7c a4 af cc ed a8 08 c1 f1 17 62 ca 37 52 bf 53 2c 42 91 61 52 c6 97 ba 14 e6 aa bb 0d 54 f6 f0 79 45 fe 89 b5 07 7b a4 22 eb c8 ca 3a ca 0c 3a 93 97 39 25 cc 9f 5c 80 aa 1c 8e e1 a0 69 1a c5 d5 2a 9a be 72 bd a1 00 e5 65 0c d3 71 32 2a 18 26 93 aa 1d f9 5f d9 b9 b0 3e b9 05 d3 08 65 c6 4d 88 19 4c f9 Data Ascii: E`j5]J\|hDz'C4"D[%ngh.6m$1\.KPasl%{ u(TBY.3'DQ/]`XcFB;?A\|b7RS,BaRTyE{"::9%\ireq2&_>eML

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49753	142.250.186.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:20 UTC	762	OUT	GET /drive-viewer/AKGpihabThmApgQYkpFXX_BzVDr-RKZ3HPHFPVHQoMHppnzBHBTdPGV8NLcxB_-ke_4_71XHUUTGub3hhHeAKKfohPNxAMNkL0-xz4Q=s1600-rw-v1 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:20 UTC	858	IN	HTTP/1.1 200 OK Content-Type: image/webp Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp Content-Security-Policy: default-src 'none' Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: private, max-age=86400, no-transform Content-Disposition: inline;filename="I. Margarita Markarian, as shareholder al Star,.pdf.webp" Date: Thu, 24 Oct 2024 13:45:20 GMT Server: fife Content-Length: 14900 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:20 UTC	520	IN	Data Raw: 52 49 46 46 2c 3a 00 00 57 45 42 50 56 50 38 20 20 3a 00 00 70 46 02 9d 01 2a 00 04 2d 05 3e b5 5a aa 4f a7 25 24 23 21 54 38 88 e0 16 89 69 6e fb ee d0 60 a4 7e 1b ff fb d1 27 69 ea 7d 44 66 16 dd 07 ef 4d 4d ff 86 73 db fa f3 7f f4 be bd f3 0f f9 1f f0 9e 2b ff 7c ff 97 e2 8f 96 0f b4 e7 a7 91 3f 59 ff 0f cd 1f e6 1f 8a fd 25 ed 3f fa 7f d9 9f 1a fe 68 6a 11 e7 6d ed 10 03 fa a7 78 ae ad de 17 e9 33 c0 b2 82 1e 36 9a 98 13 70 0b 72 b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb 73 3e dc cf b7 33 ed cc fb b4 10 41 dc 30 20 7d 18 4c 0d 4b 83 b8 fa bb ac c9 ba 06 1c 0a 63 73 Data Ascii: RIFF,:WEBPVP8 :pF*->ZO%$#!T8in`~'i}DfMMs+\|?Y%?hjmx36pr3s>3s>3s>3s>3s>3s>3s>3s>3s>3A0 }LKcs
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: 81 50 e4 a4 04 98 89 69 7e 1e 1b 6f 22 90 47 94 8e 8c 6d ea 13 3a 39 75 e3 8d 9e ca 12 6d 44 d3 f4 46 d2 6d 17 b8 9b 3d b2 95 b6 90 94 f2 aa b4 fa 26 fd 43 7a 46 8b bf 47 8a 07 58 0d ef bf 91 f3 f7 b0 8a 19 9f 39 b8 ff 16 4e a0 db 48 da c0 96 2a 77 39 e0 8d ce 6a 0b e2 b4 88 da 1f 28 08 5e 9a 2f 42 e4 ac db c7 12 3b 52 c4 f8 a3 f4 31 76 dd 47 2b 33 43 a9 3d 95 2d 4c 05 2c da e2 b6 a8 ce 71 d0 95 b9 72 df d2 e2 66 9b a3 74 38 e1 e6 10 a7 f2 2f 85 e1 36 0c 70 ce 1b 93 2a 27 13 e8 19 90 d8 d9 c0 e5 af a2 7c 9c 7d ba 57 88 22 5c 9b 54 c2 62 42 a7 d2 dc ad cc fb 73 42 d1 69 f4 fa 32 f5 c4 db ee a4 f3 cb 44 c3 81 00 4a f8 b9 b3 a9 dc b0 ad d5 52 35 88 84 9a e5 e3 5e 50 34 e4 c9 35 ae 5b aa 70 4a c4 4c cb 97 49 35 97 17 4b 5e a0 f9 a0 49 46 46 b7 a0 28 e0 2b 2b Data Ascii: Pi~o"Gm:9umDFm=&CzFGX9NHw9j(^/B;R1vG+3C=-L,qrft8/6p'\|}W"\TbBsBi2DJR5^P45[pJLI5K^IFF(++
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: 0d cc 1f 2c 43 09 b2 ea 18 92 46 d0 9e 82 26 7e a0 66 38 51 65 d5 68 4c 19 cb a8 06 b2 1e f1 10 cf 12 43 b3 b8 a7 f9 01 c9 21 6a ab 2e a9 f6 0f 7a 8d 53 88 c9 92 ca 40 b9 79 52 c8 21 1b 61 4e 61 7a c0 ce 16 e5 6e 68 3c 0b 03 df 30 bd a1 d1 01 7a 6b a4 19 42 06 1f 6e 02 1d 6b 17 c8 da 60 27 a3 8e 21 9d 64 1d 85 c8 82 d8 c6 f7 df a2 04 cb 9f 3e b7 9e 47 eb 0f d9 f1 8c cd 16 02 e7 ed d2 ad 2d 4e e9 cb ca 2d cc fb 73 63 9b b4 ca 61 3d 7a 8c 17 01 b1 40 b1 d0 fe c5 83 2b 39 80 03 51 79 f6 77 f0 7d 26 85 13 81 ce bc e1 12 58 23 a8 57 12 57 7d e5 b4 c3 01 b5 cc 9b df 81 eb a0 a9 b1 61 93 8a 08 18 45 d9 9c 76 a9 7f 3f d6 69 b9 97 2b 63 f7 a2 bf d0 1a 25 6c 01 5e 64 ee 45 58 12 9b 0a 01 6e 56 e6 dc fd ba c2 32 f5 36 14 f0 65 08 cd 59 73 aa 7d b9 fb 73 b5 c0 09 b2 Data Ascii: ,CF&~f8QehLC!j.zS@yR!aNaznh<0zkBnk`'!d>G-N-sca=z@+9Qyw}&X#WW}aEv?i+c%l^dEXnV26eYs}s
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: b2 a6 e9 cb 8c 3a cc fb 73 3e ec 5c bd 46 c1 59 00 b9 6e e6 f5 43 4f 86 fc 3a cc fb 73 3e dc cf b7 25 91 8a df 2a 97 17 ac 23 43 01 e0 df ad f1 ba 72 e2 f2 77 40 b8 bc d0 af 95 27 f7 cb a7 2e 2f 26 40 de 81 71 3f f8 52 6f 41 54 6c 33 3f 30 8c cf 23 b5 44 4c a0 12 4d 8f be 5d 39 71 79 9f 6d 16 da 59 18 21 bc 9d ce 5c 5f 0b 4d 72 50 0b 72 b8 8e dc dc b3 08 cd 14 ee 9c b8 bc cf b7 33 d5 e3 cd d3 70 ce 93 79 b0 a7 86 bd 92 75 28 05 b7 51 09 03 c5 01 6e 76 76 e6 7a fe 62 f3 3e da 2d 84 a7 63 19 a2 9d 2d 64 d3 c1 13 dd b9 5b 93 cd c2 e1 98 41 08 d4 14 e9 6a 40 dd 39 71 73 ed bf 6a 23 90 c1 9f 15 ff ed cc fb 01 56 27 5b 83 48 e2 b4 14 df bc 4a 5c b4 e9 ca 74 5e d6 e6 7d b4 1d 7d ba 72 fe 40 dc c8 46 e9 cb 8b cd 15 82 32 f5 83 36 15 a9 26 12 f2 67 50 2a 22 05 28 Data Ascii: :s>\FYnCO:s>%#Crw@'./&@q?RoATl3?0#DLM]9qymY!\_MrPr3pyu(Qnvvzb>-c-d[Aj@9qsj#V'[HJ\t^}}r@F26&gP"(
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: 67 db 99 f6 e6 7d b9 9f 6e 67 db 99 f6 e6 7d b9 9f 6e 67 db 99 f6 e6 7d b9 9f 6e 67 db 99 f6 e6 7a 40 00 fe ff 53 08 00 00 00 00 00 00 00 00 00 15 73 be c8 66 22 16 a2 91 a1 ba 64 39 fe f4 12 8a d9 59 8b 68 34 36 5c 48 1d b5 df 52 c6 84 b3 9d 94 fb c1 10 4a 14 8e 2f 82 1b fc 39 fb 48 ba a6 7a b6 21 2c 05 32 be 3d 9f 1c 36 69 69 4b b5 32 d1 60 6d 43 6c 62 6f c3 b1 0c 25 63 9f 40 92 94 30 e4 3b 01 a5 a4 62 3c be 10 3e 15 83 4c 9a d4 c2 3b b1 8f d9 48 0e 96 f4 ca c3 59 e8 fc 17 8f 37 20 44 f1 e4 10 18 a3 5a 8e 23 73 41 ee 8e 10 c9 7b b5 7a 64 28 cb f5 30 e0 8f 0c 2b 02 19 33 ac 70 02 be 0b 3f 7f 27 60 04 a1 64 cf c1 d8 61 48 6b 31 55 0a 3d 93 f2 a3 34 8e a1 09 29 66 83 c5 61 7a 2b 20 aa 3a 5c 1e d8 65 04 28 72 ce 64 10 79 fa e5 ed bc 6c ef 9a d1 0a 38 d6 55 Data Ascii: g}ng}ng}ngz@Ssf"d9Yh46\HRJ/9Hz!,2=6iiK2`mClbo%c@0;b<>L;HY7 DZ#sA{zd(0+3p?'`daHk1U=4)faz+ :\e(rdyl8U
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: 46 f5 61 34 5a 18 96 d3 fd 42 b2 d0 c2 12 c6 cb 22 dd a4 1c df b5 64 49 94 1d 6c 85 d8 cf 01 fa f6 b0 18 92 80 12 31 25 38 21 36 8c 71 8b e3 02 01 bc de 5f c9 90 e1 bf c6 bf c9 16 c5 d7 c3 99 87 71 c3 15 05 b1 af 09 61 e2 bf a5 97 f3 8d ed 61 fb 1a 5a 1d bd 46 b1 52 a6 47 24 75 bd 08 9c d2 5c 8a 2c 16 7c d3 ab 8a 49 da 66 16 3d b7 46 09 98 6a 15 72 12 30 a6 34 7c 47 74 20 eb a3 8b b2 a3 ff 81 a9 71 2e 05 f4 fd c0 83 cd 2d 3e 08 7a 47 f7 c7 35 3c a4 43 ea 10 ea 41 d2 70 85 d4 33 74 f9 2c 22 86 07 22 e6 aa 4b 2a bd 2c 4f 81 5f b4 db ce 6c 36 29 18 d0 01 b6 df c4 89 eb 3f 6b e3 6e b9 51 d0 09 be 88 5b 42 2d 78 70 d1 f9 32 e1 8d 62 64 42 08 d0 9e be 0e 1c 5d 98 1a c9 b3 9f 2b 9b af f0 17 bc 66 fe f1 70 9c 16 c1 ae cc 06 b5 1a a6 7e 82 92 1b 6d a1 0b 02 27 36 Data Ascii: Fa4ZB"dIl1%8!6q_qaaZFRG$u\,\|If=Fjr04\|Gt q.->zG5<CAp3t,""K*,O_l6)?knQ[B-xp2bdB]+fp~m'6
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: ee 06 ed 24 32 38 9d 48 c0 c2 87 69 a5 b7 71 57 a5 0d 3d 37 00 29 86 56 bb 56 1a 6d b3 33 56 57 71 25 52 30 cf f7 a8 ed 5f ee f3 08 87 d3 ba 9d 81 29 15 c4 5d 71 12 67 63 a7 31 19 b2 1c 77 ca 39 86 f4 c1 79 ba 5e ba 3f 59 9f 75 e3 04 b3 15 e0 ec 25 64 a2 fb 10 a2 51 48 6c ea 68 f5 88 ef 43 dd fb 86 49 da b4 f0 0a 32 80 b8 d1 62 67 28 5d ef 33 c2 5f ad 0f 53 e4 4f 4b 82 bc 7d 44 e5 66 2b 15 13 e7 2c 91 01 ea ae 6f 9c 01 43 3f 04 17 2a 4b 41 93 1e 8f 8c 8b 4b 59 2d 4d b2 6a ce 1b 3c 93 28 17 31 c0 4d 10 a8 6f 34 5b 03 0f 4c 81 aa 21 ec dd 73 19 a7 67 a2 95 11 b1 41 ed 95 b5 12 5c 34 aa 0b f1 55 62 90 5e f9 f1 4d 90 ea 46 b0 80 8b e7 93 fd 78 11 84 b3 44 0d 9f d7 73 67 17 f9 c0 8f f4 15 3f 84 07 58 34 fc 9c 1c ba bc 41 24 3b 71 5b cc 0a 86 8d 23 9f 9e 2d 83 Data Ascii: $28HiqW=7)VVm3VWq%R0_)]qgc1w9y^?Yu%dQHlhCI2bg(]3_SOK}Df+,oC?*KAKY-Mj<(1Mo4[L!sgA\4Ub^MFxDsg?X4A$;q[#-
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: 71 4e be 85 da c1 6b a3 a0 1a 7e 8e fc aa 16 2c b6 84 66 5a a6 b7 31 ce 59 b7 d4 c9 ef 5d 8f 21 cb 7b db 5a 05 b9 04 b8 44 ce d5 5c 27 a7 46 9b e3 9a 4f 14 1c 48 7f 70 e1 4d 1a 5e 60 e5 48 2d f8 85 e8 2a 35 34 66 e1 bd 2f ec bf dd c9 4b 9a ce 6e a5 b3 29 8d 65 f8 2b 26 1f 6a cf b8 16 09 b7 88 b3 32 f4 25 90 13 ec 43 93 ba 93 a9 20 7e 14 01 ff 84 ea 60 d5 09 17 46 a7 1b 0e 4c e4 3c d8 54 d4 f6 8d b9 7a 2a 1b 68 39 5f 4e 64 a9 fd aa ef 0a ea 21 94 24 3d 17 99 d3 48 2c e6 6c eb da 5a b4 0c 19 c2 ae 15 4a 77 2d ac 49 fd e6 6f b0 2d 67 84 7e dd d1 6c 77 36 a8 fb 42 13 47 b4 83 ce 80 1c 20 65 37 c3 1f b1 2d 17 f8 d9 4f 1b 51 3d e4 d7 66 0c 00 f2 db a8 93 7c 25 28 af 5a c3 9d 79 36 5d 32 55 96 e2 64 2c 94 7e 4a 36 bd 2f 11 da d4 f0 f7 28 ed 6f e8 e7 11 51 41 8d Data Ascii: qNk~,fZ1Y]!{ZD\'FOHpM^`H-54f/Kn)e+&j2%C ~`FL<Tzh9_Nd!$=H,lZJw-Io-g~lw6BG e7-OQ=f\|%(Zy6]2Ud,~J6/(oQA
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: f3 ea 10 ff c1 06 96 ae 5e 98 fa 50 3e 3e de 6c 54 bc 3b 67 e0 9a 0f 44 6d 28 74 ff 38 9c 9e da 02 d8 c6 89 93 44 64 d5 fe 1f 58 9f 2f 00 1c 02 31 92 4f b9 cd ee 22 72 78 ce d8 4c 92 cc bc 78 2f 4e 8d 1b 26 e9 da ec d9 75 42 fa 91 21 1a f5 20 0e 59 f1 8f 79 0e 2b 7e 80 28 e9 2a 20 29 92 53 f4 23 a0 9d 9b 57 04 b5 0c 92 1c c0 f9 0d b3 6c da 90 4b 98 b4 cb 7f f4 8b 2c ca 65 e6 ab 6c 6a b5 38 5c e8 a6 be 25 00 ff 17 b9 1f 63 4b 79 ba 7c e3 d4 0a 4b 5b 38 cf 64 a2 fc 83 dc 90 36 ef f2 2b e0 7a 8a 1d 98 23 aa 5b 4c ca 2b 00 4d f6 24 9e 57 5d 84 18 4b dc 1e 76 37 8b 03 4c 48 c1 5f 09 18 0d 3d fa 09 37 0a a7 3b 8b c4 2a d6 75 ef 12 ab 97 65 ff 06 d1 f3 29 62 1f b0 8a c0 30 f9 df e5 8a 45 de d5 0b 9f 5f 13 fc 35 4e c4 c5 c6 70 de 7e f7 6f 2f 49 90 c3 14 73 93 bf Data Ascii: ^P>>lT;gDm(t8DdX/1O"rxLx/N&uB! Yy+~(* )S#WlK,elj8\%cKy\|K[8d6+z#[L+M$W]Kv7LH_=7;*ue)b0E_5Np~o/Is
