Edit tour

Windows Analysis Report
https://bit.ly/va-voter-purge-c3

Overview

General Information

Sample URL:	https://bit.ly/va-voter-purge-c3
Analysis ID:	1545680
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2000,i,12394513158791230368,16446170916052114903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bit.ly/va-voter-purge-c3" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 906sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: https://docs.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U

Source: chromecache_288.2.dr	String found in binary or memory: http://support.google.com/docs?p=labs-help
Source: chromecache_288.2.dr	String found in binary or memory: http://support.google.com/docs?p=labs-privacy
Source: chromecache_309.2.dr	String found in binary or memory: http://support.google.com/drive/?hl=en&p=anonymous_users
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: http://support.google.com/drive/?p=restore_trash_collab
Source: chromecache_288.2.dr, chromecache_290.2.dr, chromecache_214.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_206.2.dr, chromecache_261.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_261.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: chromecache_290.2.dr, chromecache_328.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_288.2.dr	String found in binary or memory: https://accountlinking-pa.clients6.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://accountlinking-pa.googleapis.com
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_257.2.dr, chromecache_251.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_257.2.dr, chromecache_251.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_257.2.dr, chromecache_328.2.dr, chromecache_251.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://apis.google.com/js/client.js?jsmode=DU
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_288.2.dr	String found in binary or memory: https://autopush.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://calendar.google.com/calendar
Source: chromecache_288.2.dr	String found in binary or memory: https://calendar.google.com/calendar/:authuser/companion
Source: chromecache_288.2.dr	String found in binary or memory: https://calendar.google.com/calendar/:authuser/companionedit
Source: chromecache_288.2.dr	String found in binary or memory: https://calendar.google.com/calendar/r
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://calendar.google.com/calendar/r/day/
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://calendar.google.com/calendar/r/eventedit
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://calendar.google.com/calendar/r?eid=
Source: chromecache_288.2.dr	String found in binary or memory: https://chat.google.com/room/
Source: chromecache_210.2.dr, chromecache_283.2.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/
Source: chromecache_257.2.dr, chromecache_251.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://cloud.google.com/terms/cloud-privacy-notice
Source: chromecache_288.2.dr	String found in binary or memory: https://cloudsearch.googleapis.com/v1/query/search
Source: chromecache_214.2.dr	String found in binary or memory: https://contacts.google.com
Source: chromecache_214.2.dr	String found in binary or memory: https://contacts.google.com/contact/
Source: chromecache_214.2.dr	String found in binary or memory: https://contacts.google.com/widget/companion
Source: chromecache_257.2.dr, chromecache_251.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_288.2.dr	String found in binary or memory: https://daily-0.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://daily-1.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://daily-2.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://daily-3.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://daily-4.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://daily-5.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://daily-6.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://dev-workspaceui-pa-googleapis.corp.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://docs.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://docs.google.com/document/d/1SzAxs6HDSH1zNGEVCmGwZQR1cxdQI8-33mpYgl6Q1jE/r/0-5tmxJv1j5g5hY7dg
Source: chromecache_288.2.dr	String found in binary or memory: https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://docs.google.com/picker
Source: chromecache_288.2.dr	String found in binary or memory: https://docs.google.com/requestreview?id=
Source: chromecache_289.2.dr, chromecache_224.2.dr	String found in binary or memory: https://docs.google.com/reserved/grammar/docs/docs/basic-commands
Source: chromecache_289.2.dr, chromecache_224.2.dr	String found in binary or memory: https://docs.google.com/reserved/spoken_emoji
Source: chromecache_289.2.dr, chromecache_224.2.dr	String found in binary or memory: https://docs.google.com/reserved/spoken_punc
Source: chromecache_288.2.dr	String found in binary or memory: https://docs.google.com/support/bin/answer.py?hl=
Source: chromecache_257.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_288.2.dr	String found in binary or memory: https://drawings.google.com
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_288.2.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://drive.google.com/open?id=
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://drive.sandbox.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://embed.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://firebasestorage.googleapis.com/v0/b/design-spec/o/projects%2Fworkspace-design-system%2Fimage
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_290.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/latest/1f382/emoji.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/add_to_drive/v16/white-24dp/1x/gm_add_to_drive_whi
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/exit_to_app/v13/24px.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/file_download/v9/white-24dp/1x/gm_file_download_wh
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/web-64dp/logo_maps_color_2x_web_64dp.png
Source: chromecache_288.2.dr	String found in binary or memory: https://forms.gle/UPhmo8AHDibn457p8
Source: chromecache_288.2.dr	String found in binary or memory: https://gemini.google.com/gems/view
Source: chromecache_288.2.dr	String found in binary or memory: https://github.com/deanm/omggif
Source: chromecache_288.2.dr	String found in binary or memory: https://google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://gsuite.google.com/products/chat/
Source: chromecache_214.2.dr	String found in binary or memory: https://hangouts.google.com/hangouts/_/
Source: chromecache_288.2.dr	String found in binary or memory: https://inputtools.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id842842640?pt=9008&ct=docs_mo&mt=8
Source: chromecache_288.2.dr	String found in binary or memory: https://jmt17.google.com/log
Source: chromecache_290.2.dr, chromecache_214.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_288.2.dr	String found in binary or memory: https://mail.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://meet-dev.corp.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://myaccount-autopush.corp.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://myaccount-dev.corp.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://myaccount-staging.corp.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://myaccount.google.com
Source: chromecache_214.2.dr	String found in binary or memory: https://myaccount.google.com/birthday
Source: chromecache_214.2.dr	String found in binary or memory: https://myaccount.google.com/profile/name/edit?hl=
Source: chromecache_214.2.dr	String found in binary or memory: https://myaccount.google.com/profile?hl=
Source: chromecache_288.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_288.2.dr	String found in binary or memory: https://oauth-redirect-sandbox.googleusercontent.com
Source: chromecache_288.2.dr	String found in binary or memory: https://oauth-redirect-test.googleusercontent.com
Source: chromecache_288.2.dr	String found in binary or memory: https://oauth-redirect.googleusercontent.com
Source: chromecache_288.2.dr	String found in binary or memory: https://one.google.com/plans
Source: chromecache_288.2.dr	String found in binary or memory: https://one.google.com/storage
Source: chromecache_288.2.dr	String found in binary or memory: https://one.google.com/storage/management
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_166.2.dr, chromecache_293.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_214.2.dr, chromecache_328.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_288.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.google.android.apps.docs.editors.docs&referrer=utm
Source: chromecache_257.2.dr, chromecache_251.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_257.2.dr, chromecache_251.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_288.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_288.2.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en
Source: chromecache_288.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_288.2.dr	String found in binary or memory: https://policies.google.com/terms?hl=en
Source: chromecache_288.2.dr	String found in binary or memory: https://preprod.meet.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://sheets.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_288.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_288.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://slides.google.com
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/approvals/images/approvals_reset.png
Source: chromecache_270.2.dr, chromecache_265.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/abstract_01.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/abstract_02.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/abstract_03.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/abstract_04.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/abstract_05.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/nature_01.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/nature_02.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/nature_03.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/nature_04.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/nature_05.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/symbolic_01.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/travel_01.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/travel_02.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/work_01.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/work_02.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/work_03.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/work_04.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/work_05.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/work_06.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/cover-image-gen-ai/work_07.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/docs-ai-image-promo.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/docs_gemini_ai.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-animated-pageless-promo.gif
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-cover-image-alt-text-sidebar-empty-view.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-cover-image-magic-bar-preview-english.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-cover-image-magic-bar-preview-i18n.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-cover-image-promo.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-docgen-preset-launch-plan.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-docgen-preset-meeting-notes-2.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-docgen-preset-newsletter-2.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-docgen-preset-onboarding.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-docgen-preset-planner.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-docgen-preset-project-roadmp.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/documents/images/kix-docgen-splash.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/no_style.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_1.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_10.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_11.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_12.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_13.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_14.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_15.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_2.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_5.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_6.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_8.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_9.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-abstract-triangle.
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-boat-sea.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-bouquet-flowers.jp
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-butterfly-dress.jp
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cactus-concrete.jp
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cat-astronaut.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cherry-blossoms.jp
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cherry-pie.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-coffee-and-vase.jp
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-colorful-lightbulb
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cosmic-galaxy.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cotton-candy-candl
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-crocheted-corgi.jp
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cube-sundae.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-duck-boots.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-einstein-water.jpe
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-empire-state.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-factory-smoke.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-fantasy-castle.jpe
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-fjord-landscape.jp
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-gnomes.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-island.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-ivy-archway.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-jellyfish-painting
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-kitchen-design.jpe
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-light-on-tree.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-light-window.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-lily-plasma.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-marketplace-fruit.
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-motorbike.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-oraganized-closet.
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-orange-flower-hear
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-phoenix.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-pink-arches.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-poodle.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-popsicle.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-rainforest-waterfa
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-red-truck.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-rusted-robot.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-sailboat-fantasy.j
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-scottish-cat.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-sloth-latte.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-smoke-manga.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-snow-mountain.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-spaceship-red-plan
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-tacos.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-tahoe.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-teddy-warrior.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-treehouse-city.jpe
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-unicorn-lamp.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-watermelon-chair.j
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-whale.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-white-sneakers.jpe
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-zen-stones.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/abstract-triangle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/boat-sea.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/bouquet-flowers.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/butterfly-dress.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cactus-concrete.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cat-astronaut.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cherry-blossoms.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cherry-pie.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/coffee-and-vase.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/colorful-lightbulb.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cosmic-galaxy.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cotton-candy-candle.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/crocheted-corgi.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cube-sundae.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/duck-boots.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/einstein-water.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/empire-state.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/factory-smoke.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/fantasy-castle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/fjord-landscape.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/gnomes.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/island.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/ivy-archway.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/jellyfish-painting.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-arches.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-astronaut.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-boutique.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-cactus.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-candle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-castle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-cherry-blossom.
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-cherry-pie.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-city.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-closet.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-coffee-shop-wor
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-coffee-walking.
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-coffee.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-corgi.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-cube-sundae.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-dress.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-duck.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-empire-state.pn
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-factory.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-fantasy-boat.pn
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-fjord.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-fruits.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-galaxy.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-garden.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-heart-hologram.
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-island.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-jellyfish.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-kitchen.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-light-window.pn
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-lightbulb.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-lily.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-man-gazing-suns
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-man-in-bookstor
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-motocycle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-mountain.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-music-festival.
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-phoenix.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-poodle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-popsicle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-red-truck.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-robot.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-sailboat.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-scottish-cat.pn
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-sloth.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-sneakers.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-south-asian.jpg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-spaceship.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-steampunk.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-stone.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-tacos.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-tahoe.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-teddy-bear.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-unicorn.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-vines.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-watermelon-chai
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-whale.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-woman-cooking.j
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-woman-selfie.jp
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/juno-workers-celebra
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/juno/orange-heart.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/kitchen-design.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/light-on-tree.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/light-window.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/lily-plasma.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/marketplace-fruit.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/moterbike.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/orange-flower-heart.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/organized-closet.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/phoenix.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/pink-arches.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/poodle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/popsicle.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/rainforest-waterfall.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/red-truck.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/rusted-robot.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/sailboat-fantasy.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/scottish-cat.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/sloth-latte.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/smoke-manga.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/snow-mountain.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/spaceship-red-planet.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/tacos.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/tahoe.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/teddy-warrior.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/treehouse-city.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/unicorn-lamp.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/watermelon-chair.jpeg
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/whale.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/white-sneakers.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/zen-stones.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/surprise_me.svg
Source: chromecache_166.2.dr, chromecache_293.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/workflows/logo.png
Source: chromecache_166.2.dr, chromecache_293.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_264.2.dr, chromecache_309.2.dr, chromecache_214.2.dr, chromecache_280.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/a/?p=disable_docs#topic=4388346
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/a/answer/10411339
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/a/answer/33864
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/a/answer/9275380
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/a/users/?p=docs_training
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/a/users/answer/10992111
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/a/users/answer/9300311#createorimport
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/a?p=advanced-settings-data-regions
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/calendar/#topic=3417969
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/chat/#topic=7649317
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/187443
Source: chromecache_288.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/cloud/answer/9110914
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/contacts
Source: chromecache_214.2.dr	String found in binary or memory: https://support.google.com/contacts/?p=birthday
Source: chromecache_290.2.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/?p=
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/?p=before-using-ai
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/?p=disable_download
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/?p=editors_encryption
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/?p=labs-opt-out
Source: chromecache_210.2.dr, chromecache_283.2.dr	String found in binary or memory: https://support.google.com/docs/?p=prevent_download
Source: chromecache_288.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/?p=third-party-chips
Source: chromecache_288.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/?p=unrecognized_words
Source: chromecache_289.2.dr, chromecache_224.2.dr	String found in binary or memory: https://support.google.com/docs/?p=voice_typing
Source: chromecache_290.2.dr	String found in binary or memory: https://support.google.com/docs/answer/
Source: chromecache_288.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/answer/10519333
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/10519333#zippy=
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/answer/12014036
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/12315692
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/13447609
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/14206696
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/14355406?hl=en&ref_topic=13951627&sjid=14870146535665295631-N
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/14925782
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/answer/183965
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/190843
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/190843#compare_documents
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/answer/2494822#share_with_many_people
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs/answer/2494893
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/answer/6055139
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/answer/62754#regular_expressions
Source: chromecache_290.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs/answer/7505592
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=GSM_migration
Source: chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs?p=add_encryption
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=custom-building-blocks
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=embedded_tables&hl=
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/docs?p=follow_a_collaborator
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=gemini-help-me-visualize
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=gemini-help-me-write
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=gemini-proofread
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=gemini-sidepanel
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=gemini_docs_hmv
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=headers_footnotes
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=help-me-visualize
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=labs-gemini-sidepanel
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=labs-help
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=labs-privacy
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=labs-proofread
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=labs_docs_hmv
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=pageless_docs
Source: chromecache_289.2.dr, chromecache_224.2.dr	String found in binary or memory: https://support.google.com/docs?p=speech_privacy
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=tasks_in_docs
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=vids_image_generation_gemini
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=vids_image_generation_labs
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/docs?p=watermarks
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/drive
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/drive/?hl=en
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/drive/?p=drive_only
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/drive/answer/179622?p=docs_image_search
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/drive/answer/37603
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/drive/answer/9387535
Source: chromecache_290.2.dr	String found in binary or memory: https://support.google.com/drive?p=comment_troubleshoot
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.google.com/drive?p=saving_errors
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/drive?p=work_with_files
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/hangoutschat/#topic=7649316
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/help_center?p=gemini_cover_image
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/help_center?p=insert_cover_image
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/help_center?p=labs_cover_image
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/keep/#topic=6262468
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/mail/answer/10079371
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/mail?p=smart-feature-settings
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/maps
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/meet/answer/14754931
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/tasks
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/tasks/?p=tasks_new
Source: chromecache_288.2.dr	String found in binary or memory: https://support.google.com/voice
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/disable-or-remove-add-ons
Source: chromecache_288.2.dr	String found in binary or memory: https://tasks.google.com/
Source: chromecache_288.2.dr	String found in binary or memory: https://test-www.sandbox.googleapis.com/discovery/v1/apis/drive/v3/rest
Source: chromecache_288.2.dr	String found in binary or memory: https://today.meet.google.com
Source: chromecache_210.2.dr, chromecache_283.2.dr, chromecache_164.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_288.2.dr	String found in binary or memory: https://voice.google.com/u/0/about
Source: chromecache_288.2.dr	String found in binary or memory: https://whereabouts.corp.google.com/about
Source: chromecache_288.2.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://workspace.google.com/
Source: chromecache_257.2.dr, chromecache_251.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_288.2.dr	String found in binary or memory: https://workspace.google.com/labs-sign-up/u/
Source: chromecache_288.2.dr	String found in binary or memory: https://workspace.google.com/marketplace/myapps
Source: chromecache_288.2.dr	String found in binary or memory: https://workspaceui-pa.clients6.google.com
Source: chromecache_166.2.dr, chromecache_293.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/calendar/about/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=YmxuY2w5M2JlcG1obmpqOWNxbHFsMjBxZ2lfMjAyMTA1MjVUMTcwMDAwWi
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/docs/about
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/drive/
Source: chromecache_288.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/privacy/
Source: chromecache_288.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/terms/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/keep/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/maps/about
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/policies/privacy/
Source: chromecache_290.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/sheets/about
Source: chromecache_288.2.dr	String found in binary or memory: https://www.google.com/slides/about
Source: chromecache_264.2.dr, chromecache_309.2.dr, chromecache_214.2.dr, chromecache_280.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_257.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_257.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_288.2.dr	String found in binary or memory: https://www.googleapis.com/discovery/v1/apis/drive/v3/rest
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/companion/icon_assets/calendar_2020q4_2x.png
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/companion/icon_assets/logo_calendar_2020q4_64dp.svg
Source: chromecache_210.2.dr, chromecache_283.2.dr	String found in binary or memory: https://www.gstatic.com/docs/documents/images/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/docs/documents/images/building-blocks-sidebar-promo.svg
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://www.gstatic.com/docs/documents/images/checklist-checked.png
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://www.gstatic.com/docs/documents/images/checklist-unchecked.png
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/docs/generativeai/hmc/hmc-gemini-generating-static.png
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/docs/spreadsheets/building_blocks_sidebar_promo.svg
Source: chromecache_166.2.dr, chromecache_293.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_214.2.dr	String found in binary or memory: https://www.gstatic.com/groups/images/group_avatar_placeholder.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/calendar_2020q4/v13/192px.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/tasks/v10/192px.svg
Source: chromecache_290.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_email_address_grey300.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_name_grey300.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_copy_grey300.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_cut_grey300.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/email_copy_grey300.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/info_outline_grey300.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/phone_copy_grey300.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_grey300.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_off_grey200.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_email_address_grey700.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_name_grey700.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_copy_grey700.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_cut_grey700.svg
Source: chromecache_290.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/email_copy_grey700.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/info_outline_grey700.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/out_of_domain_yellow500.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/phone_copy_grey700.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_grey700.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_off_grey700.svg
Source: chromecache_214.2.dr, chromecache_280.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.gstatic.com/workspace-toolmanager/salesforce_icon.png
Source: chromecache_288.2.dr	String found in binary or memory: https://www.salesforce.com/oauth/v2/token
Source: chromecache_288.2.dr	String found in binary or memory: https://www.salesforce.com/oauth/v2/token2
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://youtube.googleapis.com
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://youtube.googleapis.com/embed/
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: https://youtube.googleapis.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50115 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@18/301@26/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2000,i,12394513158791230368,16446170916052114903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bit.ly/va-voter-purge-c3"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2000,i,12394513158791230368,16446170916052114903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: D.dcc=function(){this.PDb=!0;bnh(this)};D.Zaa=function(){bnh(this)};function bnh(a){if(a.PDb){var c=a.Ka().jd();c=Rr(Sr(c)\|\|window);if(a.Ba()){var d=a.Ja(),e=rs(d),f=0,g=0;$tb(d)!=QTa&&(g=Ntb(a.Ka()),f=g.x,g=g.y);a.Zcc=d.offsetLeft-f;a.adc=c.width-d.offsetLeft-e.width;a.bdc=d.offsetTop-g;a.Ycc=c.height-d.offsetTop-e.height}}}D.IZb=function(){return this.PDb?{left:this.Zcc,right:this.adc,top:this.bdc,bottom:this.Ycc}:null}; source: chromecache_264.2.dr, chromecache_309.2.dr
Source:	Binary string: yFc.prototype.YX=Y(269,function(a,c){zJg(this,c);for(var d=wJg(this,a.getMimeType()),e={},f=0;f<d.length;e={pDb:void 0},f=f+1\|0){e.pDb=this.D[+d[f]\|0];var g=vJg(this,c,+d[f]\|0,function(h){return function(l,m){return l==null?null:h.pDb.f6(m)}}(e));e.pDb.YX(a,g)}});wJc.prototype.YX=Y(268,function(a,c){this.J.YX(a,c)});rD.prototype.jsa=Y(267,function(a){var c=this;a=lJg(a,N(1),function(d){return uFc(c,d)});return a!=null?a:uFc(this,Ddg)}); source: chromecache_264.2.dr, chromecache_309.2.dr
Source:	Binary string: function Umh(a){a=a.Ka().jd();return Rr(Sr(a)\|\|window)}D.eb=function(){Dv(this.wa);this.wa=null;Dv(this.va);this.va=null;Dv(this.Ha);this.Ha=null;Dv(this.Ea);this.Ea=null;AS.Nc.eb.call(this)};function Vmh(a,c){this.type=rO;this.key=a;this.caption=c}mm(Vmh,EH);function BS(a,c,d){AS.call(this,c,d);this.dL=a\|\|azg;this.um=LXe()}mm(BS,AS);D=BS.prototype;D.lG=!0;D.OIa=!0;D.Lva=!0;D.FYa=!0;D.PDb=!1;D.Zcc=1;D.adc=1;D.bdc=1;D.Ycc=1;D.O9=.5;D.Tk="";D.Bp=null;D.Ag=null;D.lJ=!1;D.dw=null;D.tM=null;D.cPa=null; source: chromecache_264.2.dr, chromecache_309.2.dr
Source:	Binary string: c=Z2($2(d3(a3(b3(),"\u00a0"),f3,Y2(function(g){return g.F})),S2(T2(U2(U2(U2(V2(),c,W2(function(g){return g.V==null&&(g.D?g.D.F:null)==null&&(g.D?g.D.H:null)==null})),f,W2(function(g){return g.V==null})),e,W2(function(g){return(g.D?g.D.F:null)==null&&(g.D?g.D.H:null)==null})),a))));return S2(T2(U2(V2(),d,W2(function(g){return g.W==null})),c))};function Dzp(){}J(Dzp,K);D=Dzp.prototype;D.mva=function(a){var c=bzp($yp(Zyp(Yyp(new Xyp,!0)),a.OM()),a.PM());c.J=a.sTa();c=vzp(tzp(szp(rzp(qzp(nzp(jzp(gzp(ezp(pzp(dzp(c,a.UU()),o3(l3(k3(),a.Hfa()))),a.rTa()),a.Odb()),a.yAa()),a.tTa()),a.Poa()),a.uTa()),a.Pdb()),a.TU()!=null?a.TU():a.SU()),a.zAa());Rs(a.OM())?Rs(a.PM())?Rs(a.UU())\|\|(c.H=!0):c.D=!0:azp(c,!0);a instanceof owp?s3(t3(c,a.D),o3(l3(m3(n3(k3(),a.F),a.H),a.J))):a instanceof pwp&&s3(t3(hzp(c,a.D),a.F),o3(l3(m3(n3(k3(),a.H),a.J),a.O)));return u3(c)}; source: chromecache_288.2.dr
Source:	Binary string: g){g=g.Ab();var h=Cyp;wBp();var l=f.getId(),m=vyp(f,f.Qt in pBp?pBp[f.Qt]:qBp),n=f.Ub()!=null?f.Ub():f.D;n==null?n=f.Xe():f.Xe()!=null&&(n=M(n)+M(f.Xe()));f=Rs(m)?n!=null?Sxp(e,n):[]:Txp(e,m);h=Rs(m)\|\|n==null?null:h(n);return Vxp(l,f,h,Yxp(new Wxp),g)})};function iAp(){}J(iAp,K);function xBp(a,c){a=a.D[c];if(!a)throw xm("F1").Ga;return a};function yBp(){}J(yBp,K);function zBp(){}J(zBp,K);D=zBp.prototype;D.OM=z("D");D.sTa=z("H");D.PM=z("R");D.UU=z(Ga);D.rTa=z("F");D.Odb=z("J");D.yAa=z("O");D.tTa=z("V");D.Poa=z("W");D.SU=z(hg);D.uTa=z(ij);D.Pdb=z(Dl);D.TU=z(Pl);D.zAa=z(La);D.Hfa=z(cb);D.S$a=!0;function ABp(){}J(ABp,K);function BBp(){}J(BBp,K);D=BBp.prototype;D.QM=z("D");D.Bvb=z("F");D.OKa=z("H");D.N3a=z("O");D.nP=z(hg);D.m2=z(wb);D.PKa=z("J");D.Qdb=z("R");D.Rdb=z("V");D.AAa=z("W");D.Sdb=z(ij);D.BAa=z(Dl);D.CAa=z(Pl);D.VU=z(Ga);D.vTa=z(La);D.Tdb=z(cb);D.WU=z(jb);D.DAa=z(Db);D.Ifa=z(Zb);D.T$a=!0;function CBp(){}J(CBp,K);function DBp(){}J(DBp,K);D=DBp.prototype;D.XU=z("H");D.FAa=z("V");D.JAa=z(La);D.Udb=z("D");D.Vdb=z("F");D.wTa=z("J");D.EAa=z("O");D.xTa=z("R");D.GAa=z("W");D.YU=z(hg);D.Wdb=z(ij);D.ZU=z(Pl);D.HAa=z(Dl);D.IAa=z(Ga);D.V8=z(jb);D.n2=z(cb);D.U$a=!0;function EBp(){}J(EBp,K);function FBp(){}J(FBp,K);D=FBp.prototype;D.RM=z("D");D.aV=z("J");D.Xdb=z("F");D.yTa=z("H");D.KAa=z("O");D.Qba=z("R");D.zTa=z("V");D.LAa=z("W");D.ATa=z(hg);D.bV=z(ij);D.W8=z(Dl);D.cV=z(Pl);D.MAa=z(Ga);D.Jfa=z(La);D.V$a=!0;function oAp(){} source: chromecache_288.2.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://support.google.com	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://angular.dev/license	0%	URL Reputation	safe
https://meet.google.com	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
docs.google.com	142.250.185.78	true	false	unknown
plus.l.google.com	172.217.16.142	true	false	unknown
play.google.com	216.58.206.78	true	false	unknown
browserchannel-sites.l.google.com	74.125.206.189	true	false	unknown
bit.ly	67.199.248.10	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.74.196	true	false	unknown
peoplestack-pa.clients6.google.com	142.250.185.106	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
contacts.google.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown
0.docs.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://contacts.google.com/_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.9syb8JNqNes.es5.O/ck=boq.SocialPeopleHovercardUi.YAPwJ3QIDjU.L.B1.O/am=OBhgDQ/d=1/exm=_b,_tp/excm=_b,_tp,hovercardwidget/ed=1/wt=2/ujg=1/rs=AGLTcCPZEVCN8LJwUulTzlFP3KV32T_ihA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,A1yn5d,fKUV3e,aurFic,Ug7Xab,ZwDk9d,V3dDOb,WO9ee,mI3LFb,Xg7Hl,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,wmnU7d,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,ebZ3mb,Z5uLle,MdUzUe,ZDZcre,zbML3c,A7fCU,zr1jrb,Uas9Hd,pjICDe	false		unknown
https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/bind?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=5&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&RID=72110&CVER=1&zx=bzqknqlf9iyo&t=1	false		unknown
https://docs.google.com/static/document/client/js/463190011-client_js_prod_kix_nestedsketchycore.js	false		unknown
https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/peruserchrome?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&includes_info_params=true&usp=sharing&cros_files=false	false		unknown
https://contacts.google.com/_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.9syb8JNqNes.es5.O/am=OBhgDQ/d=1/excm=_b,_tp,hovercardwidget/ed=1/dg=0/wt=2/ujg=1/rs=AGLTcCN2H9b3Ip5fuuR4s-xteJ2htllfvg/m=_b,_tp	false		unknown
https://contacts.google.com/widget/hovercard/v/2?origin=https%3A%2F%2Fdocs.google.com&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SGzW6IeCawI.O%2Fam%3DAACA%2Fd%3D1%2Frs%3DAHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw%2Fm%3D__features__	false		unknown
https://apis.google.com/js/api.js	false	URL Reputation: safe	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0	false		unknown
https://docs.google.com/static/document/client/js/4047955786-client_js_prod_kix_core.js	false		unknown
https://docs.google.com/static/document/client/js/661166313-client_js_prod_kix_docos.js	false		unknown
https://docs.google.com/static/document/client/js/358792001-client_js_prod_peoplehovercard.js	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=config/exm=card,gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_2	false		unknown
https://docs.google.com/static/document/client/css/1302052441-KixCss_ltr.css	false		unknown
https://docs.google.com/static/document/client/js/1526094273-client_js_prod_datetimeresources.js	false		unknown
https://0.docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/bind?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&tab=t.0&lsq=1730314564404&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=7&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&RID=rpc&SID=16E06BD6AC63A562&CI=0&AID=20&TYPE=xmlhttp&zx=tpqre3td5muy&t=1	false		unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_288.2.dr	false		unknown
https://support.google.com/docs/answer/	chromecache_290.2.dr	false		unknown
https://support.google.com/docs/?p=voice_typing	chromecache_289.2.dr, chromecache_224.2.dr	false		unknown
https://support.google.com	chromecache_166.2.dr, chromecache_293.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/a/?p=disable_docs#topic=4388346	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://today.meet.google.com	chromecache_288.2.dr	false		unknown
https://drive.sandbox.google.com	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://support.google.com/docs/answer/7505592	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://support.google.com/docs/answer/14925782	chromecache_288.2.dr	false		unknown
https://mail.google.com	chromecache_288.2.dr	false		unknown
https://support.mozilla.org/en-US/kb/disable-or-remove-add-ons	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://support.google.com/drive/?hl=en	chromecache_288.2.dr	false		unknown
https://contacts.google.com/contact/	chromecache_214.2.dr	false		unknown
https://calendar.google.com/calendar/r/day/	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://support.google.com/chat/#topic=7649317	chromecache_288.2.dr	false		unknown
https://drive-thirdparty.googleusercontent.com/	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://chat.google.com/room/	chromecache_288.2.dr	false		unknown
https://www.google.com/drive/	chromecache_288.2.dr	false		unknown
https://support.google.com/docs?p=add_encryption	chromecache_309.2.dr	false		unknown
https://support.google.com/maps	chromecache_288.2.dr	false		unknown
https://hangouts.google.com/hangouts/_/	chromecache_214.2.dr	false		unknown
https://policies.google.com/terms?hl=en	chromecache_288.2.dr	false		unknown
https://www.google.com/tools/feedback	chromecache_264.2.dr, chromecache_309.2.dr, chromecache_214.2.dr, chromecache_280.2.dr	false		unknown
https://support.google.com/help_center?p=gemini_cover_image	chromecache_288.2.dr	false		unknown
https://support.google.com/contacts	chromecache_288.2.dr	false		unknown
https://tasks.google.com/	chromecache_288.2.dr	false		unknown
https://play.google.com/store/apps/details?id=com.google.android.apps.docs.editors.docs&referrer=utm	chromecache_288.2.dr	false		unknown
https://docs.google.com/picker	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://support.google.com/chrome/answer/187443	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://punctual-dev.corp.google.com	chromecache_288.2.dr	false		unknown
http://support.google.com/docs?p=labs-privacy	chromecache_288.2.dr	false		unknown
https://support.google.com/docs?p=labs-privacy	chromecache_288.2.dr	false		unknown
https://plus.google.com	chromecache_257.2.dr, chromecache_251.2.dr	false		unknown
https://docs.google.com/document/d/1SzAxs6HDSH1zNGEVCmGwZQR1cxdQI8-33mpYgl6Q1jE/r/0-5tmxJv1j5g5hY7dg	chromecache_288.2.dr	false		unknown
https://support.google.com/a/users/answer/10992111	chromecache_288.2.dr	false		unknown
https://workspaceui-pa.clients6.google.com	chromecache_288.2.dr	false		unknown
https://gsuite.google.com/products/chat/	chromecache_288.2.dr	false		unknown
https://policies.google.com/privacy	chromecache_288.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/docs/answer/190843#compare_documents	chromecache_288.2.dr	false		unknown
https://support.google.com/docs?p=help-me-visualize	chromecache_288.2.dr	false		unknown
https://support.google.com/drive/?p=drive_only	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://support.google.com/hangoutschat/#topic=7649316	chromecache_288.2.dr	false		unknown
https://drive.google.com/drive/my-drive	chromecache_288.2.dr	false		unknown
https://support.google.com/a/answer/9275380	chromecache_288.2.dr	false		unknown
https://support.google.com/docs/answer/13447609	chromecache_288.2.dr	false		unknown
https://support.google.com/drive?p=comment_troubleshoot	chromecache_290.2.dr	false		unknown
https://www.google.com/maps/about	chromecache_288.2.dr	false		unknown
https://support.google.com/docs?p=vids_image_generation_labs	chromecache_288.2.dr	false		unknown
https://support.google.com/drive/answer/37603	chromecache_288.2.dr	false		unknown
https://www.google.com/calendar/event?eid=YmxuY2w5M2JlcG1obmpqOWNxbHFsMjBxZ2lfMjAyMTA1MjVUMTcwMDAwWi	chromecache_288.2.dr	false		unknown
https://play.google.com	chromecache_166.2.dr, chromecache_293.2.dr, chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://support.google.com/docs/answer/10519333#zippy=	chromecache_288.2.dr	false		unknown
https://signaler-pa.youtube.com	chromecache_288.2.dr	false		unknown
http://support.google.com/drive/?hl=en&p=anonymous_users	chromecache_309.2.dr	false		unknown
https://calendar.google.com/calendar/:authuser/companion	chromecache_288.2.dr	false		unknown
https://support.google.com/docs?p=GSM_migration	chromecache_288.2.dr	false		unknown
https://angular.dev/license	chromecache_264.2.dr, chromecache_309.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/help_center?p=insert_cover_image	chromecache_288.2.dr	false		unknown
https://www.google.com/keep/	chromecache_288.2.dr	false		unknown
https://support.google.com/docs?p=gemini-help-me-visualize	chromecache_288.2.dr	false		unknown
https://support.google.com/tasks	chromecache_288.2.dr	false		unknown
https://meet.google.com	chromecache_288.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/docs/?p=	chromecache_288.2.dr	false		unknown
https://support.google.com/docs/answer/190843	chromecache_288.2.dr	false		unknown
https://lh3.googleusercontent.com/a/default-user	chromecache_290.2.dr, chromecache_214.2.dr	false		unknown
https://one.google.com/plans	chromecache_288.2.dr	false		unknown
https://daily-2.meet.google.com	chromecache_288.2.dr	false		unknown
https://inputtools.google.com	chromecache_288.2.dr	false		unknown
https://daily-5.meet.google.com	chromecache_288.2.dr	false		unknown
https://apis.google.com	chromecache_257.2.dr, chromecache_328.2.dr, chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://contacts.google.com	chromecache_214.2.dr	false		unknown
https://www.google.com/sheets/about	chromecache_288.2.dr	false		unknown
https://support.google.com/help_center?p=labs_cover_image	chromecache_288.2.dr	false		unknown
https://domains.google.com/suggest/flow	chromecache_257.2.dr	false	URL Reputation: safe	unknown
https://oauth-redirect-test.googleusercontent.com	chromecache_288.2.dr	false		unknown
https://apps-drive-picker-dev.corp.google.com/picker/minpick/main	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
https://support.google.com/docs	chromecache_288.2.dr	false		unknown
https://signaler-pa.clients6.google.com	chromecache_288.2.dr	false		unknown
https://www.salesforce.com/oauth/v2/token	chromecache_288.2.dr	false		unknown
https://support.google.com/docs?p=custom-building-blocks	chromecache_288.2.dr	false		unknown
https://chrome.google.com/webstore/detail/	chromecache_210.2.dr, chromecache_283.2.dr	false		unknown
https://support.google.com/docs?p=vids_image_generation_gemini	chromecache_288.2.dr	false		unknown
https://calendar.google.com/calendar/r?eid=	chromecache_264.2.dr, chromecache_309.2.dr	false		unknown
http://www.bohemiancoding.com/sketch/ns	chromecache_261.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	docs.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	play.google.com	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
67.199.248.10	bit.ly	United States	396982	GOOGLE-PRIVATE-CLOUDUS	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false
172.217.16.142	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
74.125.206.189	browserchannel-sites.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.238	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545680
Start date and time:	2024-10-30 20:38:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://bit.ly/va-voter-purge-c3
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@18/301@26/11