2024-10-24 13:45:20 UTC	1378	IN	Data Raw: d4 a9 45 60 6a a9 bf 35 dd 8a d5 9f ae f5 5d c1 4a 7c 18 68 99 05 99 06 f8 44 7a 27 bc 43 34 22 44 8f 5b bb 25 0c c7 6e c3 15 1b a5 15 ec bf b7 cc db 67 9e 68 e3 2e 36 12 6d ba 24 0a cc 8d 9a f2 e5 c9 31 5c 2e 4b 50 b7 61 f3 73 6c 09 e3 e9 14 25 08 81 82 7b de be 20 db 75 28 e9 b9 02 8b e2 e8 f4 b6 05 fe 82 a0 02 54 42 d7 59 2e aa 33 d3 0c c8 27 8d 86 c5 fa 0d e6 fc ff d9 44 51 84 2f b3 bd af ef 5d 60 a9 f8 c3 a8 ed 85 a9 58 fc 63 46 f0 da 42 3b 3f 41 fa f9 7c a4 af cc ed a8 08 c1 f1 17 62 ca 37 52 bf 53 2c 42 91 61 52 c6 97 ba 14 e6 aa bb 0d 54 f6 f0 79 45 fe 89 b5 07 7b a4 22 eb c8 ca 3a ca 0c 3a 93 97 39 25 cc 9f 5c 80 aa 1c 8e e1 a0 69 1a c5 d5 2a 9a be 72 bd a1 00 e5 65 0c d3 71 32 2a 18 26 93 aa 1d f9 5f d9 b9 b0 3e b9 05 d3 08 65 c6 4d 88 19 4c f9 Data Ascii: E`j5]J\|hDz'C4"D[%ngh.6m$1\.KPasl%{ u(TBY.3'DQ/]`XcFB;?A\|b7RS,BaRTyE{"::9%\ireq2&_>eML

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49757	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:23 UTC	969	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3799 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:23 UTC	3799	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 39 37 37 37 35 32 31 38 39 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 32 39 37 37 37 35 32 31 38 38 39 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 32 39 37 37 37 35 32 31 38 38 39 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c 31 2c 31 5d Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[4,0,0,0,0]]],189,[["1729777521890",null,null,null,null,null,null,"[[[null,null,1,1729777521889000,null,null,null,[[1729777521889000],null,1],null,716,null,1,1]
2024-10-24 13:45:23 UTC	938	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA; expires=Fri, 25-Apr-2025 13:45:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 24 Oct 2024 13:45:23 GMT Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49760	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:23 UTC	1025	OUT	GET /auth_warmup HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:24 UTC	1738	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:24 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveOsidBootstrap/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-kTGuyXaiX_M0WNK_2HH4NQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveOsidBootstrap/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveOsidBootstrap/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/DriveOsidBootstrap/web-reports?context=eJzjEtDikmJw15BicEqfwRoCxELcHF_mvdzBJjDjwgcHJdWk_ML4lKLMstSMkpKCxILM4tSistSieCMDIxNDA0NzPQOj-AIDAPygFqg" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49761	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:23 UTC	1146	OUT	GET /drivesharing/clientmodel?id=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:24 UTC	3344	IN	HTTP/1.1 302 Found Content-Type: application/binary X-Frame-Options: ALLOW-FROM https://drive.google.com Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Content-Security-Policy: frame-ancestors https://drive.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-hLRqOdDR0hfPvRI91s2J5w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /drivesharing/_/DriveShareDialogUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /drivesharing/_/DriveShareDialogUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /drivesharing/_/DriveShareDialogUi/cspreport Location: https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://drive.google.com/drivesharing/clientmodel?id%3D160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com&followup=https://drive.google.com/drivesharing/clientmodel?id%3D160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-drive/_/js/k=boq-drive.DriveShareDialogUi [TRUNCATED] Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Date: Thu, 24 Oct 2024 13:45:24 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49764	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:24 UTC	1013	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:24 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 07:13:26 GMT Expires: Fri, 24 Oct 2025 07:13:26 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 23518 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:24 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49765	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:24 UTC	1024	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=V4vXKR16RgoTYe5tX3dq1--LAXMJzQ3tutOh81-kxOQwBFUYWSpOHc5k7MU3zs5C24WDg7KoNP3CrEE_4bRxVJagOAolOzcyMUvqbzIlXNwcMLPIc7wt7wv9f8mQBe7fGXCzwnsEL0ZxEl8DOxh8Q8cHIUPM6Z1uVJiNZsGOtEC765rgVec
2024-10-24 13:45:24 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 208991 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 22 Oct 2024 18:10:07 GMT Expires: Wed, 22 Oct 2025 18:10:07 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 156917 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:24 UTC	462	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 7a 67 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 52 6e 3d 5f 2e 78 65 28 5f 2e 49 65 2c 22 72 77 22 2c 5f 2e 79 65 28 29 29 3b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 52 6e 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 54 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 52 6e 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 75 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.zg=(window.gapi\|\|{}).load;_.Rn=_.xe(_.Ie,"rw",_.ye());var Sn=function(a,b){(a=_.Rn[a])&&a.state<b&&(a.state=b)};var Tn=function(a){a=(a=_.Rn[a])?a.oid:void 0;if(a){var b=_.ue.getElementById(a);b&&b.parentNode
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 77 69 64 74 68 3a 22 2b 28 62 3f 62 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 57 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 79 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e Data Ascii: width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Wn=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 65 29 3b 5f 2e 58 6e 28 74 68 69 73 29 7d 3b 61 2e 6f 6e 43 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 56 6e 28 65 29 7d 7d 3b 0a 5f 2e 53 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 5a 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 Data Ascii: e);_.Xn(this)};a.onCreate=function(e){e=e.getIframeEl();e.style.cssText=_.Vn(e)}};_.Si=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.Zn=function(a,b)
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 65 2d 73 69 67 6e 69 6e 2d 22 29 29 7b 63 3d 63 2e 73 75 62 73 74 72 69 6e 67 28 31 34 29 3b 76 61 72 20 64 3d 61 5b 62 5d 2e 63 6f 6e 74 65 6e 74 3b 5f 2e 6c 6f 5b 63 5d 26 26 64 26 26 28 5f 2e 61 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 6c 6f 29 5f 2e 6c 6f 5b 65 5d 3e 30 26 26 28 62 3d 5f 2e 43 65 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 61 6f 5b 65 5d 3d 62 29 7d 5f 2e 6d 6f 3d 21 30 7d 65 3d 5f 2e 79 65 28 29 3b 5f 2e 41 65 28 5f 2e 61 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 6f 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b Data Ascii: e-signin-")){c=c.substring(14);var d=a[b].content;_.lo[c]&&d&&(_.ao[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.lo)_.lo[e]>0&&(b=_.Ce(a,e,""))&&(_.ao[e]=b)}_.mo=!0}e=_.ye();_.Ae(_.ao,e);return e};oo=function(a){var b;
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 2e 79 65 28 29 2c 63 3d 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 21 3d 30 2c 64 3d 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 5f 2e 75 6d 2e 63 61 6c 6c 28 44 6f 2c 68 29 3e 3d 30 7c 7c 63 26 26 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 21 3d 30 7c 7c 6b 3d 3d 3d 22 6e 75 6c 6c 22 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b Data Ascii: .ye(),c=a.nodeName.toLowerCase().indexOf("g:")!=0,d=a.attributes.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;_.um.call(Do,h)>=0\|\|c&&h.indexOf("data-")!=0\|\|k==="null"\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 73 68 28 22 2e 67 2d 22 2b 68 2c 22 67 5c 5c 3a 22 2b 68 29 7d 64 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2e 6a 6f 69 6e 28 22 2c 22 29 29 7d 65 6c 73 65 20 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 79 65 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 6e 3d 3d Data Ascii: sh(".g-"+h,"g\\:"+h)}d=a.querySelectorAll(e.join(","))}else d=a.getElementsByTagName("*");a=_.ye();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");n==
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 65 74 65 20 63 2e 64 6f 6e 74 63 6c 65 61 72 3b 76 61 72 20 6c 3b 66 3d 7b 7d 3b 76 61 72 20 6d 3d 6c 3d 61 3b 61 3d 3d 22 70 6c 75 73 22 26 26 63 2e 61 63 74 69 6f 6e 26 26 28 6c 3d 61 2b 22 5f 22 2b 63 2e 61 63 74 69 6f 6e 2c 6d 3d 61 2b 22 2f 22 2b 63 2e 61 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 54 65 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 79 6f 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 79 6f 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e Data Ascii: ete c.dontclear;var l;f={};var m=l=a;a=="plus"&&c.action&&(l=a+"_"+c.action,m=a+"/"+c.action);(l=_.Te("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in yo)f[n]=n+"/"+(c[n]\|\|yo[n])+"/";var n=_.