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 172.217.16.206, 74.125.133.84, 34.104.35.123, 142.250.184.227, 142.250.185.67, 142.250.186.163, 172.217.16.202, 216.58.212.170, 142.250.184.234, 216.58.206.42, 216.58.206.74, 142.250.186.138, 142.250.186.170, 142.250.186.74, 142.250.184.202, 142.250.186.106, 142.250.74.202, 172.217.18.106, 142.250.181.234, 172.217.16.138, 142.250.186.42, 172.217.18.10, 142.250.186.35, 172.202.163.200, 142.250.185.234, 142.250.185.138, 142.250.185.170, 142.250.185.106, 142.250.185.202, 142.250.185.74, 2.19.126.163, 2.19.126.137, 192.229.221.95, 52.165.164.15, 13.85.23.206, 142.250.186.99, 172.217.16.195
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ogads-pa.googleapis.com, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://bit.ly/va-voter-purge-c3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 18:39:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9787747965419222
Encrypted:	false
SSDEEP:	48:8VdTTbXfHiOidAKZdA19ehwiZUklqehny+3:87/pUy
MD5:	BAEC4C905450D5510A973916C73AE8EC
SHA1:	62535A43BD304E1996885AF356D9BFACF36B5D07
SHA-256:	6160905B12CCAA7E153CDFB671CA5C47FC800AAE3E3A4F0B8136B545A7D368A7
SHA-512:	F73BBB305989B2D7A5E5906286EB3A6D75124E4DC2AB8046C29D1ABAE1F94F99DDC6C213BFA21ABC0C6FCB6DF08C471225437C2DBDF3137DA953EB8C5A22C05C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J;?t.+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 18:39:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.994235621972158
Encrypted:	false
SSDEEP:	48:82dTTbXfHiOidAKZdA1weh/iZUkAQkqehEy+2:82/79QVy
MD5:	85A1DFA923B5193F1A9885F8B6D87357
SHA1:	4B8A37B20F31DBCB9AB51217BEE462F96B7671B2
SHA-256:	FE3760341175F5C0D53DF27241CB20F8869CABED1A935C9570086991C0E04D7B
SHA-512:	29289C7AD32E807FFF0E71270F4626C7F6FFDCB00C5ACDF339B841E23D418D92888A8766EDA1A3DC87FD17E9A0D1BEEC95634E837718111842F7859B8A4CA435
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......3t.+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0074706621938185
Encrypted:	false
SSDEEP:	48:8xYdTTbXsHiOidAKZdA14tseh7sFiZUkmgqeh7sqy+BX:8x8/inwy
MD5:	F3C6FD6C8F04A23158549E2B9D52E079
SHA1:	C458041176F14C47613957266B3C941CA033DA75
SHA-256:	DAC1C8ED3EEBC892F3B28F4944EF97731E47D42A0C2F8C0B27B62A9C09D1120C
SHA-512:	870903C3BFCDB2ED8038CBA6246D24E6ABD8C77F14E0D36B2B04B25D8E703A6980DD4857F7119F67E070A9FBDB71C35D2E40C3F61BC0128CE3C1B07B2434CEE0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 18:39:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9912701664142345
Encrypted:	false
SSDEEP:	48:8YdTTbXfHiOidAKZdA1vehDiZUkwqehIy+R:88/Yiy
MD5:	B019CC9773F4AC10C27271F89141F23F
SHA1:	D75553860F488205AC79B737CBF80B0D6BA8E362
SHA-256:	B9C5631EF7CFCE12218E9A1176C21BC5021BAB6E768B25A95BB173962ACA07AC
SHA-512:	D39AE38DC4CE2C5F394FD0BF5C5E757E0C06F16AD7D14253606921B187B96361BE6A2A5123BD0024A3DF6CB988B8DD442B4BA08CC8B75EFEBEB021D4C899DCC4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.... .t.+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 18:39:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9812174998818404
Encrypted:	false
SSDEEP:	48:8idTTbXfHiOidAKZdA1hehBiZUk1W1qehGy+C:8S/I9my
MD5:	4BA37C2280F6B52D7C9A5148FE615D61
SHA1:	54057762369CA614C8C6533FD6056F99F023D05F
SHA-256:	2AE9D959C675D70BF3A03D7291DE35E2B24DEF6DF997F46B95E2BAC96DA08501
SHA-512:	8E931E8B0E275077F0B944C73548C79509E725E13D79EC64CCF95E33FDC4438AC2F78D766215E76BDF7FA0B5471A6FC855EC0BE721887F4BD3AE34731AD84F58
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....9t.+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 18:39:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9910261224842087
Encrypted:	false
SSDEEP:	48:83dTTbXfHiOidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbwy+yT+:8p/mT/TbxWOvTbwy7T
MD5:	F02E33615495509AA49FD28B16132AC0
SHA1:	23991F9A96B6389957C0CB51CD309C4FA305C776
SHA-256:	13D3A799C08958ADE9104AC04F51408AC53E63CCFDDFD28F9286D8A33D13BE86
SHA-512:	C9786F90688AD943C64A8D0A6CE2E4456C2C2F0AF21D630946702F873EE09555382FE0A809019EDA9C5B3FA976D1DD53DC36DBF1F761E8196DA97101B21C8A59
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....dI!t.+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............~.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 128, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	765
Entropy (8bit):	7.577747876668397
Encrypted:	false
SSDEEP:	12:6v/72iBANoO539TIU+7I+vfpaXe1pvWq+NTtBls5B78qElXpGHpou24CcePSDApz:PiqSOfcU+7I+ZaXO+PM5BYjhpgpoCe5Z
MD5:	31D4B2CFFD4EFE5033DE3D8BC3B2705C
SHA1:	E5B3831D51D854FFA1FDD1C99A7A6E40B85D78C9
SHA-256:	EB59A7D6BCC31DF8485874BBAC3DA6F19FD5DE7E0CE6C69C0FBDC2698FB34A89
SHA-512:	91803F6CF96A93929D7FAE8160EF853543BBBE51E6903B1E4E021AA6D7B048D977838E284E449793240B1EE4E5F0677E553521B19998E32A396A7888FC21036D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE..........................tRNS....@6.......IDATh...[..0.........6..6..],.......#F.........G..K..q.Yg..?r..h..r.Fc_9.2......H.@....0...\|..-l.YoT.`.;...j.[s.Q........H.`..).P..-@.-.]K.........V...5..:~....(...Y....c$B(`\......'......541B..tW..z..E.....0J.>W..." ......b..z..a......<..yJdf..&T.D.y...)P.F.._.1u$t.t.e.............u.1HX.a...Or...Y...`h5F:...)@....hDc..5~.......~.!.......6.........[J..../d.......&\|v;......,;.]..9.y.....n.+(O+..]..CUUU.!<...L..;YX.$AX...aL....$`..)Y....daJ.H..d.O..d.t.$.e..$..? L..._.5..j....{..t...no....~.... ...Y.G...9..]..N.E..".r.0....)h....h...[p.....W.s...5.{)<..W...-p(L...<.z.}. ...._..\|.F....h.}Aj..B+.......C.my......Yg.u.Yg...].C.S.}.....IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 72896, version 1.0
Category:	downloaded
Size (bytes):	72896
Entropy (8bit):	7.99302309612498
Encrypted:	true
SSDEEP:	1536:l+/lJ4+lxFkpiySl5jIWJ2wLyusIoQh8TKiZeWwn483A16TMVo0MVuJ:SJ4+DFAPSDjb2wLuIOkRn483APDSy
MD5:	8AFBBEF49E32F6382F8C029DDA485679
SHA1:	2FBD600C537D820F23D492D907DAC0BD98F0778E
SHA-256:	D4C4F413055D77B989E4D3BCE7E3CBB45427F251387EABFF8F9709F4EE1B2BF0
SHA-512:	A18299FDA6BDDE29D6036FADE0A234205D8BAA352BC15BB4AA846730D367EEA737DBB625D65FC49414906B2431290C14AB79A1C36241A206FABF80CECE385D29
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71XjywflP6FLr3gZx7K8UyEVQnyR1E7VN-f51xYuGCQepOvB0KLc2v0wKKB0Q4MSZxyqf2CgAchbDJ69BcVZxkDg-JuqON8AA.woff2
Preview:	wOF2..............e(...\.................................4.`?STAT....P..............6.$.... ..x..g..[...e..c....Vl#Q.....hsH.-3......7:.............].....u.....................%?"7......^.C.....A..jbl)...M..S>D.8.b...gl%g.Z.&\MHZW..{.p.....Yi5..&....[.LI..ye.j...W.0.p...xR..!E....k.8...Y...+....[...!ye...o#.>....'.T..s.a4.[Lk.k!......d..p.i....k....lF..5~Z..zJ..X.T..lB.1...(X..Uf.k...\|K1:..6....a...3W......;SvG.J.@!./..^....v.'N.sB...7..o...a6q.x@k..Z.E-!W..n.K.m'......eu1 7..lG".3......+.A.\.]r..wp.\.\.... 3..V!.x.BP.-+M..BR.N....^F..h.{..uas....0.....Xr...x...=.C....c.A..<.#...#d.w...<.d........ .G5\m..0RNqivB.xwD...>2s.E.].u....3.....P..`...-..pJ...$Fg...+.1.L;[..s...6.(.Y.+!f..}d..DDh.].3yMPN#3.}.p....P.8].g..-5OI...'..Il]i.D..oR.g+.+t..G..32..3O...../..I ..bk........(.\.O.....1..c.....Io....e....W...*.I.AG...r:.E.4.......M>.[....!.._.?:$......'.oS...Fw.-...L..J,.z.(......}k.l9._&./d5.l...Vm.z...=...~..D.I......r9..k.6..b...

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65828, version 1.0
Category:	downloaded
Size (bytes):	65828
Entropy (8bit):	7.994888729247966
Encrypted:	true
SSDEEP:	1536:jpUCPU80z/viwxp2ws/6HBRhRhKT7/wu7QlakYDFc2kN4B265:jpUcZQfx8w9hRhzKTJQXYDnHr5
MD5:	9187B9AF4CD2B2C0080F3E41671E52CF
SHA1:	50810C3D6D3F3AC2155409DEC18086ABC3E17E9C
SHA-256:	DDD58F9FE28DBDF8AA84F7F39DDDDEBB4CBFE5B0C74470ED72C7624C7742CC30
SHA-512:	B2AAAFEE669B48C2E66F3BC010CA7FBEE9B2E9B17B11B9BA619412777DBCC35B37F8F098F0F6001428877FB72B0072F451F51577E98D15FC9B00292DAAEA3541
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71XjywflP6FLr3gZx7K8UyEVQnyR1E7VN-f51xYuGCQepOvB0KLc2v0wKKB0Q4MSZxyqf2CgAchbDJ69BcVZxkDg-JuT-R8AA.woff2
Preview:	wOF2.......$......b...................................b..4.`?STAT....P.....d..o.....6.$.... ..N..g..[ ...7..<Hm.f.. ..}=p..!v....m..... ....t.1.R@..\S..kq...xN.%................6.y.g......H8...Z....BH......J.2.R.V.v'l..q+.TI).e.lFmA(..$...-..t.sZ02P.LJP.~)+.z.F....L.M@...fC..\|'..i..!(6.....d.2n.Q..YR.9.....#wQ..2.][.,i......\.<I..s.o.Q[....Z.....\|......../....=...R.[.1..X...L.Gj.Q..........'IBS....;.%u..T;.gh.y..d..2...7....yV.8..}Sty).\^........IX......p. .=.ze...F.8x..bC..h.Yg4...%......h.\|..{`p.....~vx..!..p.v.....t.tB->j.Br.?.Y.. O.s...X....s0.g...].=.Ru.".rR....z......\Z.N.y_...P...h.CMj!.z~y...?..i}...S..ft}u..N...x......0.l....Fz8U._..;42..bs.....+.zG]..[.Ot....wE..\..,v....GK..$}...sT..Eh...?U;."..f....x.:.i..NC1..._...P.\|X.2.%.,....{3.51..*J9.W..}.z..RL.(t.P..2........M._.....+..u.X....(e.v&aI.v......J}....$..O..U..:4I}.h.S`0.....ZY...q.g\|)X...!....VM.K.#..K.!...B+!..D...6@^.Q...E..6z....X.`..D;""....D...$..q...{.y......ui^-...

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 58012, version 1.0
Category:	downloaded
Size (bytes):	58012
Entropy (8bit):	7.997002014875398
Encrypted:	true
SSDEEP:	1536:v/rygnjckWB1Xbc33Q1k8BHGEUrn/ydR5V1H27zpYkf0N+:3uUjckQOnQ28xGpKddo/SksN+
MD5:	E88455150169496390368F9DCFC709C6
SHA1:	672607F20C14829A1071441C031A8411196CFEA8
SHA-256:	133BB5C5AF6B43D96660FF65F46464F2A03F7D0DEEB8E2A1F8E0AA7CE6770120
SHA-512:	D9FCD7B9C17DFC2DC256E9537FBD0F653C706FD063859602FFD0229768FA1AF6A5B1D723F7A91AD1EEDD0021C21AEE0FBF894933E352ECF3F4D7B0EF655A273F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wsf6.woff2
Preview:	wOF2............. P...6..........................b..X..T.`..(.....m.....l..N.....6.$..p. .....p..1[.....;..z.o?@\V.7.O....).i...m...`<M].4.....I2.....m{...P.4.....Na"........6..Y.4..;C. ....<.!8..}R...i.2..UR%UR%S..uc..b.1....U2.=....F...w.....y..%.....t?@..8\..Y.....F+`..H7...%N.().J2...(..5..w[z..0..C..W.....:..V.v...k..M...%......}.>..._.{....^T.h..\|..#.Z.......?d.m....J..+N.<=..........@......_&k.O.....P.FE...aDN.02.n.3j..#.U.....W.:......>..$......d..s..~.~w{.I%j.%1r....0..Q.k.../.{.......~...w,~........1.S..$.$..T..T@..Q.~...O....!.YB!..h..L..........9......)>.X....PMm....p...i.;....tP..&.O..v....61?..y...sfI:.$`.A.(....._.....]....{.;o-.H$....d.......:M$....m6.a.K%......}h..XND..t...s.O..."F.$.-.....Vf...d.:...R..t..(.<..{.{..J..O.X.7<.taU\|.~.=..1.8..+&.w......4L$...B.f6'.k^..6....N\.F.4.2...$..U~......1. .m..EBr...D...>y...1... .t.'..jX..\j).2...n...i.....\M....X.j..0.u..`..@......g......._$.*l...B..[W...#.....R.....?...J..H.?......g.Y

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1360, version 1.0
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	7.749168790064011
Encrypted:	false
SSDEEP:	24:yUaKOlSf0ba+BV1iyDz2R+Z5d94VAHTTdjeIx1P0iN0nYr+MN:3aKOlSfwVZ2R+/r4K14cN
MD5:	248816E2428823AA2BA6B223B82EC73B
SHA1:	EC8DD868A619356C0E30606ECA110A239CA0D83D
SHA-256:	4524691B7547D0D9F1A34FF172D940BEDAFD7725A14A5BD1121807B7D993BFFA
SHA-512:	DC940B38C218C34AC32B45144B07CADEE60E1AAE7C90F0E657CABD24C09DEC0E43E9B450F9DE107E5A78C2321F115752F8A741362E37FE7099DBA2830BB2E002
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUBiZQ.woff2
Preview:	wOF2.......P.....................................0..j.(.`?STAT..t......z....6.$... ..D.S.....(.....(.F5Fe.....bS.!.}.^.\|...w...........d....(.Tj~^.z..........]4..NR%....>....9Ym...QF..q`\&E...#.9......v....5..X.."...d...H..h...6.GR...h@....F......$"...d...+.....H....@.@`.a.B..u.x.J....j...........uD.`$hL.JXp.......0. .lt. ._.;../L.;.6..4.X....1h,j:1fr...f...r.,P.8...Vd......+nY...4.17....j.`..P.. .. .. .....M.(.....h9.......... T...P......7$..$...k...F.....Hs....\|..@..%H*@, ....^)...q..`.8m./.........98f...M.c:.7S...c...`.w...B....>.&.c.V..{.!...c...x...82`.t.Z......3....y., .".s...Wj{...[.n....<d...cc(ob.I.YB........E.{t{........8X.....1....m=.c.z.`!.+.f....e..>5..Ha.9..<.I.........-.`.{..#c..ur.......r..[.z...TM.}......&'..'...o.{.....=.JY..l.u.lO..BcG[K..}.......c.....w..S.G..pG....j.Vr....$...".M..0..U\|.hVX.+S.{..oV.g...m.m......Q.kKF_.......he[O.l..g...".......$....=_..@...}.S.....-..!...o.....j...OK...`?..'..p.._.H....B.B.<7..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1254)
Category:	downloaded
Size (bytes):	205940
Entropy (8bit):	5.480824840802998
Encrypted:	false
SSDEEP:	3072:GzlaBVJaahSkppfoUS5Qk+P3KglDNM4tbcYR8:GzlaBVoVG3hMvm8
MD5:	12AAC0481FD69CB00907BAF81D4D4F7A
SHA1:	145F9D17998A49F9E2BE15F82719C44342DF24DC
SHA-256:	91AF72F4133087FAC978C89CEB89C10FC361B2FA4E9F8AE7236F883DB249ED9B
SHA-512:	94F13D21FA6E8B60681F885AFED678D7D2C5A1E827DC78952408461F4A39591EF637713246565B647EC95F2C6E9F36242B575EF7242DEA041B0334173C3B1ABD
Malicious:	false
Reputation:	low
URL:	"https://contacts.google.com/_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.9syb8JNqNes.es5.O/am=OBhgDQ/d=1/excm=_b,_tp,hovercardwidget/ed=1/dg=0/wt=2/ujg=1/rs=AGLTcCN2H9b3Ip5fuuR4s-xteJ2htllfvg/m=_b,_tp"
Preview:	"use strict";this.default_SocialPeopleHovercardUi=this.default_SocialPeopleHovercardUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xd601838, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var ea,aaa,Ea,baa,Ha,Ya,pb,eaa,Ib,Ob,Rb,Tb,Yb,faa,gaa,hc,iaa,oc,kaa,tc,uc,vc,Bc,Kc,Rc,Tc,Oc,Wc,paa,od,qaa,pd,raa,saa,Gd,Fd,taa,Jd,uaa,Od,vaa,Rd,waa,Ud,xaa,Zd,fe,qe,re,ze,Be,Pe,Se,bf,$e,cf,C,gf,kf,of,vf,Af,Daa,Eaa,Faa,Gaa,Haa,Iaa,Jaa,Kaa,Laa,Maa,Naa,Oaa,Qaa,Raa,ug,zg,Xaa,Vaa,Ng,$aa,Ug,Xg,bba,cba,Zg,gba,hba,qh,rh,iba,jba,kba,lba,Ih,mba,nba,Yh,Zh,pba,qba,ci,di,uba,wba,xba,yba,zba,Aba,Bba,Cba,Eba,Fba,Gba,Iba,Jba,vi,aa,wi,xi,Kba,zi,A

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	7.683709414485586
Encrypted:	false
SSDEEP:	24:uV4/ci8drSuEMj0qidoG9FhL6cqaIN+SWxb8VpuSA76slcRT1hMWcs4B1olYN:aAcioSuEtqSo6j2ceN+zxbeLu2TP3K
MD5:	BAD1B1309D3D9C0D1FF6B321E48436BD
SHA1:	0596575BEE2BF74B5D068322E80253818B4C1620
SHA-256:	CF5DC17A8A3497E7D508630F7015FECD748C10985E8B06ED7F79C8A974B3C9D4
SHA-512:	C705C7E43227A32D01CC59AEA6176B3434973808C8CF539924028F5D0B8218E8EDDABCA91CCA1BC6F0145162B4F873AF838081A2FAC08BDE18FF5133776C1E9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS.. .p0....@P.`...JQ....~IDATx..Z..(.\..$R......A..k.gl)s.$...+....+.....C..t....`,....p...........+.f...f.Qt..k. ....H..?.a.!....z.pC.(I........H.q-^.../e7......P...8..#...p.x.......M........2..F.g..U.. .^a..JI56p?...Y.AQ.c...@n....@cD...#./......bj..iA.. 7f...Bb.c#<..%..s............e..>......h..o.1..!....PJ.........h.0....$.T0..H..8T....j.P...EU..x.......T..P .sB.eg+.J-...e..l1./..........4%"Fy. ..(..c3.......E....Bp.....<eh....1Y...@.$..,-....bF..$.....@.'.n..x^....l.B...qfRy3i........4.....8.X...I.1....%...\|.F...a.^f.E...........8...a... ..g...@/.3.1[c...?.........g2p...f....b....0..E.D. D9....Y.].r9.....{...n.g.....E"......r~"n7....#xRE..............c[..q....qv..a..92.X..-..9..g....3.....<..^...@m..O!.&..e...1O.......,.?:...c.....?....>..X7..r..rB..&.........\|..1W/..%p]AH.......U.U..h%=>?.2.`.).....\.i3e..y..Q...?....V..ST=+6}O..pk{..bM.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1761)
Category:	dropped
Size (bytes):	96962
Entropy (8bit):	5.498943205996377
Encrypted:	false
SSDEEP:	1536:G2Ex99zkR8J3b/+WkyU9JrXD8l8Y/e9JtSlEKPyr2RTZglV0y6D3qCS:ax9lQk3bSjrA//e9JtSKt28kbDM
MD5:	9BF597B991F9EC95D9E900790B116C81
SHA1:	CB3F458ACC1360C0EBFB2B7878C8A69EA92961F6
SHA-256:	649D3EBFDA6DB7F5949AB34AF0DAEE51B89829EBB8AFC209E367AE2D065964A1
SHA-512:	03A015ACB416DDC5F6C3701A04B9418979BDE66ACA8418A0843880E731ECD0359A4417D1CE163B58F5D115D08CA6D6C1F6657C7452663E421A568781BF84D406
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_1(function(_){var window=this;._.Ti=function(a){a&&typeof a.dispose=="function"&&a.dispose()};_.Ui=function(){this.Tg=this.Tg;this.Xo=this.Xo};_.Ui.prototype.Tg=!1;_.Ui.prototype.isDisposed=function(){return this.Tg};_.Ui.prototype.dispose=function(){this.Tg\|\|(this.Tg=!0,this.va())};_.Ui.prototype[Symbol.dispose]=function(){this.dispose()};_.Wi=function(a,b){_.Vi(a,_.cb(_.Ti,b))};_.Vi=function(a,b){a.Tg?b():(a.Xo\|\|(a.Xo=[]),a.Xo.push(b))};_.Ui.prototype.va=function(){if(this.Xo)for(;this.Xo.length;)this.Xo.shift()()};.var bj=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return!0;return!1};_.dj=function(a,b){this.type="function"==typeof _.cj&&a instanceof _.cj?String(a):a;this.currentTarget=this.target=b;this.defaultPrevented=this.Rv=!1};_.dj.prototype.stopPropagation=function(){this.Rv=!0};_.dj.prototype.preventDefault=function(){this.defaultPrevented=!0};_.ej=function(a,b){_.dj.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.but

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31456, version 1.0
Category:	downloaded
Size (bytes):	31456
Entropy (8bit):	7.993355498241683
Encrypted:	true
SSDEEP:	768:5bx84QeXTL1ovgoUiK31+lssZfEHQ6EXEjJkEbyt5r:84QITL1onl8OsOfSJEXEjmx
MD5:	8787E52101C989DEA9FEA21E232FA45B
SHA1:	F112710595BAA904A62B68C2066DD34D7103E1E8
SHA-256:	D5C4965A6E9C89DEE7D1389167C821976BFBF55D80E7DCDDFBCB5400B1AE01C9
SHA-512:	CFCB461162FEED6F093440F8569689B5BA34A0BEDCB10A12A5AF2E470A7071EF0A587331AA920828F8E78792D8E5BF43663540887C247D7F1AB8A14CAA18E2E3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvgUQ.woff2
Preview:	wOF2......z.......R...z{..........................F......6.`?STAT...X.....(.....H..6.$.... ..D../..[.+...c........Yo..w..t.x/....A;4.....`#eM.....v..c.w....V..).RD..ZK7NU..r^..bji..uke.Fk.p......LB..8.....d.OB...........[.$$!.u..f.......6.&0......r.B.u.-..q.../X...7...`?8..$.....#=Iv.+......L.]la.>.s...5@..p..g.....tk.......V....z..BG..`.8..~..........p.......B....}lp....d.z-....}w..\...$........)..u.&.U..U..........}.{$..d......'.Jg...B.....EpQI...'.....?.C.<Q'.DI^8U? .)........-^....Vi.%. <..k.) G..w.Eq]\...W..J...a.b....,.Z......p..B.Fm...F<~vN.K.Aw.?...s.}6dC.t.`..l.~l..."..-m...nY....i....i...$...[...g......@....],?.s.w.._.HE...L.A.6.6f.....F...U.....h...?x......8.....:3...{.SYIBW.].a%..P<;.Tu.~L..4k.dkM....p..J.......v; ...a.ics.?...,~Bmn...te..?....O\|.2..#^.......8....\3.O......&...B......\f......U6.W.=.-.7...?....3...5....#...QU...W?.d.8V:n..\..tl...0.w.t[....<].FQdKR..\.).....%$qj.o....%..# Y)..cK....\...w.........(..}"@J