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 6f 73 74 3d 0a 31 3b 76 2e 61 74 74 72 69 62 75 74 65 73 3d 41 6f 3b 76 2e 64 6f 6e 74 63 6c 65 61 72 3d 21 6b 3b 68 3d 7b 7d 3b 68 2e 75 73 65 72 50 61 72 61 6d 73 3d 63 3b 68 2e 75 72 6c 3d 75 3b 68 2e 74 79 70 65 3d 61 3b 5f 2e 48 6f 28 61 2c 62 2c 63 2c 75 2c 76 2c 68 29 3b 62 3d 68 2e 69 64 3b 63 3d 5f 2e 79 65 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 52 6e 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 54 6f 28 61 2c 62 29 29 7d 7d 2c 55 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: ost=1;v.attributes=Ao;v.dontclear=!k;h={};h.userParams=c;h.url=u;h.type=a;_.Ho(a,b,c,u,v,h);b=h.id;c=_.ye();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Rn[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),To(a,b))}},Uo=function(a,b,
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 26 26 62 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3b 76 61 72 20 64 3d 63 3e 30 3f 6e 65 77 20 61 28 63 29 3a 6e 65 77 20 61 3b 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 3d 7b 54 69 6d 65 72 3a 61 2c 6c 6f 61 64 3a 64 7d 3b 69 66 28 62 29 7b 76 61 72 20 65 3d 62 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 65 3e 30 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 65 3e 30 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 Data Ascii: &&b.responseStart;var d=c>0?new a(c):new a;window.__gapi_jstiming__={Timer:a,load:d};if(b){var e=b.navigationStart;e>0&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;e>0&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt
2024-10-24 13:45:24 UTC	1378	IN	Data Raw: 6f 6d 65 2e 63 73 69 28 29 2e 74 72 61 6e 29 7d 63 61 74 63 68 28 70 29 7b 7d 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 3b 69 66 28 65 26 26 28 65 3d 65 2e 6c 6f 61 64 54 69 6d 65 73 29 26 26 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 28 29 29 29 7b 65 2e 77 61 73 46 65 74 63 68 65 64 56 69 61 53 70 64 79 26 26 28 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c Data Ascii: ome.csi().tran)}catch(p){}var e=window.chrome;if(e&&(e=e.loadTimes)&&typeof e==="function"&&(e=e())){e.wasFetchedViaSpdy&&(d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49767	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:25 UTC	999	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 904 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:25 UTC	904	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 39 37 37 37 35 32 32 35 33 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1729777522539",null,null,null,
2024-10-24 13:45:25 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:25 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49772	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:25 UTC	1323	OUT	GET /viewer2/prod-02/meta?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:25 UTC	2188	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:25 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-JrUIEDvV8XnIkrkoP_wo_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmJw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwcX-e93MEm0DBrzzsmJfWk_ML4xIKCYt2yzNTy1CLdtKL8vJLUvJR4IwMjE0MDQzM9A5P4AgMAcmMwMQ" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:25 UTC	656	IN	Data Raw: 32 38 39 0d 0a 29 5d 7d 27 0a 7b 22 70 61 67 65 73 22 3a 31 2c 22 6d 61 78 50 61 67 65 57 69 64 74 68 22 3a 33 32 30 30 2c 22 70 64 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 6f 63 2d 30 34 2d 33 73 2d 70 72 6f 64 2d 30 32 2d 61 70 70 73 2d 76 69 65 77 65 72 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 5c 2f 76 69 65 77 65 72 32 5c 2f 70 72 6f 64 2d 30 32 5c 2f 70 64 66 5c 2f 74 69 6a 72 33 66 6b 70 68 70 61 69 74 75 76 74 35 38 39 6b 30 6a 74 65 32 6e 31 74 75 71 67 37 5c 2f 76 64 61 6e 65 39 76 6b 6b 64 32 38 6e 6b 68 31 6f 6d 34 70 6b 6b 75 71 6a 6a 32 6b 67 32 67 6c 5c 2f 31 37 32 39 37 37 37 35 30 30 30 30 30 5c 2f 33 5c 2f 2a 5c 2f 41 50 7a 6e 7a 61 59 6c 52 56 4d 44 56 68 61 4e 46 75 4d 4c 46 79 31 62 4b 53 32 73 6d 56 2d 73 Data Ascii: 289)]}'{"pages":1,"maxPageWidth":3200,"pdf":"https:\/\/doc-04-3s-prod-02-apps-viewer.googleusercontent.com\/viewer2\/prod-02\/pdf\/tijr3fkphpaituvt589k0jte2n1tuqg7\/vdane9vkkd28nkh1om4pkkuqjj2kg2gl\/1729777500000\/3\/*\/APznzaYlRVMDVhaNFuMLFy1bKS2smV-s
2024-10-24 13:45:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49775	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:25 UTC	978	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 17916 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:25 UTC	16384	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 39 37 37 37 35 32 34 31 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1729777524121",null,null,null,
2024-10-24 13:45:25 UTC	1532	OUT	Data Raw: 34 31 32 33 36 2c 39 34 35 37 33 35 39 32 2c 39 34 35 37 33 36 30 38 2c 39 34 35 37 34 39 35 31 2c 39 34 35 37 34 39 36 37 2c 39 34 35 39 37 35 39 39 2c 39 34 35 39 37 36 30 37 2c 39 34 36 31 38 35 35 34 2c 39 34 36 31 38 35 37 30 2c 39 34 36 31 38 36 34 39 2c 39 34 36 31 38 36 36 35 2c 39 34 36 32 31 36 34 36 2c 39 34 36 32 31 36 36 32 2c 39 34 36 35 38 31 30 33 2c 39 34 36 35 38 31 31 39 2c 39 34 36 36 31 38 34 32 2c 39 34 36 36 31 38 35 30 2c 39 34 37 30 37 34 36 34 2c 39 34 37 30 37 34 37 32 2c 39 34 37 32 34 39 37 30 2c 39 34 37 32 34 39 38 36 2c 39 34 37 34 35 35 32 33 2c 39 34 37 34 35 35 33 31 2c 39 34 37 38 34 36 35 31 2c 39 34 37 38 34 36 35 39 2c 39 34 38 31 33 34 34 33 2c 39 34 38 31 33 34 35 31 2c 39 34 38 37 34 38 35 39 2c 39 34 38 37 34 38 Data Ascii: 41236,94573592,94573608,94574951,94574967,94597599,94597607,94618554,94618570,94618649,94618665,94621646,94621662,94658103,94658119,94661842,94661850,94707464,94707472,94724970,94724986,94745523,94745531,94784651,94784659,94813443,94813451,94874859,948748
2024-10-24 13:45:25 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:25 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49776	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:25 UTC	977	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 6023 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:25 UTC	6023	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 39 37 37 37 35 32 34 31 30 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1729777524103",null,null,null,
2024-10-24 13:45:25 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:25 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49778	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:26 UTC	977	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4485 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:26 UTC	4485	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 39 37 37 37 35 32 35 30 31 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1729777525019",null,null,null,
2024-10-24 13:45:26 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:26 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49783	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:26 UTC	1364	OUT	GET /viewer2/prod-02/img?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0&page=0&skiphighlight=true&w=800&webp=true HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:27 UTC	2046	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:27 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-r8gVc1GvXtDeOYou1lKOOg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmJw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQtwc3-e93MEmcOBRu6-SelJ-YXxiQUGxbllmanlqkW5aUX5eSWpeSryRgZGJoYGhmZ6BSXyBAQBDyi_i" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:27 UTC	2046	IN	Data Raw: 37 66 66 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 04 0b 08 02 00 00 00 fc de 5a 44 00 00 20 00 49 44 41 54 78 9c ec bd e9 93 25 b9 91 27 e6 8e 88 97 2f 33 eb e8 83 ec 8b cd 66 73 9a c3 9e 19 92 73 6a 67 a4 5d 49 bb fa 2c d3 3f a9 4f fa 0b 64 a6 0f 3b 2b 8d 99 cc 66 86 b3 73 88 43 2e 39 ec 83 6c b2 ef ee aa ae 2b 33 df 11 80 eb 83 03 1e 1e 00 02 11 ef e5 ab ea aa 47 fc ac ad fa 65 04 02 70 00 0e f7 1f 1c 08 04 12 11 54 54 54 54 54 54 54 54 54 1c 0e e6 eb 16 a0 a2 a2 a2 a2 a2 a2 a2 e2 d8 50 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 Data Ascii: 7ff2PNGIHDR ZD IDATx%'/3fssjg]I,?Od;+fsC.9l+3GepTTTTTTTTTPVEEEEEEEQVEEEEEEEQVEEEEEEEQVEEEEEEEQVEEEEEEEQVEEEEEEEQVEEEEE
2024-10-24 13:45:27 UTC	2046	IN	Data Raw: 9b 0d 19 63 b0 d9 6e 3b 47 d6 76 16 00 3a 72 97 ab 15 00 1a 83 dd b6 73 44 9b cd 66 01 b4 be 5a 01 c0 76 bb 5d ad 56 c6 18 6b 1d 01 6e b6 9b 5b 37 6f 5d 5d 5d 99 c6 38 eb b6 db ad 31 86 b9 14 11 5d 5d 5d 01 c0 ed db b7 3a db d9 ce de b8 79 c3 39 b7 dd 6c bf f5 fa 6b 0d e2 62 d1 02 80 31 0d 22 2e 97 4b 02 30 0d 36 cd 02 11 81 60 b1 38 31 a6 6d 5a 40 43 8d 31 4c d7 88 5c d3 34 ad 69 08 88 95 98 07 6c 18 01 dc 1d 32 36 c9 20 f0 44 c2 20 3a 02 63 80 1c 71 7a 4f b8 9d d7 76 02 02 00 47 80 40 2e 64 11 ae f3 03 4c 5f f8 71 0a 03 10 09 31 9e 27 81 33 7d 1a 31 08 88 18 44 f5 0a c4 a3 d5 9d 9f 2f d9 4d 72 99 7e 2c ab 11 ea bb 8b 85 46 ff 1b 8d 1f ff 8e 1c 12 06 1b 02 a1 b8 03 bb 1c 19 ec d7 e1 58 59 03 55 08 48 64 a7 70 3a 93 9d 82 6a 10 cc b5 61 7a 3b 23 fd 98 84 Data Ascii: cn;Gv:rsDfZv]Vkn[7o]]]81]]]:y9lkb1".K06`81mZ@C1L\4il26 D :cqzOvG@.dL_q1'3}1D/Mr~,FXYUHdp:jaz;#
2024-10-24 13:45:27 UTC	2046	IN	Data Raw: 54 2f d5 d8 74 27 1d 8d f2 a7 be 18 d9 be 42 83 47 c9 d4 7c 08 35 e9 0c 16 56 8a 0b 29 d1 00 21 02 86 5d 2c 06 00 82 61 19 8e 5e a6 1a e0 59 86 17 d8 47 11 b0 77 47 81 34 68 b3 8b 81 c0 85 2e e0 fd 51 e8 1c 01 38 de a3 ed 2b e2 8c 2f 8b bd b7 76 c2 68 a8 cf 84 77 de 00 ef 7a 16 be a8 c5 0e 4b 6f a4 a7 98 51 53 17 a8 ad df 57 64 b8 16 de 8b 18 83 88 28 6a dc 47 20 60 90 b9 76 e8 52 01 99 7c f7 76 36 f8 06 c5 69 fa 18 30 d7 a4 6f 7d d5 ed e1 ca a4 41 d4 ed 27 99 90 fa 0f 59 b1 39 4a 18 1a 10 e5 65 5e fd 02 9d 38 7a 72 79 ef 4e 04 10 a8 7c c3 cb a4 3a f0 e6 e7 4b 9c 95 d1 d9 8a 90 ec 47 b9 85 58 1c e7 a8 69 9a 98 67 f5 85 fa f4 a2 e7 a1 82 3a 5e c5 3b 16 8c a8 26 f6 d3 88 c4 39 0d 34 2e 4c 0a 86 51 28 36 4d ec f5 0b 3b 29 35 22 12 9f 1d d7 d9 7c 22 d3 a1 f3 Data Ascii: T/t'BG\|5V)!],a^YGwG4h.Q8+/vhwzKoQSWd(jG `vR\|v6i0o}A'Y9Je^8zryN\|:KGXig:^;&94.LQ(6M;)5"\|"
2024-10-24 13:45:27 UTC	2046	IN	Data Raw: 92 52 8a 75 8e f8 d4 b6 a8 53 42 0e 5a c1 02 7b 98 bb 10 2e 76 b3 7f 44 d1 38 44 7f 72 3d e4 42 44 61 3a a1 76 f1 87 65 1c 4e d1 b7 21 01 61 78 ed 0b 46 96 96 34 13 55 6d c2 b5 0b 81 2e 5d f7 7e fb 4e 56 31 30 b9 12 91 48 08 6b 87 06 87 29 79 d6 c6 1e 3b 55 69 ed 2c 31 2c 5b 5f 13 5a 2b b4 36 a6 48 59 94 5c d7 b2 69 c5 d3 7f 66 ef 66 85 f1 34 36 f7 25 8c 74 04 e9 82 b2 d9 6a 22 98 d6 28 b9 62 88 00 91 10 d9 09 12 a2 43 09 2b 11 f0 eb 7e 44 04 84 06 9b 7e dd cf f4 13 0e fd 21 07 7e 0a 50 bf 5d 22 53 08 e3 1c db 1c c0 3c 8b 48 15 a9 af 54 b6 a6 63 74 67 f0 66 cf b0 1f c7 ba 5b b7 67 9a b3 be 52 f0 98 63 ea 34 d3 c8 8b 9c 3b 79 84 a7 1f c7 43 b0 8c e1 01 a3 5f 6d ed 67 7e a9 af 12 8c 0d da 48 33 9a a6 01 20 02 17 5e f4 10 9f e7 c7 ea 70 95 80 3f 9b a2 42 53 Data Ascii: RuSBZ{.vD8Dr=BDa:veN!axF4Um.]~NV10Hk)y;Ui,1,[_Z+6HY\iff46%tj"(bC+~D~!~P]"S<HTctgf[gRc4;yC_mg~H3 ^p?BS
2024-10-24 13:45:27 UTC	2046	IN	Data Raw: 69 bb 89 b7 b0 d6 36 a6 71 81 10 47 9b 79 99 3f f1 ab f5 ce 59 9f 19 20 ca a9 3f a4 5f 2f 45 ec 5f 75 44 4d 91 9f 36 a4 a3 7e 32 7d e1 ae 76 c3 93 9a 59 16 09 12 5b 12 c9 75 cf 00 00 20 00 49 44 41 54 51 a6 68 85 c8 4a 56 86 49 f1 f4 69 26 63 42 0e 27 60 c4 2b 1e 22 2c f9 18 76 2f 0e f8 b1 8c 61 3e c5 8c ca 01 38 02 d6 28 23 b4 9e 88 f8 8b 96 88 48 fd f1 1c 7d d5 c6 64 9b ac 69 c4 8c 27 b3 32 c3 83 b5 75 b6 7c 45 88 51 41 bc 42 47 e0 70 d1 73 0f 9d fc dd 21 64 c7 43 b0 c0 bf 12 42 12 a2 20 22 99 b5 db 70 84 6e f9 eb 5d d1 64 2e ba 8b 41 3b b3 f3 10 f5 fa 89 1a 09 2a 0f 15 f9 a0 f4 ee 1c 44 24 09 94 49 1a 33 2e fb 99 4e cc c5 90 75 b9 05 c1 f6 28 65 6f 88 90 72 c5 e8 45 db 43 48 15 7d c2 2f 32 5b 59 a1 20 d8 65 de a1 1c 8c 6f fe 5c b4 6c 8d 44 92 72 ca 54 Data Ascii: i6qGy?Y ?_/E_uDM6~2}vY[u IDATQhJVIi&cB'`+",v/a>8(#H}di'2u\|EQABGps!dCB "pn]d.A;*D$I3.Nu(eorECH}/2[Y eo\lDrT
2024-10-24 13:45:27 UTC	881	IN	Data Raw: 32 d8 bf 0f 8f 68 80 24 0a 22 f5 a2 28 5b 08 04 0b 00 98 5d 39 47 c6 c4 0b bb e8 57 92 77 30 f1 3a b1 f0 66 48 5a 55 7b 4d 98 dd e9 7b 43 4a 79 32 be 4a ec 8c fc d0 c4 25 6b 55 22 5b 8a 49 bc 2a 4d 7f 70 b1 e7 e8 7c ec 08 e6 65 0b 00 f2 4d b6 b1 22 22 f2 94 b5 e1 85 c7 67 22 b5 1b 05 19 e6 00 03 0b d7 ce 25 2a 25 f2 0e f5 7c 2c c6 b1 11 2c 81 b6 6e d9 b7 d8 22 fe a4 89 8b 0e 56 0f 0c e8 48 59 a9 a6 f2 32 55 ef a8 fd 1a 48 f8 b3 3f d0 21 f9 e2 06 f8 d3 7f a8 5f e9 1a 78 50 7d c2 1b 24 03 32 3b 89 29 0c 5a 3d d8 ca 8f 44 83 4a 27 d0 7e 25 7d 39 6e 4f 64 9a 54 95 08 3e 0a d5 7b 57 16 8f 9b 5d 5e 3a 93 35 47 d2 b9 c6 f3 60 f9 50 06 00 60 7f 26 13 10 71 30 04 a4 27 22 76 4b c4 e9 e3 c5 8e 82 81 d3 39 64 0d 9c 8e 9e 82 52 48 1d 54 d7 8e 2a 9a f2 e2 f8 31 6f d9 Data Ascii: 2h$"([]9GWw0:fHZU{M{CJy2J%kU"[IMp\|eM""g"%%\|,,n"VHY2UH?!_xP}$2;)Z=DJ'~%}9nOdT>{W]^:5G`P`&q0'"vK9dRHT*1o