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42132, version 1.0
Category:	downloaded
Size (bytes):	42132
Entropy (8bit):	7.995169768536831
Encrypted:	true
SSDEEP:	768:mZTig+Kv+tyCkYAb9D1BDH1xIE12gWo4kXJ6xUCjOtEsllZ5ql3/a0YM3jUVgQwE:6ToKWwC9AnxH1+E12gbExUr0PdzLcQUn
MD5:	2661BDA6D2BA62A920BE11952BB94849
SHA1:	7C1EE90488041D444D2289AE42C06D1958F34584
SHA-256:	ADD6DDD7FEE32D58EBA385983AB7DCC9657AD97CDBD4BF4594DB38675847EDB4
SHA-512:	D89115D310603052FF8E9C10F23322F64C74A6E4588F719E37A9368969122752357BB1BD3F45136D34AABE6DCEE717B462684A2D861931635B63AA876AED0719
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshRTY.woff2
Preview:	wOF2..................0..........................$...r..4.`?STATH..........Q..6..6.$..^. ........[...E.2v_.0.%.......-g..`.)..Wz.0.p.;.L7w".C...}........H&2f...i.B.(.s8....\.M..\..)kW.......z].L\.-....."q..pvGW.F..+0e..fv....5....H1Yu..&..U.]...fiQ.....'..3.-..X......PT....,K.5.....^.W..LB...d0...d0.Jv.%.........7.$....,QQ....".d....N.x.Z.?g..Z.LI....Q.{..D..j..M..L..<..1..CK.......4.......8....s..y?..=..D...\.M...?.U...N.7..._..dR)..VS%K./...G.M.?..[.B.s.o....I<%..hp....JD.+.z.....g..."...UX....T.J.q.B...y~n..}c...#R...B..\|,.(.`R..." .G@l...a....)..{...H...........$.:...g...(R.w......\|.}6.<.M..J....5c36uN].K...E..r.c.{;n.7k.&b.._..O.i....A.Iv.N..: ]I{.t.B.....s.tz..wYgo..eJ.ej..?.....bd.%..."...C........bc...,b.BZ'........U..........B.....#.m.....c.6JJ..Q%0Z..Zh.D.60..0....N....;,..<.....g)......9.M.RE.......ET.:..\..E....o2..4.....8...&....w..w~(...a.#.T....l........(W..f...6r..P..."......@....@....3..Sq8.J..(....u:...%3.?T<....M\

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12502)
Category:	downloaded
Size (bytes):	302227
Entropy (8bit):	4.527201968170224
Encrypted:	false
SSDEEP:	3072:kOeShJKsbvlHf9iugSc0UnUPGh9ejoN14hOvo7tRH5xjZSDzdrJN:Ll1ZUdrJN
MD5:	444EDB330BAEA5D3891295517C8A7CA4
SHA1:	5DEB82472B5E6DCB2B9524B74B49286474E968F6
SHA-256:	3DB419EAD4B51802C9990314D733E506182E4CE9B2E4734858F6286E71A65DA2
SHA-512:	988425772BE04192AD2F4A4856C17F69802BA6A594E85600C5AD80A1DE363D8615F448BD9E9D74B3AFEAD2BABB2F67B31A6A62E0B31480FFDD664258AED0F9C8
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/3832832616-client_js_prod_emojidata.js
Preview:	FJ(NSa);.function Qbu(a){return Array.isArray(a)&&ap(a)&1?okb:void 0}function Rbu(a){Y$k(a);var c=a.Da,d=bp(c)&256,e=c.length+(d?-1:0);for(a=a.constructor.messageId!=null?1:0;a<e;a++)c[a]=Qbu(c[a]);if(d){d=c[c.length-1];for(var f in d)d[f]=Qbu(d[f])}ukb&&ukb in c&&(c[ukb]=void 0)}function Sbu(a){this.Da=O(a)}J(Sbu,S);Sbu.prototype.I_=function(){return Tp(this,1)};function Tbu(a){this.Da=O(a)}J(Tbu,S);function Ubu(a){this.Da=O(a)}J(Ubu,S);function Vbu(a){this.Da=O(a)}J(Vbu,S);var Wbu=Jq(Vbu);.function Xbu(a){this.Da=O(a)}J(Xbu,S);var Ybu=Jq(Xbu),Zbu=Jq(Zgk);function $bu(a){this.Da=O(a)}J($bu,S);var acu=Jq($bu);function bcu(a){this.Da=O(a)}J(bcu,S);var ccu=Jq(bcu);function dcu(a,c){return a.filter(c?function(d){return Up(d,2,0)===c}:B(!0)).flatMap(function(d){return Cp(d,Sbu,1,vp()).map(function(e){return e.I_()})})}var ecu=/[#*0-9]\uFE0F?\u20E3\|[\xA9\xAE\u203C\u2049\u2122\u2139\u2194-\u2199\u21A9\u21AA\u231A\u231B\u2328\u23CF\u23ED-\u23EF\u23F1\u23F2\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	659
Entropy (8bit):	7.4982329493912
Encrypted:	false
SSDEEP:	12:6v/7KH8yYuhbw4eyH5f01Z7UdfZi1k4bfOXGT3YTG4WdeaDeqN:z5KOhWz2XGkv+eaP
MD5:	F72613F9068BB3D9D3FAE6888C188219
SHA1:	6F6B0559AEF8C998A223D27B8A90191BBEB807FC
SHA-256:	DF50174EF7B54CC2092E184EF99BB56D6A4F872D72FCE6FA67743192CEF02B27
SHA-512:	C0073B966010B3C5A2DEDFDE3771040454055C01B22C7BFC1BCC08B7FCB8B2B3948700DC8C51E864A890013615946D55A87C389CF77FB5F10F74D49E9B4F55ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS...@....)...+IDATh..Q.. .E{fz..1..i.`W\..r.A...2...m..VMWMq.....x...L&..d2....qU..$.5.1C..C..B....PC.4.6......C.....;f..)C..[.......`...W.d..d.S..B.LXh..d..fC...l4.\|.~.`..>n_.r..4.J..b*..]7....?.O+M.................3.j...t5)...~.M.P.\.....}.....G. ..T......A.r.:.1.Q..C...1......w..b$..g....~..%e...Y..x.?R.b\3....a.t)........K.......).e......LQ..>..zV..#j..;w.(l.p..,....~..C....3.9q..Cx....^..Z..Q.aC{.E.:F)..d...C!;aRC..r..e....l0.P......So.+5..yR..].)..]......1.....j..5m.1.W.....$....[b8E...w.b-.1.s....m...R..A..?Hb...FC&..d2.=..oA..g......IEND.B`.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4196, version 1.0
Category:	downloaded
Size (bytes):	4196
Entropy (8bit):	7.947790388565488
Encrypted:	false
SSDEEP:	96:XXIQbG13ziwYaI2QRncIaKuia6GpnQtzFLt4Lh2uSKafK:XXl0DVtIPuiYCKaC
MD5:	92CFF5BF3D47970DEFEF49EBF56448DB
SHA1:	163E2B870500AC648A075A008408C9FA73922953
SHA-256:	AFD7B4CE1230FC5D6CB58DAEBEED6BCD09EBEE1E4414367596BC3BB33F62444C
SHA-512:	49627E12E0B3DA7B6C5F616D3DFF3AFA24F2F7C247B46A34E6A99F0476863F071797CF265AAB2C5758CA265FFEC7E5846AE80715350795EEB40615124D2335B2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZyzwprpvBS1izr_vOEDOSf.woff2
Preview:	wOF2.......d...........................................T.`.....$..m....X.e. ..6.$.<. ..x.W..<...3.5]O.../..!.m`_..5~.X...;c...S.#T,.5V......`u......t..#$........A...2.p..l.{b+H........p.....@....3@..%....k..[....(....l..]cv.-...m..(....=....1..=A....5E....\|..v?D...Xa...w@..J&.%k..)z.Q..8..4W..f.2H$W.h+t....$9..=..q.-; ..P.qJ..$.Ua+L..0.....'..u71..Bg.F..U. C".....!M...)V........M._s..mW.w..X.c.A....`n.....{.@..-J....B}...q.o.0..>.Q....\|.z....BBh......sIX.$av_5...J<./..;........\|h.......2.#..0F...4..b...}E..d..\......1..N]........`.0B.....?A.9...F....+I.BX.....(W....1.t.C....[.t...jo{..< H....F.+@..@.v......D.L.oD....Yr.("/M._..I...m....^...`....W.OZ.O..0.p!tQ..?.......a.1-e...Z....k.zb....j;!.&........m.-......;..,....`....3...?.!wT.{.R(.y...>.i.>..o......+.db..:b.....vj..)..\...2.&.nk.q.W..F..tM...._c)......@:.Z^..;...O..6".P.V..}x..4..b/....[.S......~4..c.^..m.....2..p..lB.K..O....>..K......C.m....M.H.Y..a1..:.0.Ki..7..(\.f*.3

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	743
Entropy (8bit):	7.5390371259473765
Encrypted:	false
SSDEEP:	12:6v/7KROZLAACT48mCmtNNDraS1b0h9rc29t1GXVTV5nxv2qGKEjpY00LJueD/:R0Smp/KctFv4qspZy3
MD5:	E0EE4EEA35EB4F7A8B44A7751F1D4771
SHA1:	32AB2CCDC3A075690F2D6923C1A7067F10D2C1FF
SHA-256:	FF52193F799AF08B0F58F60BB73D7AA2F61AFDAD0EF9D1B96E607A2D540E4F2B
SHA-512:	73D615D61090111695DF1380379181761CC6BD3B2348E3D2214545D48619CE5FAD8368B8BAE086468D7607005517E3C55416C2F20B3064CE2A0C0934A7404698
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/cormorant_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS...@....)....IDATh....0..o..P.......&.. ..[..cKB....\|..s$........0#.m.?. 4xU.0..L..:B..u....1=.<Kh.....I.....$...+C.QvO.xZ..$...e.....L.z...R.`L..H......0..K.!qb.YB..Q$..W4.+.aE.a..:..7t.....s.!..8..'&.....3.c..A../........../R...%...c..2!.9. .CC..O."....#..QyB...T..hN..A.<5.....V7,.Yd..7W0..b{.&N/..nf.^....W...!;Fq..X.....WHh..V.,%.C.&V.Y.NL....b%...............j..(......FiE.W.Fy..3. .@A..:........t..$.'K./... ..^.O'.,..6.\xf....Yg...<};i..KO:[.........,..6[......Ec.f.!..>..:.Q9C...L'..VSD.[.)"xbu.QB.w............`.@..U..N8z5..l..,u...@F..:.Mv.,....@ne.%.4.q.u.....o.[>k.."t..[M0.......D................a...Q-9:....IEND.B`.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64068, version 1.0
Category:	downloaded
Size (bytes):	64068
Entropy (8bit):	7.995942836449749
Encrypted:	true
SSDEEP:	1536:upRrvXnQdfmI5RP21QVVEIeKN8UhJhfEvCHal5j091ScR9b0XnK:u/rIdDkiVl8gfol5gnStnK
MD5:	EFD94F0EB81E50A5F75CFAC73257EFC2
SHA1:	E8C4E0A66E8BA85DE2BDACA59CBCC55CED60BBCA
SHA-256:	3A6C1001C36D7F2F8AD4DF369BAF38217AF3ADAAE94A5625651C05F4C3A38BD3
SHA-512:	215837C93B5FF3247D5912CEC24216CFF64C16DC6B07F620424E9DB101DC6FDDC792B546F42744D74FF08785D6CA2143A6D45F5C1D4B84E357DAB942456BA42D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZyzwprpvBS1izr_vO0CA.woff2
Preview:	wOF2.......D......(@..............................>..l....`..d..$..m.....h..&.....6.$..X. ..x.....<[..q..].)..].....'0}@..2%~.s..<mE...n..,U.......d2........XV...Q..Hexa.f.lE.&...c1....T..4...e..Uj....{..qL2.p........ZG..(.YKz.-......M.=.5q.3.f..C_ ..Q..Y.F.p6..E..T..$...H..I3..g'/M..OE../.n..M/=.f.......G.r.h.......i)k....I.c...Y.`.{.O[WCe.]Um.F&Z.u`"..........S.W....Y..}"..i..T.....gl.......H.m..b..Jru.KH....$.PI.J.....+..q.$.p.m..ZY.U.g.@4..:VAV.N.ed.....\...~..s..........h.h.....d..A.....~..Q..O...v.;....l....,..KJHI.J..E.b`4.).}g.y....mz......!:GBu.).....>.`.....>W...Ad.,@.!.D............T.S.!..jf....N......WnU....X.9..t.....F..JNz0....x=..2.u.....!.....=....}.M.DY....b_R..W.<..?.l.!.[.m.6.T.X..B;h..^.B).u./g...].....$.l7....G,.ff.J..L........%..?..6a..G.........$......X.U.e.>....v3.m&Y...nX> .V0p.I^.Jw\.b[...=3..P..<...Av.k.......Ia.....x......Ja......jSH.......P.6>Qi.*..m..b%N+F.......O..{.s.O...XqR.j......P...)/i/..&.R..i6.......iw.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 128, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	608
Entropy (8bit):	7.412244644679108
Encrypted:	false
SSDEEP:	12:6v/72iYlgYn/KmAWC/7K6NyZKgDsSlYNJKud7LJv3L7:PiozVCTHyZKJeuVdvL7
MD5:	4316CC62B535573721AA1239169792BE
SHA1:	1EF2759B39428FA93B740C84E42BA57150EC7A81
SHA-256:	37A7F9A09E9C9F4F95D8B8B24207CB8D63BDAAC2968480E9B7B732E9066623E1
SHA-512:	FE32CBC79D8F2E72A6346E9D5E7E848760F061340D3658BE13F6E43A56AFDB785F344272D8627D003A97B6E299CBDA6F46EB797D794F1B5A253431982F82D7BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE..........................tRNS...@....)....IDATh....q.0.......L...k.H{...._....`;..$...C....,...n.../B...zx....M.......Z8.F.^..s..7@..}.. ....!.R5.....c.'.0$A...0&........p....w."....I.;..,....,M..x.4n..'...b..[.. /...C1./.Z......,L.l...sO..p...?..#.....v...-.a.....^..RC...MZr;..Z;.f......-,.JV..4.......+.5.0....`..$J....G3."M.z.V.a...K.Y.P.....8.......h..E ..& .>.2......s+,.+..Y.d..c......F..~R...m].....(.........^.E ..P.."......R....v.`.....R;.IPO ..\/..x.....l...(....ZC.....6.Bk.mV....$,....d..U...DnO...<N.a...8{...m..........S.3_....IEND.B`.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	703
Entropy (8bit):	7.452506538035121
Encrypted:	false
SSDEEP:	12:6v/7KIzTZA/qpbOKmgkifrNLhRfSrYcqnmw9KbijA2u+29dwCzk:VIzTZPpiBij4inmw94i827ydK
MD5:	C9FBB8238948BBE88BA566017CE1A4CE
SHA1:	3684610CB126BB13C35F3405262C62B71A7DFE60
SHA-256:	7A8DEB5F10EC92BCB6CDAF3BDE9BDB9EFA77FDC5F9B8A134F3F46FC888D2B2F3
SHA-512:	A149AF6EDB4AB65EDCF2215937BB2EF5615F06A310741136C834481DDACB50D3E4CF580B0C2A53038FE10F58C2BF740867F084A222FBEA2AAEFDD3192FDF5A77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS....@6......WIDATh...Qr. ........h..p+...<......:.H7-Vm.~J._~..`>>j.U...._=.\q....O......#.`..4. ;...l.......x>.j.....~..m.0..(....Ba\|.K..".BP...K.0...i...>DZ8G.C$.}.kIO$.}..".p.]$......B$..i...].d9...D.B\|u....,.p.a..^.a......!....&) 1.`...0...8N..D..P0...8A}gC.`.....[&..<+...T....f..s.a..YA33a..Y.0.a....s.C...............8R.j.i....5.&."QBf..6.....a..8SBC....%X`.....z`.>.l....8n"l.Vr.V.#. ..ML3=5.afo...S6.H.BI-F.z..P...^(I....Lp.7N...MV&.h.sBO.....P.O...?!....@....kQ...v...l.y..."x.I.^...xa.D..F.... BF...S".W.'.Tv.Y!...J.............y.N...!.....[uKx_......Rv]+\|5.U.V..\....<s.t......IEND.B`.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 128, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	596
Entropy (8bit):	7.358147793605888
Encrypted:	false
SSDEEP:	12:6v/72iokWmdD1dtho7LGwdKrzW0LVny+DDoLr7rpWh07W2ToBDyb+gpRzKd7XK:PizdZO2wdF0g+DMn7rpqZ2T0DyKIG9K
MD5:	70BB75F5854D383225C65C8F3C392047
SHA1:	3652E272226AD02129CE671D599E9107B0F41ABD
SHA-256:	B313DD4B335EFE398D93B26F0840ECD24BDE9A4C52988785FDFEBD87C38FCFD6
SHA-512:	AA1AC2973853C1523A27AEFA1819B9C6366E7AA9CDFA67A613323177F3488BDED9B8946D99B3207A81D79D0FD11AD12242C2B4A2893F897BBE084FED03551F20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE..........................tRNS..@....'....IDATh...m.0....d{........@.X......6qH.$\|.w....(.'.SSSSS..S._J.>..~....s..h't..P>...l&\.u..b%D..H..`3BK.)..B..!..`b.9...-..+.N...z.."............&<21'........PV.~...x"F...Y.v..5B'................sqO.OH.I$.8H.Z..@...........d0..' p.o. s..B(.a....B2..J.@I.#...Bg1...@.0.. ......B.....l....`.`y'.M.7...R.T.\k..(F.....J...I....t..'D-a0........Iv..r.2.Z8...V3...\..Y.s.I.7.n..M..U.WW........<u.6.+.".Q7.e..y.^..+...v./b}.....>aI.......+.......)...w../. \...2U.>....2.N&45555555.....L.2..r.....IEND.B`.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	707
Entropy (8bit):	7.516128924043621
Encrypted:	false
SSDEEP:	12:6v/7wUaJANVQ8Rc4WADrH6a42fd70ADO8p7LttmQCsAd8ugVlOXnKESRP:xUMANu8Rc4RrH6aFJp7LttjWqTOXKDRP
MD5:	4C7361C63F570512781316753E239BDA
SHA1:	2F9D29FD3EEEDC400DAFB100C3B946B7CEA59DC6
SHA-256:	407F86F9431AF3A3F2702567F64651D294D37A335957D2C9F4E424ECDBE26185
SHA-512:	D6C79964DC0FDAC5CE690D1D9C36DBF849E89A98796F3CF99A471E870C160770BF73FE693B8873148A6965E961117FA976632E9CF24489E6A4335C41714183D0
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/pumpkin_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'...[IDATh...aN. ..`. .=@...."........W.~..tw..K4&2...}.2S.\|yi.E.?.*.m.Q.x-....5...s...Z..Bf.R.W...&.L...Ya...R.X,.1.O..s....:.:rQK.rkEh..pZ.q.K.(..a...H&..EY.;`V.$......=7.....~.2a.n_!Xv....+..4...7...-..Q....E"..,.^...cj.X.....DD...Q...4...._..#...k...D.FV.2...NB........................rZ,...0.F....wb.34R.....<...$.J...^.v....8....k\..$..............!...n7...n.>m...b=..`.}..P.dG...'...v.......C.~TX.-..r...RM>%.?,P.fZx.c>......q..j....a,5.........iAL.=._....IE........6/J.........\......tA.&..u.V... }.....k{..._8..X..N..gYQ"r.v.g...7".....\|c..S...[.9^d.$.ww...V.~....B..-Z.h....4.........IEND.B`.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1664, version 1.0
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	7.800722707795522
Encrypted:	false
SSDEEP:	48:b9Xwld63PE6EdXkGPFNZJxN2wwNL+vDpiD63DU6dvhuR:BHqXkG9v9wNL2iuTUgAR
MD5:	F19AC4E354F2BCE2E6341B804767E11A
SHA1:	A197ACF3FA097BFBAD358400BD07EAD8865F6FCC
SHA-256:	A631F36B97689FFB94AFDAEF8032E78479D469894A2B18F007DEA806DC1172B3
SHA-512:	F923634378A4236509C4F2C0514D4FA23B4DE4A28E24CB29EDAE81CA9204A9A8DACCC0621FA440FBE193AF51F4B72CF467229C04FC8240EFF2517D2B679D454D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4WjMDrUfIA.woff2
Preview:	wOF2...................#.........................2..r.V.`?STAT..\|....T.c....6.$.6. ..h.[...h.QTo&...`.XwB#4. E]=\|..7.s..NH..5.+P..B.g)..P....3.Q.n.<..Q..........5M..i).N.H.../..{.....D....P.V.e.j..R].(.U7...`... ..p....FG.........Jy...O..j...,..x5.V.r....t`@9.....#..#.8.....o...ikC9.R.LP.. ...4.hx.+.(WJ.R.b...y...+..-.T.H(b.@...;...9.AM......!.....=.b.e...C......E.HAV...B..H. .^.h...j-+o".Z9."...P'\9@....s,....o...J....,.<.....Y....R.-.G.\...x..Ya.;...P..DK;..(..........@.@&..#.9..l....'..w....x... ....-.y...Xh..y.....1.O.&.n.O..T.9.....b....V...L..jy8U...;..mj_.P.`C~.(W.........\......O=....0.!.....x.V.nA....b......A^\|..i t..m#$.\h.6B'...b.9....&d....zE...\|.L...P..".....+3U.....v\.aS.%."..B?.(\|.PO.`...*...T9..e....Gq.qn..3.L....3.R....L..w........D.m{...........q"..q.fKx\|.)4\..6.....x$_MC..m]:o.?6...0.X..G.e.c4G....{.9.......9.Y.9.53.l.Q5....;.._,.KS....By......J}.....z...'/~d8zm..P.e..a.9.f....F...fp...fm.F=P...P..M.N..H.i..k"2..~....\|.V.s$.Xd...&>[,..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 128, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	7.362023563991217
Encrypted:	false
SSDEEP:	12:6v/72iz2ZhEi+bzxcMSLP5dMhm4SIqbZkMVaFsuU4OZAUXi1iIvZCBl/N:Piz2nExtP8DbZJWsGOu11RCXN
MD5:	3651735207B3375143BF2851399D0743
SHA1:	56CFF3982D277297214E7DAF8E991EF4E907F8E1
SHA-256:	3A699699B3EE4F37CA866AB50F4F808F2105FBBBBD7AB7603E70A2EADE47E9CE
SHA-512:	A4114AC1011BFF3AF385CAAB7CC41BD6B7466A6D9268C6DE7950185B35369B64B790EFFC5B5A586106A58DDA388AD07039F0354420F69F28B6173859D941C374
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/squirrel_lg.png
Preview:	.PNG........IHDR.....................PLTE..........................tRNS..@....'...3IDATh...Qr. ...d...8....$...r....W..'U`w+.2o..L..4.R..\.r..a^i....\|=......Dt".X.(....z..:..2..D...0. .a...'......:.P....J.;a9.F..P..) .....J..B>...}..X.....I(..9. L..L....a...V..I...K...}5......v.{........?N.U..\P;k..I.....]..'.QX.\h..!y.....(..........@..N..L..DHgB.....R..uP,...s;............9$.....x..o.n@.v...L...!...-@..Mp..B..../6!v.I.\..M.."D.....M.\H6a.....M.\.M@...m....3.h..3..&@>.i. 8. ..L. .X..F...@l.&YX..eA..R.0....]...4.7.Z...D&$Q....*.n!......8.0..o.B...t.....H..........[X.P..n).^.m.p...pL.k.B.....\|.p..f`/....w..+W..j....:.]......IEND.B`.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	103598
Entropy (8bit):	5.475351717416557
Encrypted:	false
SSDEEP:	1536:x5Wi1Q47yv1T9wv7568In7jlTThuIp7slMiGhEmkBeMNlpoEr3dqyfP9PgogNLb:D7yvvjOy7sipKTr3dH39oogNLb
MD5:	4C36E15EABC545A7849483081614C827
SHA1:	E9D041FDAB98CC934F5F352E87E344863DFE7FBB
SHA-256:	1581EF56ED911198AD6273D38DBDF289AD5620AD62AB5189EAFE8F7F434E4D87
SHA-512:	B95A356361FE75B1DB91CB962E95002E152FFE10B475A2383FC6A2AF6F45CF53C0BF7E34896C812B1FD53F9CEC4F766A1060A088C33F5F6586FB4E533A2B5ED7
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45536, version 1.0
Category:	downloaded
Size (bytes):	45536
Entropy (8bit):	7.993627122085847
Encrypted:	true
SSDEEP:	768:KsRpGWzvLKRnz9VDn7HdJiBcMaaZgHq0CaDtDM/WcdvfoBhZYkQG:5Rp7eRfn7HdJiBDagwDZM/PVkhakv
MD5:	3C33061F3F982F2234262844D0FEE4CA
SHA1:	C4BB9DD654244A9EEBE0D6F12ED4C4E853B18252
SHA-256:	6504F1B88B6DE335A0FC2D1802EF8B000F6569792F509D4635128DC0915D6D70
SHA-512:	9EF8F96559F614C2BBFE33D0F385C0A7723E6E95DF9EDA30ABFB6CCE879E5F39E22138773D57749FC762F12EC23E11ACC9DA0B6F4D99CD0A39D50C8F56B10D4B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiukDV.woff2
Preview:	wOF2...............4...{..........................X...L..,.`?STATD..t.....@..Z..j..6.$..P. ..`..U..[...c.({...'&..!&F................6.uf..S.l.V...i.x.........].D.,..K..@...:un..7_....D..K-M.mJM#....m.mV.A..'...~l.4T1.4........iF..#d.......G~.....>.r:.r...NC+..U..75..6...g.wp7...............J-<.h%....i.P_......P.R......)....BS.9.m./..M.>@....1.(..?..,...._.y.....J'...RP/c.&B..J..h....X.C...UBG\|T.u+..e.I......[6...~...&...1.1..}......J..`....\?..aoZQ/lhL.}t@EH.y..ZA....HjP.g.%d..<.....v._L...]...`.a.#<. <...KS......I....t..@[V-...^.xe.&...n@do.Y"....%T@p0..Xp..........>.}....7...D<.M.......ID...m%.A2....[a............j..;IJZ.....L.e.Kyd5"....OO8S.AR...~.c)....A.8..?8...RW....{..>..P(z.4.+............#/.....9..j........`..N{h/tb...^.....t:c.57u[...`E.f..\..~.......D..UQ..~..x.hJ.H....Z.F.B~..S...[...q..-f).....mP....l.E..#.R...[...0I...0...h.eyGzu........_...Uw...Cr....+.B..9.&....~~.g..Z..y...^.p .i....$...,...$..Mm9.m.i&....n'.n`]......y..c:B;.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1429)
Category:	dropped
Size (bytes):	23351
Entropy (8bit):	5.447728519960374
Encrypted:	false
SSDEEP:	384:iVlK9Vcdgk0hYP9ZzBoyMsz0pWOBtURdfUGEZNdSMejeF:iyKdgknqyM/WOBtU7fUhYbjM
MD5:	B5E21B254C8D9ABF3725C212CE10EA55
SHA1:	9678CFFD476702E7A5729EAECDB4C05B50C527A6
SHA-256:	FC90C372C57294A542491EA70BA3CA90218DE78E0F0761DD4E15CEE02292D497
SHA-512:	C76D028418170AF2C8F001EC99C14B62D89F7019768DECF12E2C29B9E40EAA352FDEBFCEDD9A5768FAEB87ED101264263411C878553240D16073F694133E8A53
Malicious:	false
Reputation:	low
Preview:	FJ(w3a);.var xUu="C__HC_94253229",yUu="I__HC_94253229",zUu="No email data found in handlerInput for Events.Calendar: ",AUu="__HM_173584019",BUu="boqSocialpeoplehovercardV2HovercardAnimating",CUu="buganizer-system+",DUu="docsHeaderConfig",EUu="forceHide",FUu="hideTriggeredByMouse",GUu="hovercard-id",HUu="hovercardAlign",IUu="hovercardHoverTriggerDisabled",JUu="hovercardOwnerId",KUu="this.el_ is falsy",LUu="yaqs-carrier-pigeon+";yre.prototype.YNa=Y(749,Ul(hg));.ZAe.prototype.YNa=Y(748,function(a){ZAe.Nc.YNa.call(this,a);bBe(this)});function MUu(a){this.Da=O(a)}J(MUu,S);function NUu(a){this.Da=O(a)}J(NUu,S);D=NUu.prototype;D.getMetadata=function(){return Q(this,MUu,1)};D.getValue=function(){return Mp(this,2)};D.setValue=function(a){return kq(this,2,a)};D.getType=function(){return Mp(this,3)};D.yc=function(a){return kq(this,3,a)};function OUu(a){this.Da=O(a)}J(OUu,S);OUu.prototype.getEmail=function(){return Q(this,NUu,1)};.OUu.prototype.Us=function(){return sp(this,NUu,1)};function PUu(a){

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16944, version 1.0
Category:	downloaded
Size (bytes):	16944
Entropy (8bit):	7.988141513824791
Encrypted:	false
SSDEEP:	384:fk343PBgJa2WKzrDDPixmD+OxWHBVPH3T7Mn/nu8E:M+C1rDDiU6SWHr3/0/u8E
MD5:	D8BCBE724FD6F4BA44D0EE6A2675890F
SHA1:	D276FD769BCB675F8EFE42EBE3003C1D3255F985
SHA-256:	AA4650A411DFE1C9BEB794FFAF08C7909CDFBB05672D79B3A9976672CBBA75EC
SHA-512:	23F757EA3AFE6FEBE1E8EA935F0EE8690E1B1B1DA511788B529CC2FC38F7E454153CDBA6F84A6A0E19B294E5311625A03617CF98AAC150F17B88A53F3ED8B72A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xIIzI.woff2
Preview:	wOF2......B0.......t..A..........................d..@..J.`..L.R..<...........^...x.6.$..6. .... ..D._.%.....H.Q9.d..xn'.\|.6.E.q.......cr2D!u...?T...M.6w;.;.4z..."..f..g#H.E.I../...U....4.P...5D...."..O...e....oSh{..=..D....\|pNu../...#4.I...../..n.I1..J@[V..0..I.....5.s.%..Q.b. )-.-..%GUK.'.B......(."...Q....64.M...._F.N.S......=...ve..t.z.P'...l.\..I2...;.K....f.../yN....H..S.6k2.d../........-..gS_....9....z.....3...XgO.R.$l(......A...u..x...iv.....S....x..........s4;Gs.....N....B.URQ.........k..P.'..m~N;..@....4....u...s..R..; {v..`W.....;I.Z......M'+h_...@T5..KQ.-...h-.?b.,.. .....n@%...^.Quu5.e...Q5..R...u..-.......'..;...+...9..]Tp.p....%1.....B...t.Ar..U..].*..sS... ..X,.7.E.....HRyv..Uv.X...1.Ql..M.=..~...._.ku..2.$...wu.C.{..C..6.;(A.(C.(K.(W..@..H..]..E.@..X.....P..X.1.pG.kf...J.....E......0.....k"...+.!NM.j.......P...6...F..:.a\h#.`.Nzgt{..Y\..C.O...hJ%.,0...T..6:~..i.8.g%..8S?.p.(.X.;...s."%.T.R.A...L.2c.....G.\..P.Z.:.M.6c.y..]

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1748, version 1.0
Category:	downloaded
Size (bytes):	1748
Entropy (8bit):	7.840525971879245
Encrypted:	false
SSDEEP:	48:TkXOQ7jX7K03LmuPpXa0xo0LdsiYeVsVo1Y/Urwn:uOOXW03LmWpXa0xo0SiYusVaQ
MD5:	6DBF91A51C653C0BA098FED5B34ACC55
SHA1:	599EBB3EE593F5C381AF2429993AF2FD01610C0F
SHA-256:	39DBC90B7B4C41925E680E6EA13E84E975E936AA8DE9B04A8C401A332FBDE393
SHA-512:	61FF9094CF2248DB64F8E5B665F096E76DA8DAAFD8939E0B4AF0B147BD43F848D201779B079F1F486EAB8C1F9BF3192443B6BBEC1D80B76D2227C446569203E5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5GxK.woff2
Preview:	wOF2...................x..............................4.`.f.T..<......G......6.$. . ..t. ..I......m;...$I9I=c>...Xo./M54k.I%2.@...%....].P...!......R.I.(>3.W:3.8....L.\|7...B..{S..........E$....N0F.S-...5...H.S.....(.......R..q.%..p./.....X'....z.......csz...i8...3b..@/..q..0x..@....}...N.._.5$..!ympz.6.........zL....x.!.}...q...B..Q.a.2....y.....Y{=.Q.g....m%2..k.7/G.g.o..L~ ..J.?/p..E^.l.J..+30..=4.=.......@..0..p.m..(..iH..a+\|...7!..<3.0."A.v.......&.l]....,G.)..R.CI..KY.\B........fU.....)..b+..S..L1k.]..n.iXq]}c.2.K..t\...B.c.]G......I..9.+fT.U.....=.n9B..s..n.[Q.TXg,]..=m....L.~..Y.%l..\.HM...r..5S9.<.....%\C..._5.6e....1G..Q\.M.....4."R...J..C.".L..!z..d......08MozlZ./F^.E........x.Nk....#eTn&.Q.PK.)..H..=&....@...\..(..w...{)I.y)..j....e.u...}g...tZ...q.y.X.5....{.........0.eQ.R....7.2..Q.2.....~.u2.S.JyE.}FJW.4..+K............o$&6......j.E.5....~\|.%5.H.;...eS.....o.._...5..v.]_..g..;. g.&........./....#qU. ....w..o.v..[..y..2......])

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39708, version 1.0
Category:	downloaded
Size (bytes):	39708
Entropy (8bit):	7.995101602136828
Encrypted:	true
SSDEEP:	768:XjiVPi/ZA7fGoYMkVufW8T9OEHrl0GzAh6vGiMZzd4c7ugMgaczhZI9mxhc:Xjj/6jGo9k0e8ZVl0GzAh8+zdzH7bI99
MD5:	F311A35802EF8FA61FA06206EF76278C
SHA1:	6179B813223849FAEB0835B285A05E5B2A8A4AD4
SHA-256:	FF8C9A38C906236A4025B752DA6A83403DF53F22F0FB8B88155B7B04A5229904
SHA-512:	44459C9D934891747B017A83489905325CA9CA5BD4232953AA4AF6770553930C8D2844115650E3FD5415971454DE866EF57EECF7C4ADFB1F1002601412A78390
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew7.woff2
Preview:	wOF2.....................................................T.`?STATH..j........7..`..6.$..<. ..X..0..[.~..I.~+.H..)&y..a..\16.........`.^...@..6........IE.L3I;a.@..(..!..{d7a...]A_1`.(..\|....0..9b.Z...`u6.CT..w..w....`..?..q..?.....e.....H_.~...z......\|.P...J..m...W.."..f.%...D..ew..&...?QJF...a.f...&.,.Q.r.....L....D....-2/..a.{....A..M.....2k.7..&.5.d.#....z....a.<. \|!..CfVV.>8s+......K.fZ.Z..H....\.[..u....d....E........J...s..so..yg.-.....R.o../[.D.8....].&r}.H..$_..........9......\...I...;@....fA..u..I] .#........s.[....D.z.vd.B.-4.....7.#./.oe./iY.o.D!;;...mv..&a..J(J.E......L...M]....t.........m.+7YD..i.6.>i.*..&!!. .%@. .R.jJm.NO.....vj..u;1..Sk.........L#......k..Q....p....W..^..%Nx..'q..~....Y.z2.U=A.Rh$..h..f..w......s..r,......Z...m.3.I...u".!n.i......\|.w.[.g^.!....Y.1.O.7..i.@.p...zM.%c.!....e,.s......c..e..e......~.Z;MmB;1....J$.....Md.L"..mB..>&.R ......].r....0..l.... @X..l............u....kE.@.P.P._jy.Q.......A..@I....."

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 128, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	596
Entropy (8bit):	7.358147793605888
Encrypted:	false
SSDEEP:	12:6v/72iokWmdD1dtho7LGwdKrzW0LVny+DDoLr7rpWh07W2ToBDyb+gpRzKd7XK:PizdZO2wdF0g+DMn7rpqZ2T0DyKIG9K
MD5:	70BB75F5854D383225C65C8F3C392047
SHA1:	3652E272226AD02129CE671D599E9107B0F41ABD
SHA-256:	B313DD4B335EFE398D93B26F0840ECD24BDE9A4C52988785FDFEBD87C38FCFD6
SHA-512:	AA1AC2973853C1523A27AEFA1819B9C6366E7AA9CDFA67A613323177F3488BDED9B8946D99B3207A81D79D0FD11AD12242C2B4A2893F897BBE084FED03551F20
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/hippo_lg.png
Preview:	.PNG........IHDR.....................PLTE..........................tRNS..@....'....IDATh...m.0....d{........@.X......6qH.$\|.w....(.'.SSSSS..S._J.>..~....s..h't..P>...l&\.u..b%D..H..`3BK.)..B..!..`b.9...-..+.N...z.."............&<21'........PV.~...x"F...Y.v..5B'................sqO.OH.I$.8H.Z..@...........d0..' p.o. s..B(.a....B2..J.@I.#...Bg1...@.0.. ......B.....l....`.`y'.M.7...R.T.\k..(F.....J...I....t..'D-a0........Iv..r.2.Z8...V3...\..Y.s.I.7.n..M..U.WW........<u.6.+.".Q7.e..y.^..+...v./b}.....>aI.......+.......)...w../. \...2U.>....2.N&45555555.....L.2..r.....IEND.B`.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 58892, version 1.0
Category:	downloaded
Size (bytes):	58892
Entropy (8bit):	7.995858140346243
Encrypted:	true
SSDEEP:	1536:zGRB4sZLebJD4gQL8CcWXYwk3V57Tt+5dLOj3aM:yRHZe94cCcWXYwCVrgdy7X
MD5:	386F2237074CC59495783195EA1F1295
SHA1:	81B3014B28B6E7EF2FDB39ED73D18EE38F1C36A5
SHA-256:	66A070C331573AA324FA2DEAC1A1B42B2D58E9660268555EE382D857E651E33F
SHA-512:	CEEF23D705E9D11C1FAD6D6704F2D1B3A59EE65B85CF240483484AE213E30DC2B59370BCD2FA61016256468A319B5033FB6F48C505BBCADA79B7489C1EA36CD3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5Ofg.woff2
Preview:	wOF2..............58.............................t..(..T.`..(.....m.....h........6.$..\|. ..r.....1[&.q.....uW..g.;.T.6....d..^!.X.r.C...\|...J....M2....x....P...M.@...1{.%....lJ..N.&..8..n.- ..a.c....~:...pa0a5Z...E.^...i.@M1pD.K..zb2Y]h..n.h....~.../...-..X.h7.J..TR%U2u...6..\|($)i`......<.,..5Ex.X#...w/r.....W..3.J.G....Pe....b.........Y2.~.i..fG.....gq...... ..9.x....?.S'}S.d.C..;..L.%..+....=.{...9C....,.D.s...F..)2B....T..h.H...H.U`..............Y8...q...%...e.++#+}...tv.^4D.$.....e......`?.^o...P.Y..q..0.L.../.......v...%.1...,2.L.(..~.............<......4/c..zIIW..;+Tlf...S...]..b.J:.NA:..A........f....R..A.Xa.Ph..Ii.......B...........J..i.j@..ZW.........IV.....P..`.+!.2.......d~..<$5...S....{....e..-..U......g.SH.}...........~........,.R.d....P..t.?..E.A,...UI...z7.7..x8.....0.. !.cs.~....U. .)..l..{>.DdS......6...]x....X.=.*.@....T..\..9?O......bD.`D........pYq.S.t..0lE...WP... Cc......lZ.C.....Cwp..V/....k.f^......b+

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37488, version 1.0
Category:	downloaded
Size (bytes):	37488
Entropy (8bit):	7.993533567842416
Encrypted:	true
SSDEEP:	768:esvocDJKJeW3cmJF3+1Xis/PjgqMLohr1C06HbC4V7:esvowKJl3c9iKP85kN1UbCe
MD5:	2A7652831C7699009E0C25DABF93430A
SHA1:	6B0A143D883AFB8FF3CA2BF55B448AF8B68F2F89
SHA-256:	C3525FCA875BF7203E92F116E0C5532DD5B5FE0F0CA5E12C6C4C8B9BD77566E2
SHA-512:	5AB58B2A6B9A39A2F14E824E9FA0005D2A615A95AD1496025C1DB67EB6B7F9F67ECA26EC96665EFDBCA86AEE237300714E52705777503DE1D0F6EFCFD4F21D0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4WjMPrE.woff2
Preview:	wOF2.......p......................................p...r..r.`?STAT...6.....X..!..P..6.$.... ..h.....[.\|.E.bl.......nRU...9...s..9-...C)(..Z.....".d......!..i.i...6E....A..f.-G.dL...L,%.Q....,..Qs..........'.kF^.3,#w..!p..Z.z..~.?2./..^.... U%U..#.y:.f...Bg....G......y...eT......;..~BPZ.=..4R.Ti...nb.oG.r..j...P..J..u.....4M.<.).Y.K..i.S.E...%-...>b..(AqH.kv.@"......h.\|g'.F...T.....lM.c\..^.{.w..)M..$H9...&.}2a..I...v.fL...J.5...6.Y...(,.aO..`...?..M<.x....A..N..!"O.).zU.7=.S.V....{..p.t.\|.n...Y.......m.....G..a.R.PI..(i.......DZ.lb..`.`ba.5.Q W._...9..A..O....}2.&t.)-r.3.).n..N...v.-.;g.a.'.l...6...(..}.#....Va4..7..`.C..(...,.U...uQn.s....5....P....,...T 8..v.<...j........B'c....Ah4Ba$F.Y.sz.eD..?..w...N".......).o7...j.l../E.5...[J=..O\|s...r..5.C..^7.:m.Zy.`.......K./....}x.?.u..............mJI%..UhiRK..._..ME....-6.......)c.....2............?..X..D".#..}.........mh..nm;...r@r.~....i..@..?_R..x.*..Nm....p8..p.i........\._...P=.u...v..W..eCmw

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (773)
Category:	downloaded
Size (bytes):	1451
Entropy (8bit):	5.369992473208254
Encrypted:	false
SSDEEP:	24:ko0Ym0nSOd1v6j+5YpQB/0VsFhqD43UfKhhpZuWBBGb7gVGbosazhOYu1hW+ra0y:DEbq1SjU+V4hH36sTQWDGb7SGbUGTrah
MD5:	8E6496A9E4858396E68591360D035BEC
SHA1:	DBBAFA113E287C0030274690A84266B9327630FC
SHA-256:	303A5D9910A039F77633E9771E2D8CD4324765E327A7F77158DD778083A983C4
SHA-512:	E4783B8088B92D168340D4B2ACA726D1C94F1344795C3FAC9B5E95D3DB796263D1B1A1A942FF233F6065B37FDFD7DE560FD29E59714F297944E9385BC7C776EE
Malicious:	false
Reputation:	low
URL:	"https://contacts.google.com/_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.9syb8JNqNes.es5.O/ck=boq.SocialPeopleHovercardUi.YAPwJ3QIDjU.L.B1.O/am=OBhgDQ/d=1/exm=A1yn5d,A7fCU,BVgquf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Xg7Hl,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,ebZ3mb,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,hovercardwidget/ed=1/wt=2/ujg=1/rs=AGLTcCPZEVCN8LJwUulTzlFP3KV32T_ihA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=P6sQOc"
Preview:	"use strict";this.default_SocialPeopleHovercardUi=this.default_SocialPeopleHovercardUi\|\|{};(function(_){var window=this;.try{._.y("P6sQOc");.var ZGa=!!(_.aj[0]>>18&1);var aHa=function(a,b,c,d,e){this.O=a;this.V=b;this.T=c;this.ha=d;this.W=e;this.H=0;this.N=$Ga(this)},bHa=function(a){var b={};_.Ca(a.Ys(),function(e){b[e]=!0});var c=a.Qs(),d=a.Ss();return new aHa(a.Rs(),c.H()1E3,a.Ks(),d.H()1E3,b)},$Ga=function(a){return Math.random()Math.min(a.VMath.pow(a.T,a.H),a.ha)},R5=function(a,b){return a.H>=a.O?!1:b!=null?!!a.W[b]:!0};var S5=function(a){_.S.call(this,a.Ca);this.N=a.service.Au;this.O=a.service.metadata;a=a.service.OJ;this.fetch=a.fetch.bind(a)};_.J(S5,_.S);S5.ta=function(){return{service:{Au:_.xGa,metadata:_.N5,OJ:_.nZ}}};S5.prototype.H=function(a,b){if(this.O.getType(a.Db())!==1)return _.$p(a);var c=this.N.du;(c=c?bHa(c):null)&&R5(c)?(b=cHa(this,a,b,c),a=new _.Zp(a,b,2)):a=_.$p(a);return a};.var cHa=function(a,b,c,d){return c.then(function(e){return e},function(e){if(ZGa)if(e

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 128, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	608
Entropy (8bit):	7.412244644679108
Encrypted:	false
SSDEEP:	12:6v/72iYlgYn/KmAWC/7K6NyZKgDsSlYNJKud7LJv3L7:PiozVCTHyZKJeuVdvL7
MD5:	4316CC62B535573721AA1239169792BE
SHA1:	1EF2759B39428FA93B740C84E42BA57150EC7A81
SHA-256:	37A7F9A09E9C9F4F95D8B8B24207CB8D63BDAAC2968480E9B7B732E9066623E1
SHA-512:	FE32CBC79D8F2E72A6346E9D5E7E848760F061340D3658BE13F6E43A56AFDB785F344272D8627D003A97B6E299CBDA6F46EB797D794F1B5A253431982F82D7BE
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/python_lg.png
Preview:	.PNG........IHDR.....................PLTE..........................tRNS...@....)....IDATh....q.0.......L...k.H{...._....`;..$...C....,...n.../B...zx....M.......Z8.F.^..s..7@..}.. ....!.R5.....c.'.0$A...0&........p....w."....I.;..,....,M..x.4n..'...b..[.. /...C1./.Z......,L.l...sO..p...?..#.....v...-.a.....^..RC...MZr;..Z;.f......-,.JV..4.......+.5.0....`..$J....G3."M.z.V.a...K.Y.P.....8.......h..E ..& .>.2......s+,.+..Y.d..c......F..~R...m].....(.........^.E ..P.."......R....v.`.....R;.IPO ..\/..x.....l...(....ZC.....6.Bk.mV....$,....d..U...DnO...<N.a...8{...m..........S.3_....IEND.B`.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64164, version 1.0
Category:	downloaded
Size (bytes):	64164
Entropy (8bit):	7.995558995622934
Encrypted:	true
SSDEEP:	1536:yntrSMoymlBwHLjXFPrrBeqAk73lfzbqjWLHD5wU4z:1BB4LRjrBeqAClfzbqjEQz
MD5:	8C548F65E1DC239D9F8F4F3F52457E59
SHA1:	9A1F4B732127BB53F1F17EA6C905A886A456FD62
SHA-256:	1382DECC32857B4DC59FAAFDF57088D9F6917B18ECE82CC47F84010224008C05
SHA-512:	EB3B25CA9B4F01B96E08BDA238FFB704EB9D80DEB13CACFA246E27BF4686605A829EAB23D328ADFF1E03979306E95A30494EACD26BB13F3021CFF6C17DDAB5F5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCu-xNNww_2s0amA9M8qsHDafY.woff2
Preview:	wOF2..................>..........................F...>..".`..p..F..v.....0..y.....6.$.... ........J[....4..^...o..$....CL.@.@Q.....a........}G....mY..P;.U................O.R....lr..OP.A.D...jkk..P,...T....[...u.C.>P5.pd..W..'.7..25...2UA...{..-.r..46.....T..&..k.s......}..\U&C.}Z[.Q..Y.y....o .Y..d ..@..l.J!...0.9c!...K7..J.......C..n.0.O.........UrF,UJHD.".Q./.b-..7C.. ...C..P%.\........jk..Q..u.$....74..+fn.B&.z...[...$.2U.J.7..z..'\9...9{.eu..Z..e}.d...\|...y.V.,e...P....e.:.Iv.?...(.je..d........@..?p.R.b..//..W.f..Vf%.....T.K..b..I...q9.}..!/..tZ...5j.....g`.^Tp....p.g._4......(.t..?3sjV....F<.=S_.......kR-...T.......\.o..}/\.O..7....I........G......S'.$$}\@..zGp.J...Do......@UU.,.W~.,......7.H.6...$../....U.Q........F....r..4.]...%.8..<.-R....'...U.:?.4.'.fY.1vl..!h.&.i.p?...p.{...<.s..p./}..2 ...=..#......{.G...@.p....@.4k.`...u...........m_.....G..]....Y0....(.#F.."" .*Q.."..(.....Q.3.JI.J..r^....Glk,.....n.(..D..e...jw..KS0.+.H....

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44316, version 1.0
Category:	downloaded
Size (bytes):	44316
Entropy (8bit):	7.994860790146446
Encrypted:	true
SSDEEP:	768:8iY5YSLtv5kwY3p+6OWzOz3UaFfQOJSLUQOk484megEUNdg5kNaK3vUr/H9/zvBE:8iYNqz3p+hWzObpFBJW5OjWegEvOPU7I
MD5:	F4B0DF592BED06B7E1AC275945D8EE61
SHA1:	DBD15D6534D7ADEF8E4AABA1A89E7A2CE22B16FD
SHA-256:	C8FB82DF9421FA2DE18E11B89200EECCB188DAB713331F06C6C8782AD5CE5437
SHA-512:	BE5EA92F8F78869D5EF69D96B2688FD6637E3BAD65C15AA83E118C2C66357B9417993BECCD752B12A68A6C0E6ADB7D1E69F6FB1E8221CC608EC33726DED7C69C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNiSnc3jw.woff2
Preview:	wOF2...............0..............................$...x..4.`?STAT@..........O..6..6.$..^. ..<.....[......S.....t..`..k...W#..EJoVXt8~A..W..y...~J.......%..^.p.</."..u..k.z..4.P.8....q.L8 3.y9.X..........%..+.Q...#...].......}.p.xE6.......aYp......4...V........{wy...i.i^.IG.G.dw...7...5.,W...#ch....h..O..l..z.......W...Ge.9.R}.._....N......L...lv[{7?.$K.o......W...fn..,.+..^UIGd...'/.<.es..;......F....N@rIO..(......C..Mx....1.uo.@z.rw....b$....;.&P..'...a...t..?f.bq....^....#...?..=....<L..xc......!........{...3..g..+..X.......Dm......I...B.J2+v.3.D.E......]."..(...s.a...V..RCH.d7.@j!.R.$.......X:....l......;[.r..........3...............U...... '..;P.o.@>.e.... 7EP....#..R!n.:p.g.......l'..~.YR,.r.TG.....r.I.W.!.c/ .w..W..U..a/.....e_[........{..J..dM.F.._..[6[].lF.....d...P......~...3?.1...g...d.kK.RJX..../T.....C..y.c...P.p"..!....y.W{;\/].....e.P.....,....0...._.'....g.s\<FBH .w.nF..<....XAq.3..{.K&..%.Z.;......!....Z-.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	650
Entropy (8bit):	7.382799325385537
Encrypted:	false
SSDEEP:	12:6v/7FQCmqVLxcF4ztyN9Ayq8f5DRKTlOrd1fW0xBkK:AkFTk8f5DRyQbfPxBj
MD5:	4F8C6954B781131758A46CE5B983A11A
SHA1:	BA31CAD002A7DC789DCBDC29ABB12566153BF7D6
SHA-256:	0E9A2F11325397E1A1CFE7D77CC5BD8343A6CDA03716C027604A78BEB3E877CE
SHA-512:	7E5C1E3E266B824A8B997B3F887ED96FAFD09FD5AF0F42E85C1F932806A3151DF9BA0CA48829D78A609F8AAA482835FF76E0F46BD0603AAA2234D5E07054620E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS....@6......"IDATh...m.0.D.D...`.6.......[.Gd....A..6..............<..'V$A.[.a.pt...t.n.`......`M.'H\:[..E...``.........$<......YK0.u.#..@."E.Hh.!..!k..A!.G).'..e.Hk.A.O..G.....PD...S.C...H.y....c..0.9........%D...7.......+ ..B`...o.&.w.".T."".S.w.D..".c..pH]..{.'CcU.(..w3.Ee}H...F%B...(. .Z.rwg.E.G.zV..}.}..(......XVYd....,..(.8...c..U...Pt.z.`75....vC.Q..MP..r..... ..W2w.L.R....BCe.=.F.......0....n...h#.lc.m.F9..4U9..."..7..j/..U.w.0..k~4...?....k..M...g...T........R.LAn.N...K.ts..5#G..\VM.nv.....6..3/Z.5..V..`..--..v........o.@.8..+.....IEND.B`.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	1223
Entropy (8bit):	7.738861739170813
Encrypted:	false
SSDEEP:	24:d8lSuuVe5mS0H/vjF9G4mi73gJb9JvZEqZcu4aw:d8lhuVeinDGe7QJbLvzcuvw
MD5:	A56B240F1AACFA05A358A06B06D78683
SHA1:	65517999047FADCA4E30FF7990C9B2B6F8F02C81
SHA-256:	BCBBF7686DFB2CB001546F064D923EA70B222B9DECBCCFC94A2E55228A79DCB6
SHA-512:	DBDA674C131A3907966357B54F9EAC12A52A009C88A6C5624E0C6E7E04FACC5D6115C9F94713D9F02BAF44B397E6F4D8F43CC6EE0E044A9713DA55B1A14AD3FF
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/unicorn_lg.png
Preview:	.PNG........IHDR.............i7.@....IDATx.......................J.(..'.m.m.m.m.m.v.=..[..d....Q..XI.D,6..]B..h.{.f......f.;X.........,fE..r.......-...7.9...xVR\|A2..ys.s..U\|.-.....X..`.\|.f!.x.....D6g...w..7.g ?=\Va1#F...%.r..F.......Opb4...$vb6.3..<.Z< /7..#..l..a\|6F.!4S...:b.8...L`).y.oR.....^[,.GL:q....QqAx....c.(....Mv..w.d.#.....)...{...nb\.a7.....1x..k... ..N\....^.C...\D..T.....ZK.1Q..5...S...L4.d7.-....2...8....mhe6V..0......hi...q....Q...h..N...p.K....KXZ.1X.C3\]g3....c!..^.B.....o..u.2z{/z":..[8.....R....=..O......;...J.!..po;6.-...=. ....`uV.Q.%.^..(......v1.)L`#..I.r.....j..h...s......d....u.w.."X...<".h..\|B....u.s.G......-.-....]....Y..Y."...1..d..Q......._.Fr.a\W....S..X0.].z....1.Y..G1.....1..eE-.`..H)....E.Q....Q.th.-Z(%.`...3..<D.s........U.B.Q..hc....f.^.Q..h....?8p...*D.z3...`.jE.u8.z.......U>.J.@.7X.'d.0j...H.j....d6w......Qk...XT.....pzP.,..?..Z4@...X.l..Z8........s...Q.6.41.+.c~/....3..(..3..]I...P....t.+>...h....+Pey....

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1256, version 1.0
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	7.767364329523114
Encrypted:	false
SSDEEP:	24:QIz1dMQFq2XNS2sAy8z6ija18fYBKk2oVeypqRcvV5W548yqyujMtrP:J7o2O66W+8oVrp+cvrVneQNP
MD5:	6DD9A903A2068612E4F0D7572E284077
SHA1:	A87CE7B07CC3C4F09AF54E2310B97F4678935F7F
SHA-256:	35015DC730E404653F8B00639C287105BC4D09A58C9235659B99150AA1B220BA
SHA-512:	19001F23C7697FC0838D828A34D56F85658E188E2AF704AD117BE0A60063DEF37A8B960548E4BED40612F855CA9C26947382111634B841A9628B8AAD9DA48BF9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WCzsWzLFneg.woff2
Preview:	wOF2...............(................................F.(.`?STAT..d....t.`....6.$.. ....[...c.H...xC$BE.4"S.....4.........t.b.L.Z.......Y.l..h../........`.!..8..I._2a.n..............)..o...om..j..t.....H^c...'<.u>..(...; .)o2>...a.(..@.BS..M..].....bs.[.7#. .....TYb.MI./sL.6u..2.`;X.0..-hS...wV..E($...gR..{q...9.F:.F:....D...@?.....?Q...."h._..."...\.....0.v...p..C..... )....@...P`8L`8...`.0......@..RB._w....d'D..........T..q.F....Q..v...u.r(.m.....%..x3B...!.r..[....{!..........S.$...m...&8.hHp0=...y......lyr.....({Wo?...bE...n~.X.'....&.%iAtQd..M...l....Z.....Nj.}.7....^..>.L......B........h....f...Cg.s.....oRP.G.....&.7..K..........9I...L.)S..Ub\|05~..).5..Z......H..ad:..{{..g8..0D.Q....G.LP.....P..........B......-ut..V!...T....m..#..[.)oEe...]U...M.\|.5LT..b.........d.D........J..-i.U,n'.o.!nm@...........F}6^....u..e..W.a...~.v(..c.x..._d....r^.).:........@.0....`j..XG...5.`4..W....K.c..5...<.7...%.<){....'(....N.A5.......bP.[m.`T.xp....+.....X.h