2024-10-24 13:45:27 UTC	1165	IN	Data Raw: 69 bf b2 e6 b0 ea 31 01 0e 02 2e ba fc f1 96 54 f1 26 c5 9b 59 23 6d 7e 27 09 6b ca 45 d2 04 d9 df 91 78 11 57 10 a6 45 61 e3 ec d8 4b 03 63 0c 26 e2 8e 73 88 4e 56 b0 82 d8 91 18 ba 94 34 a4 94 12 26 dd c2 94 1c 45 f6 38 84 3c 02 1c 0f c1 12 a4 fc 80 af c8 12 b2 3e ca 39 05 4f 47 64 35 7d e8 c6 46 43 58 d9 f1 90 ea 25 5f f5 4e 1a a6 b4 0c fb a9 75 d6 28 5c 7f fa 9b ca 3f 89 bd c7 d5 35 81 e8 d7 88 c8 39 0c 01 3c 2f 36 22 bf c8 80 13 b2 91 0f 61 21 85 b3 91 00 46 a2 e8 51 d1 fa 53 b2 7b 34 bb 98 f5 43 d1 e2 b1 68 81 fc 28 6f 8c 15 31 f6 e3 7c 4f 00 51 77 70 c3 87 cf 32 37 72 65 8c 97 a4 7d 54 78 4b 6e 2c a8 90 5e bc 7e 2b e9 36 9f a9 4e 65 e5 84 9c f1 29 b3 ff 34 d9 7c 2f 8e c3 58 54 e1 71 3d 37 d3 35 9d e9 fe 67 a6 d1 f4 7d 0c e9 be a8 68 cd 3d 02 0d b7 Data Ascii: i1.T&Y#m~'kExWEaKc&sNV4&E8<>9OGd5}FCX%_Nu(\?59</6"a!FQS{4Ch(o1\|OQwp27re}TxKn,^~+6Ne)4\|/XTq=75g}h=
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 55 38 2e f8 6f 93 b0 cb 21 00 c3 c7 65 49 10 41 a2 06 fd 5c 68 5c e0 f4 ae e8 9e dc 4a 0f 76 99 33 00 b3 f1 83 ac e3 1f 7b 75 26 b2 3f 51 b6 d9 22 40 29 43 fa 88 ce 2d e5 3a d9 da e9 19 66 b6 ad d2 7f 75 b3 8f 11 7d a9 78 a4 66 42 bb 75 b9 d9 a2 b3 b8 0e 0b 19 b3 ab 32 0d 48 9b 85 c6 37 77 4b 23 44 ed 10 a9 81 d6 b4 c8 e8 e9 9c f5 52 b2 ee d6 72 7d 27 77 5e a6 7f e2 f0 0c 33 dd f5 69 29 93 ed bc d3 78 c9 0a b3 d3 53 4f 3f 8e 8a 60 31 a2 01 a0 8d 9d be 9e da 85 88 5a f1 8f c1 5e 48 71 c5 30 b8 36 aa 1c 98 58 49 04 0e 8a f0 53 f2 01 cf 6c 6c 2c ce 2c 17 93 1b d3 c8 c2 1c 22 b2 f8 30 1c 63 7b 9c 3b 5a 28 94 2d 42 fa 01 8d b1 6c 75 4b 7a 9a a3 ea 3a f6 1c 80 f4 23 45 ec 0a 03 75 92 2b 52 3d 72 96 a5 19 69 58 d0 7d 3b 26 f3 4c a4 5e a7 9c 32 95 27 fd 53 e2 af Data Ascii: U8.o!eIA\h\Jv3{u&?Q"@)C-:fu}xfBu2H7wK#DRr}'w^3i)xSO?`1Z^Hq06XISll,,"0c{;Z(-BluKz:#Eu+R=riX};&L^2'S
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 9e 30 7c a7 33 b7 0a 57 60 a8 33 51 a5 f6 a8 da f5 7d f6 fc 1c 0a 6e e6 71 60 8e 7b e6 34 d1 82 9d 7e 76 ce ae 32 ad 66 72 25 a5 9e 72 31 3d 2b 47 cb 53 9e 5a 5c bf d1 b2 63 81 c2 cb e3 a0 ec e7 d8 e1 61 59 4a 3a 56 d0 de 32 4f 1e 63 11 99 cd 48 b0 d4 a8 3e 6e ef 36 c7 fe a7 ae e4 f8 70 54 04 2b 7a 63 45 ba 8c c7 c6 4e 1f 48 86 e1 d8 d3 83 70 9e 42 c8 bc a7 e4 32 e5 37 65 7e f9 82 27 e5 4c 31 26 a1 28 b4 26 9a 11 d7 9c ac 5d d6 94 94 cf 74 d5 4f a7 59 45 9c 60 f8 a3 ff 97 25 4d 0c b7 2e 94 0d 22 df 74 e0 df 28 e4 ff 9a e1 dd 4c 8d 00 80 c8 21 72 c7 19 e0 2f 1f 06 ba 95 8a 9a 0a 9c a5 47 42 6e 26 09 d6 1c 03 2a bf 75 cc a0 ec 84 a2 49 b9 2e eb 6b 9c 42 e8 a2 c5 79 8c 93 48 75 11 11 1c 12 f5 1f 5e cf 92 c5 74 36 a5 32 88 a3 0e d9 98 44 7a 2b 2b 5b b9 f1 27 Data Ascii: 0\|3W`3Q}nq`{4~v2fr%r1=+GSZ\caYJ:V2OcH>n6pT+zcENHpB27e~'L1&(&]tOYE`%M."t(L!r/GBn&*uI.kByHu^t62Dz++['
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: de 69 f3 66 20 22 c2 b2 27 e6 67 34 df 2a 08 ac 9e d9 61 56 5d 4e 4c 44 c6 a0 70 0e 52 35 9b cc 3f 9a 52 44 be b3 e0 23 f7 08 f0 26 46 41 af 02 ca 4b 7c 26 cd 55 89 11 dd 13 e1 e5 77 e8 ba 91 18 b8 4c 1f 7d 02 66 6c 23 cd 95 9d 08 ca e3 e9 c6 8e c7 44 65 d2 d2 41 f5 5d 36 7c 75 f0 f0 7b 54 ae 2e 62 a6 25 2d 88 34 5b 5a 8a 5c f5 e4 53 63 53 f9 ac 0c 90 68 38 e4 a2 11 63 7d 7d 50 42 39 40 24 d5 64 4b 62 2e bc 9a a6 e4 1f fa a5 ce b4 c4 6c a5 b2 77 25 5a a6 49 8c d6 d2 88 3c a5 3f e6 77 56 b6 22 e9 c5 c8 7e 66 c7 72 24 e1 d8 9c aa 2c 58 da 0e 30 23 8c 34 d9 95 d9 a7 0a 89 b3 f6 79 4c b6 c2 dd c9 e2 f6 eb a9 54 ce 83 9b a9 af 1d 47 45 b0 60 d8 43 44 04 e4 83 21 88 48 d6 a1 31 00 0e 10 3d e1 22 e0 63 14 38 46 cc fb 7d d0 40 b8 a5 35 06 01 c0 51 07 40 88 2d fa Data Ascii: if "'g4*aV]NLDpR5?RD#&FAK\|&UwL}fl#DeA]6\|u{T.b%-4[Z\ScSh8c}}PB9@$dKb.lw%ZI<?wV"~fr$,X0#4yLTGE`CD!H1="c8F}@5Q@-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49782	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:26 UTC	1335	OUT	GET /viewer2/prod-02/presspage?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0&page=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:27 UTC	2186	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:27 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-1g5JIw49zjXbvwSJFlHiDA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmJw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQtwc3-e93MEmsOLDH38l9aT8wvjEgoJi3bLM1PLUIt20ovy8ktS8lHgjAyMTQwNDMz0Dk_gCAwBV9TBP" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:27 UTC	23	IN	Data Raw: 31 31 0d 0a 29 5d 7d 27 0a 5b 37 32 2c 36 31 32 2c 37 39 32 5d 0d 0a Data Ascii: 11)]}'[72,612,792]
2024-10-24 13:45:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49789	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:27 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:27 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:27 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:27 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:27 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49793	142.250.186.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:27 UTC	1110	OUT	GET /viewer2/prod-02/meta?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:27 UTC	2188	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:27 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Content-Security-Policy: script-src 'report-sample' 'nonce-PpQuEkzacGd40oh0zW4CXw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmJw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwc3-e93MEmcGHmjv9MSupJ-YXxiQUFxbplmanlqUW6aUX5eSWpeSnxRgZGJoYGhmZ6BibxBQYAgykwjw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:27 UTC	656	IN	Data Raw: 32 38 39 0d 0a 29 5d 7d 27 0a 7b 22 70 61 67 65 73 22 3a 31 2c 22 6d 61 78 50 61 67 65 57 69 64 74 68 22 3a 33 32 30 30 2c 22 70 64 66 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 6f 63 2d 30 34 2d 33 73 2d 70 72 6f 64 2d 30 32 2d 61 70 70 73 2d 76 69 65 77 65 72 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 5c 2f 76 69 65 77 65 72 32 5c 2f 70 72 6f 64 2d 30 32 5c 2f 70 64 66 5c 2f 74 69 6a 72 33 66 6b 70 68 70 61 69 74 75 76 74 35 38 39 6b 30 6a 74 65 32 6e 31 74 75 71 67 37 5c 2f 76 64 61 6e 65 39 76 6b 6b 64 32 38 6e 6b 68 31 6f 6d 34 70 6b 6b 75 71 6a 6a 32 6b 67 32 67 6c 5c 2f 31 37 32 39 37 37 37 35 30 30 30 30 30 5c 2f 33 5c 2f 2a 5c 2f 41 50 7a 6e 7a 61 59 6c 52 56 4d 44 56 68 61 4e 46 75 4d 4c 46 79 31 62 4b 53 32 73 6d 56 2d 73 Data Ascii: 289)]}'{"pages":1,"maxPageWidth":3200,"pdf":"https:\/\/doc-04-3s-prod-02-apps-viewer.googleusercontent.com\/viewer2\/prod-02\/pdf\/tijr3fkphpaituvt589k0jte2n1tuqg7\/vdane9vkkd28nkh1om4pkkuqjj2kg2gl\/1729777500000\/3\/*\/APznzaYlRVMDVhaNFuMLFy1bKS2smV-s
2024-10-24 13:45:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49797	142.250.185.110	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:27 UTC	806	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:27 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 07:13:26 GMT Expires: Fri, 24 Oct 2025 07:13:26 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 23521 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:27 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49796	142.250.185.110	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:27 UTC	817	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:27 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 208991 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 22 Oct 2024 18:10:07 GMT Expires: Wed, 22 Oct 2025 18:10:07 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 156920 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:27 UTC	462	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 7a 67 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 52 6e 3d 5f 2e 78 65 28 5f 2e 49 65 2c 22 72 77 22 2c 5f 2e 79 65 28 29 29 3b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 52 6e 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 54 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 52 6e 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 75 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.zg=(window.gapi\|\|{}).load;_.Rn=_.xe(_.Ie,"rw",_.ye());var Sn=function(a,b){(a=_.Rn[a])&&a.state<b&&(a.state=b)};var Tn=function(a){a=(a=_.Rn[a])?a.oid:void 0;if(a){var b=_.ue.getElementById(a);b&&b.parentNode
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 77 69 64 74 68 3a 22 2b 28 62 3f 62 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 57 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 79 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 62 2e 68 65 69 67 68 74 2c 68 3d 62 26 26 62 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3b 68 26 26 28 63 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 68 29 3b 65 7c 7c 28 65 3d 64 2e 77 69 64 74 68 7c 7c 61 2e 77 69 64 74 68 29 3b 66 7c 7c 28 66 3d 64 2e 68 65 69 67 68 74 7c 7c 61 2e 68 65 69 67 68 74 29 3b 64 2e 77 69 64 74 68 3d 63 2e 77 69 64 74 68 3d 65 3b 64 2e Data Ascii: width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Wn=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 65 29 3b 5f 2e 58 6e 28 74 68 69 73 29 7d 3b 61 2e 6f 6e 43 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 5f 2e 56 6e 28 65 29 7d 7d 3b 0a 5f 2e 53 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 3d 28 61 7c 7c 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 6d 61 74 63 68 28 52 65 67 45 78 70 28 22 2e 2a 28 5c 5c 3f 7c 23 7c 26 29 75 73 65 67 61 70 69 3d 28 5b 5e 26 23 5d 2b 29 22 29 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 22 31 22 3d 3d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 22 22 29 7d 3b 0a 5f 2e 5a 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 Data Ascii: e);_.Xn(this)};a.onCreate=function(e){e=e.getIframeEl();e.style.cssText=_.Vn(e)}};_.Si=function(a){var b=window;a=(a\|\|b.location.href).match(RegExp(".*(\\?\|#\|&)usegapi=([^&#]+)"))\|\|[];return"1"===decodeURIComponent(a[a.length-1]\|\|"")};_.Zn=function(a,b)
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 65 2d 73 69 67 6e 69 6e 2d 22 29 29 7b 63 3d 63 2e 73 75 62 73 74 72 69 6e 67 28 31 34 29 3b 76 61 72 20 64 3d 61 5b 62 5d 2e 63 6f 6e 74 65 6e 74 3b 5f 2e 6c 6f 5b 63 5d 26 26 64 26 26 28 5f 2e 61 6f 5b 63 5d 3d 64 29 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 5f 2e 6c 6f 29 5f 2e 6c 6f 5b 65 5d 3e 30 26 26 28 62 3d 5f 2e 43 65 28 61 2c 65 2c 22 22 29 29 26 26 28 5f 2e 61 6f 5b 65 5d 3d 62 29 7d 5f 2e 6d 6f 3d 21 30 7d 65 3d 5f 2e 79 65 28 29 3b 5f 2e 41 65 28 5f 2e 61 6f 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 3b 6f 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b Data Ascii: e-signin-")){c=c.substring(14);var d=a[b].content;_.lo[c]&&d&&(_.ao[c]=d)}}if(window.self!==window.top){a=document.location.toString();for(var e in _.lo)_.lo[e]>0&&(b=_.Ce(a,e,""))&&(_.ao[e]=b)}_.mo=!0}e=_.ye();_.Ae(_.ao,e);return e};oo=function(a){var b;
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 2e 79 65 28 29 2c 63 3d 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 21 3d 30 2c 64 3d 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 68 3d 66 2e 6e 61 6d 65 2c 6b 3d 66 2e 76 61 6c 75 65 3b 5f 2e 75 6d 2e 63 61 6c 6c 28 44 6f 2c 68 29 3e 3d 30 7c 7c 63 26 26 68 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 29 21 3d 30 7c 7c 6b 3d 3d 3d 22 6e 75 6c 6c 22 7c 7c 22 73 70 65 63 69 66 69 65 64 22 69 6e 20 66 26 26 21 66 2e 73 70 65 63 69 66 69 65 64 7c 7c 28 63 26 26 28 68 3d 68 2e 73 75 62 73 74 72 28 35 29 29 2c 62 5b 68 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 6b Data Ascii: .ye(),c=a.nodeName.toLowerCase().indexOf("g:")!=0,d=a.attributes.length,e=0;e<d;e++){var f=a.attributes[e],h=f.name,k=f.value;_.um.call(Do,h)>=0\|\|c&&h.indexOf("data-")!=0\|\|k==="null"\|\|"specified"in f&&!f.specified\|\|(c&&(h=h.substr(5)),b[h.toLowerCase()]=k
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 73 68 28 22 2e 67 2d 22 2b 68 2c 22 67 5c 5c 3a 22 2b 68 29 7d 64 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2e 6a 6f 69 6e 28 22 2c 22 29 29 7d 65 6c 73 65 20 64 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 61 3d 5f 2e 79 65 28 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 66 3d 64 5b 65 5d 3b 76 61 72 20 6b 3d 66 3b 68 3d 62 3b 76 61 72 20 6c 3d 6b 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6d 3d 76 6f 69 64 20 30 3b 69 66 28 6b 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 73 63 61 6e 22 29 29 68 3d 0a 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 6c 2e 69 6e 64 65 78 4f 66 28 22 67 3a 22 29 3b 6e 3d 3d Data Ascii: sh(".g-"+h,"g\\:"+h)}d=a.querySelectorAll(e.join(","))}else d=a.getElementsByTagName("*");a=_.ye();for(e=0;e<d.length;e++){f=d[e];var k=f;h=b;var l=k.nodeName.toLowerCase(),m=void 0;if(k.hasAttribute("data-gapiscan"))h=null;else{var n=l.indexOf("g:");n==
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 65 74 65 20 63 2e 64 6f 6e 74 63 6c 65 61 72 3b 76 61 72 20 6c 3b 66 3d 7b 7d 3b 76 61 72 20 6d 3d 6c 3d 61 3b 61 3d 3d 22 70 6c 75 73 22 26 26 63 2e 61 63 74 69 6f 6e 26 26 28 6c 3d 61 2b 22 5f 22 2b 63 2e 61 63 74 69 6f 6e 2c 6d 3d 61 2b 22 2f 22 2b 63 2e 61 63 74 69 6f 6e 29 3b 28 6c 3d 5f 2e 54 65 28 22 69 66 72 61 6d 65 73 2f 22 2b 6c 2b 22 2f 75 72 6c 22 29 29 7c 7c 28 6c 3d 22 3a 69 6d 5f 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 22 2b 6d 2b 22 3f 75 73 65 67 61 70 69 3d 31 22 29 3b 66 6f 72 28 6e 20 69 6e 20 79 6f 29 66 5b 6e 5d 3d 6e 2b 22 2f 22 2b 28 63 5b 6e 5d 7c 7c 79 6f 5b 6e 5d 29 2b 22 2f 22 3b 76 61 72 20 6e 3d 5f 2e Data Ascii: ete c.dontclear;var l;f={};var m=l=a;a=="plus"&&c.action&&(l=a+"_"+c.action,m=a+"/"+c.action);(l=_.Te("iframes/"+l+"/url"))\|\|(l=":im_socialhost:/:session_prefix::im_prefix:_/widget/render/"+m+"?usegapi=1");for(n in yo)f[n]=n+"/"+(c[n]\|\|yo[n])+"/";var n=_.