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3274), with no line terminators
Category:	downloaded
Size (bytes):	3274
Entropy (8bit):	5.390471426059042
Encrypted:	false
SSDEEP:	48:lwBrcIGsrcIGyCGnllJ1ws15Tws15QZUxzVKLCJEcouyntAu1I5nEcJyZXE1eelB:lXTMb1db1hNY/cobkcsidqg3gcIOW
MD5:	33E4EF067E8DB248F4DFB3C7F76E02B5
SHA1:	D5D5979344C1D3F41A32A180ADC849D373196B6A
SHA-256:	89E059962059032E7A140D5739E8C9C197A55D7305ABD98466C9D6D300B07A02
SHA-512:	9A1F769697EE558640C298906A933259DE20D4CD01D0D485BAEA1B7274B8F951B6D56BF5DF1E54383482970245E2CC5F71EB833EA1C89E949E6948DB56A448AE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTuKvZ-nsYNivRzfGpm8QSi6tMFrvg"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 72628, version 1.0
Category:	downloaded
Size (bytes):	72628
Entropy (8bit):	7.993648298573699
Encrypted:	true
SSDEEP:	1536:NH8XGACZrcOOWTRl2bvXPHCWTIBu3TTISSpufTHck8cFa:NHf5l2TX6tJbU8cs
MD5:	0F19855AD401FDEA3E11BFFE0D4E265B
SHA1:	44227668D70FC0289CDF988867A619E8E2960CE5
SHA-256:	9A0BEE97B056F9A0972D23BA254990353FD2FA23E11F0B4BD34B25E1AB4A0A4D
SHA-512:	339FF2A58B0DE425C410A21011901823B2D833356D5BFE586D251E33F5D594C68D62F016C779CA5509B46E648EF4809FAAA603029B656A0730ED5D46E7A48BFF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71RjywflP6FLr3gZx7K8UyuXDs9zVwDmXCb8lxYgmuii32UGoVldX6UgfjL4-3sMM_kB_qXSEXTJQCFLH5-_bcEls0qp6I.woff2
Preview:	wOF2..............P\...P..........................P........`?STAT....P.....T.....6..6.$..h. ..R..?..[.....w.....2..N9tq.Y.&...!vk...j...f..cl.t+;...pY.......q......I.....................G\|n......?s.... ..$@..2AQPD.Z...D...S.0...M..R......+!.Wky.P4.Z.4[..-....t....g.-V=....1@..\d..>.Z. f#.s!.#.....@...!.O..>...d.GB...qF#.9Gr....r.S_..X.#.:.#Sm.\(.!.7H...[.1.Q.+..x.2..1..}w@.nb-.....fY'.).w$:..C.D..[+..h4..u.fP.r..z.G....B.U(.r ..... v.......8.1......P.6/...Or.$b..'...wb\|..3r......$.....HI.p....6.hp)$.....g..."2s.gFh.&..$...+.....%z..R..R.V....9....D.tN.w.ts3i.I..&B...l\|.9..O..o.-..O.s......6.p..A)..2z[A;.b/....fi..%V..Q.kn..A...F..6...Y..=sy..q..jN..U....ae."m..\|d.i.K.T......p.D.............y.)...qu.^.\..I....5.;....y$.R.P.s.oV..+Vk..'.3...C...;...io....Y......}\|.6...lYhaf....]..d7...b..4.u....5.3F*.@..-I..$.....N.f....T.....C..1...?`.%dM...fHw.9.$0-..}.pF.ia;7.N...(.!.A........V..wF7.J`<9.J\...S ..i...3.cn52.2?........D?.Il......mE%.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	downloaded
Size (bytes):	14464
Entropy (8bit):	5.472172006748169
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFC+5aiWQLHO91sIuW:IoqUAh8vz7W2s
MD5:	1A5907980398586C2929C4E8447B8837
SHA1:	562CF91C2981EB8B1D84349EEE655674A0EF0F26
SHA-256:	BD8B2A5447A86A409892EE240E96AB99ABBE93D125B2FC59DDA51449C2930254
SHA-512:	337142703E4B57EAFD23DA6D9094315F00EB4655AD6C735CFB3643BFB5AC085EA781682FDA93E175C3801C3E45CCCD7CA958AC4FA8A29899DAD0F23A24E098F0
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/api.js
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	811
Entropy (8bit):	7.570036317455735
Encrypted:	false
SSDEEP:	12:6v/7IHVgpvwRj554sLt5d1pRu5nB2vY31KP9Lagqm7IcgR8Qo+d0QJ3gyTVujOQ7:5H2wh5Ft5zu5sagrIgQo+d0i9Zyj
MD5:	60DCBBF0807C93F900ECF6E972E83189
SHA1:	F33513C86B03FC5C196066AA10E92FF339D0CD04
SHA-256:	C3639C2BFF756C0B005FECF7DBE9740C22FECEA7372550B22E5E586113E7F357
SHA-512:	ECFA6FBE93F4D18FE1EF5D723C446CED0C8BD055D11BA5601C350D7BE61A250291B75371861F1EBC65A48D834E3F1E9B30C254DE81880AA4E43A2A9F85262EE7
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/badger_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'....IDATh..].. ..'......4.p..`.Vj.[....P..X....V]....;..;....8>-....{.)....._"4..y...N."BC...a.....3.4..........P...O.......:...9'.\.w.1.h...~._....Yv.,..h.......P.%B.@u..:....JyB(z..Sx^".iO1?Yze...zH..8O...viX..g...kv..v.B.e0G..../..R... ..3..L$...Q.%h.9L......c.m..Dc..Y.M....{.c.;p_...K6u'.FV............-.ty..@P..g.`...0;.U<.Lp.\3.n.._.P&p.......~o)n..a..66.&1...NNX.a"..........f.DDP$$X.>D.SGX<....ZE.`.W...x....l-....x.....#h.....iy....z..2.!........n.._ .a.....v"..._....b.w".^M..D.s...B..F...".S..t.k."............"$...AF.Y....A..19.".....w...... ".P@..SV...x.Z.2.9l#...mL......DHo0....r..y&.+...]..1.Q..].^..l.....G.B.TGhR.@U....H0..Z.J.. ,2<.....z..<...$....;..;.8..\.A.........IEND.B`.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1223
Entropy (8bit):	7.738861739170813
Encrypted:	false
SSDEEP:	24:d8lSuuVe5mS0H/vjF9G4mi73gJb9JvZEqZcu4aw:d8lhuVeinDGe7QJbLvzcuvw
MD5:	A56B240F1AACFA05A358A06B06D78683
SHA1:	65517999047FADCA4E30FF7990C9B2B6F8F02C81
SHA-256:	BCBBF7686DFB2CB001546F064D923EA70B222B9DECBCCFC94A2E55228A79DCB6
SHA-512:	DBDA674C131A3907966357B54F9EAC12A52A009C88A6C5624E0C6E7E04FACC5D6115C9F94713D9F02BAF44B397E6F4D8F43CC6EE0E044A9713DA55B1A14AD3FF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............i7.@....IDATx.......................J.(..'.m.m.m.m.m.v.=..[..d....Q..XI.D,6..]B..h.{.f......f.;X.........,fE..r.......-...7.9...xVR\|A2..ys.s..U\|.-.....X..`.\|.f!.x.....D6g...w..7.g ?=\Va1#F...%.r..F.......Opb4...$vb6.3..<.Z< /7..#..l..a\|6F.!4S...:b.8...L`).y.oR.....^[,.GL:q....QqAx....c.(....Mv..w.d.#.....)...{...nb\.a7.....1x..k... ..N\....^.C...\D..T.....ZK.1Q..5...S...L4.d7.-....2...8....mhe6V..0......hi...q....Q...h..N...p.K....KXZ.1X.C3\]g3....c!..^.B.....o..u.2z{/z":..[8.....R....=..O......;...J.!..po;6.-...=. ....`uV.Q.%.^..(......v1.)L`#..I.r.....j..h...s......d....u.w.."X...<".h..\|B....u.s.G......-.-....]....Y..Y."...1..d..Q......._.Fr.a\W....S..X0.].z....1.Y..G1.....1..eE-.`..H)....E.Q....Q.th.-Z(%.`...3..<D.s........U.B.Q..hc....f.^.Q..h....?8p...*D.z3...`.jE.u8.z.......U>.J.@.7X.'d.0j...H.j....d6w......Qk...XT.....pzP.,..?..Z4@...X.l..Z8........s...Q.6.41.+.c~/....3..(..3..]I...P....t.+>...h....+Pey....

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 60648, version 1.0
Category:	downloaded
Size (bytes):	60648
Entropy (8bit):	7.996486811511533
Encrypted:	true
SSDEEP:	1536:ImmBIE3fQFv+PsXFn6FJ2tLtPiT9iQWttSRTYy:sp3f0MW6YLRi5iQhR5
MD5:	0E46400F3E919D0CB74068D448D9DAA9
SHA1:	BE7343C9CFB3CE5388F38F2A8D302ED8AE8C7D6D
SHA-256:	9FC62F0847BBEB2B050932BC04E8D60087955E2BBE3659FBE89408F4C62F2F7D
SHA-512:	6A2850BADBC3AC36022E717DA1811808B16997CA6EAF58D106F8F3F9D15ED1F3C1094E8DEF9F4717DA31B8D7EE8D46812FB1C473F916059FB47C83BE47CF344F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCs-xNNww_2s0amA9uCt13D.woff2
Preview:	wOF2...............`.............................H......".`..\|..F..v.....<..0.....6.$.... ..^..)..J[$x......uo9......S.$.N....q'.1.#fF..mS.M.g..j........_..@..........,.6g.....$......Z.j.t.A...E.^.N...E.1.O.!`>..q..\FD...k.x......(.....X.{.XZ.N.<. ".....:.o...u.J.@.mp.........s.., F.r....^......F....#.b.......GA..N.jKQo.S\|f....Z....v.B...=.. B.}@..;.....DzEBF..QP4J'&.4z...+.tn....T.Z.K.....n..VT2nF..e3.]..p..6.q+?.h.3.~..+.I/)).&.....{.......h\|.q...F...W.-)........v.$ZA.N. ..y?b....kt....Q.J..f.....RJI.Z8..{.TI.d...=...R....V.9^>v.z..[q...^4...\.2T;..Q..TN....b.s.._..mF..5.2!...d.,\...:."/.q.t.K)...#..5.....M.......kI......%4.3... ..i4#....:...E...8.U^.....)...]"G.r..yB...`Sf..........[~..s`.:......I...x.$@.RC..8m...Ig.............:.0..:..S..F.q..f4048..........6...a....5..2..\|.....i.+........J.....coi...].....W...e....=..62O.F...1.....X=..}.=.b!...I.i..Dr..."4.....ZR.$m...}.m#..U..PEt...:...\|...6....}.`..#..#F..#.......M...

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 128, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	765
Entropy (8bit):	7.577747876668397
Encrypted:	false
SSDEEP:	12:6v/72iBANoO539TIU+7I+vfpaXe1pvWq+NTtBls5B78qElXpGHpou24CcePSDApz:PiqSOfcU+7I+ZaXO+PM5BYjhpgpoCe5Z
MD5:	31D4B2CFFD4EFE5033DE3D8BC3B2705C
SHA1:	E5B3831D51D854FFA1FDD1C99A7A6E40B85D78C9
SHA-256:	EB59A7D6BCC31DF8485874BBAC3DA6F19FD5DE7E0CE6C69C0FBDC2698FB34A89
SHA-512:	91803F6CF96A93929D7FAE8160EF853543BBBE51E6903B1E4E021AA6D7B048D977838E284E449793240B1EE4E5F0677E553521B19998E32A396A7888FC21036D
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/raccoon_lg.png
Preview:	.PNG........IHDR.....................PLTE..........................tRNS....@6.......IDATh...[..0.........6..6..],.......#F.........G..K..q.Yg..?r..h..r.Fc_9.2......H.@....0...\|..-l.YoT.`.;...j.[s.Q........H.`..).P..-@.-.]K.........V...5..:~....(...Y....c$B(`\......'......541B..tW..z..E.....0J.>W..." ......b..z..a......<..yJdf..&T.D.y...)P.F.._.1u$t.t.e.............u.1HX.a...Or...Y...`h5F:...)@....hDc..5~.......~.!.......6.........[J..../d.......&\|v;......,;.]..9.y.....n.+(O+..]..CUUU.!<...L..;YX.$AX...aL....$`..)Y....daJ.H..d.O..d.t.$.e..$..? L..._.5..j....{..t...no....~.... ...Y.G...9..]..N.E..".r.0....)h....h...[p.....W.s...5.{)<..W...-p(L...<.z.}. ...._..\|.F....h.}Aj..B+.......C.my......Yg.u.Yg...].C.S.}.....IEND.B`.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.950212064914748
Encrypted:	false
SSDEEP:	3:WZoS8/ZYn:WZoS8/ZYn
MD5:	C3F64CB2A8B00CBBC30CE2908208A29D
SHA1:	E4AA7CAB67F4CF5FA52371DDC25A75AAFD4D0CCC
SHA-256:	391601283994BCD9486160BF8A5637410D280E1BDDD3AEF5428454976E193E81
SHA-512:	6CCBC26128FE65D6D313B965DA3D2E201D506442D0036404ABB490BE0FC99B3A0FDB611269B932DBA7F3A621E11F79ED213D2B11D487EE39C54A17D97A823552
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlFeX_nH9koWhIFDZFhlU4SBQ2RYZVO?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	24291
Entropy (8bit):	2.9545368105511347
Encrypted:	false
SSDEEP:	48:TDtLe7tZYTn7CNOAMUFuIuV///b//3///k//u//+///3q///NtLNhesjfXKzgE:0gfCN9F0AG7eIazT
MD5:	05F2F2059412502B0CF2140369A01612
SHA1:	ED998506B18948CBD20A4C7103199A10CF723922
SHA-256:	3D45292EEF3C671FCAFB8CE679C08FCCED09A3835E46F9ED51C7FA9AF2E0E11F
SHA-512:	E337A5A29179ACD05347D125AF5DA24813238E94736F403A18131B0C97E32A17C9F5B667173BA8DE2297B37067D0FDCA306A6CF4EAE2892923661F42994C0982
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/documents/images/kix-favicon-2023q4.ico
Preview:	............ .h...F... .... .........@@.... .(B..V......... .e...~W..(....... ..... ..........................B`.B..B..B..B..B..B..B..B..B..B..B..B..B..B..B`.B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..............................B..B..B..B..B..B..B..B..B..............................B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..........................................B..B..B..B..B..B..........................................B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..........................................B..B..B..B..B..B..........................................B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	27134
Entropy (8bit):	4.949493419733994
Encrypted:	false
SSDEEP:	384:G5Cj0WN9Oe/bMZ0oEQSERgPtuLCnulPmo8MADYyY/AXVRdB6j0T5D7ZVQR:GkOT0onfgPtfuwMFyY/ZC7G
MD5:	3EFE1C5EB7CC2EF3419BF71B650479B5
SHA1:	B7E11B6A8304285BDB9528B3E5707FDCC4441A70
SHA-256:	7D24D331406734568514DFE0510CB86244FBD402809150576A94B8F93ECDBF43
SHA-512:	19102F6AA0344C320D2D0C42C479E88B9119915DEF3E1BED4AFDEC7154C581DC0852E9BDA29E6DBC6DC40EB32D71F5328A0C22CED21ACA1E8C502F4F450359E7
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/documents/share/images/sprite-24.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="29px" height="1049px" viewBox="0 0 29 1049" preserveAspectRatio="none"><g transform="translate(0,308)"><rect fill="#4387FD" fill-opacity="0" width="21" height="21"/>.<polygon fill="#999999" points="15.5,7.414 14.085,6 10.5,9.586 6.914,6 5.5,7.414 9.085,11 5.5,14.586 6.914,16 10.5,12.414 14.085,16 15.5,14.586 11.914,11 "/>.</g><g transform="translate(0,281)"><g xmlns:sketch="http://www.bohemiancoding.com/sketch/ns" id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g id="Artboard-1" sketch:type="MSArtboardGroup">. <g id="Oval-26-+-ic_link_24px-3" sketch:type="MSLayerGroup">. <circle id="Oval-26" fill="#558B2F" sketch:type="MSShapeGroup" cx="12" cy="12" r="12

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36840, version 1.0
Category:	downloaded
Size (bytes):	36840
Entropy (8bit):	7.993562127658027
Encrypted:	true
SSDEEP:	768:Vne728reVhZRDsdY38FWernlqO6oqd1/yc8Kmfd:VnmhrWZ6zhnjjqjyc6F
MD5:	3603078A7B178210AC17285E145B4A8C
SHA1:	D57FD925F10C47D039FCDA3CC8A2A12D23E134C5
SHA-256:	DCBAF64460B4DB78BA16EE6230D2C90215DDA58CE8C285348D624FE32DBC470E
SHA-512:	495F1BD5DE5FDBCB73865CBB3B5E966906E527E6E9204D62492F433BEB4E8E31F2934A64FADDF805E44A8488B36E8C98C12C70339177F6F10541331CA7F407D7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4Y_LPrE.woff2
Preview:	wOF2..............................................p...x..(.`?STAT..6.....0..r..R..6.$.. . ..P..#..[]}...M......".l..U....Nn..@.T..$E.c.8...g.....oJ.2..........%U.B...yr.... )K.\saQvb.Q.8.B{r.y.I....!.c.SJ%.rN.$.kI.WB.../<.....i5x}..\|a.km.YvB..jFHY%...I..S.k^L3..J.V[..:...ng.j.y......L....WJ.S..;Cg....N..oQ..O..E......c....\|..V.........S...O{..7....~.......}x.[.1F.......I..}DR5.7q.\|..."M.F..N.....P..%....B.q...P..I.^..fs....B...TO2...[]..csj$.<......$....}J.<vO...Z[..w.5.q..G.! .-%i."...&b....`.U"H....&.e.">a.r......=.....).Fjy...p...O.u.;@s.L....U.m}.lb...-e..."V~.........G......m......qm.n....).A.3.Y..x...@x...s.j3H...p.YS.w.p'..b...w.6..o[..M......!.....%<..x..C..&.k.XK.-.Z..z..k\|...........nr......x.X..q.........^....7X......K.I'..y{i...H.7$\|.ka.._d.l.q..".l.?.*W...`H-Ja..."{..zF...H....!.SqX>2..!....)...-.....S.?":Qz.....]....;...\..-...t..h'[...s.p!x..3]........'^.]f......L4../%X..>?1.....A...,@.+.i..?%M-..C.{.J:........./..E...l..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41676, version 1.0
Category:	downloaded
Size (bytes):	41676
Entropy (8bit):	7.994510281376038
Encrypted:	true
SSDEEP:	768:spGlqkWqlt2B+/4qgwfs/W4NoQBUVRwHseU9BNhS:sp+B5Ik45GwWorIEUDa
MD5:	C619C10C85CA3DD6D4B57CC59BA2A32A
SHA1:	92A0D8AC165CF6788BE6259F901FBA1994886D91
SHA-256:	C129C2C42B2F1D5AF9BD5B9858F0EBA8215EE3EBF61FBC99866E107B2C0AF4B5
SHA-512:	BEC65C9991CE74CED298E75A30369CFFE9D40F26B7EA10B7E16469D32AEDBA85889E063B2A571F0FB38B8E560F3CB26E7551A4FC6736F4EC2B6DBCE614E141A0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmRTY.woff2
Preview:	wOF2...............4...f..........................$......4.`?STATD.............6..6.$..^. ........[g......U..r.....+g...n.-..6H..'>K...;....+.v.......%.B.............U...<<.8jF.2.2\|.)P..pcv8/q.h..r."....T....E@r.1;.$C.R.Zr.^..Vos....[...nJv..:..]..$.p7%Sb...QIt.q........I.:..".0=i1.p.,..fh...8...\.?..n.o...O.....7j......YC........H.W8."...c.....O=.....wjXy..`..,.T..[..$...w.....^....\|...s....+.....Z....m..E...~.tl\|6......:X..........20v...6V.x....M..K.6%.oD.m....F..<?.?....=V...#..R...Q.._...#b#V.....)U&.T)!..PJ.....O.^.+y.c....AO..%I...r...g.....-Ff.0...;<?..........c.....1X.0b......3..T0...3...<E.......N.9-1.Y..=...#./.o...."u9.hl#T./D6....F."t..e.%,.s...&.#P..G..n..Y.....X.N..._h.j..~..j..*W.$./.T.>.....e......S)..`...~......Z.c.p.q.P.HP..oO.}...2..R..(S.Ph.a..0.{.k...o".x...t2..tB...r.}g.<...otO.I.....Q...a.).......3p:S.$.......IB........!Ja%..=...36.......SD..+.T^%.k.m.u.W...3.9.L.p.?..'H.MK.`.. .v.]...(...u...(...c...r.\|k.......i..]....

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 40412, version 1.0
Category:	downloaded
Size (bytes):	40412
Entropy (8bit):	7.994886632164997
Encrypted:	true
SSDEEP:	768:0U0SxIWUlVNVyPSP7MsHS52XxVWJCwQuF64SFjZfqe2rGPNy1ctML:dSV2EUeeJCwHX0BqeeKEB
MD5:	7332D3B0FA7568125CE6FE9EC4D55151
SHA1:	1822E1EF270F935E5FF8EF83BBE8D0C27CA3CC55
SHA-256:	17406C4E4926C81DCD8F3832B79428CCF82F5A3AF17C03AFD0E37F13413851B7
SHA-512:	EA96241276323BF4835A2247FC299149E8154EB4121BD7F0846D3A514774ABCCA51F7567C348D4E9BF9FEC94F7CBF6E2374C89DAAEB397E1B8B7D3D417FCBC4C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9aXo.woff2
Preview:	wOF2...................y..............................8..Z.`?STATD..d........6..b..6.$..@. ..<..:..[.......55...m..)...WW.7...[:....n......?.......2.1M..%.......[..nBdf.E,2.^.E..L..j.k.k.m..,..7a.."..Z.O.\|QFe..1Y.>...C.6x.RZ?...=]..........9U..2.......i;...Off.h..$$.~}s.....\b.T. .IH..."..]Xn......GT+!....(....w1...hn.....j.b.Q.Su...6...VK7..vI.?.yFO..sP..E..Fx....(; ..i.).P..).....S..5...z.Z..w....z......N...3"~Lf}..z7.....T.k...]S.)~VX..v.b.......VBN..7Z...7I..1.u@<6..m.8.....eV...48..%tV.<?.?...V..l#7....X3.6.XdZ.....]...j..QcH....g..6.Y.}....B7.6K.w...C...8..%'1..4^M...Q..H.....6.t..'.M..?S...u.#z...0`..cltm...J%c(.R-...!..)"......3.}Q..K..)Y-......4...U.d..(\...M7..i.AB....y}..~...}.7$.41/%^D44.d.H?..x..@(..\.`.w:B.o...t.{\|kZ....\|..`Y$k...~..c.}...7.(w....p..1.l<...o.........5Y........8...DR .`.........k.3/.;.....+...F.....d.3....')9.......X.j;u...C..\|...]..)!...'.7.&..a4..O....;g..A.b...c6.-"..2..X..Wgo..{5h.]A".SLw.)..:$l..4.-c.q.v8.k...dk

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (558)
Category:	dropped
Size (bytes):	2948877
Entropy (8bit):	5.5933003200755556
Encrypted:	false
SSDEEP:	49152:djM31FQekxIDUMp9ElygRvmBs+JB0khjN6X:dAIM0ls0
MD5:	BD5382180383506588D097691E7C3F33
SHA1:	730F0D1A59058A7AF50D78BACF02F09FF5FB586A
SHA-256:	C83E864C4A70628CAE870486F30FDD91C1F5A13EF40DE74F2DE3305D72492EE3
SHA-512:	EFDD001038D2F5DE839338504B540A1E19D85440D8A4FCC7B6FED2C5E249722F045ABEC8A9E99108669BD095F4D3B7713F0FEF722C507E561C4D54BCDCDC31CC
Malicious:	false
Reputation:	low
Preview:	//# eagerCompilation=all.function _F_toggles_initialize(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="\r\n",ba=" ",da=" (",aaa=" and the blob url is revoked by ",baa=' style="display: none;"',k='">',ea='"></div>',ha='"></div></div></div>',ja='"></div></div><div class="',ka='"><div class="',caa="#$1$1$2$2$3$3$4$4",daa="#000",la="#000000",eaa="#009ef5",faa="#00ffff",gaa="#0b5394",haa="#0b57d0",iaa="#1155cc",jaa="#134f5c",kaa="#18803

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41284, version 1.0
Category:	downloaded
Size (bytes):	41284
Entropy (8bit):	7.995064975939542
Encrypted:	true
SSDEEP:	768:cfG0KEtyj2eCaD4YcktFD3n2Eaxvgg6UOJ47dDNITDCJeFqtlBcCi1FWOLtgYmu5:cfG0KEAj2gD4YBFD32BbPdimectlBcPp
MD5:	87595E01EADD10489540C2BC9532C831
SHA1:	E3EA9372FC50308AFB080F0AA0C1B544873E7896
SHA-256:	BED2897761BB0A09F1993AB40B94D35B1E2B3C57039379B888503C6EAC7DCE70
SHA-512:	62B45A99DDDDAF13A857380714567ABA0386E2C0A8A89FB378C1123645F693FE4062F075D143B153021FF556F9235F76275F3D73DC79401FCCC29E405AB09F9F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_qiTbtM.woff2
Preview:	wOF2.......D......................................d...z..f.`?STATD..t...........\..6.$..4. ..\.....[.y.........v.}.$.oU...i+s.:o...,.}6"v;\|t.......?9...i..PQtn..]..S....D.V..0s...N.y.4....."S....3.(...c..j%...-...Q........ .{.943.h.....N...}..P^Gt....._U.....\3P..k...q..C~...%..eCYv..>.....u.....Q..kJ..4Y.~%31R..2...H:.{...Ue.j.!j....-z..$.a...$N.$>4I...l..a...._?../.L.b....]..n4..Fe.j...&9U..j..NX...D.U.E.....).^.KR..t..........L.o..P..U`.z...N.G..~......8<$.....(Q@..$..$$O@J..+.".%RF......h..,..}....%.k.m....>.NF.....u.y...O.+...`.0;8..i..).;.z...\|s....B..;...!R.kY.3..\|.g..i.\|.f7i:.J)t1dI....A.D.........%..T.U..h.D....a.'AHO.<.wo.y...B.'....1.e.....X.....G..q.M;K.p.x"M.Q.g.G..\|X.w......."./n;.i.......b>..........M.J.I!D..A...s..J!...<...hx7.n...t.-.r..m.$b....m.B....B....~.:UI!...{.Bd..!,.=...r...@.d`..~...sw..d..E..=...C.U.$%.M!...Mz...O...`.W...2....N......R......9...F..r..'..?...{..h..a.../.@@.OZ...:@......"y?>c....O..uw..h.H

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1416, version 1.0
Category:	downloaded
Size (bytes):	1416
Entropy (8bit):	7.811377924682188
Encrypted:	false
SSDEEP:	24:N2bmsAaPNl1Yn3NXvem3NhvRcpd8CE/LZnnrHrEV9bw+k1kjXriNClDuK/PVa1Fp:OmsAaPNl29Xb37vRcpdO5Ezbw+ukjXrg
MD5:	E2D07BCC7B3C68F09F3517CD26B496A9
SHA1:	1BC266CB846B248865B43E53CCD7C8117A70B7BA
SHA-256:	CC93B0C6CCF01063B9788530CA2389636059624B18599DE8EDEF8D4054255474
SHA-512:	35DA3761609813625AD4A9FDF9253617CE61EE350F08B2915ED38C66A50DDC2AD35B5D0D0E4B8993103E4E40A116621FE2AF2D0A9C4D71D18F9B1098B82215D0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_QuW4.woff2
Preview:	wOF2...................1.........................4.`?STATH.d....x.=....6.$... ....6.....Q.0N.....1.C\...d..T...'K.......s..fC..h.....F..fiM.m%j . .B.(.40fBM..9...S/M})...K..6.j...?.ok....n?Dv}..?_W..V....Ewo....Y..x............<._7"Pa.Hd....r.E..n6:.::/}H.dP<...w\..... z.....H)'...,....Y.....e...b)...k...2..<l..8...~gY.U.M"R!.zM2.\zM\.\|...c......@..0....h...s.#...]r`.!}....4..d.&......gf..n.d.....v>\|s.P__G..GKBa1w!...#!.A.....mNq...Bw.P"p...J..5.....D..Q'...B..L....CK.. [T$,.`.G...IP,Y....A.J.l$6..A.}...`..8..;..]u....&.[....m.@..]z..C......'Z+.l.4..Xc.. ...%.d....x.s_e..P..J,...81#...>........+.8.K!...E-C...%.,......'.....2{Uy.4.....xH.....B.......Mfn......`.q.X7u0r0...q....q..d...O.b$'...r.:PW.C....P..S....XS...2.....K..P...u.S.bd.@k..'.o.:.z.=...?/.y..m~>#\..._.Fi..w[[.<.t.i.cG...8..`.d..R.9.L....D......4.`.@@$Xjp}.1l.G....]$.;..L...9.E..o..\..e..#...f..p.=.~.qp..)J......".L....:..].....oS.u&....F.6.....5....H5.eai..~..x.[F...E..y.7l.m...s...

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	309620
Entropy (8bit):	5.350554726112599
Encrypted:	false
SSDEEP:	3072:GrzaefdyrjALvmocrSh7EMidMIh998oAWyRZ5D4KKfuO45//poorVECLr7dOwymV:cfdy3ALIrSi998oNyJUKNOKP8wy3/Qj
MD5:	05C760EF706D2CE08C0643828E7D0816
SHA1:	E785451E9914CAD18B5916290D0A1DC1D24774EB
SHA-256:	EE6F91613333F6B78D6BB61AF26FD8D6FDBA82AFF1027466075046BBF43B0803
SHA-512:	CE1DC99D11DE463E338B9F81F413183623754318490583F2FC618AE8A4F921870F655EE6DBCD1ACFD700B9175005C9979BF8BAF51E887E57A1A0FF11C39F657E
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/463190011-client_js_prod_kix_nestedsketchycore.js
Preview:	FJ(B_a);.var lhf="#FFFFFF00",mhf="%s already belongs to %s",nhf="%s is not an allowed shape property for a MediaClip.",ohf="100",yL="11",phf="16",zL="24",qhf=":animation",rhf=":background",shf=":document",AL="AM",thf="Document does not contain MediaClip with ID %s",uhf="Illegal id: %s",vhf="Invalid nesting level: %s",whf="Not a shape: %s",xhf="OBJECT_WITH_CAPTION_TEXT",yhf="ONE_COLUMN_TEXT",zhf="PICTURE_WITH_CAPTION_TEXT",Ahf="SECTION_HEADER",Bhf="SECTION_TITLE_AND_DESCRIPTION",Chf="SPLIT_TITLE_AND_BODY",.Dhf="TITLE_AND_BODY",Ehf="TITLE_AND_TWO_COLUMNS",Fhf="TWO_OBJECTS_WITH_TEXT",Ghf="Transform %s is not valid for object %s",Hhf="VERTICAL_TITLE_AND_VERTICAL_TEXT",Ihf="bodyPlaceholderListEntity",Jhf="docs-easm",Khf="index %s is out of bounds",Lhf="properties",Mhf="sketchy-addAnimation",Nhf="sketchy-addEntity",Ohf="sketchy-addListEntity",Phf="sketchy-addMediaClip",Qhf="sketchy-addPage",Rhf="sketchy-animationProperies",Shf="sketchy-background",Thf="sketchy-changeShape",Uhf="sketchy-conve

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	866638
Entropy (8bit):	5.754588603090571
Encrypted:	false
SSDEEP:	12288:fCljTlbxVkYA/Z/7C9OQEpC8y4GvfdVxSQyyJR:fCljThxVkY6cOQE8h4GdHSQyyJR
MD5:	CBB6D3C9CC919CCCBD6E725742DCB083
SHA1:	A41615A6EBD2F03981F05D0A369D486A1CCCD7A8
SHA-256:	F9AD26146C2F51B5EBA4083F6A3B63B1562F0BB4CD8014A33D20A284C69EF9C8
SHA-512:	430B567ED6D0748D08973D34CC850F1B3F032C03FF54157362991EA2A9444A8C984ABBCC76E5695B782DC3024397552B40A4463F0C2BF0589D9E0C35F6D4EF52
Malicious:	false
Reputation:	low
URL:	"https://contacts.google.com/_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.9syb8JNqNes.es5.O/ck=boq.SocialPeopleHovercardUi.YAPwJ3QIDjU.L.B1.O/am=OBhgDQ/d=1/exm=_b,_tp/excm=_b,_tp,hovercardwidget/ed=1/wt=2/ujg=1/rs=AGLTcCPZEVCN8LJwUulTzlFP3KV32T_ihA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,A1yn5d,fKUV3e,aurFic,Ug7Xab,ZwDk9d,V3dDOb,WO9ee,mI3LFb,Xg7Hl,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,wmnU7d,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,ebZ3mb,Z5uLle,MdUzUe,ZDZcre,zbML3c,A7fCU,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".KL4X6e{background:#eee;bottom:0;left:0;opacity:0;position:absolute;right:0;top:0}.TuA45b{opacity:.8}.VfPpkd-JGcpL-uI4vCe-LkdAo,.VfPpkd-JGcpL-IdXvz-LkdAo-Bd00G{stroke:#6200ee;stroke:var(--mdc-theme-primary,#6200ee)}@media (-ms-high-contrast:active),screen and (forced-colors:active){.VfPpkd-JGcpL-uI4vCe-LkdAo,.VfPpkd-JGcpL-IdXvz-LkdAo-Bd00G{stroke:CanvasText}}.VfPpkd-JGcpL-uI4vCe-u014N{stroke:transparent}@keyframes mdc-circular-progress-container-rotate{to{transform:rotate(1turn)}}@keyframes mdc-circular-progress-spinner-layer-rotate{12.5%{transform:rotate(135deg)}25%{transform:rotate(270deg)}37.5%{transform:rotate(405deg)}50%{transform:rotate(540deg)}62.5%{transform:rotate(675deg)}75%{transform:rotate(810deg)}87.5%{transform:rotate(945deg)}100%{transform:rotate(3turn)}}@keyframes mdc-circular-progress-color-1-fade-in-out{from{opacity:.99}25%{opacity:.99}26%{opacity:0}89%{opacity:0}90%{opacity:.99}to{opacity:.99}}@keyframes mdc-circular-progress-color-2-fade-

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.815015818724121
Encrypted:	false
SSDEEP:	3:cJ0LGfnvMbdZXCn:40y/Id0
MD5:	30B8B277A7A1AC58A7EC3C2A57768D4D
SHA1:	3FF5F66B7B552CD065AF07D0FFAA1217957D6FEC
SHA-256:	D569145301ED92D20955E6E181ED67F0DDD3C7280E66D164A792BD682A51AF71
SHA-512:	A1CAFC51623ACD8FC5B317C4AC8EB6D38B2EF19C013882875ABDC64959354F4114E91E09E079AF6E560BF6C7C34C0792F7654AD3023F3C7E94BBF2B18348A786
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_2(function(_){var window=this;.});.// Google Inc..