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 6f 73 74 3d 0a 31 3b 76 2e 61 74 74 72 69 62 75 74 65 73 3d 41 6f 3b 76 2e 64 6f 6e 74 63 6c 65 61 72 3d 21 6b 3b 68 3d 7b 7d 3b 68 2e 75 73 65 72 50 61 72 61 6d 73 3d 63 3b 68 2e 75 72 6c 3d 75 3b 68 2e 74 79 70 65 3d 61 3b 5f 2e 48 6f 28 61 2c 62 2c 63 2c 75 2c 76 2c 68 29 3b 62 3d 68 2e 69 64 3b 63 3d 5f 2e 79 65 28 29 3b 63 2e 69 64 3d 62 3b 63 2e 75 73 65 72 50 61 72 61 6d 73 3d 68 2e 75 73 65 72 50 61 72 61 6d 73 3b 63 2e 75 72 6c 3d 68 2e 75 72 6c 3b 63 2e 74 79 70 65 3d 68 2e 74 79 70 65 3b 63 2e 73 74 61 74 65 3d 31 3b 5f 2e 52 6e 5b 62 5d 3d 63 3b 62 3d 68 7d 65 6c 73 65 20 62 3d 6e 75 6c 6c 3b 62 26 26 28 28 63 3d 62 2e 69 64 29 26 26 64 2e 70 75 73 68 28 63 29 2c 54 6f 28 61 2c 62 29 29 7d 7d 2c 55 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: ost=1;v.attributes=Ao;v.dontclear=!k;h={};h.userParams=c;h.url=u;h.type=a;_.Ho(a,b,c,u,v,h);b=h.id;c=_.ye();c.id=b;c.userParams=h.userParams;c.url=h.url;c.type=h.type;c.state=1;_.Rn[b]=c;b=h}else b=null;b&&((c=b.id)&&d.push(c),To(a,b))}},Uo=function(a,b,
2024-10-24 13:45:27 UTC	1378	IN	Data Raw: 26 26 62 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3b 76 61 72 20 64 3d 63 3e 30 3f 6e 65 77 20 61 28 63 29 3a 6e 65 77 20 61 3b 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 3d 7b 54 69 6d 65 72 3a 61 2c 6c 6f 61 64 3a 64 7d 3b 69 66 28 62 29 7b 76 61 72 20 65 3d 62 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3b 65 3e 30 26 26 63 3e 3d 65 26 26 28 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 73 72 74 3d 63 2d 65 29 7d 69 66 28 62 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 5f 5f 67 61 70 69 5f 6a 73 74 69 6d 69 6e 67 5f 5f 2e 6c 6f 61 64 3b 0a 65 3e 30 26 26 63 3e 3d 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 77 74 73 72 74 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 Data Ascii: &&b.responseStart;var d=c>0?new a(c):new a;window.__gapi_jstiming__={Timer:a,load:d};if(b){var e=b.navigationStart;e>0&&c>=e&&(window.__gapi_jstiming__.srt=c-e)}if(b){var f=window.__gapi_jstiming__.load;e>0&&c>=e&&(f.tick("_wtsrt",void 0,e),f.tick("wtsrt
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 6f 6d 65 2e 63 73 69 28 29 2e 74 72 61 6e 29 7d 63 61 74 63 68 28 70 29 7b 7d 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 3b 69 66 28 65 26 26 28 65 3d 65 2e 6c 6f 61 64 54 69 6d 65 73 29 26 26 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 28 29 29 29 7b 65 2e 77 61 73 46 65 74 63 68 65 64 56 69 61 53 70 64 79 26 26 28 64 2b 3d 22 26 70 3d 73 22 29 3b 69 66 28 65 2e 77 61 73 4e 70 6e 4e 65 67 6f 74 69 61 74 65 64 29 7b 64 2b 3d 22 26 6e 70 6e 3d 31 22 3b 76 61 72 20 66 3d 65 2e 6e 70 6e 4e 65 67 6f 74 69 61 74 65 64 50 72 6f 74 6f 63 6f 6c 3b 66 26 26 28 64 2b 3d 22 26 6e 70 6e 76 3d 22 2b 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 65 73 63 61 70 65 29 28 66 29 29 7d 65 2e 77 61 73 41 6c Data Ascii: ome.csi().tran)}catch(p){}var e=window.chrome;if(e&&(e=e.loadTimes)&&typeof e==="function"&&(e=e())){e.wasFetchedViaSpdy&&(d+="&p=s");if(e.wasNpnNegotiated){d+="&npn=1";var f=e.npnNegotiatedProtocol;f&&(d+="&npnv="+(encodeURIComponent\|\|escape)(f))}e.wasAl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49801	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:27 UTC	999	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:27 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 39 37 37 37 35 32 35 34 31 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1729777525411",null,null,null,
2024-10-24 13:45:28 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:28 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49803	142.250.186.142	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:28 UTC	900	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:28 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14486 Date: Thu, 24 Oct 2024 13:45:28 GMT Expires: Thu, 24 Oct 2024 13:45:28 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "8529c25fa9b03753" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:28 UTC	541	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 Data Ascii: f(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b inst
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 6c 3d 61 7d 3b 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 41 3d 5b 5d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d Data Ascii: tion(a){if(x!==x)throw Error("Bad secret");this.l=a};y.prototype.toString=function(){return this.l};new y("about:blank");new y("about:invalid#zClosurez");var A=[],D=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};A.indexOf(D)==
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 73 75 62 73 74 72 28 30 2c 32 38 29 2b 28 62 2e 6c 65 6e 67 74 68 2d 32 38 29 29 2c 63 3d 62 2c 62 3d 48 28 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 5f 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 5f 22 29 7d 3b 76 61 72 20 6e 61 3d 49 28 29 2c 55 3d 5b 5d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 22 2b 61 29 3b 7d 3b 55 2e 70 75 73 Data Ascii: substr(0,28)+(b.length-28)),c=b,b=H(ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function(a){return a.join("__").replace(/\./g,"_").replace(/\-/g,"_").replace(/,/g,"_")};var na=I(),U=[],V=function(a){throw Error("Bad hint: "+a);};U.pus
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 6c 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 Data Ascii: l;var e=function(f){return encodeURIComponent(f).replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix).replace(/%2C/g,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 2b 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 42 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e Data Ascii: +_0-9\/A-Za-z]+={0,2}$/,Ba=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 76 6f 69 64 20 30 3b 74 79 70 65 6f 66 20 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 70 3d 6c 29 3b 76 61 72 20 71 3d 6e 75 6c 6c 2c 7a 3d 21 31 3b 69 66 28 66 26 26 21 6b 7c 7c 21 66 26 26 6b 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 22 3b 0a 6c 3d 48 28 4f 28 63 29 2c 22 72 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 3b 76 61 72 20 47 3d 48 28 4f 28 63 29 2c 22 4c 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 2c 4d 61 3d 4d 2e 6c 65 7c 7c 5b 5d 2c 4b 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 29 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 69 66 28 7a 29 72 Data Ascii: void 0;typeof l=="function"&&(p=l);var q=null,z=!1;if(f&&!k\|\|!f&&k)throw"Timeout requires both the timeout parameter and ontimeout parameter to be set";l=H(O(c),"r",[]).sort();var G=H(O(c),"L",[]).sort(),Ma=M.le\|\|[],K=[].concat(l),la=function(w,B){if(z)r
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 61 2c 62 29 7d 29 7d 3b 55 2e 75 6e 73 68 69 66 74 28 5b 22 75 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 21 61 7c 7c 62 26 26 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 2c 62 3e 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 28 62 29 2e 73 70 6c 69 74 28 22 3a 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 5b 22 61 70 69 22 2c 22 70 6c 61 74 66 6f 72 6d 22 5d 2e 69 6e 63 6c 75 64 65 Data Ascii: a,b){return Fa(function(){return Ia(a,b)})};U.unshift(["url",function(a,b,c){!a\|\|b&&b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=a.lastIndexOf("/")+1,b>=a.length\|\|(a=a.substr(b).split(":").filter(function(d){return!["api","platform"].include
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 5f 65 6d 62 65 64 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 5f 63 69 72 63 6c 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 2b 31 2f 73 68 61 72 65 62 75 74 74 6f 6e 3f 70 6c 75 73 53 68 61 72 65 3d 74 72 75 65 26 75 73 65 67 61 70 69 3d 31 22 7d 2c 72 Data Ascii: ww.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""},url:":socialhost:/:session_prefix::se:_/+1/sharebutton?plusShare=true&usegapi=1"},r
2024-10-24 13:45:28 UTC	1378	IN	Data Raw: 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 69 67 6e 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 2c 6d 65 74 68 6f 64 73 3a 5b 22 6f 6e 61 75 74 68 22 5d 7d 2c 72 62 72 5f 69 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 69 6e 76 69 74 61 74 69 6f 6e 22 7d 2c 73 68 61 72 65 3a 7b 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f Data Ascii: {params:{url:""},url:":socialhost:/:session_prefix:_/widget/render/signin?usegapi=1",methods:["onauth"]},rbr_i:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarinvitation"},share:{url:":socialhost:/:session_prefix::im_prefix:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49805	142.250.186.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:28 UTC	1122	OUT	GET /viewer2/prod-02/presspage?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0&page=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:29 UTC	2188	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:28 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-V1prGn7Lqc8uaZjtQSr2Pg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmJw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwcP-a93MEm8KL3ZQOTknpSfmF8YkFBsW5ZZmp5apFuWlF-XklqXkq8kYGRiaGBoZmegUl8gQEAeKgwTg" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:29 UTC	23	IN	Data Raw: 31 31 0d 0a 29 5d 7d 27 0a 5b 37 32 2c 36 31 32 2c 37 39 32 5d 0d 0a Data Ascii: 11)]}'[72,612,792]
2024-10-24 13:45:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49811	142.250.185.228	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:29 UTC	977	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:29 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Thu, 24 Oct 2024 13:45:29 GMT Expires: Thu, 24 Oct 2024 13:45:29 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:29 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 Data Ascii: /E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC
2024-10-24 13:45:29 UTC	1085	IN	Data Raw: d1 32 23 1c 00 ad 4b 7d 21 37 c0 72 a7 aa c3 51 27 9d 0b b8 a7 68 d0 ee ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa Data Ascii: 2#K}!7rQ'hP7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49806	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:29 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:29 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:29 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:29 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:29 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49810	142.250.186.142	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:29 UTC	1021	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:29 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 75049 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 22 Oct 2024 18:40:37 GMT Expires: Wed, 22 Oct 2025 18:40:37 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 155092 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:29 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-10-24 13:45:29 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-10-24 13:45:30 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49809	142.250.186.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:29 UTC	1151	OUT	GET /viewer2/prod-02/img?ck=drive&ds=APznzaYlRVMDVhaNFuMLFy1bKS2smV-sKAlmzWyGDHFyl9d_SH6XSKEFAORr_o1bNBLCMK4GgrzW5kPqszacEiRoMMjinfqIOoBYU6rZq4rftZ-hlM50kJo34p0wwUtKb-JjfRZa9gARP0YEl2HZAWC4IRNRJBUIbWS96p9XllaBqNcP2SsPLz9wmLReTQPuXTse3EK3CbPegSE5wTjDl6nI-p7lAvIFoKcZNRD94-z0shumREjb9y8_V0Bx7kh_GwNdL8GiOT0O3No56_XTLHNvQQxG8rhFR-VJ4TTAeiwuVRXpbUxc19U0blf4A3yMm_BjcioNcmeB6qb4lgKo-B4DTcHsyADfBuZ4hjAT7yU7NxN2W0PgBtXkMXTJuoG6Dw0CNGY4Xoqs-hP0FfbaCe_047cFr3gqFw%3D%3D&authuser=0&page=0&skiphighlight=true&w=800&webp=true HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:30 UTC	2048	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:29 GMT Strict-Transport-Security: max-age=31536000 Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-xgucDax2ryR2e1X2iRigQA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzj8tDikmJw15BicNu9k8kbiCW-vmTSAmKn9BmsIUDcevMc63QgTvp3nrUEiA0VLrE6A7FqzyVWcyAukrjC2gLEQjwcP-e93MEmcOLSwdnMSupJ-YXxiQUFxbplmanlqUW6aUX5eSWpeSnxRgZGJoYGhmZ6BibxBQYAfRAwaA" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:30 UTC	2048	IN	Data Raw: 37 66 66 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 04 0b 08 02 00 00 00 fc de 5a 44 00 00 20 00 49 44 41 54 78 9c ec bd e9 93 25 b9 91 27 e6 8e 88 97 2f 33 eb e8 83 ec 8b cd 66 73 9a c3 9e 19 92 73 6a 67 a4 5d 49 bb fa 2c d3 3f a9 4f fa 0b 64 a6 0f 3b 2b 8d 99 cc 66 86 b3 73 88 43 2e 39 ec 83 6c b2 ef ee aa ae 2b 33 df 11 80 eb 83 03 1e 1e 00 02 11 ef e5 ab ea aa 47 fc ac ad fa 65 04 02 70 00 0e f7 1f 1c 08 04 12 11 54 54 54 54 54 54 54 54 54 1c 0e e6 eb 16 a0 a2 a2 a2 a2 a2 a2 a2 e2 d8 50 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 45 45 c5 81 51 09 56 45 45 45 45 45 Data Ascii: 7ff2PNGIHDR ZD IDATx%'/3fssjg]I,?Od;+fsC.9l+3GepTTTTTTTTTPVEEEEEEEQVEEEEEEEQVEEEEEEEQVEEEEEEEQVEEEEEEEQVEEEEEEEQVEEEEE
2024-10-24 13:45:30 UTC	2048	IN	Data Raw: 19 63 b0 d9 6e 3b 47 d6 76 16 00 3a 72 97 ab 15 00 1a 83 dd b6 73 44 9b cd 66 01 b4 be 5a 01 c0 76 bb 5d ad 56 c6 18 6b 1d 01 6e b6 9b 5b 37 6f 5d 5d 5d 99 c6 38 eb b6 db ad 31 86 b9 14 11 5d 5d 5d 01 c0 ed db b7 3a db d9 ce de b8 79 c3 39 b7 dd 6c bf f5 fa 6b 0d e2 62 d1 02 80 31 0d 22 2e 97 4b 02 30 0d 36 cd 02 11 81 60 b1 38 31 a6 6d 5a 40 43 8d 31 4c d7 88 5c d3 34 ad 69 08 88 95 98 07 6c 18 01 dc 1d 32 36 c9 20 f0 44 c2 20 3a 02 63 80 1c 71 7a 4f b8 9d d7 76 02 02 00 47 80 40 2e 64 11 ae f3 03 4c 5f f8 71 0a 03 10 09 31 9e 27 81 33 7d 1a 31 08 88 18 44 f5 0a c4 a3 d5 9d 9f 2f d9 4d 72 99 7e 2c ab 11 ea bb 8b 85 46 ff 1b 8d 1f ff 8e 1c 12 06 1b 02 a1 b8 03 bb 1c 19 ec d7 e1 58 59 03 55 08 48 64 a7 70 3a 93 9d 82 6a 10 cc b5 61 7a 3b 23 fd 98 84 07 47 Data Ascii: cn;Gv:rsDfZv]Vkn[7o]]]81]]]:y9lkb1".K06`81mZ@C1L\4il26 D :cqzOvG@.dL_q1'3}1D/Mr~,FXYUHdp:jaz;#G
2024-10-24 13:45:30 UTC	2048	IN	Data Raw: 74 27 1d 8d f2 a7 be 18 d9 be 42 83 47 c9 d4 7c 08 35 e9 0c 16 56 8a 0b 29 d1 00 21 02 86 5d 2c 06 00 82 61 19 8e 5e a6 1a e0 59 86 17 d8 47 11 b0 77 47 81 34 68 b3 8b 81 c0 85 2e e0 fd 51 e8 1c 01 38 de a3 ed 2b e2 8c 2f 8b bd b7 76 c2 68 a8 cf 84 77 de 00 ef 7a 16 be a8 c5 0e 4b 6f a4 a7 98 51 53 17 a8 ad df 57 64 b8 16 de 8b 18 83 88 28 6a dc 47 20 60 90 b9 76 e8 52 01 99 7c f7 76 36 f8 06 c5 69 fa 18 30 d7 a4 6f 7d d5 ed e1 ca a4 41 d4 ed 27 99 90 fa 0f 59 b1 39 4a 18 1a 10 e5 65 5e fd 02 9d 38 7a 72 79 ef 4e 04 10 a8 7c c3 cb a4 3a f0 e6 e7 4b 9c 95 d1 d9 8a 90 ec 47 b9 85 58 1c e7 a8 69 9a 98 67 f5 85 fa f4 a2 e7 a1 82 3a 5e c5 3b 16 8c a8 26 f6 d3 88 c4 39 0d 34 2e 4c 0a 86 51 28 36 4d ec f5 0b 3b 29 35 22 12 9f 1d d7 d9 7c 22 d3 a1 f3 19 72 a0 7e Data Ascii: t'BG\|5V)!],a^YGwG4h.Q8+/vhwzKoQSWd(jG `vR\|v6i0o}A'Y9Je^8zryN\|:KGXig:^;&94.LQ(6M;)5"\|"r~
2024-10-24 13:45:30 UTC	2048	IN	Data Raw: d4 b6 a8 53 42 0e 5a c1 02 7b 98 bb 10 2e 76 b3 7f 44 d1 38 44 7f 72 3d e4 42 44 61 3a a1 76 f1 87 65 1c 4e d1 b7 21 01 61 78 ed 0b 46 96 96 34 13 55 6d c2 b5 0b 81 2e 5d f7 7e fb 4e 56 31 30 b9 12 91 48 08 6b 87 06 87 29 79 d6 c6 1e 3b 55 69 ed 2c 31 2c 5b 5f 13 5a 2b b4 36 a6 48 59 94 5c d7 b2 69 c5 d3 7f 66 ef 66 85 f1 34 36 f7 25 8c 74 04 e9 82 b2 d9 6a 22 98 d6 28 b9 62 88 00 91 10 d9 09 12 a2 43 09 2b 11 f0 eb 7e 44 04 84 06 9b 7e dd cf f4 13 0e fd 21 07 7e 0a 50 bf 5d 22 53 08 e3 1c db 1c c0 3c 8b 48 15 a9 af 54 b6 a6 63 74 67 f0 66 cf b0 1f c7 ba 5b b7 67 9a b3 be 52 f0 98 63 ea 34 d3 c8 8b 9c 3b 79 84 a7 1f c7 43 b0 8c e1 01 a3 5f 6d ed 67 7e a9 af 12 8c 0d da 48 33 9a a6 01 20 02 17 5e f4 10 9f e7 c7 ea 70 95 80 3f 9b a2 42 53 88 81 74 45 9e a9 Data Ascii: SBZ{.vD8Dr=BDa:veN!axF4Um.]~NV10Hk)y;Ui,1,[_Z+6HY\iff46%tj"(bC+~D~!~P]"S<HTctgf[gRc4;yC_mg~H3 ^p?BStE
2024-10-24 13:45:30 UTC	2048	IN	Data Raw: 71 81 10 47 9b 79 99 3f f1 ab f5 ce 59 9f 19 20 ca a9 3f a4 5f 2f 45 ec 5f 75 44 4d 91 9f 36 a4 a3 7e 32 7d e1 ae 76 c3 93 9a 59 16 09 12 5b 12 c9 75 cf 00 00 20 00 49 44 41 54 51 a6 68 85 c8 4a 56 86 49 f1 f4 69 26 63 42 0e 27 60 c4 2b 1e 22 2c f9 18 76 2f 0e f8 b1 8c 61 3e c5 8c ca 01 38 02 d6 28 23 b4 9e 88 f8 8b 96 88 48 fd f1 1c 7d d5 c6 64 9b ac 69 c4 8c 27 b3 32 c3 83 b5 75 b6 7c 45 88 51 41 bc 42 47 e0 70 d1 73 0f 9d fc dd 21 64 c7 43 b0 c0 bf 12 42 12 a2 20 22 99 b5 db 70 84 6e f9 eb 5d d1 64 2e ba 8b 41 3b b3 f3 10 f5 fa 89 1a 09 2a 0f 15 f9 a0 f4 ee 1c 44 24 09 94 49 1a 33 2e fb 99 4e cc c5 90 75 b9 05 c1 f6 28 65 6f 88 90 72 c5 e8 45 db 43 48 15 7d c2 2f 32 5b 59 a1 20 d8 65 de a1 1c 8c 6f fe 5c b4 6c 8d 44 92 72 ca 54 1f 40 7d 76 53 7f 84 a4 Data Ascii: qGy?Y ?_/E_uDM6~2}vY[u IDATQhJVIi&cB'`+",v/a>8(#H}di'2u\|EQABGps!dCB "pn]d.A;*D$I3.Nu(eorECH}/2[Y eo\lDrT@}vS
2024-10-24 13:45:30 UTC	868	IN	Data Raw: f5 a2 28 5b 08 04 0b 00 98 5d 39 47 c6 c4 0b bb e8 57 92 77 30 f1 3a b1 f0 66 48 5a 55 7b 4d 98 dd e9 7b 43 4a 79 32 be 4a ec 8c fc d0 c4 25 6b 55 22 5b 8a 49 bc 2a 4d 7f 70 b1 e7 e8 7c ec 08 e6 65 0b 00 f2 4d b6 b1 22 22 f2 94 b5 e1 85 c7 67 22 b5 1b 05 19 e6 00 03 0b d7 ce 25 2a 25 f2 0e f5 7c 2c c6 b1 11 2c 81 b6 6e d9 b7 d8 22 fe a4 89 8b 0e 56 0f 0c e8 48 59 a9 a6 f2 32 55 ef a8 fd 1a 48 f8 b3 3f d0 21 f9 e2 06 f8 d3 7f a8 5f e9 1a 78 50 7d c2 1b 24 03 32 3b 89 29 0c 5a 3d d8 ca 8f 44 83 4a 27 d0 7e 25 7d 39 6e 4f 64 9a 54 95 08 3e 0a d5 7b 57 16 8f 9b 5d 5e 3a 93 35 47 d2 b9 c6 f3 60 f9 50 06 00 60 7f 26 13 10 71 30 04 a4 27 22 76 4b c4 e9 e3 c5 8e 82 81 d3 39 64 0d 9c 8e 9e 82 52 48 1d 54 d7 8e 2a 9a f2 e2 f8 31 6f d9 2e 4e f9 c1 93 81 56 54 d9 1f Data Ascii: ([]9GWw0:fHZU{M{CJy2J%kU"[IMp\|eM""g"%%\|,,n"VHY2UH?!_xP}$2;)Z=DJ'~%}9nOdT>{W]^:5G`P`&q0'"vK9dRHT*1o.NVT