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1516, version 1.0
Category:	downloaded
Size (bytes):	1516
Entropy (8bit):	7.795649487038873
Encrypted:	false
SSDEEP:	24:6lhBQUW4PjMJI4ApTYg5f4iq+rFuy+IIizzxClBvtQ1OPSybhzsAmnHYvOWuz:MBQ74P4GYUf3q6uI7ZcDQ18CAmHYxuz
MD5:	314C94C93E0D293F63A2C41F8E82C852
SHA1:	A648B285460C78DEADB882996F09FD75D8ECAB74
SHA-256:	CDAAE795074CED24AD382F9F21C4F2E3443D3DC27BF6F75AB5CB43D54F23F009
SHA-512:	25F6E258E641129B61CD4CB37111CFE8C55E44627B7F79E1F26FCC023600A418AAE40303BEDD1F2CEE18943D844744AEA0EFAE9496303DCB737462D59604705E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw_aXo.woff2
Preview:	wOF2...............`.............................,......`?STATH.l....d..."..6.$.:. ..\|.w...`.QTr:.\|u`...C.(J........c..4.".x.....C>..Okl...T.E...D(].4K&..n^....s......+.\.fP$.'.D\|....Y<...w.D.I.t.\.<...,..?A..\.K ........A..N].'..u1....,".^..J...5......~.f.....-.3..4......S......H....H..H...0. g.6..9+&.C... .%..!....$.$....2...$..u...Lx....$RK.!..%.......26.A=.W.........A.......J"_..8(...G...n9....EcPE3.....DS.p..A.....PZ%...Jv..D.Id ..j.W./..fO.....Eq."......Z......r..rQ...2.. ..G.....dT^.#.......c4D\|S..G.!s.J@.P.....P..c.....1.wI.Hed...g..H.)..R.........7.NU.8...R.8..}*B[c.;..U...]_..........O.WQ.....LjT6..CJ.......s..w...ZR2.Uc...0.=Z...td..Bn,.U=.a.QQ....kW.p....~,...M.q...^.......Dbb.kqV....')..Q<.(.V.3.%.......~...o.&..@..`.2....>U...&!.bWOeEge.&Gf....g;.v..u..dUOV..GP.....^.?.#uR...N;F.4=._......f./jw.h...z...S.:..XCZ..W\r.{M...)...-..J.x;.l..Qu).*?.......;.hf.J.hp`..: ..u.R..on_.V..~'.a.j..F._.r.....FU...n.$E[[...........x..\|..n...P...

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	522
Entropy (8bit):	7.308026484389956
Encrypted:	false
SSDEEP:	12:6v/7mwzyKUxaTPSzCuNVQADYJh2DLD9F2+y4gmFCG096DyiP:m6zC6QA0v2vD9WlG0Yx
MD5:	C08018BBFFF34E8DFDBB776685368D53
SHA1:	ACD4DF17F473BAFA23CFAE4C38EAB8224DCFFD6F
SHA-256:	F102719972F2C5FF28A2687B53786FEA296ACFF47F01AA1A88098AC1890EFAD1
SHA-512:	696BF3F690A8A3B77C75C398CE64AD3CC46B5CBEDB8335DDD5AF2F60EFB7EA365FB210C69056B4B5650B4C3C5709CF0CBDEECAABA7ECC8306D0475BBD31A83B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'....IDATh...An.0......./J.....!.....*].&.\..W..g..'33...-E...m.....o.B...a..V.P...[.i...........\..........Z...V.....k".I^0.[,S).4-(ZX...`h......-.Ry..$.M5......E....3..f.R.`........e3is......S...$$./..0... ..........U1..w.....k...J(....3HX.n1.G...D....+..P......b.:...AB.WN.p.!..Ha...-L.q..6.BK.#s;XM:.00...a..^...6P...1...;Q.......e.`.......X./.}....v.c.Dh...{\|..FP?.>..O;?..#h.zo2....a{....]..7.,RH."......yj&.Zl....IEND.B`.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	909
Entropy (8bit):	7.377496939127328
Encrypted:	false
SSDEEP:	24:uVMnb3t0IoMfPzIEPS4PcnCcyRVHYOR+H30+zTT:AMn3oMnzDcCHRVYORok+zTT
MD5:	F0B1AEF64ADA418B64DD50808A94E3FC
SHA1:	4344651F2F5F77AFF8CD8AC96044768F32694BC9
SHA-256:	3AFB3F840F47BDF0279AF4FAD7C5584B2EB3629ABB84F44466A80C903D7A3C01
SHA-512:	710EC96345200674C1B6D1FEF2F941114802F70F7A3E14264AC3B81CF677F1D948FDBAC4831E4DD66FD076EAF2F39A48CDC3DEFD1FE01CAC5CD4E6BC4AA021D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS..0...`...pP.@ . wJ....IDATx...z. ...I........-$Q.......a..!..D".H$..D".............G$."q.<>.....b>%...\...oI. .Gd...&....._......./.vd..P.Y.....c.,tT.^$..X{Y .#~.@.....R.....(......O....[..r....{....&..7....Y.Ti..J.v-...>......!.F...w..p....X~.}o_r^..._..........d.....a.6&...TX.zZ~p........Xa.4...X.`...................RY...J.......=h9z.....\|...P.....g".R>.......:.w....h.`cM.R.>.t..`.H....N}...`......[....q....7..Ev..j....J..[.p....7Q....WW.}.X8].m......{._.3]..p.p..X..@.!y.}.......,..O}..X...`0..ll;..oR.2......v.~.SM.....[..WSo1....'~/....a.X.q....t....d.gF....w.y..... .r."X..da..@...........J..xS....ah..l......RJ)),LG1z....<m....;.[.E3."y...I5..>...l.....y^........./..z.]g......=.v....E...=G..>....{......{...Y.V}..T$..D".H$..D"......N.j......IEND.B`.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	719862
Entropy (8bit):	4.821900356544728
Encrypted:	false
SSDEEP:	3072:MFAkPPAkmL6teQi3tYj7LBbXbTrgb/qTITNSC/JR/IGGu8oH9vw7OA64XpFuLFzQ:FXKNcKFulp8w8DYsU2rYB/BB+REXU3X
MD5:	9BB0EE5F296903639CFA005496526D7D
SHA1:	69D2C6268516FF054C93C3373BC745742A8B31D9
SHA-256:	FECFB85FF92AA255EDFFA4EF56CE9E636B97B6B0DE368EF613E0834E7425AA7F
SHA-512:	B5249345AB08881A63C0EEFB3B7ECF19D410D07AF1AC9FC88F736B7DA0711D03DFDEB92F18A3B201C48271F1F24EC43F41449BA0D3C2BAC6DA0FD6C6B224BF48
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/material_common_sprite762_gm3_grey_medium.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="1384px" height="1748px" viewBox="0 0 1384 1748" preserveAspectRatio="none"><g transform="translate(264,958)"><path fill="#fff" d="M5 10c-1.39583 0-2.57812-.48438-3.54688-1.45312C.484375 7.57812 0 6.39583 0 5c0-1.39583.484375-2.57812 1.45312-3.54688C2.42188.484375 3.60417 0 5 0c.71875 0 1.40625.148438 2.0625.445313S8.28125 1.16667 8.75 1.71875V0H10v4.375H5.625v-1.25H8.25c-.33333-.58333-.78906-1.04167-1.36719-1.375-.57812-.33333-1.20573-.5-1.88281-.5-1.04167 0-1.92708.36458-2.65625 1.09375C1.61458 3.07292 1.25 3.95833 1.25 5s.36458 1.92708 1.09375 2.65625C3.07292 8.38542 3.95833 8.75 5 8.75c.80208 0 1.52604-.22917 2.17188-.6875C7.81771 7.60417 8.27083 7 8.53125 6.25h1.3125c-.29167 1.10417-.88542 2.00521-1.78125 2.70312C7.16667 9.65104 6.145

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	7.3567548093378
Encrypted:	false
SSDEEP:	24:uJBfdpjlDpBiptQi3nbS0ND1WFhWZ4p3g9EZbGQYgfz:uBfdpjlpQNX9ND1F2gEpGQYgr
MD5:	064FEA5CD4277FA3D888D17BDDF65A02
SHA1:	93D7AB059A5962482123C7613C54BAC30BECC7A6
SHA-256:	9C986B93CA38159EF13E438DDAD3F77F14F743CD4B2308C03C168346E5E9033B
SHA-512:	C36A0A752F101D4DA3FA6CFFD0850FC26E151A17F9DFB5A545A51D5D64393880DFAD157D6F41DBA19BE5DA2D18D698B2BCB226D4692C9EC5412638E9229B6022
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/rhino_lg.png
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS.. ..P.`@p....0........<IDATx...z. ... ....jW[E@...s...G..$..45555.?u.....@8...ZJ.W?.....bC...@(...x...@ .g.L..@..`......A.=;.....Q.....g .@..~.Q.Waz.Ahg.....Jl'l..Y.......<.[@$.~1IB....g.u....O......=..l\.....h.<.3{%.C...."j..XT5..p.)`H..X..&.kD........@.....K.8...@..3....s] ...$...$3.H..sC^....f.}.YP}qz....W.P....4........kE....%.:.w._.P..M.[ZJ..x.v.....p.......LGb..t...\|.bF...Zx'....Kw`......_avs.b.....}..Dv.8.S....>.b...!.....=.w...........#..)j}.\......0%..T....Y....@.....T4$.+.\..q...T4..7..'....@._T..8...g...b..U....#....></H4A.......[.}.f..(...]RK..lJ........."..M+JN.[6".b+....d.. ..T...u.E#V.VH..@F....#...8....5...}..*-RE,...C.... ..\...(..t...2l.........w.5....@.\|@<k4x..L!.Ju...W.XS..#..p~[H:2.......O.-sL..b..!...D....@....>@4.=.....$ ..y.....~QZ.&..%.....$....U/.5...D..g..]......Jx...hjjjjjj..~....Y^.M`....IEND.B`.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (869)
Category:	downloaded
Size (bytes):	164534
Entropy (8bit):	5.065772130811656
Encrypted:	false
SSDEEP:	3072:d06+kELOIM+I1Pxz0M52WVxUgBgQX4XGB:dNL+I1PN0M52WVxUUnX4XGB
MD5:	D64F5C80B75B3516613E3E63FBC0F2B8
SHA1:	9A80DB7EFD69E3C50BE11F0156F95DE4AFB077A6
SHA-256:	E449138BE5F36A73FEF2F7090C8FBE8DAD0539B5B32F0F9CCD1CF9B7B3AE8316
SHA-512:	E26D861B0C73958904E6A4D5145D231C7A28276F274FAB0B32505F1718816F4C2D2FBBD4559CEBC47D83876B9C6A289A69702E91706DB3E421EC6B49EB17EA61
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/1526094273-client_js_prod_datetimeresources.js
Preview:	FJ(Tra);.var S6t="\u17a2\u17b6\u1791\u17b7\u178f\u17d2\u1799",T6t="\u17a2\u1784\u17d2\u1782\u17b6\u179a",U6t="\u179c\u17b7\u1785\u17d2\u1786\u17b7\u1780\u17b6",V6t="\u1798\u17b7\u1790\u17bb\u1793\u17b6",W6t="\u1780\u17bb\u1798\u17d2\u1797\u17c8",X6t="\u1780\u1780\u17d2\u1780\u178a\u17b6",Y6t="\u1021\u1004\u103a\u1039\u1002\u102b",Z6t="\u101e\u1031\u102c\u1000\u103c\u102c",$6t="\u1017\u102f\u1012\u1039\u1013\u101f\u1030\u1038",a7t="\u1012\u102f\u1010\u102d\u101a \u101e\u102f\u1036\u1038\u101c\u1015\u1010\u103a",.b7t="\u1010\u1014\u1004\u103a\u1039\u101c\u102c",c7t="\u1010\u1014\u1004\u103a\u1039\u1002\u1014\u103d\u1031",d7t="\u1005\u1010\u102f\u1010\u1039\u1011 \u101e\u102f\u1036\u1038\u101c\u1015\u1010\u103a",e7t="\u1000\u103c\u102c\u101e\u1015\u1010\u1031\u1038",f7t="\u0db6\u0dca\u200d\u0dbb\u0dc4\u0dc3\u0dca\u0db4\u0dad\u0dd2\u0db1\u0dca\u0daf\u0dcf",g7t="\u0d85\u0db4\u0dca\u200d\u0dbb\u0dda\u0dbd\u0dca",h7t="\u0cae\u0cbe\u0cb0\u0ccd\u0c9a\u0ccd",i7t="\u0cab\u0cc6\u0cac\u0ccd\u0cb0\u

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2484, version 1.0
Category:	downloaded
Size (bytes):	2484
Entropy (8bit):	7.903859306518773
Encrypted:	false
SSDEEP:	48:/dSIWk6muY0rJJarbEgdzzTTm9fLEZAlMfJLn5HWSd1DX3Z:/0X9Y0rgbt1TK5LEOWfJ52cDX3Z
MD5:	9160B78EE0B90045C930EC35D1C3A91E
SHA1:	3DA7830A860E809B29AF6A65017D56A1FA121892
SHA-256:	BF2174B338F1EEBF563FDD9BD3909F5269B63AE05A9EA26A738870CC6B504B08
SHA-512:	A9B5CF35FC94666CA48BC4002AA72C8DD9DD79D5ED62E69B8ED823F8456A2978EB4577969187DA8733D3B927C9F052439830ECE8E2793104B099DA43B262471B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71RjywflP6FLr3gZx7K8UyuXDs9zVwDmXCb8lxYgmuii32UGoVldX6UgfjL4-3sMM_kB_qXSEXTJQCFLH5-_bcEliotl6Z8AA.woff2
Preview:	wOF2...................X...............................X.`?STAT...t....l...(..6.$.L. ....k..............6.5z.3r..C.IEM.\^x(..Yp..=3......>..n6. W"V..]-)`..=].$.,+<.......j....Y. .K......xx:../.8......7n....).KZm..7<../.!i..L..C.B......s{........X....(..k..X..`."^..R...gsw......xR......(f...Z)....p6...8.....W}@.....V.....a......w....,....i.#....b...H8or......e\|..b).?.....S.L....g.._.#...Y..h..e..zVD.[E.y...L.m.a.2...D......3cU'.FV?..R...4.....f..2"\........E...HU;...i..[...[^wZn.....5a.x}.i8f ..Y}...JuEi!.Pv...s'..V..&.6..M..!....L.l:F..........X...{[>l6.s....[.O.....&(..{....z.....).!>rfF....2$..s.d...XS.4.L......u.....J..0..W`.a..]..$..x.=...4.1......._>M....[m.).b...8.p.!...`.....q.&B\..........9.t.....E.G..-M..T..`.7M5@............1.C...N..I...H2}....a.$....{z..L.f.$y...g`.0-6Hm....u.z.q..H."....I.cc..{..J<8A....l.._A.5.i0.`..t.D.U....4.\|\|;N.G.Vo^dk....FMFt...........'~.U\|.;C. i...&pr..7.t2.c(.p.N\8.h..g..0 $y...5....u]..{../.S..!.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46840, version 1.0
Category:	downloaded
Size (bytes):	46840
Entropy (8bit):	7.994725589879299
Encrypted:	true
SSDEEP:	768:pBa1htdmJ4nDdfoc4qb4WcelHHWo7hW9Igq0AapIqFjiIparJ1KQCiVOQXV47G6x:pc/bhDr4MLlWo7hzrn0Iq8IpMzfvV464
MD5:	FA1ADF616690586A617E2F265AB761B0
SHA1:	802AF2A60A925A68A50C3BD3C157D284E1B51362
SHA-256:	28AFB7554B3B29A5587799EACC92FD889378089FD568E5C8430B41D83D012B3E
SHA-512:	5C2AD9BC7116418A763A8D2AD6D5B458AB38480D2B31441EC8FD97E1FD708535E447A8991211A4BAC846AE5F0AD9FAC206FFEC1D07C3B1523128E6E0477FBAD3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuyJD.woff2
Preview:	wOF2...............<..................................h..8.`?STATH...........F..r..6.$..`. ..h..r..[h....nE{...9.dsXJ1L...n.SV.......^mYF..td..a.....................S.h.unv.jf.Oa.> v!1..#"...G.\r..&.a2/.0./V....T6?.%..G.tyc[...+..H ..9.v..J.}A.%%...M.D...$.jX..............u."...y......T.&.A...R........,X.z...;C01..F..Re#E+H.].b4T=g...S.z.[.{.&.sv....-.....{.{g:...K^.-.~...7...L..W..v.....p4.\.F9......3....Q..'.LO-..E.......W..?...4!.v.G."'T..zV..dsU.$..T<...tM.T...y3}^E..I}......"..bi.q..\|!...I..Y.>..,.9......lc.....=R..C..PTPD,DT...0.0..#...........X ......y.m..;........ZD..+...?...Z.4....5bm_..m..5.[......>.... 6......1..`0.....F7..P..{`.s".........}....n~.[o.g.........Z..Z.".....2X...Y....~k...(..K.....!4.H..{>.o.:."!....A_M0.2..9._[..-..p..........h...YB.7k...k.....^..?..?..P..r._.M...d&..O.:..g....oU....9H7..(.}..}U...z]...-. .Y..tw...k.a......9..J....V.;..g...'.p...........6.8.YGdc......H.D.i....K...e....[$.]'..v...*).C..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1870)
Category:	downloaded
Size (bytes):	39940
Entropy (8bit):	5.567499503766989
Encrypted:	false
SSDEEP:	768:iLDT4GYOwirkhkPoh8pp2tMAOPGSZTZ7zrsYifm+bj:F7GEO2tXSZTZo7nj
MD5:	101803E18ED2F8F678699AED102C2358
SHA1:	FB1FD2512D5C2070686B569E21ACF2F6B8F60D26
SHA-256:	4291210F15DCFDA9C77C615EF66B5A628C75AFB8DF53D562EEF86D6DCFCDD181
SHA-512:	801F82ACEC38BE1BC11E2E80EB0B214A6CBC80D33E396A453C8CE23BC1567899E71CECFEC476AF337551298751BEDA77FA9F12233F682650322ACE4E4A1E0D93
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/2681390919-client_js_prod_voice.js
Preview:	FJ(Obb);.var C1v="docs-mic-palette-body-active",D1v="docs-mic-palette-body-hover",E1v="docs-mic-palette-focus",F1v="docs-mic-palette-help-hover",G1v="docs-mic-palette-recording",H1v="docs-palette-dictation",I1v="docs-voice-bubble-close",J1v="docs-voice-bubble-heavy",K1v="docs-voice-offline-bubble",L1v="https://docs.google.com/reserved/spoken_emoji",M1v="https://docs.google.com/reserved/spoken_punc",N1v="https://support.google.com/docs/?p=voice_typing",O1v="stopped";h_p.prototype.D=Y(1460,function(a){return rSb(a)});.HS.prototype.MRa=Y(1216,function(a){this.D.UCa=a});C_p.prototype.MRa=Y(1215,r());p6e.prototype.H=Y(1099,function(a){a=a.target;for(var c=0;c<this.D.length;c++){var d=this.D[c];d&&d.Ba()&&uI(d.Ba(),"docs-palette-top",d==a)}});RRc.prototype.LIa=Y(412,function(){return!!this.D.H});Zjd.prototype.LIa=Y(411,function(){return this.D.LIa()});RRc.prototype.Qwa=Y(410,function(){this.D.sx()});Zjd.prototype.Qwa=Y(409,function(){this.D.Qwa()});.RRc.prototype.yNa=Y(408,function(){var a=t

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3576, version 1.0
Category:	downloaded
Size (bytes):	3576
Entropy (8bit):	7.929396607787142
Encrypted:	false
SSDEEP:	96:wUD7TIaLIl+wMkgmQl0Hxft1Y/ZJ7T5MeA:wUXT7LXFrmy0NtGBJ7T5Mn
MD5:	3451C91ABE3E05F03BBA52CE59A258E7
SHA1:	19FAFD4F56FECDC013D8AF0DEE6C51E9A338FA5B
SHA-256:	D4BA92453033372B440E5E762EEDEC60DEC8B3C32008F599B1C7F46376D64216
SHA-512:	828B536533E183C5E6D8A904675AF7A6C24A38D30C5AE454640F453C0EFC8FF4BF55CFC98F7C30559D156DC8F9FA3AAE63D02C0F7B9C0ACE46DABE5E2092C105
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCr-xNNww_2s0amA9M_kng.woff2
Preview:	wOF2...................................................`.\|..F..v....H......6.$.0. ..v.....J......l. ....Md........<...3...W...Z..2.R..4........9x.......'f...Bl.m...C..Q.L............iK..LX.W~.F. .t...RP{T..ju....W....Q;na{h.....KC,."Y.[.....?.k.IN;$.t<...3&}i......!......B;fa.l...X.#Y1.w..l...Q+'...rD....\.......00.>S.!.]..h..........H.b.V.C...........@.A.....Hg8ne.a.)R..;L..k.......f..x.X....`L. Q.qp(.....X.K/......z.........d..$...!.0&.....Q.F.cx......j.vF..t=..[....X;g.8.t..Z.....&L.T.U.RU......\|1e.)h.'.>......!.....W.+...X.........N...c..5.g.I..m.H.u...V.E......J....4}..r.....i.....9..W....N...u.~..0."./`.....#P.L.zZJN.......U3..k....a.B4y..OX:.d..1..?.2S....e8X.....5y~.Cs.b....+mZ.R,..2XEd..i!mx#L..'#.:O..k:G..`.....t.........L...?.^8)..x!ie..6B...........B. u+ ..7.F(8...y.I/RVO...,.p.......x........i.;1h.Q0...C.2..!.......7.......\B)( .C..H...B.JI%....?..{$..ZB..h[.,S....tj....I2.(s/'".%*.4cz...1.f^.$L.,.1g..J..(..........Y...;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 55204, version 1.0
Category:	downloaded
Size (bytes):	55204
Entropy (8bit):	7.996026949578432
Encrypted:	true
SSDEEP:	1536:++kGM0yjKGWAy7g9n3ga9H0b6NvpkP7YGF1N9tGgVX:DkGM09fAd9nwE0bYpkMw1vtrX
MD5:	303F0DEE25055EA1A1C53F8C44B83EDF
SHA1:	552AB5948D02D19FF851777D58DBE0DCF836681C
SHA-256:	DB8FAFFB5E867554C1AB9B0EDD0E11E8B5A3D4B9842D860A11646371C2B84D79
SHA-512:	8480CA89F845168FC64FAC0F1FB6C6E62A2C29DC59BD0AA821D06C1B426309916DEF57F90933712750DE70FD32CD3A3A4C2B2CDA15EADCC3A0B4C12B68774339
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCr-xNNww_2s0amA-M7.woff2
Preview:	wOF2..............X...>..........................N......".`..\|..F..v.....(.._.....6.$.... ..v..)..J[.V......x.o..a."..6.h..L..o.a......fj...'>.......@..!.\|...........&.X...d...Q..Sk..^.wP5.).T..^i!.l..Vx..z.2..~.]..%......sM.......7,.I}.K.M.V\|.l.F.g......o.N.j.G.\..,u~8&.+]).N....f..1..[.M...X+..Tw.u.+<.l..X...$.4...M@.Us.W....N..bWJ+Ta..C.r,..C-...F...<.....U..YY...g[....i.Q.VJMyE...#..N..L.K.....H..q.GQ....a....!..p...tbI.UK..... ..S.....\|..$.(.L-..........w.:..L(......4).9.x........CE..Wt=..w..{..L.k...\|.].ih........JT5.........w..o."a...V.R........`)..(iyvf.2..0.A.W_2#......tx.#5-.C@<6OT..E.+F...._..t....SA..A.]`..6.q...!.Ig2.)...mk............V.x..5..Q.Q..~ZT.l..i.T. ..&*.....h...P..X.0<.6.....wpw....(.......-.....C.Mg.@..ta.B]..s-s.3.......?.\'"...E8.v.zbK.y7UqR.<.o.........d6X1.d.>. ........y.z.ux..TU......!znp.<!....0V-5....H.....l.M.'..7..K.,..7..o.@%'..QC..W.J..,.l.....@.@x..W`O.z.....:)#.,......%8.. .H0BA...i..I.`Rp..4)...p.....c.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50664, version 1.0
Category:	downloaded
Size (bytes):	50664
Entropy (8bit):	7.99441041171138
Encrypted:	true
SSDEEP:	1536:SGOZcxOtnS9UcAJ0dck+XFTh3KttBOI0Y9siZGkbS9:SGjQS9UcAJ0dck+X5JKBOPOm9
MD5:	2EAE80C528D1D7A39C57805DE3E9C799
SHA1:	37ED517E2F44EF14D8F2C4679F9EAD44B050759F
SHA-256:	46B9F52EC517DDFAC84DD566720D00CF3C54AEFF1D543AA9C95FFF830985FA13
SHA-512:	84DB87D648A4823380EDE80089F3E1683B11B70703CF5BD540A11C55859AFC2D063173AD89C9C448AA3A8C855329B242E032F42AB7C8E384E85B82E5C9BF3D98
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI8MX1D_JOuMw_hLdO6T2wV9KnW-MoFkq0.woff2
Preview:	wOF2............................................. ...Z..h.`?STATD........X..>..f..6.$..H. ..L.....[....r....@..mp...M/.6.MJ.sl:.....4..m................c...{.T.4..[.m........S.i..s_......0..6{.).``..&.;B....rHI./..b..` .)..b..,.{.....f...QJK\|vh....VuW..?...M.....2.........8..b.9@B..{.Q...'S.\|..&f~..x..8....!%..k...x...%o.)./])[...N.G<.#.!/D..U.ZN'.e..b/.;LL.."..B4K.nr.$.R.~..Ez.A...C.4i..o....4.....o!.z."...'u.z..Hh.....KO.T........T.......w=..=.swe.W..._t^.....O.Q.!o..N.]l.! ....D...k...tkv/...I..+...B(R..&"6.A.<M...ED.""(B.4...@J{l..."6Zx.....U.3./ ........9.......r{w..E..V...m............"-....PZQ.Q6.....e.B.AR}.'...f.....+..'.....5.Dl~lj........-.RJ..T2.7...p...B......Pe....aDCX.]..Z......"4.t..b,.j...<.(.Au/M.j....O.i.P{DE`KN.P....\$]....U..B.R....3....hi07p.....ynx...0.@0...3.B....i....b+...r.4..6.L).pq.c.nM.p..;.t...+.+,!.....L_(.......x...m._{..FB...h"Eo$.J..C...$..y-6.........5K~../#...P..J...O......++.8.5....y..q....L...V.(

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39516, version 1.0
Category:	downloaded
Size (bytes):	39516
Entropy (8bit):	7.994435722506664
Encrypted:	true
SSDEEP:	768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
MD5:	9436AFFC97843765A966B3568FA7E5EC
SHA1:	7BFDA74BB30589C75D718FBC997F18C6D5CC4A0B
SHA-256:	7165713D3E1A610399471A5E93D5677508F62EF072C1151E72273BF4BD54F916
SHA-512:	473EC3A843C33E18D6D194651FE11353FCD03A7959225FAEABF8C77484155EA6A7BCCB72DBAF2093ED53C408FAA3BE9F6FC907F7A5DDF8223375F9D09B504456
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v29/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Preview:	wOF2.......\......s .....................................4?HVAR...`?STAT..'(.../.......P..L...0..^.6.$..L. ..4..<..[.^q.=m..\.m.E@z....N...{.WP....+.......RR.C.%-. N.AG.. .,. .I5vDr.Vg...D..D...%Z7..o..h....3Q/.u7.&8............3J....z.k....'4..G'..)K..7$mAT..CPAW.....v.~......=S..0Mb5...dh.a%4F..........z......K..C.0.....<.:......]..-...ii.....x..?U=......PN.N.rDfo....?....I..B..A4..T.<P..+.F?Ps..Pq../5....z.TJ...Xd........U.!`c.V..i.6....yQ......_.4......A...KSZ.........K.5.[....vQQd\|..B.O$4.I.B.R\|..w=..W...G...).....(.."<....d.(.P.p..L.)......._.z.......G..y.gTh/$...<.rB.?...f...F.HHH...JK}..{.._,.K.{..7.kR....g#0C ....I.r.3.[...gZ.^k.J....NK)B.q{.a.qj.>-..#s..ub$I.d..RNK..tO.......Cq ....u..z.SZ`>.e.d..........H..~<.. .3...I........(../..D...2z.3z..aF.../a.Uu.<.k..}if..>....(....3.@.i.H.q1A....J..A..M.Y"%..f..@.T.%.....]...MA.).-.[......?...El..*.Al.k..Y.jd.t.#......K...W..UZ_ey..;.{.c.E...8..R...jWW..[R...f.ak..`X.R..d...