2024-10-24 13:45:30 UTC	1166	IN	Data Raw: 8b a4 d5 69 bf b2 e6 b0 ea 31 01 0e 02 2e ba fc f1 96 54 f1 26 c5 9b 59 23 6d 7e 27 09 6b ca 45 d2 04 d9 df 91 78 11 57 10 a6 45 61 e3 ec d8 4b 03 63 0c 26 e2 8e 73 88 4e 56 b0 82 d8 91 18 ba 94 34 a4 94 12 26 dd c2 94 1c 45 f6 38 84 3c 02 1c 0f c1 12 a4 fc 80 af c8 12 b2 3e ca 39 05 4f 47 64 35 7d e8 c6 46 43 58 d9 f1 90 ea 25 5f f5 4e 1a a6 b4 0c fb a9 75 d6 28 5c 7f fa 9b ca 3f 89 bd c7 d5 35 81 e8 d7 88 c8 39 0c 01 3c 2f 36 22 bf c8 80 13 b2 91 0f 61 21 85 b3 91 00 46 a2 e8 51 d1 fa 53 b2 7b 34 bb 98 f5 43 d1 e2 b1 68 81 fc 28 6f 8c 15 31 f6 e3 7c 4f 00 51 77 70 c3 87 cf 32 37 72 65 8c 97 a4 7d 54 78 4b 6e 2c a8 90 5e bc 7e 2b e9 36 9f a9 4e 65 e5 84 9c f1 29 b3 ff 34 d9 7c 2f 8e c3 58 54 e1 71 3d 37 d3 35 9d e9 fe 67 a6 d1 f4 7d 0c e9 be a8 68 cd 3d Data Ascii: i1.T&Y#m~'kExWEaKc&sNV4&E8<>9OGd5}FCX%_Nu(\?59</6"a!FQS{4Ch(o1\|OQwp27re}TxKn,^~+6Ne)4\|/XTq=75g}h=
2024-10-24 13:45:30 UTC	1378	IN	Data Raw: d0 a3 55 38 2e f8 6f 93 b0 cb 21 00 c3 c7 65 49 10 41 a2 06 fd 5c 68 5c e0 f4 ae e8 9e dc 4a 0f 76 99 33 00 b3 f1 83 ac e3 1f 7b 75 26 b2 3f 51 b6 d9 22 40 29 43 fa 88 ce 2d e5 3a d9 da e9 19 66 b6 ad d2 7f 75 b3 8f 11 7d a9 78 a4 66 42 bb 75 b9 d9 a2 b3 b8 0e 0b 19 b3 ab 32 0d 48 9b 85 c6 37 77 4b 23 44 ed 10 a9 81 d6 b4 c8 e8 e9 9c f5 52 b2 ee d6 72 7d 27 77 5e a6 7f e2 f0 0c 33 dd f5 69 29 93 ed bc d3 78 c9 0a b3 d3 53 4f 3f 8e 8a 60 31 a2 01 a0 8d 9d be 9e da 85 88 5a f1 8f c1 5e 48 71 c5 30 b8 36 aa 1c 98 58 49 04 0e 8a f0 53 f2 01 cf 6c 6c 2c ce 2c 17 93 1b d3 c8 c2 1c 22 b2 f8 30 1c 63 7b 9c 3b 5a 28 94 2d 42 fa 01 8d b1 6c 75 4b 7a 9a a3 ea 3a f6 1c 80 f4 23 45 ec 0a 03 75 92 2b 52 3d 72 96 a5 19 69 58 d0 7d 3b 26 f3 4c a4 5e a7 9c 32 95 27 fd 53 Data Ascii: U8.o!eIA\h\Jv3{u&?Q"@)C-:fu}xfBu2H7wK#DRr}'w^3i)xSO?`1Z^Hq06XISll,,"0c{;Z(-BluKz:#Eu+R=riX};&L^2'S
2024-10-24 13:45:30 UTC	1378	IN	Data Raw: 7e 75 9e 30 7c a7 33 b7 0a 57 60 a8 33 51 a5 f6 a8 da f5 7d f6 fc 1c 0a 6e e6 71 60 8e 7b e6 34 d1 82 9d 7e 76 ce ae 32 ad 66 72 25 a5 9e 72 31 3d 2b 47 cb 53 9e 5a 5c bf d1 b2 63 81 c2 cb e3 a0 ec e7 d8 e1 61 59 4a 3a 56 d0 de 32 4f 1e 63 11 99 cd 48 b0 d4 a8 3e 6e ef 36 c7 fe a7 ae e4 f8 70 54 04 2b 7a 63 45 ba 8c c7 c6 4e 1f 48 86 e1 d8 d3 83 70 9e 42 c8 bc a7 e4 32 e5 37 65 7e f9 82 27 e5 4c 31 26 a1 28 b4 26 9a 11 d7 9c ac 5d d6 94 94 cf 74 d5 4f a7 59 45 9c 60 f8 a3 ff 97 25 4d 0c b7 2e 94 0d 22 df 74 e0 df 28 e4 ff 9a e1 dd 4c 8d 00 80 c8 21 72 c7 19 e0 2f 1f 06 ba 95 8a 9a 0a 9c a5 47 42 6e 26 09 d6 1c 03 2a bf 75 cc a0 ec 84 a2 49 b9 2e eb 6b 9c 42 e8 a2 c5 79 8c 93 48 75 11 11 1c 12 f5 1f 5e cf 92 c5 74 36 a5 32 88 a3 0e d9 98 44 7a 2b 2b 5b b9 Data Ascii: ~u0\|3W`3Q}nq`{4~v2fr%r1=+GSZ\caYJ:V2OcH>n6pT+zcENHpB27e~'L1&(&]tOYE`%M."t(L!r/GBn&*uI.kByHu^t62Dz++[
2024-10-24 13:45:30 UTC	1378	IN	Data Raw: cb 08 de 69 f3 66 20 22 c2 b2 27 e6 67 34 df 2a 08 ac 9e d9 61 56 5d 4e 4c 44 c6 a0 70 0e 52 35 9b cc 3f 9a 52 44 be b3 e0 23 f7 08 f0 26 46 41 af 02 ca 4b 7c 26 cd 55 89 11 dd 13 e1 e5 77 e8 ba 91 18 b8 4c 1f 7d 02 66 6c 23 cd 95 9d 08 ca e3 e9 c6 8e c7 44 65 d2 d2 41 f5 5d 36 7c 75 f0 f0 7b 54 ae 2e 62 a6 25 2d 88 34 5b 5a 8a 5c f5 e4 53 63 53 f9 ac 0c 90 68 38 e4 a2 11 63 7d 7d 50 42 39 40 24 d5 64 4b 62 2e bc 9a a6 e4 1f fa a5 ce b4 c4 6c a5 b2 77 25 5a a6 49 8c d6 d2 88 3c a5 3f e6 77 56 b6 22 e9 c5 c8 7e 66 c7 72 24 e1 d8 9c aa 2c 58 da 0e 30 23 8c 34 d9 95 d9 a7 0a 89 b3 f6 79 4c b6 c2 dd c9 e2 f6 eb a9 54 ce 83 9b a9 af 1d 47 45 b0 60 d8 43 44 04 e4 83 21 88 48 d6 a1 31 00 0e 10 3d e1 22 e0 63 14 38 46 cc fb 7d d0 40 b8 a5 35 06 01 c0 51 07 40 88 Data Ascii: if "'g4*aV]NLDpR5?RD#&FAK\|&UwL}fl#DeA]6\|u{T.b%-4[Z\ScSh8c}}PB9@$dKb.lw%ZI<?wV"~fr$,X0#4yLTGE`CD!H1="c8F}@5Q@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49812	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:30 UTC	977	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 6514 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:30 UTC	6514	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 39 37 37 37 35 32 38 30 32 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1729777528022",null,null,null,
2024-10-24 13:45:31 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:31 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:31 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49813	142.250.185.110	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:30 UTC	678	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:31 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14486 Date: Thu, 24 Oct 2024 13:45:31 GMT Expires: Thu, 24 Oct 2024 13:45:31 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "8529c25fa9b03753" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:31 UTC	541	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 Data Ascii: f(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b inst
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 6c 3d 61 7d 3b 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 41 3d 5b 5d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d Data Ascii: tion(a){if(x!==x)throw Error("Bad secret");this.l=a};y.prototype.toString=function(){return this.l};new y("about:blank");new y("about:invalid#zClosurez");var A=[],D=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};A.indexOf(D)==
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 73 75 62 73 74 72 28 30 2c 32 38 29 2b 28 62 2e 6c 65 6e 67 74 68 2d 32 38 29 29 2c 63 3d 62 2c 62 3d 48 28 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 5f 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 5f 22 29 7d 3b 76 61 72 20 6e 61 3d 49 28 29 2c 55 3d 5b 5d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 22 2b 61 29 3b 7d 3b 55 2e 70 75 73 Data Ascii: substr(0,28)+(b.length-28)),c=b,b=H(ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function(a){return a.join("__").replace(/\./g,"_").replace(/\-/g,"_").replace(/,/g,"_")};var na=I(),U=[],V=function(a){throw Error("Bad hint: "+a);};U.pus
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 6c 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 Data Ascii: l;var e=function(f){return encodeURIComponent(f).replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix).replace(/%2C/g,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 2b 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 42 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e Data Ascii: +_0-9\/A-Za-z]+={0,2}$/,Ba=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 76 6f 69 64 20 30 3b 74 79 70 65 6f 66 20 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 70 3d 6c 29 3b 76 61 72 20 71 3d 6e 75 6c 6c 2c 7a 3d 21 31 3b 69 66 28 66 26 26 21 6b 7c 7c 21 66 26 26 6b 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 22 3b 0a 6c 3d 48 28 4f 28 63 29 2c 22 72 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 3b 76 61 72 20 47 3d 48 28 4f 28 63 29 2c 22 4c 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 2c 4d 61 3d 4d 2e 6c 65 7c 7c 5b 5d 2c 4b 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 29 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 69 66 28 7a 29 72 Data Ascii: void 0;typeof l=="function"&&(p=l);var q=null,z=!1;if(f&&!k\|\|!f&&k)throw"Timeout requires both the timeout parameter and ontimeout parameter to be set";l=H(O(c),"r",[]).sort();var G=H(O(c),"L",[]).sort(),Ma=M.le\|\|[],K=[].concat(l),la=function(w,B){if(z)r
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 61 2c 62 29 7d 29 7d 3b 55 2e 75 6e 73 68 69 66 74 28 5b 22 75 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 21 61 7c 7c 62 26 26 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 2c 62 3e 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 28 62 29 2e 73 70 6c 69 74 28 22 3a 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 5b 22 61 70 69 22 2c 22 70 6c 61 74 66 6f 72 6d 22 5d 2e 69 6e 63 6c 75 64 65 Data Ascii: a,b){return Fa(function(){return Ia(a,b)})};U.unshift(["url",function(a,b,c){!a\|\|b&&b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=a.lastIndexOf("/")+1,b>=a.length\|\|(a=a.substr(b).split(":").filter(function(d){return!["api","platform"].include
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 5f 65 6d 62 65 64 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 5f 63 69 72 63 6c 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 2b 31 2f 73 68 61 72 65 62 75 74 74 6f 6e 3f 70 6c 75 73 53 68 61 72 65 3d 74 72 75 65 26 75 73 65 67 61 70 69 3d 31 22 7d 2c 72 Data Ascii: ww.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""},url:":socialhost:/:session_prefix::se:_/+1/sharebutton?plusShare=true&usegapi=1"},r
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 69 67 6e 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 2c 6d 65 74 68 6f 64 73 3a 5b 22 6f 6e 61 75 74 68 22 5d 7d 2c 72 62 72 5f 69 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 69 6e 76 69 74 61 74 69 6f 6e 22 7d 2c 73 68 61 72 65 3a 7b 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f Data Ascii: {params:{url:""},url:":socialhost:/:session_prefix:_/widget/render/signin?usegapi=1",methods:["onauth"]},rbr_i:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarinvitation"},share:{url:":socialhost:/:session_prefix::im_prefix:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49815	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:30 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:31 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:31 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49816	172.217.16.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:30 UTC	699	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:31 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Thu, 24 Oct 2024 13:45:31 GMT Expires: Thu, 24 Oct 2024 13:45:31 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:31 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-10-24 13:45:31 UTC	1378	IN	Data Raw: b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 Data Ascii: /E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC
2024-10-24 13:45:31 UTC	1085	IN	Data Raw: d1 32 23 1c 00 ad 4b 7d 21 37 c0 72 a7 aa c3 51 27 9d 0b b8 a7 68 d0 ee ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa Data Ascii: 2#K}!7rQ'hP7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49819	142.250.185.110	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:31 UTC	799	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:32 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 75049 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 22 Oct 2024 18:07:49 GMT Expires: Wed, 22 Oct 2025 18:07:49 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 157063 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:32 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-10-24 13:45:32 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49822	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:32 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:32 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:32 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:32 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49825	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:33 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:33 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:33 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:33 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:33 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49826	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:34 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:34 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:34 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:34 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:34 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49829	142.250.185.206	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:34 UTC	1176	OUT	POST /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/docos/p/sync?resourcekey&id=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive Content-Length: 75 X-Build: apps-fileview.texmex_20241017.01_p4 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Client-Deadline-Ms: 20000 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:34 UTC	75	OUT	Data Raw: 70 3d 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 32 32 31 36 30 66 67 51 2d 47 73 53 35 68 30 76 56 6e 38 67 66 71 66 77 43 67 63 31 61 55 74 31 66 54 33 25 32 32 25 35 44 Data Ascii: p=%5Bnull%2Cnull%2Cnull%2Cnull%2C%22160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3%22%5D
2024-10-24 13:45:35 UTC	724	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:35 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:35 UTC	49	IN	Data Raw: 32 62 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 73 72 22 2c 6e 75 6c 6c 2c 31 37 32 39 37 37 36 39 33 35 35 38 30 5d 2c 5b 22 64 69 22 2c 31 34 5d 5d 0d 0a Data Ascii: 2b)]}'[["sr",null,1729776935580],["di",14]]
2024-10-24 13:45:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49832	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:34 UTC	977	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5759 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:34 UTC	5759	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 32 39 37 37 37 35 33 33 32 39 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1729777533290",null,null,null,
2024-10-24 13:45:34 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:34 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:34 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49766	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:34 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BCPLSTVwsPuYU48&MD=nZ+VTOXt HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 13:45:35 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 87125d63-f21c-4576-879f-031144d54acf MS-RequestId: 8f5c29e6-7787-4fe9-9c29-1af5f07d6389 MS-CV: Lk8UfFx3gUqYwto3.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 13:45:34 GMT Connection: close Content-Length: 24490
2024-10-24 13:45:35 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 13:45:35 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49835	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:36 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:36 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:36 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:36 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49842	142.250.186.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:37 UTC	752	OUT	GET /file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3/docos/p/sync?resourcekey&id=160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:38 UTC	862	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 13:45:38 GMT Content-Type: text/html; charset=utf-8 Content-Security-Policy: script-src 'report-sample' 'nonce-LP47m0rPCRiD3hVkQmuE1Q' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Referrer-Policy: strict-origin-when-cross-origin Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:38 UTC	516	IN	Data Raw: 62 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c Data Ascii: bdb<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><
2024-10-24 13:45:38 UTC	1378	IN	Data Raw: 30 72 4e 53 68 2d 66 4b 59 32 79 73 42 35 66 41 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6c 66 71 56 42 6e 30 72 4e 53 68 2d 66 4b 59 32 79 73 42 35 66 41 22 3e 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2a 20 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2a 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 23 64 72 69 76 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 31 38 70 78 Data Ascii: 0rNSh-fKY2ysB5fA"><style nonce="lfqVBn0rNSh-fKY2ysB5fA">.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}#drive-logo{margin:18px
2024-10-24 13:45:38 UTC	1148	IN	Data Raw: 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 38 30 70 78 3b 22 3e 3c 64 69 76 20 69 64 3d 22 64 72 69 76 65 2d 6c 6f 67 6f 22 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 69 6d 67 22 20 74 69 74 6c 65 3d 22 47 6f 6f 67 6c 65 20 6c 6f 67 6f 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 74 65 78 74 22 3e 26 6e 62 73 70 3b 44 72 69 76 65 3c 2f 73 70 61 6e 3e 3c Data Ascii: ></head><body><div id="outerContainer"><div id="innerContainer"><div style="position: absolute; top: -80px;"><div id="drive-logo"><a href="/"><span class="docs-drivelogo-img" title="Google logo"></span><span class="docs-drivelogo-text"> Drive</span><
2024-10-24 13:45:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49844	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:37 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:37 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:37 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:37 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49871	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:44 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 13:45:45 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:44 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49873	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:44 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 13:45:45 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:45 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49845	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:45 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 519 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:45 UTC	519	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 37 37 35 34 33 32 39 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729777543291",null,null,null