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	859
Entropy (8bit):	7.266649968666868
Encrypted:	false
SSDEEP:	12:6v/7BeB4zXhTisiTgi/dkeuIRg3mMT1+sliQ0yW2sY5dBCDqZ4i5e4fIPzeni1:ueGzXgsYZaDbksVz1Eugzr
MD5:	8B505347C6D4824EA38E66EA22DAAD5C
SHA1:	645C4DB77B18554AE835AE4E4816A3521F8EE33E
SHA-256:	D7E1F6C88ECBEA0CF73FACF04C91A39FA01F38138166DD1D1895DE4F6ED661DA
SHA-512:	F356677CCA35ED2D9BB9F368746D0271F5E48DC0E23AD2997A250917996613BC1D350343E62CDEB741FE6D6783C8A15070FC046BF3EDA79B8B9186161D19485E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS..`...0...@.P. p%..I....IDATx....r. ....rWt....C:iE@'.0.b....Vq............... .f.........~.1....8e..................}......ph.^.....`.>?\|.6..C./.1..`k.8..uIc...:.;.m...i....4.5.O...~.P..;M..i..........i.SO.2.R?.N_... ;/.>.aaV....a..xs@.}@....)Y>.^...H..Qx..hZ.n<....)..w.4..w.....0.^.F..,,C...d.S....k.\..d....n=.."P...HS.?.r@T.i.C..D.c'..b.+..`.\|.YsE ..w.z...nG......0.....]......4....3.......^.U...!.....].d(..?.@..<.....}.dj..U..J.G%........ ..l..^y..J......e..M...A...B.R....e........>..............$.*....Q..# ydG.....I......... .:l%u...`...@.........{.Ey..!......=...;sS.@......5..-..n..Ym.8.=...u.0f.~.a~..5.h...M.[...>.....k"@.Z....C.HI5 ..........X..v.P..F.a...d.[:.......\.........GFFFFFF.z...,.h........IEND.B`.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12502)
Category:	dropped
Size (bytes):	302227
Entropy (8bit):	4.527201968170224
Encrypted:	false
SSDEEP:	3072:kOeShJKsbvlHf9iugSc0UnUPGh9ejoN14hOvo7tRH5xjZSDzdrJN:Ll1ZUdrJN
MD5:	444EDB330BAEA5D3891295517C8A7CA4
SHA1:	5DEB82472B5E6DCB2B9524B74B49286474E968F6
SHA-256:	3DB419EAD4B51802C9990314D733E506182E4CE9B2E4734858F6286E71A65DA2
SHA-512:	988425772BE04192AD2F4A4856C17F69802BA6A594E85600C5AD80A1DE363D8615F448BD9E9D74B3AFEAD2BABB2F67B31A6A62E0B31480FFDD664258AED0F9C8
Malicious:	false
Reputation:	low
Preview:	FJ(NSa);.function Qbu(a){return Array.isArray(a)&&ap(a)&1?okb:void 0}function Rbu(a){Y$k(a);var c=a.Da,d=bp(c)&256,e=c.length+(d?-1:0);for(a=a.constructor.messageId!=null?1:0;a<e;a++)c[a]=Qbu(c[a]);if(d){d=c[c.length-1];for(var f in d)d[f]=Qbu(d[f])}ukb&&ukb in c&&(c[ukb]=void 0)}function Sbu(a){this.Da=O(a)}J(Sbu,S);Sbu.prototype.I_=function(){return Tp(this,1)};function Tbu(a){this.Da=O(a)}J(Tbu,S);function Ubu(a){this.Da=O(a)}J(Ubu,S);function Vbu(a){this.Da=O(a)}J(Vbu,S);var Wbu=Jq(Vbu);.function Xbu(a){this.Da=O(a)}J(Xbu,S);var Ybu=Jq(Xbu),Zbu=Jq(Zgk);function $bu(a){this.Da=O(a)}J($bu,S);var acu=Jq($bu);function bcu(a){this.Da=O(a)}J(bcu,S);var ccu=Jq(bcu);function dcu(a,c){return a.filter(c?function(d){return Up(d,2,0)===c}:B(!0)).flatMap(function(d){return Cp(d,Sbu,1,vp()).map(function(e){return e.I_()})})}var ecu=/[#*0-9]\uFE0F?\u20E3\|[\xA9\xAE\u203C\u2049\u2122\u2139\u2194-\u2199\u21A9\u21AA\u231A\u231B\u2328\u23CF\u23ED-\u23EF\u23F1\u23F2\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	659
Entropy (8bit):	7.4982329493912
Encrypted:	false
SSDEEP:	12:6v/7KH8yYuhbw4eyH5f01Z7UdfZi1k4bfOXGT3YTG4WdeaDeqN:z5KOhWz2XGkv+eaP
MD5:	F72613F9068BB3D9D3FAE6888C188219
SHA1:	6F6B0559AEF8C998A223D27B8A90191BBEB807FC
SHA-256:	DF50174EF7B54CC2092E184EF99BB56D6A4F872D72FCE6FA67743192CEF02B27
SHA-512:	C0073B966010B3C5A2DEDFDE3771040454055C01B22C7BFC1BCC08B7FCB8B2B3948700DC8C51E864A890013615946D55A87C389CF77FB5F10F74D49E9B4F55ED
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/iguana_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS...@....)...+IDATh..Q.. .E{fz..1..i.`W\..r.A...2...m..VMWMq.....x...L&..d2....qU..$.5.1C..C..B....PC.4.6......C.....;f..)C..[.......`...W.d..d.S..B.LXh..d..fC...l4.\|.~.`..>n_.r..4.J..b*..]7....?.O+M.................3.j...t5)...~.M.P.\.....}.....G. ..T......A.r.:.1.Q..C...1......w..b$..g....~..%e...Y..x.?R.b\3....a.t)........K.......).e......LQ..>..zV..#j..;w.(l.p..,....~..C....3.9q..Cx....^..Z..Q.aC{.E.:F)..d...C!;aRC..r..e....l0.P......So.+5..yR..].)..]......1.....j..5m.1.W.....$....[b8E...w.b-.1.s....m...R..A..?Hb...FC&..d2.=..oA..g......IEND.B`.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	7.556149935629039
Encrypted:	false
SSDEEP:	12:6v/7eBierg0rgRar/RMA5Qi1kmgNBvymmj16rmJueascFm+9UjmPIY:NBi6rgRC5MA5Qi1Wuz4rBeascAqUyP3
MD5:	149EFB73C2240A121D8DF09714638203
SHA1:	F0F077DCB74B5EF9C8FA6DAF94D68BDBE2A17ACB
SHA-256:	4FB42880117BAB426C67D0C9E1660E5D967A0B9F0C425E23BB94C99662D90791
SHA-512:	D83088ECF21AEA88BC40889DC6EE948997C39C37EED4D969EE5B6FF5F2A673302834DEF7318F8E3B33255A00437186C75374BA6D8A51163E9680AD91855C2F8C
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/chameleon_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'....IDATh..[.. ...=........`., .a.....tb;\l@..E..\|.%t...x.......K..V6..+.D.n...p...'....7.&.......p.h"\.............rV...B.&.z..{. ....0.8.0......a8....`C..IB....'.k..ZN$t[..j.......{.>....p.5M.....f.J...I....."BW..Y.......$F..i......3.v.;QD..+...a..H.,L.N.D<.y..D..Qb...c.0..Ff....8Gx..$%Lk...J.........<...2.@...(.IB..D.0...L..%..J..i.;..W.l l.q...m....y..6..H..t3...g._..T).y.....F..S..k'..,Q...@ ..Y.IHx....%.G.~....&DcI.....x. ...v._.t7....I.....<G...,C9....#.X..O.{.#.......j. B..0.+.,...d.<'vUk$6I&G.$. /......#..%..T..q..#h.L2.,...2aZ.B..<.;.eq.DH..j.?E.../DB...g...0...s-.....I.[..#...A..n.....]m...;.p..Q......(........F..p.....,;.s.H......N.=Z.{d.....#..a....~.0....i..\.F.>......N.r...j.... .:U}.......n..W..T..v.i.~......?P*........IEND.B`.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAljsOZzNC4nOxIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 40184, version 1.0
Category:	downloaded
Size (bytes):	40184
Entropy (8bit):	7.9947257644633645
Encrypted:	true
SSDEEP:	768:CVYVm6qmJZ7u7JaHzl7h98JaYrCS6ZMBG4/0Lwcn7hFoYIsJA7MNfa:CVgmZmJZWJaZwJ1B6O8LwQtFFJAQda
MD5:	1C31342F0BE5BC0E2B1549932CDE2F81
SHA1:	A5AAB8D96192515329B7D888CFC5B7B113FAD53D
SHA-256:	184819CFD66EEE3BBF756A609A0EA8034F09DCF8C68CD817B08358D8E5579CA3
SHA-512:	C73F50D3B12B6EEABE02B6050DBFDC7FA420EB793281926F3E9CDC72A883B4E789A6506373E7C4CA61D9543E86BEF1B320147B1A283FA8B9A77FBE7F1C108760
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM70w7.woff2
Preview:	wOF2.....................................................4.`?STATD..j.....D..^..f..6.$..H. ..@..T..[....rlcs:Te.h[O...._.]~i..s+...t....v...j.......IEdK3...........G.b.hp....`...A.d....%......t..+.xe2s..+....o.....F.].a.rTS..!.n..q#~.........)..}`......uw6.T./...}m.P.\....b...o.].DC....N...".D.w.{%........h....`....i.....U.g4.sw....d%... w72.y.N[.f.1_..Z<4...e_.M"&.!I....JRT""g+.w...>............vz.......\.;A.3...l..A.it.A_....JD.%.v$./..+)YN.pDL.....7...%..i...^]KmR.9..D.;3..v...//...nm.jd..U.........)\q.\......p.G.!.GY..3.6r.......k.\.....w:Dkk....C8<2UP..#.C........h.6....P........@@....o.o..I<......x@%........_>L.u..WI.1]n]....X.E.h. ..R..n.......B.... BT,..R.=~..97.D..xE.TE....X..t.......;3...Kh..*UT"...4mb....E.D.....w.O.{.#..E..x...4. MSd..L_q..Tkg.l.D.,.....u...3vd.....O.............V.o....$..g ....2;.\|?.Xm.......i..........."..\..;T....nn_+...w3.^'x...V.a...v.M..F..(b..@.f...8...0.A..o..D.c..f.ri.@.H....).N..$.Y.....`Y...d.,..o.........

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	951
Entropy (8bit):	7.3900876422522
Encrypted:	false
SSDEEP:	12:6v/7jeQKltnRzi59DTWtKyVvt1maYReAWwsIFIgZMccZQE2IiAFZYqimBWeABAAT:izKvRza9wKyV6xTWZXZQvAFiqiNDxDNt
MD5:	56B616D21A129E81EB9519B0BE402237
SHA1:	D25A1A2B6E306BEA11E5559A7C580773DCF827F6
SHA-256:	64644E24E0FDE6D566F4C36F4DEC2033D5C8957A46CC3045F12E9CCCF5A908E3
SHA-512:	B4AFBDA9405D7869019F0ED78BC99EF485245338546EA3C3A7A18EE2058D922A2DE1861B3FB6ABBDF19EB96BB109B7132AEDCA0270E20316287557EC73B23FC0
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/coyote_lg.png
Preview:	.PNG........IHDR...............P...~IDATx...Qr.0..a..ygZ..LI.4....HG.g..w.\|.l.7[km#..I C......-...uc,.^f..^..O....... h....G.r.#...: .....v.`....w.A......].....u0..!.....(....9(#A..........X............S@.o..q.>W.7 X.(..B0z.......].... ..1<5.t.Kw..k.p..... N.p....Y.......".....6.<...Z..!......B.Z..A..fR.[........M..$f.n-.C...\|a.t=......$..Tv. ....?1.B...C..@.... .`E......D..... YYxq.........2.._.. P/..=..(...&..T...........!\x...Je...4...5`..C.c...@.T...b .).7J".T.... .(.7....BY..;..BY.....e..~.,)...e .^.@...9.......YV.@.....G...=%.S). .~".JY..=..O"..................TG...dk.......l..!(...sQ.@p.d8m4...C`N.;...#.5.6..T...Y.^.=...........M..f...?.5.h..3.\...CP.=.TA0.A...@0..E{4.....Y.... .uO=... ..?WC0a.#... ...M...#./....F...%[\|\|....Em..oPF`.W.!.:....%6P...Q...Q........q.....A..`.~9.,..A.=.@$.....DB.......A..../...r=._..[D...m.v.U.P.}.X.........p..................................0.......IEND.B`.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1558
Entropy (8bit):	7.683709414485586
Encrypted:	false
SSDEEP:	24:uV4/ci8drSuEMj0qidoG9FhL6cqaIN+SWxb8VpuSA76slcRT1hMWcs4B1olYN:aAcioSuEtqSo6j2ceN+zxbeLu2TP3K
MD5:	BAD1B1309D3D9C0D1FF6B321E48436BD
SHA1:	0596575BEE2BF74B5D068322E80253818B4C1620
SHA-256:	CF5DC17A8A3497E7D508630F7015FECD748C10985E8B06ED7F79C8A974B3C9D4
SHA-512:	C705C7E43227A32D01CC59AEA6176B3434973808C8CF539924028F5D0B8218E8EDDABCA91CCA1BC6F0145162B4F873AF838081A2FAC08BDE18FF5133776C1E9A
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/axolotl_lg.png
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS.. .p0....@P.`...JQ....~IDATx..Z..(.\..$R......A..k.gl)s.$...+....+.....C..t....`,....p...........+.f...f.Qt..k. ....H..?.a.!....z.pC.(I........H.q-^.../e7......P...8..#...p.x.......M........2..F.g..U.. .^a..JI56p?...Y.AQ.c...@n....@cD...#./......bj..iA.. 7f...Bb.c#<..%..s............e..>......h..o.1..!....PJ.........h.0....$.T0..H..8T....j.P...EU..x.......T..P .sB.eg+.J-...e..l1./..........4%"Fy. ..(..c3.......E....Bp.....<eh....1Y...@.$..,-....bF..$.....@.'.n..x^....l.B...qfRy3i........4.....8.X...I.1....%...\|.F...a.^f.E...........8...a... ..g...@/.3.1[c...?.........g2p...f....b....0..E.D. D9....Y.].r9.....{...n.g.....E"......r~"n7....#xRE..............c[..q....qv..a..92.X..-..9..g....3.....<..^...@m..O!.&..e...1O.......,.?:...c.....?....>..X7..r..rB..&.........\|..1W/..%p]AH.......U.U..h%=>?.2.`.).....\.i3e..y..Q...?....V..ST=+6}O..pk{..bM.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	dropped
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2708, version 1.0
Category:	downloaded
Size (bytes):	2708
Entropy (8bit):	7.889250991886075
Encrypted:	false
SSDEEP:	48:2qhpUIYsa+fy6k4U9/mKlkDC1YaHQ3ZGVSyCfCY6JHSe/Et1iF:Php9Ym66kVHmDIYaHQ37yCfIJyeO1iF
MD5:	B12C8BACB108B452B1DBB90C3D1FF1D0
SHA1:	ECF97F8E8FDA216564CFF508D3B9E126D8666372
SHA-256:	588A0396D786BB25120D5B559B9D546C3F276BC5E17E9D6ED1AD609DC0871CDE
SHA-512:	A0C8212C5291E5160B2125B76CAF92F8DCB9219DE39CAAB082861C6B5FC4EDFEB1B1D13A07B458CF61E4E6EA551F63DA24A24E39285A00226B108721B9E35D11
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDRbtM.woff2
Preview:	wOF2...................4.........................(..:..(.`?STATH.......4..4..6.$.`. ..x........QT....#!s.S..%j1"[.8\Z..(..........T.&.@w..uuU.<.."...x.h..j@\|...p...R'FR.G...w.lMhD."..D.*D.....&.0}.p....f...}..m]`Q .4"/...Su'..B#7.h..V.l.t..v.lB./b....0.D...G.G.$.!.+.)...DRL.7...........`..@6..J...@.D...C.. #(........D.Ic;....5.#{e..U._.F_.K...`.%.g:_......!.V.?..{k_....@...=.$[.+$. 4... .0..4 .J.1.)..=....\.iW....=.".F{....y.D)......~.L2.8H.'G...>.G.........^.f.........$D...PrH...s..9.y...n...X:Ig..N.. ..v"......-..!.....kuy..=t.T..b...r.6...Vr.us...[.=....}.e...NB..LB(..;2.pD.T$.W.#..G.....u.9..(2?..T..B@wq..0.W"'..5..0...$.....\|.-........../...@..!yD..:[.....cb..=...Ub.#.}.TD.....g.M2=........O4."....I.j569'j.....a..l.}...Z_.&k.#.iBH&.......5.9.\|2.....+....=(/.3...........);...(...x..>^rx.K.....dB...y..\&....[.+..Mm......32........A.f#.^f....V..[f.P....Z....I{...\X0<PS../.F..$.IW.<..=....c.>!..w.7N..Gf..^.w..@_..#Pp... .].......z.h..q...t...

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	811
Entropy (8bit):	7.570036317455735
Encrypted:	false
SSDEEP:	12:6v/7IHVgpvwRj554sLt5d1pRu5nB2vY31KP9Lagqm7IcgR8Qo+d0QJ3gyTVujOQ7:5H2wh5Ft5zu5sagrIgQo+d0i9Zyj
MD5:	60DCBBF0807C93F900ECF6E972E83189
SHA1:	F33513C86B03FC5C196066AA10E92FF339D0CD04
SHA-256:	C3639C2BFF756C0B005FECF7DBE9740C22FECEA7372550B22E5E586113E7F357
SHA-512:	ECFA6FBE93F4D18FE1EF5D723C446CED0C8BD055D11BA5601C350D7BE61A250291B75371861F1EBC65A48D834E3F1E9B30C254DE81880AA4E43A2A9F85262EE7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'....IDATh..].. ..'......4.p..`.Vj.[....P..X....V]....;..;....8>-....{.)....._"4..y...N."BC...a.....3.4..........P...O.......:...9'.\.w.1.h...~._....Yv.,..h.......P.%B.@u..:....JyB(z..Sx^".iO1?Yze...zH..8O...viX..g...kv..v.B.e0G..../..R... ..3..L$...Q.%h.9L......c.m..Dc..Y.M....{.c.;p_...K6u'.FV............-.ty..@P..g.`...0;.U<.Lp.\3.n.._.P&p.......~o)n..a..66.&1...NNX.a"..........f.DDP$$X.>D.SGX<....ZE.`.W...x....l-....x.....#h.....iy....z..2.!........n.._ .a.....v"..._....b.w".^M..D.s...B..F...".S..t.k."............"$...AF.Y....A..19.".....w...... ".P@..SV...x.Z.2.9l#...mL......DHo0....r..y&.+...]..1.Q..].^..l.....G.B.TGhR.@U....H0..Z.J.. ,2<.....z..<...$....;..;.8..\.A.........IEND.B`.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 57612, version 1.0
Category:	downloaded
Size (bytes):	57612
Entropy (8bit):	7.9962205728688245
Encrypted:	true
SSDEEP:	768:LfYaMHqDvL0rZBalyepBnWYRDgl5vlGmwhAo0lHz9AMkMT/C1hwpDltJKgE08RNW:LfTA1iyeXSjlplTCMkMT/C1GpDqwNfN
MD5:	10D2BDFD7A17F5E0210C90D99A8B5ABB
SHA1:	89CF52504233C328782A7250F56DAD603FA74A91
SHA-256:	D8977152B314FCD5D04BEC050367C0AAFA91899501593E9ECB0D6090CDAC29A6
SHA-512:	5C9174103871D7C0AF82050EB056CE6002F6867BA9C97B0A833285CC9F28326AE4534F8F93A5231F185BEA8941944002415AE3B63B79DE4A973D9E02715EB569
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eSZM.woff2
Preview:	wOF2.............................................b..^..T.`..(.....m........r.....6.$..p. ..j..p..1[........=.2........`...).m...........t'.d.T....../I&2..\.."....8.m....2..tJ8)^...Iq..R.h,..i.er.W."!gC..2YL..S...................,..Y{..X.....]..9^vp]...T...}PKA...e.\u....A](...E.:.u._.xH?....F....7c"n........&E....:N.^.<`f/.[N}.B....T&..\.......L...?/.......j......lb..3<..}Hd..n.kW....U.....z.'8n.........P!s.j..{2..m....J..k...D..+;..~..F...d.......DK1u.....{+F.#..`.`...#K.d.Q...h........b.`..0.....R../......H..H:....nN..$..a..J...&...zi.l.mg_(.%hK.x..3@s.W.50.....5cl.a.5..4@.0.#...T.../?R?..}.2._...y.v..-..-l.XL...S....-lu.d(.90.......D....c#,.q...h...w..a.l9.-.o.v...> Q.A..Nq)}F.Vb..:.9....kY..V.....1Y.D.....K...9\2...d...J*.........C.....A....U#.....x.(CP..p.h$.....>....w..5...5.YJ+w.pt#q..b...b;{...tj'T.r.?..k.P.T.s._.."...h..N..fw...{..w...&..... .....+y.H...`9Y0...m.....!....jtT..3..?...2._.d....8%.E:.<{..@...............53..A.a.a..w..n..@

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	dropped
Size (bytes):	1119718
Entropy (8bit):	5.631175771756179
Encrypted:	false
SSDEEP:	6144:sfqjlcFXFtp2iwbgU1BBcPs4/sxGjcLRp/giRTmJa1z21zI1z21zitHL5Ov4C5yJ:CYlgMdd1EjcLxMJE4gay3Zqfcb
MD5:	D1E3A6639E8DBB83768C704A46ADDFF8
SHA1:	7993E89E21043C5FB37524DAA6751463B02318AE
SHA-256:	C0138A100DCCECE3A740810EB1B64108658FB7108724A619BF644217214C4FED
SHA-512:	F89DB27A5D6ED6B1F954E0D615D1AF2D1117C12FCC1E1A57CB6380932DADCE63C02D06D86BA60B18F178974B86842C68C1FD3BAB0826186F004C084F4DFDFDDC
Malicious:	false
Reputation:	low
Preview:	FJ(x_a);.var wEj=" corrected to ",xEj=' data-is-search="true"',yEj=" group, press enter",zEj=" others have reacted.",AEj=' style="display: none"',BEj=" to ",CEj=" \| ",DEj='" aria-hidden="true"/><div class="',EEj='" aria-hidden="true">•</div>',FEj='" aria-hidden="true">•</div><div class="',GEj='" aria-hidden="true"></div></div>',HEj='" data-hovercard-id="',IEj='" data-name="',JEj='" dir="ltr"><div class="',KEj='" draggable="false" alt="">',sX='" peoplekit-id="',LEj='" role="button" tabindex="0" style="display: none"></div>',.MEj='" role="button" tabindex="0" style="display:none">',NEj='" role="heading">',OEj='" role="presentation">',PEj='" style="display: none"></div>',QEj='" style="display: none"><div class="',REj='" style="display: none;">',SEj='" style="display: none;"></div>',TEj='" style="display: none;"><div class="docos-replyview-attribution-warning-image"><img src="//ssl.gstatic.com/docs/common/profile/invalid_attribution_warning_16.svg" alt=""></div><div class="',UEj=

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32644, version 1.0
Category:	downloaded
Size (bytes):	32644
Entropy (8bit):	7.994593554315655
Encrypted:	true
SSDEEP:	768:1s+Ex45ogHxE6B82ParxH53mhMSvQCwpJXX+13nzkovdU4Cb7:OVZgHx3B8EixH53g7NOHynzlvkb7
MD5:	3F02E1AEEA84F97C26CE78E796009467
SHA1:	3A86908B3E689621F23A326A8F3FD4B794599C00
SHA-256:	68425336934A956337B4593A3D47D51D2970D03AC4A9C9FC795596F13EB21775
SHA-512:	6574651139BF6A97CBBA6E020D6208CDEA122BB2BC1F88DFC4EF7CCA877CED229E5B5C6D2D7C2E2EC60C4AB56D8EB006AEE2E335258F04721C6E8A71DFF0EC78
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZogUQ.woff2
Preview:	wOF2..............S,... ..........................>...l..6.`?STAT..X........a..H..6.$.... ..,../..[.+...r......!.na=3..;.......`.a.2..m..t..uM)n.......d.v.z...E5.......N.s...Xji...0'l.pG......ll.#.8......j.....UR....>...:(.H.!..U3..i....D..Ct.-.y~..w.\.).........?'..=)...<)....v\|..b9.A.5.T....>...&].a..iFj.....u...\|O<$g.#.$.xQ..frE.i>qS..&..U.F3.@.7....k...z.=.WB...r}...Of._..u..;...I.',..(Z>47...Mq....eP".Xq.#\|.._\|..t..H!...3.5..Q........m.x.`c.+7Vo...#.+........./.G.H...Fi........7...~..Q d.LT+.o..%1..,..~....;..Q.(...K..D)..........h.Mb.I.4....S..\...L..._L.......?....a#$FI&"..,.P-.S7Ec0%..........}..I...".j.D.... ..r.n.G....8#..XTG.....g....Tw.k.U.....F...<.......{B..J'..QV\.-..."G0....O5..... .Zf=..........O.Z........_....G)......p./.m{.B..di.C/N.....hJ.^.....&..`:..T}^.D?..eN..^..nG..x..[G..&W..v'........K.D[Is&..p.@.h.T.......H.$.q...B........l.f3#4..QhQ..p......&.F...P..J...Cl....m.0u.a.a.......o.*...E.91)...a..i..M..K.\|(...:......?..

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	215614
Entropy (8bit):	5.528413851049405
Encrypted:	false
SSDEEP:	6144:tpzrnwz27bzO6I+wZDDjuBv5Vjq3B30GSXOA2Pnpm6UzDnI13o2MnNzKD/t0jq:Hrnwz27bzO6I+wZDDjuBv5Vjq3B30GSY
MD5:	102ABCC451D422BD0BCA6E0FB732FD2E
SHA1:	5B194A8BDDA070D1FB0430EB3F94F72B56E93997
SHA-256:	2BC2123067EA754720D0F5B76C8D0A65987D02DA970BEA8D5AE59A871C26CF93
SHA-512:	BF7ED974F79CD80A5D3F9FE2F6C59E76E09D069441F7B932D316FEA000DE8F6A9C09FAF2470E640DBFCF5671C81A505F202F563771BF63B45012AB13A4C40420
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.mTUNAFoITms.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTu-nsZOrMYTmX5E4o0SDpwg5MUFYA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Je=function(a){return _.Qb(a)&&a.nodeType==1};_.Ke=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.Ge(a),a.appendChild(_.we(a).createTextNode(String(b)))};var Le;_.Me=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;c===""\|\|c==void 0?(Le\|\|(Le={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Le,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Qe;_.Pe=function(a,b,c,d,e,f){if(_.tc&&e)return _.Ne(a);if(e&&!d)return!1;if(!_.rc){typeof b==="number"&&(b=_.Oe(b));var g=b==17\|\|b==18\|\|_.tc&&b==91;if((!c\|\|_.tc)&&g\|\|_.tc&&b

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 58200, version 1.0
Category:	downloaded
Size (bytes):	58200
Entropy (8bit):	7.995376794548573
Encrypted:	true
SSDEEP:	1536:3UV1S86NRte5BASlzNxTDbdQjCOntRISh:3UVg8I6ASnxPhQZnsu
MD5:	895A08A8F8DE0B5D91F3F6999243B76A
SHA1:	3FB36CEC53FDFD5CE97CBD34FDD0A6E5D8255B50
SHA-256:	AADA1AC84EDC0A0F678A12E87B835B9C5A71FC4CEC407CA0420C6561CB53A439
SHA-512:	C82E7D5CE1BF938BA00FD6531702DE3F89045E9C9F9B0A3652F237A02887D02B24D5B07AE2D1FE7805525C21CEC9FB47FB1DA775BB0791EBB4A8975F86AAEDD9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCt-xNNww_2s0amA9M8kng.woff2
Preview:	wOF2.......X......................................L......".`..p..F..v.....L..Y.....6.$.... ..n.....J[.x..Cnv{...@KD....m..........}..%k<QoS...m.4...8.nO;...............tv..#$@....Vl../.#...D....:..(.wJ.>S.r...n..A.._bNi]......0...d2a....y...wa..}....A.T..Z.h..m.b........D'.Q...K^........4.q.....Fx...[....p#......u....4N.{..4.F.Z.>.7..F.WJv...n..$~....h...@.....b.u.P{4..B..'...Vb(.A~.....].Is.]....G.F..i.4....5.e.d.e.OX.;>.z.>.<.5tQ.j..\|.).........C..C..+....Gm.U..Z.M....m......q..O..J...6.{qkxn.._.....S..'.b....h...s.W.[R....%.......J..b.D....g).....].d.M.].m3...S.E.Y$1)lUR%#.Dz..b.........(....f...X.C<...+.5L..C..y......^.a9'..,.Y.....\`T..M.rP.p..c@9.V..;..}..../q.@Y.*......q......6.k../.....:..!...].\|.j#..2....[.f..l...F...:.S.Y`q.....E.5Z....."." .&..a.0@sK...m........f...F.HIA..z...._..W.7..z?....o.>./...f.3..Y@...~.n......c....'~..87_U7.(...&"..u.\|...nh_2..s..;...Q....F...z\../.;w.....F..Y....M.,.....(.....N..L.ek....