2024-10-24 13:45:45 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:45 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:45 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49846	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:45 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 519 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:45 UTC	519	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 37 37 35 34 33 34 30 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729777543407",null,null,null
2024-10-24 13:45:45 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:45 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:45 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49879	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:46 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:46 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:46 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:46 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:46 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49882	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:47 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:47 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:47 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:47 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:47 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49884	142.250.185.228	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:47 UTC	1222	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:47 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 12:53:20 GMT Expires: Fri, 01 Nov 2024 12:53:20 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 3147 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:47 UTC	673	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-24 13:45:47 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-24 13:45:47 UTC	1378	IN	Data Raw: a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{d
2024-10-24 13:45:47 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-24 13:45:47 UTC	623	IN	Data Raw: 00 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49885	172.217.16.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:49 UTC	651	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:49 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 12:53:20 GMT Expires: Fri, 01 Nov 2024 12:53:20 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 3149 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:49 UTC	673	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-24 13:45:49 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-24 13:45:49 UTC	1378	IN	Data Raw: a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{d
2024-10-24 13:45:49 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-24 13:45:49 UTC	623	IN	Data Raw: 00 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49886	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:52 UTC	1307	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:52 UTC	1246	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 32 39 37 37 37 35 34 30 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1729777540000",null,null,null,
2024-10-24 13:45:52 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:45:52 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:45:52 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:45:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49887	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:45:53 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:45:53 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:45:53 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:45:53 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:45:53 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49890	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:06 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:06 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:06 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 89fa8e61-601e-0070-0c14-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134606Z-r197bdfb6b429k2s6br3k49qn40000000500000000008mh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:06 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 13:46:06 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49893	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:07 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134607Z-r197bdfb6b42sc4ddemybqpm140000000pe000000000bz4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:07 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49891	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134607Z-16849878b78jfqwd1dsrhqg3aw00000007s000000000n3ch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49892	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:07 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134607Z-16849878b787psctgubawhx7k800000007m000000000cnty x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49895	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:07 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134607Z-16849878b78c2tmb7nhatnd68s00000007s000000000fbbc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49894	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 1cf92a68-e01e-000c-57f4-248e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134607Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000c5000000000d1tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49896	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:08 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 83a5bbbc-601e-005c-5bad-24f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134608Z-15b8d89586fs9clcgrr6f2d6vg00000001w0000000000bqy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49898	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:08 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e5972945-801e-007b-45f3-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134608Z-15b8d89586fnsf5zm1ryrxu0bc000000037000000000csc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49899	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:08 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:08 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: f2ab8105-101e-0065-6df4-244088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134608Z-r197bdfb6b4h2vctng0a0nubg80000000b00000000003810 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:08 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49900	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:08 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:08 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134608Z-15b8d89586fs9clcgrr6f2d6vg00000001vg0000000024su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:08 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49897	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:08 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5ab32e4-501e-00a3-0f09-25c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134608Z-r197bdfb6b4t7wszdvrfk02ah400000009a000000000ctdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49901	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 084af2c2-c01e-0079-58fc-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134609Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000c4g00000000fny8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49902	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8c2da7e0-f01e-003c-2116-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134609Z-r197bdfb6b46gt25anfa5gg2fw00000003c0000000003bg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49903	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:09 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134609Z-16849878b78dsttbr1qw36rxs800000007s000000000g2pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49904	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:09 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:09 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134609Z-16849878b787sbpl0sv29sm89s00000007wg00000000acyx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49905	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:09 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7c0b2bc5-f01e-00aa-35ef-248521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134609Z-15b8d89586flzzks5bs37v2b9000000003dg000000005q17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49906	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89a40fd7-b01e-00ab-1aad-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134610Z-15b8d89586f8nxpt5xx0pk7du80000000510000000001v3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49907	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134610Z-16849878b785f8wh85a0w3ennn00000007r000000000eawg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49908	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:10 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:10 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134610Z-16849878b786vsxz21496wc2qn00000007w000000000bkhd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49909	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:10 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:10 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 241b467f-801e-0015-2b13-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134610Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000c4g00000000fp1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:10 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49910	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134610Z-16849878b78bkvbz1ry47zvsas00000007sg00000000eakt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49912	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:11 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2ab53e8b-001e-0066-7ef2-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134611Z-r197bdfb6b4kkm8440c459r6k800000001y0000000007twc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49914	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:11 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8e7d8b57-101e-007a-1df4-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134611Z-r197bdfb6b4t7wszdvrfk02ah400000009bg000000007se3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49913	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:11 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:11 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bbff353d-b01e-005c-270e-264c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134611Z-16849878b785f8wh85a0w3ennn00000007sg000000009pz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 13:46:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49915	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:11 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:11 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: e5cf95c3-101e-0046-32f2-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134611Z-15b8d89586ff5l62quxsfe8ugg0000000e40000000002wbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:11 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49911	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:11 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 66eaddbf-601e-0084-58ff-256b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134611Z-r197bdfb6b429k2s6br3k49qn400000004y000000000f7s6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49917	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:12 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:12 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 33373380-a01e-003d-4cf5-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134612Z-15b8d89586fhl2qtatrz3vfkf000000004zg000000004yc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:12 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49918	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0124f848-201e-003f-38ad-246d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134612Z-15b8d89586fcvr6p5956n5d0rc00000004wg0000000071e4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49920	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:12 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 56a14f83-001e-002b-1ff2-2499f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134612Z-r197bdfb6b4sn8wg20e97vn7ps0000000pd0000000007zwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49919	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134612Z-16849878b78c5zx4gw8tcga1b400000007mg00000000fvqm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49921	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:12 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:12 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134612Z-16849878b78hz7zj8u0h2zng1400000007x0000000008se6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49923	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:13 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134613Z-16849878b78hz7zj8u0h2zng1400000007y0000000006506 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49922	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:13 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:13 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134613Z-16849878b78fmrkt2ukpvh9wh400000007p000000000hg5u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:13 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49924	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:13 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134613Z-16849878b78p6ttkmyustyrk8s00000007rg000000006dug x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49926	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:13 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:13 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e7f2251b-001e-0017-4fad-240c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134613Z-15b8d89586ffsjj9qb0gmb1stn0000000390000000009k94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:13 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49925	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:13 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 03f0a5af-d01e-007a-76f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134613Z-r197bdfb6b42sc4ddemybqpm140000000pgg000000008tr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49927	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:14 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:14 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134614Z-15b8d89586fhl2qtatrz3vfkf000000004zg000000004yfs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:14 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49928	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:14 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134614Z-16849878b78mhkkf6kbvry07q000000007sg000000002tm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49929	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:14 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134614Z-15b8d89586fwzdd8urmg0p1ebs000000096000000000hnc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49930	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:14 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:14 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 13d0f17b-b01e-0053-80f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134614Z-15b8d89586fcvr6p5956n5d0rc00000004tg00000000ctpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:14 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49931	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:14 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 6764be4f-301e-0099-1efc-246683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134614Z-r197bdfb6b4qpk6v9629ad4b5s0000000ca000000000htsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49932	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:15 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:15 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: e5dab064-101e-0046-04f5-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134615Z-r197bdfb6b4h2vctng0a0nubg80000000ax000000000cxpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:15 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49933	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:15 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:15 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 71363f0e-d01e-0065-7af4-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134615Z-r197bdfb6b4kzncf21qcaynxz800000001x000000000fxzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:15 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49935	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:15 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:15 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134615Z-16849878b789m94j7902zfvfr000000007pg00000000cbrw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:15 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49936	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:15 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134615Z-16849878b78wx8xv81xhtuunw800000000g0000000009byc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49934	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:15 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:15 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 80264404-901e-002a-13ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134615Z-15b8d89586fx2hlt035xdehq580000000eg000000000d02n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:15 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49943	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:16 UTC	1290	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1026 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:46:16 UTC	1026	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 31 30 32 30 2e 30 38 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 30 2c 30 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_identityfrontendauthuiserver_20241020.08_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,0,0
2024-10-24 13:46:16 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:46:16 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:46:16 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:46:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49937	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:16 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:16 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134616Z-16849878b78c2tmb7nhatnd68s00000007t000000000e4h7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49939	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:16 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 700672c4-201e-0096-3cf2-24ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134616Z-r197bdfb6b4vlqfn9hfre6k1s80000000cp0000000004wza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49941	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:16 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 531fb3e5-001e-00a2-2356-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134616Z-r197bdfb6b4h2vctng0a0nubg80000000b0g000000000vn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49940	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:16 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134616Z-15b8d89586fqj7k5uht6e8nnew0000000e2g000000001gu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49938	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:16 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9f494126-c01e-008e-09f4-247381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134616Z-15b8d89586f6nn8zquf2vw6t5400000004x000000000b6k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49944	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:17 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 40a513cc-e01e-0051-0ef3-2484b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134617Z-r197bdfb6b4lbgfqwkqbrm672s00000001mg000000006363 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49947	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:17 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 9121e195-401e-005b-48f2-249c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134617Z-r197bdfb6b4tq6ldv3s2dcykm800000001gg00000000mnyg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49945	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:17 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 02f2a2dc-901e-0064-11fc-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134617Z-15b8d89586fqj7k5uht6e8nnew0000000dx000000000dr0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49946	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:17 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134617Z-15b8d89586fdmfsg1u7xrpfws000000003d000000000690f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49948	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6a252cba-901e-0029-59f2-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134618Z-r197bdfb6b4gx6v9pg74w9f47s00000000tg00000000kwru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49950	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:18 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:18 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134618Z-15b8d89586f6nn8zquf2vw6t5400000004tg00000000hpgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49949	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:18 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:18 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134618Z-16849878b78j5kdg3dndgqw0vg00000000x0000000002wxt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:18 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49952	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134618Z-16849878b785g992cz2s9gk35c00000007pg00000000p8hx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49951	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:18 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:18 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134618Z-16849878b788tnsxzb2smucwdc00000007r000000000k8fv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:18 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49955	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1b3e59d2-d01e-0017-05f8-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134618Z-r197bdfb6b4qpk6v9629ad4b5s0000000cag00000000kaya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 13:46:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49953	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6a9fe61e-e01e-001f-0a16-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134618Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000c7g000000005d68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:19 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49956	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134618Z-16849878b78bkvbz1ry47zvsas00000007v0000000008bhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49954	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:18 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134619Z-16849878b785f8wh85a0w3ennn00000007ng00000000mcnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49957	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134619Z-16849878b785f8wh85a0w3ennn00000007ng00000000mcnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49959	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:19 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134619Z-16849878b78lhh9t0fb3392enw00000007sg00000000267d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49958	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:19 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: fffa9526-501e-0035-49f2-24c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134619Z-r197bdfb6b46gt25anfa5gg2fw000000037000000000hnc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 13:46:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49960	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:19 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134619Z-16849878b78gvgmlcfru6nuc5400000007rg00000000d0c3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:19 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49962	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:19 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134619Z-16849878b78k8q5pxkgux3mbgg00000007mg00000000p1a5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49961	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:20 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134620Z-r197bdfb6b4h2vctng0a0nubg80000000b0g000000000vud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49964	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:20 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d2bab0c5-801e-0078-24f3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134620Z-r197bdfb6b4t7wszdvrfk02ah400000009d0000000003vx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49963	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 952379c8-801e-0083-0604-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134620Z-15b8d89586f989rks44whx5v7s0000000e4000000000ex0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 13:46:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49965	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:20 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 39b78571-501e-0016-43f4-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134620Z-15b8d89586fxdh48qknu9dqk2g000000032g000000009cah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49966	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:20 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:20 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134620Z-15b8d89586f2hk28h0h6zye26c00000001k000000000ab3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:20 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49967	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:20 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4f86bdfb-c01e-00ad-5e84-25a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134621Z-15b8d89586fvk4kmwqg9fgbkn800000003a000000000d3kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49968	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:21 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:21 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134621Z-16849878b787c9z7hb8u9yysp000000007s000000000pft9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:21 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49969	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:21 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:21 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 26247a46-101e-000b-3298-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134621Z-15b8d89586fxdh48qknu9dqk2g0000000330000000008prx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:21 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49970	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:21 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:21 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0856d5df-001e-00ad-56f3-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134621Z-r197bdfb6b4kzncf21qcaynxz80000000210000000005f0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:21 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49972	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:21 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:21 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 5a802a50-001e-0049-3f00-255bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134621Z-15b8d89586fhl2qtatrz3vfkf000000004yg000000007fak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:22 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49971	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:22 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:22 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134622Z-16849878b78lhh9t0fb3392enw00000007k000000000mcat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 13:46:22 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49973	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:22 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 766 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:46:22 UTC	766	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 37 37 35 38 30 39 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729777580936",null,null,null
2024-10-24 13:46:22 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:46:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:46:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:46:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49977	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:22 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:23 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 39bddb46-501e-0016-72f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134623Z-15b8d89586f2hk28h0h6zye26c00000001eg00000000h5tg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 13:46:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49976	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:22 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134623Z-15b8d89586f42m673h1quuee4s000000032000000000hn22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49974	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:22 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:23 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:23 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134623Z-16849878b78rjhv97f3nhawr7s00000007n000000000m66y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:23 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49975	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:22 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:23 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: e5966728-801e-007b-2bf2-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134623Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000c700000000072e7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:23 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49978	142.250.186.46	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:23 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 743 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:46:23 UTC	743	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 37 37 35 38 31 31 39 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729777581195",null,null,null
2024-10-24 13:46:23 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 24 Oct 2024 13:46:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 13:46:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-24 13:46:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49979	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:23 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:24 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7902e772-301e-0000-2ff3-24eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134624Z-15b8d89586fwzdd8urmg0p1ebs00000009d0000000002b4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:24 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49980	142.250.185.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:24 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=VgBQ6hzANLvVU-zWgQWTB_XGxb333XsMOS3YFYKnqk0wsjultQpO3xKV9SEhs19l6WeNA2b4nZlJZ3YB6BAuGUFn01dbjOy5vUEm_YdsCJUxP_WkLzjmlXL-5ytbRLASoxJuiX2E_bXS5HLCt131qK1QHJBcpuhR6uCoz6b66uktu4jTQNQQOZgXSQA
2024-10-24 13:46:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 24 Oct 2024 13:46:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 13:46:24 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-24 13:46:24 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49981	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:24 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:24 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 33ffbe2f-201e-0085-3800-2534e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134624Z-15b8d89586frzkk2umu6w8qnt80000000e7000000000cgmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:24 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49982	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:24 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e3e5e386-001e-0014-4ffc-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134624Z-r197bdfb6b4lbgfqwkqbrm672s00000001gg00000000f5qu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49984	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:24 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:24 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 2abba737-001e-0066-7df4-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134624Z-15b8d89586flspj6y6m5fk442w00000004vg000000006wa3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 13:46:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49983	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:24 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 53594826-c01e-0082-6cf3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134624Z-r197bdfb6b49q495mwyebb3r6s0000000aqg00000000g7dz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49985	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:24 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:24 UTC	591	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 14889e7f-701e-0053-13f2-253a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134624Z-16849878b78hz7zj8u0h2zng1400000007tg00000000gr9g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-24 13:46:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49988	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:25 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:25 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134625Z-16849878b785g992cz2s9gk35c00000007x00000000015zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:25 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49987	13.107.246.51	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 13:46:25 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 13:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 13:46:25 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 998f428a-101e-007a-649d-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T134625Z-15b8d89586frzkk2umu6w8qnt80000000eb00000000042c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 13:46:25 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Target ID:	0
Start time:	09:45:05
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:45:09
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:45:12
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:45:43
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3968 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	09:45:43
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4108 --field-trial-handle=2188,i,7568562245933674214,12244878635819359016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
https://drive.google.com/file/d/160fgQ-GsS5h0vVn8gfqfwCgc1aUt1fT3