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 128, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	667
Entropy (8bit):	7.362023563991217
Encrypted:	false
SSDEEP:	12:6v/72iz2ZhEi+bzxcMSLP5dMhm4SIqbZkMVaFsuU4OZAUXi1iIvZCBl/N:Piz2nExtP8DbZJWsGOu11RCXN
MD5:	3651735207B3375143BF2851399D0743
SHA1:	56CFF3982D277297214E7DAF8E991EF4E907F8E1
SHA-256:	3A699699B3EE4F37CA866AB50F4F808F2105FBBBBD7AB7603E70A2EADE47E9CE
SHA-512:	A4114AC1011BFF3AF385CAAB7CC41BD6B7466A6D9268C6DE7950185B35369B64B790EFFC5B5A586106A58DDA388AD07039F0354420F69F28B6173859D941C374
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE..........................tRNS..@....'...3IDATh...Qr. ...d...8....$...r....W..'U`w+.2o..L..4.R..\.r..a^i....\|=......Dt".X.(....z..:..2..D...0. .a...'......:.P....J.;a9.F..P..) .....J..B>...}..X.....I(..9. L..L....a...V..I...K...}5......v.{........?N.U..\P;k..I.....]..'.QX.\h..!y.....(..........@..N..L..DHgB.....R..uP,...s;............9$.....x..o.n@.v...L...!...-@..Mp..B..../6!v.I.\..M.."D.....M.\H6a.....M.\.M@...m....3.h..3..&@>.i. 8. ..L. .X..F...@l.&YX..eA..R.0....]...4.7.Z...D&$Q....*.n!......8.0..o.B...t.....H..........[X.P..n).^.m.p...pL.k.B.....\|.p..f`/....w..+W..j....:.]......IEND.B`.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41288, version 1.0
Category:	downloaded
Size (bytes):	41288
Entropy (8bit):	7.9945345147413285
Encrypted:	true
SSDEEP:	768:5vEL7O6uEehQ41srh9FX9LELWQL91cJpWi9l04QFMu276l3b020Xs4cNDcx:B2SQnh9FNEZL91kpHQ4L76JQl/gDu
MD5:	C2016E340130CA6E2ABB66D40055B6F4
SHA1:	9A999B20475FE5CA7314918BE5BC09555EA44022
SHA-256:	347B8E3E68694A70F4B024CDBEE7FB7ED5F98C19D0DAFEF6B8F237191C796F03
SHA-512:	975CC5E203B9BD6D9312E30D519938DC0C437ECB7C1FF8A1FA3328B21413B4568E9CF6B1105C5C0DD9F9F61912342FDE9ACCDAC101963381777A65954EE1DC92
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq0N6aXo.woff2
Preview:	wOF2.......H.......0..................................8..:.`?STAT@..d...........h..6.$..L. ..f..^..[....5..$.Y.......H-...............q0...p...... ...9L.......{.........+Z..u..{.m..m.gd.e..9en...-V...lT..Rg..e..j..~.tzW...bg.+..u.I.T.z.u2w.!..g....PM...kd...9W.N}..6......l.".a#.D%...d+~..^.MW..uQ.z..........J<..:Hrb\.6.....WY/..k.q...;u......O...x.l..6....[.:.q.a..h9e...h...P..X.l...O...?.>......^...,^..d...z#....VDF]?..M].t.d........D..=-..%.....s......{.y.....fc.2+B.B.......woo...0..1.'R.".6Y.ba#.XX...A..E%..(.D)..F...Ao..A.....8K.u2_.....&..\|7.....6...T.8..........;:.Q.AA.`..677....(..s...oV.=[...v...v.W.^{$...\....](72...22......22..(7.......l.m.r....V.$d.y.5P7....Z......H..$!....8..\|.....Y......3R880.....}Q.a.0..k.W...l...>..ov...BR#........L...K...\.a.......'.I.<.L#..H..D../_E,.l..t....y......".....x..P..@..(........S..m...%'.R..A..F..9.....NM.........K....A..3o/...!...@..?cH.\~-..2l-......kf...h4p...=!QJ!.........l..U..x.,XbKi\|.I..

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 116852, version 1.0
Category:	downloaded
Size (bytes):	116852
Entropy (8bit):	7.997713935602442
Encrypted:	true
SSDEEP:	3072:bDllz3cdHVFRX/KmeqWq6kqLw37wjIX4yUyga1SX:XllIJnNrb6kqLEFIRiK
MD5:	9FC7A466292A81DBCEB5B9F194B87757
SHA1:	B9994940CAE8121BB4ACC923972EA0B0B6BF177F
SHA-256:	8BA9D0704A43A49CD21D4917C76A1828BF6D60EAB09612A2049199652465BBFA
SHA-512:	5A721B05C621E2A10642A275372B21A4A2813F37FBC24B8CFAA2EE2D8F95D06737DD17E921D4BD90C50A17BC9325B14B4ECED296BA9BDF92DF8B5389D9268C19
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGFmQSNjdsmc35JDF1K5GRwUjcdlttVFm-rI7e8QI9_.woff2
Preview:	wOF2.......t..........................................h....`?STATD......... .....P..6.$..L. ..L...n..[M...1.....8DE..Z-...fH}.g..9."G..f...W9..C..'O....yfU%. M............X.<..I..s6=.J/.....Q@..C.].b."r.eU7=..L?...L....(m..-4.uq8.t...JT...h.H.s{P;.&.7.J..L3....p..-.JM.G....[......&"".U@?`6;.y..I...f=..y.Z.S.........G.._.....m.h....c.....A. .Ul:rv".."...+[.^.&....B..-jz*..u.C.,..e....'?..(.zu..J..!..f."..H...1m.m]....b.xX..w...D]..m ....Ob.b.2......`...!ix]DmV.$.QJb[..C\|j..S....h....9:..Bs...bD..<V....rO.#3......P....I.S...F..=..<[.......lL.."...`.vH.h...5...4..7..b.{~.......Y..h....kv..}.......t.H..R}Im...8{..@..J.2..{.Y,.9.....&x..4..5...../.7.-_do.9{.=..._...m..c..}E.(5)...vdM.o.4;...........\|6yzo).igF.+..V)(..TV.<.M._sb.s.d>d..)..~.t..,...n.g.y.\\.....).4Ml._P.s.J..k:.5..+.A.v.....5 .9.UD.D...Kt.mG\............ppg.$.6...'RYJ......3D........E..1-...(....%$@...L.T...i)P.B.h).RJ......P....t...+R...P.....$...i......J.....v..X....,?......[..!keF

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 126660, version 1.0
Category:	downloaded
Size (bytes):	126660
Entropy (8bit):	7.997861876113917
Encrypted:	true
SSDEEP:	3072:nIMBZfE3pqhzhi59cQ34yg5HU38AkEUkautnlCtzfrgV+U0WH:lBRPA59X4yj5kEVautn4i0TWH
MD5:	E171410D243718D27D3C6BD5306ACA68
SHA1:	6BCDBCD43497AE839A84A26FB83D68BB07A4D5EE
SHA-256:	62205E2E2B22EFD49A3A0D1C10C5F59AFA8F4C59B087825FB904263E73489DDC
SHA-512:	B2167AE822A4CF64460FC88430B1CEB7B905EE35F88F16EF817BAE2FE924053875AB73E6BB170B3808C16D74D6B62E86261FFF0931C75AB0FEF5CE4217094908
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-6_RUBg.woff2
Preview:	wOF2...................]..........................>...<..P.`?STATH...B.....P........6.$.... ..h...J..[}......xw...pE.......!.n.y.A..._......8\|k...7.Au...HD...&W...O1...............o9.6y3....!... .p.?...j[+.0WQb..B.b?.A.....Q.n.....X(.L.0..n..=bf?........\|...'....i'eT)U.\.2J.(.J..-U.Wv5.^..{n...........:,.E.a..Ix...o.t.....h..L...:........Z...+....D1...Q.1..Q..c..x..)..&z....b....cQ./S...6......?.9.d..0......@j...0.....L?.;.g.zQ.R....">..U.U..d).,.ZG9.1...b.U....Mn.=....q.......].+tqt.4..g5...$....(<.I&.4.kD.XV.\X>'me&&.W....".....BR...Tvws.z4y.m..{.&.6..=d.`/st.`..<..)I,x...X.G.F.....\.......==.].[.x..e.x...w..<~.X...i()MG._.)a..$$!.H......z.R.....z0.$$..f..w.....e...HB....?..gY..(.....W..gy[@f..O5.......0;......E.>.. .3!x4l...A...%.._/.h.c.w.e.(;d.H\|1S/YL....}..M...0j.Y.~.......#..k..oBD5."...%..fXZB...............^....)..D....n..f.f.m.U..c...~..E\|...d<H..%.....6."%i..b..5....?s(o.kM..~......_.....<d......i..~M.\....~w.....L..Q5..5]3

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (958)
Category:	downloaded
Size (bytes):	3333
Entropy (8bit):	5.510419549603264
Encrypted:	false
SSDEEP:	96:q0uJzhhwX+s++7ry6eatSiSRCW8nsWi3UiTrE:CzhqrV567D8sWrGg
MD5:	C4BBEAAC0E63AA1F0D5BC25258B4DA52
SHA1:	4179E66BC909E2331314545187A275F9BB971A4A
SHA-256:	9B5E9597345CBBBDDA9789FD7C2119336E3A145353E3238F0A100CAE2C054C63
SHA-512:	BF5ADA82EF261717E5560C673F87149EC9E5725B80038B7591081F8135A2C5F072034E0B57528CD97BAB09FACCB141633876A640A0D87E841CAB9B9BD0E7A8EE
Malicious:	false
Reputation:	low
URL:	"https://contacts.google.com/_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.9syb8JNqNes.es5.O/ck=boq.SocialPeopleHovercardUi.YAPwJ3QIDjU.L.B1.O/am=OBhgDQ/d=1/exm=A1yn5d,A7fCU,BVgquf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,P6sQOc,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,Ug7Xab,Ulmmrd,V3dDOb,WO9ee,XVMNvd,Xg7Hl,Z5uLle,ZDZcre,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,ebZ3mb,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,hovercardwidget/ed=1/wt=2/ujg=1/rs=AGLTcCPZEVCN8LJwUulTzlFP3KV32T_ihA/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_SocialPeopleHovercardUi=this.default_SocialPeopleHovercardUi\|\|{};(function(_){var window=this;.try{._.y("Wt6vjf");.var tA=function(a){this.qa=_.B(a,0,tA.tb)};_.J(tA,_.F);tA.prototype.Sa=function(){return _.N(this,1)};tA.prototype.Rb=function(a){return _.im(this,1,a)};tA.tb="f.bo";var uA=function(){_.zp.call(this)};_.J(uA,_.zp);uA.prototype.ub=function(){this.vt=!1;vA(this);_.zp.prototype.ub.call(this)};uA.prototype.H=function(){wA(this);if(this.ql)return xA(this),!1;if(!this.Gu)return yA(this),!0;this.dispatchEvent("p");if(!this.vr)return yA(this),!0;this.eq?(this.dispatchEvent("r"),yA(this)):xA(this);return!1};.var zA=function(a){var b=new _.bv(a.RA);a.js!=null&&_.jv(b,"authuser",a.js);return b},xA=function(a){a.ql=!0;var b=zA(a),c="rt=r&f_uid="+_.xm(a.vr);_.br(b,(0,_.Hh)(a.N,a),"POST",c)};.uA.prototype.N=function(a){a=a.target;wA(this);if(_.ir(a)){this.Vo=0;if(this.eq)this.ql=!1,this.dispatchEvent("r");else if(this.Gu)this.dispatchEvent("s");else{try{var b=_

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	dropped
Size (bytes):	14464
Entropy (8bit):	5.472172006748169
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFC+5aiWQLHO91sIuW:IoqUAh8vz7W2s
MD5:	1A5907980398586C2929C4E8447B8837
SHA1:	562CF91C2981EB8B1D84349EEE655674A0EF0F26
SHA-256:	BD8B2A5447A86A409892EE240E96AB99ABBE93D125B2FC59DDA51449C2930254
SHA-512:	337142703E4B57EAFD23DA6D9094315F00EB4655AD6C735CFB3643BFB5AC085EA781682FDA93E175C3801C3E45CCCD7CA958AC4FA8A29899DAD0F23A24E098F0
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3640, version 1.0
Category:	downloaded
Size (bytes):	3640
Entropy (8bit):	7.935496811135212
Encrypted:	false
SSDEEP:	96:VyjYr2gmTOswu8lSMMVAHI/qn8A8E1/fz6S8Y:I2zSOswu8AzG821rT
MD5:	421B045B5EB019D56F6407AE63E57A92
SHA1:	F0D0D18A1887D371B18C1B06B99AD2D3C0923E8D
SHA-256:	5DCEBB5EC80A2DDAB469A77F1A37412C34205EF76D054131083B0BF663B786FB
SHA-512:	A426E4F8C2F2397038F4A1F60ADB091BA097DABE9C4ABF8967F80B20C98F1A7569DE9CCEED89716329FBBAEF0DD0AFB4B5EFF0E6C96DB152ACC86F1CF799C2C9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-eiZM.woff2
Preview:	wOF2.......8..........................................T.`.\|.....m....0.{. ..6.$.<. ..r.W..1...#..4...lc.K.e+c.@3.gq.:#..n....CYG..Q...W.sN...If..w.?7A....5..Rh......D......c.Iv...w........T..dMy.?...x$.H-.5.....GQ@.....G]..,..\|H!T...x+mK.M-....X.u0n...O..5..mS..+J.\|..CS......E...#........,.%l\...v....?.}...=.Fu..)eo./w3...8..i.lf..!y"U...3:.8..vy........(..(..c...!....4....1.....0..`.....Q..4\| Z...j...B....h.h.v.K.(4.d..o..J%`(....zP...0#...y..#..B....#..L.......C..#..P.>+.....@.X....m....F.........AO..t./..X......(.....tq.i....P.....o.M..).m.......bX..n.1...n...-.;........1kR....p..w]0.x.fYz......[W.^.Z......#.K........... ..:...x..O.Q.8[.PK.(.w>'o........^..KV.H.+F.1.qh%Whx....Z.).3.4{..;.K..w0....N .Dn.Sj.l>..\|Y.....&.U..4.^../<.@3.....VBhD...P.8...&.........7.e../.....G...}x.Ne...,.,.n.....T..4.6`....i.M..+.YC-..]@.4.6..qi$%.Y2,.L.=...6...u.10.g.2%9..;..fC.j..P.2QHv..T4......X"lz'..n..N...5...\|...4.)\|...($..Y..9.3...F.t....rN..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26992, version 1.0
Category:	downloaded
Size (bytes):	26992
Entropy (8bit):	7.992281768071691
Encrypted:	true
SSDEEP:	384:0qMvx5Q6PuscBhhGTTMJzBASBFa99ITYpp1b2Q17kUwBkEV50x9Xg96Dsvv9wO:0qMvx5Q6Gsah2T2BAuTYwBppri9XhS3
MD5:	92BAE553B71BC6DEDFB17E73BA5029EB
SHA1:	4B581AF52A479729888031EB60722A306A68DA55
SHA-256:	49BE4E1A8B5E250DE2A7A738CAC6C157E4148414CAEAB4055D92DA8152D95619
SHA-512:	8895176C2915FF0AF40D923256CE4371B639B24945D9E4183B8146EAFFF8DCA58E87E3CCFFEED8B2CAC88A7BB2906875C4E3CF1DA6B39F4563821A8AC287E130
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WC9wR_LU.woff2
Preview:	wOF2......ip.......8..i...............................D....`?STAT........<..A.....6.$.... ..h..x...!...s.!............gK....r..u&5{.H.IgT:....?5..qi.i.c.m.^!.L..dZ ..=.%2......m.....\Fr...=.,a%..D%..1...r.".o-s..N%.9.u8.s.1&[k..B..m6D:.t..M.z.;..F@.A.RIT.I.y.Q....N.. kG..dD^x.....bs.JLb..2.St..f....\|.Y}.M\|.y>!.p.\|../sT?T.c'~.......g<...D.H..Q..'}...........3.+.....fN].D...."0n....?....$..)@JR.\ ...n..WX;m....d9.R.?.....B.....R..\_...~.m..V._.ml.9pL..Jj..(9.Mi....rL.`m.`.S.\|..g....?..O>...)...hc.f%.m.6.7..Z..c.T.....%...n.Z"..i..G...\|.=.A1:..9.......r....+=1...........T.5.....5....B......F.,Z....)..E7..q).!...:.0/.V.9O./......}z1)`8..T....,.......I.@..?.FT@q.M...{S.A.c....sI........ .K..5.mP....Wg.s.'....IuaD..........~.+......`.-.[.....(g#.........,..[..\|r.u...3+..J~......p.=...1.)o..W.J..45.f.8..A. .Qg..H.N..O..yc....."k....w....2\.Z...q...a.7....C6.C.....fg..3;... O...........9.gp.F...o...I.O.W.Y.....<P.R$..{.d.6UY..R4.{V.......!?.x.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	703
Entropy (8bit):	7.452506538035121
Encrypted:	false
SSDEEP:	12:6v/7KIzTZA/qpbOKmgkifrNLhRfSrYcqnmw9KbijA2u+29dwCzk:VIzTZPpiBij4inmw94i827ydK
MD5:	C9FBB8238948BBE88BA566017CE1A4CE
SHA1:	3684610CB126BB13C35F3405262C62B71A7DFE60
SHA-256:	7A8DEB5F10EC92BCB6CDAF3BDE9BDB9EFA77FDC5F9B8A134F3F46FC888D2B2F3
SHA-512:	A149AF6EDB4AB65EDCF2215937BB2EF5615F06A310741136C834481DDACB50D3E4CF580B0C2A53038FE10F58C2BF740867F084A222FBEA2AAEFDD3192FDF5A77
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/chinchilla_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS....@6......WIDATh...Qr. ........h..p+...<......:.H7-Vm.~J._~..`>>j.U...._=.\q....O......#.`..4. ;...l.......x>.j.....~..m.0..(....Ba\|.K..".BP...K.0...i...>DZ8G.C$.}.kIO$.}..".p.]$......B$..i...].d9...D.B\|u....,.p.a..^.a......!....&) 1.`...0...8N..D..P0...8A}gC.`.....[&..<+...T....f..s.a..YA33a..Y.0.a....s.C...............8R.j.i....5.&."QBf..6.....a..8SBC....%X`.....z`.>.l....8n"l.Vr.V.#. ..ML3=5.afo...S6.H.BI-F.z..P...^(I....Lp.7N...MV&.h.sBO.....P.O...?!....@....kQ...v...l.y..."x.I.^...xa.D..F.... BF...S".W.'.Tv.Y!...J.............y.N...!.....[uKx_......Rv]+\|5.U.V..\....<s.t......IEND.B`.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4344, version 1.0
Category:	downloaded
Size (bytes):	4344
Entropy (8bit):	7.937797980739236
Encrypted:	false
SSDEEP:	96:JLTn03nQsDwAbFI1XLKrlgbbNaF8l5efEY5TMDg+P/6sJA6L1:JLTHKwAmxLUlQbNQW5edWg+Xtaq1
MD5:	E5A3502E3717398EE835D98F84874738
SHA1:	75C4C2D0F1A2EDA7E16A16293BA840E19991EF1A
SHA-256:	E5ACBE17FD4E63CCA2CE1B72E482FC2411D27D9D534476AD7F0108B9DF087FCE
SHA-512:	609920E215906893F52928F75E2A7B4704F5FCD4D5D8F2258A9D410EFD06270DEBA734F41F6BBAB7C5FEF693C40A2CF3A84B57250F360484D2789C928ED202EF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lobster/v30/neILzCirqoswsqX9zoSmMw.woff2
Preview:	wOF2..............".................................p.`.l..F..m....8.L.(..6.$.L. ..<.}..<.. E.b.8...5..F.Am.......z=...$q..".........].)..~....3'z...0.v..r.....2....L.!..O..?w........X.Dd..X.e.....U>}?:.....c.}..m-..........@......]A.K#=,..M.+....k.gE..... .e..}s.4Y+j..........]!yHI."..6....../[....l..X.....M...zD.tQ=@.'.....4..E..jk& .".. ..{...lA.<.-.@.>.nB...J;9$U.}U..m...p.?.^.$.9...d.........;W@ajktUe....P......B1..o.....M D..Hb...i.:B..2..).U.:....U....yx.z[.....:...M.......r.....3Q.....835..Z.`.........J..........v.......v..a($X..B..OCdd..hLxQd"I4.MS......1.4....u..@..Q.(...ia....x..'...y%~=..@....l(h.P...H0.....t..H.5a.hXtH.~...;?Y.>.;....q...F<.7.{.i..>.sH....[y.Y.p..W...X.6.%...(F$.M..N.Gw..:..b..0."..`.........R./.....LS..kA.h.A..%. .R...2.^_0.cW Z..C..,4..`..=.X....j.j2J...g..PtT....<y..,.\._...s...{.R...:..".. .@...)....+.3.)...,..g9Bj.Q...O.A....y&.:....eo......Z.2......8\..>?U.O+p..\|./...ra.qHG&...FA}....($.k.:.z.(.....tT@.g

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	859
Entropy (8bit):	7.266649968666868
Encrypted:	false
SSDEEP:	12:6v/7BeB4zXhTisiTgi/dkeuIRg3mMT1+sliQ0yW2sY5dBCDqZ4i5e4fIPzeni1:ueGzXgsYZaDbksVz1Eugzr
MD5:	8B505347C6D4824EA38E66EA22DAAD5C
SHA1:	645C4DB77B18554AE835AE4E4816A3521F8EE33E
SHA-256:	D7E1F6C88ECBEA0CF73FACF04C91A39FA01F38138166DD1D1895DE4F6ED661DA
SHA-512:	F356677CCA35ED2D9BB9F368746D0271F5E48DC0E23AD2997A250917996613BC1D350343E62CDEB741FE6D6783C8A15070FC046BF3EDA79B8B9186161D19485E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/penguin_lg.png
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS..`...0...@.P. p%..I....IDATx....r. ....rWt....C:iE@'.0.b....Vq............... .f.........~.1....8e..................}......ph.^.....`.>?\|.6..C./.1..`k.8..uIc...:.;.m...i....4.5.O...~.P..;M..i..........i.SO.2.R?.N_... ;/.>.aaV....a..xs@.}@....)Y>.^...H..Qx..hZ.n<....)..w.4..w.....0.^.F..,,C...d.S....k.\..d....n=.."P...HS.?.r@T.i.C..D.c'..b.+..`.\|.YsE ..w.z...nG......0.....]......4....3.......^.U...!.....].d(..?.@..<.....}.dj..U..J.G%........ ..l..^y..J......e..M...A...B.R....e........>..............$.*....Q..# ydG.....I......... .:l%u...`...@.........{.Ey..!......=...;sS.@......5..-..n..Ym.8.=...u.0f.~.a~..5.h...M.[...>.....k"@.Z....C.HI5 ..........X..v.P..F.a...d.[:.......\.........GFFFFFF.z...,.h........IEND.B`.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	dropped
Size (bytes):	103598
Entropy (8bit):	5.475351717416557
Encrypted:	false
SSDEEP:	1536:x5Wi1Q47yv1T9wv7568In7jlTThuIp7slMiGhEmkBeMNlpoEr3dqyfP9PgogNLb:D7yvvjOy7sipKTr3dH39oogNLb
MD5:	4C36E15EABC545A7849483081614C827
SHA1:	E9D041FDAB98CC934F5F352E87E344863DFE7FBB
SHA-256:	1581EF56ED911198AD6273D38DBDF289AD5620AD62AB5189EAFE8F7F434E4D87
SHA-512:	B95A356361FE75B1DB91CB962E95002E152FFE10B475A2383FC6A2AF6F45CF53C0BF7E34896C812B1FD53F9CEC4F766A1060A088C33F5F6586FB4E533A2B5ED7
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 99952, version 1.0
Category:	downloaded
Size (bytes):	99952
Entropy (8bit):	7.997773585050746
Encrypted:	true
SSDEEP:	3072:jm9YIoqKNZx+lkLqhB3jeRC2X9SPxK72Hu:jm9YfM/hMZSi2Hu
MD5:	4DC58D8C42A13CD77CF2CD978F639388
SHA1:	221EDE548E9E9CF711595D6511C73CD8EA4EB595
SHA-256:	B93F4669CC09016E4D1AD1836A4CD1EBCF832C22979E5FA11DB4F7C3620223AE
SHA-512:	52D3C3AD61265E984ACE82FF6F1AD5B663E76955309866EF7B7D9EA985AD2917FB06FA8BDD96B61208035FD1E2F7DD26A9BE91322A196A0B628C22BC50242613
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lobster/v30/neILzCirqoswsqX9_oA.woff2
Preview:	wOF2.......p.......,.................................L..P.`.....F..m.....8..0..\..6.$..X. ..<..c..<[#q.....U..t..._MK?...G.u......9.PU.FG.c{y....9..\|............@&..0J\|.Uh.R......7De.A...$3...5..v).(..e..J.TP.B.Q.....1.e#..D.mw.'.W.@..a.a..:.R^c......tv...............pc..c..Q..I.......O>KV..A6..C.B...:..e..5.9XVC..!Y[..B....?.3<.s.v@&..E'a.G....}?I.(k4{W>e.......W1.(...W....w../?.<.%.9.]._.[..v~..j....xm....Zj...S.J.I..9..W3.u.VC.. . ...:;@..<."9v~CTC...Sj.V...q.~.'"....9......F. ..+...E.Q.R3.=13..Q...2.eHR8...a.8>Q.....=....mD1.")..!..m.....J.:..c...^...z.....zQ.V.S6s...A.c..x..I.'...4:/I........G..c.t"Z1.y..M..;.p..y...2..~. .P~`;.6.g.)m..pLRUA..-.}.hg..Z.i.\.iw...v7..f.......X1.....su....=0...8..].&...Xl...e(.T`....+.'.4.y........f.mN...vVtT..B..........7.sSRr.Y.c0:.C1...,.o..{.F.....z..w.6............1,sgD$.d`.S(.b..a^....HyJ".Z.2....'.w..M/..I~......n.w..D..L..b......_.r++......r.z=..Q~p-;@..i.....T.)ju....?...z.H.P.p.rC.q..t......j..

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50264, version 1.0
Category:	downloaded
Size (bytes):	50264
Entropy (8bit):	7.996208458310892
Encrypted:	true
SSDEEP:	768:in/nRPDOHUY6sQaVZNT6ujDwWhOte5ocSYHh0SfncpKN8Mid5BRen7rQy:i/dy0zsQaVf5DwcGx5YB0KOMWRe7r
MD5:	AB5E010EBED9BCFB98CDB5BD47D3E430
SHA1:	5D1AA4B896BF05AFE8978F74E2E88A53B0D9BB6E
SHA-256:	B5477EC958C9F1F06AF0D54F50633B66C76C5E010450283C5620CFC79E57E963
SHA-512:	EEF8BCC39498E40562E6E919969492E20093AC577821C34E85D78387F7B0ECDFA90CF14FFD2A8F64FEB608BA0253397F674E10CDE82FE2CC5E80BBA7CF25BB4C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI8MX1D_JOuMw_hLdO6T2wV9KnW-C0Ckq0.woff2
Preview:	wOF2.......X...................................... ...0....`?STAT@........X..#..h..6.$..L. ..v.....[....1v.n.,...u.0..-........a3......7.B.....].............-Y.._.>....""].t.kuc.C..nR.U.......9%#D..G..%.d...f...U..f.C=.l.5B...1ALPh2.2...D%#i..A..o.v..d....w.f.6K.tf. U...."r...d#.UD.....5Y.....;.D~9.up.......i.[.O.).t...0..7..w..%..T......;.9CB....>..\|JF.....~..G..~..........+}...]W..s..h..._.%;/TK....b~x.....l.l.YH.[.AL..h8AL\Ry.t.Z...c..-aBf..,...Y...K@.7..R...Gi..O.........ok.16..(q.......\|,"m..........0.)........Q..V.o........<..r..SK........B(bR(.GJ.....uJ%......._u.7....X`..#.s..Y..k..;.$A.i.r.%...d,.\|...}..D2j!h..I..&...c...Y.d.z..."....x)e$...u...@&...:..g.a<.z..'y....l..qRv......(...[N.0..g.. ..f..O...J..s},.s^U.-.3,.2.yO{.l....[J....G.n...LR....@....$}......f.GF.}/..^..p)/....?$...1.?6....!&...;~@..r'Y...d.r.A.B..f...K...../diJ_.aw.%.......&....a0.f..m..P#.2%....c.."....{.._e...mT....!0.c....b....>...)`.[.C.a.m4.x8...7..

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (958)
Category:	dropped
Size (bytes):	3333
Entropy (8bit):	5.510419549603264
Encrypted:	false
SSDEEP:	96:q0uJzhhwX+s++7ry6eatSiSRCW8nsWi3UiTrE:CzhqrV567D8sWrGg
MD5:	C4BBEAAC0E63AA1F0D5BC25258B4DA52
SHA1:	4179E66BC909E2331314545187A275F9BB971A4A
SHA-256:	9B5E9597345CBBBDDA9789FD7C2119336E3A145353E3238F0A100CAE2C054C63
SHA-512:	BF5ADA82EF261717E5560C673F87149EC9E5725B80038B7591081F8135A2C5F072034E0B57528CD97BAB09FACCB141633876A640A0D87E841CAB9B9BD0E7A8EE
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_SocialPeopleHovercardUi=this.default_SocialPeopleHovercardUi\|\|{};(function(_){var window=this;.try{._.y("Wt6vjf");.var tA=function(a){this.qa=_.B(a,0,tA.tb)};_.J(tA,_.F);tA.prototype.Sa=function(){return _.N(this,1)};tA.prototype.Rb=function(a){return _.im(this,1,a)};tA.tb="f.bo";var uA=function(){_.zp.call(this)};_.J(uA,_.zp);uA.prototype.ub=function(){this.vt=!1;vA(this);_.zp.prototype.ub.call(this)};uA.prototype.H=function(){wA(this);if(this.ql)return xA(this),!1;if(!this.Gu)return yA(this),!0;this.dispatchEvent("p");if(!this.vr)return yA(this),!0;this.eq?(this.dispatchEvent("r"),yA(this)):xA(this);return!1};.var zA=function(a){var b=new _.bv(a.RA);a.js!=null&&_.jv(b,"authuser",a.js);return b},xA=function(a){a.ql=!0;var b=zA(a),c="rt=r&f_uid="+_.xm(a.vr);_.br(b,(0,_.Hh)(a.N,a),"POST",c)};.uA.prototype.N=function(a){a=a.target;wA(this);if(_.ir(a)){this.Vo=0;if(this.eq)this.ql=!1,this.dispatchEvent("r");else if(this.Gu)this.dispatchEvent("s");else{try{var b=_

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	27134
Entropy (8bit):	4.949493419733994
Encrypted:	false
SSDEEP:	384:G5Cj0WN9Oe/bMZ0oEQSERgPtuLCnulPmo8MADYyY/AXVRdB6j0T5D7ZVQR:GkOT0onfgPtfuwMFyY/ZC7G
MD5:	3EFE1C5EB7CC2EF3419BF71B650479B5
SHA1:	B7E11B6A8304285BDB9528B3E5707FDCC4441A70
SHA-256:	7D24D331406734568514DFE0510CB86244FBD402809150576A94B8F93ECDBF43
SHA-512:	19102F6AA0344C320D2D0C42C479E88B9119915DEF3E1BED4AFDEC7154C581DC0852E9BDA29E6DBC6DC40EB32D71F5328A0C22CED21ACA1E8C502F4F450359E7
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="29px" height="1049px" viewBox="0 0 29 1049" preserveAspectRatio="none"><g transform="translate(0,308)"><rect fill="#4387FD" fill-opacity="0" width="21" height="21"/>.<polygon fill="#999999" points="15.5,7.414 14.085,6 10.5,9.586 6.914,6 5.5,7.414 9.085,11 5.5,14.586 6.914,16 10.5,12.414 14.085,16 15.5,14.586 11.914,11 "/>.</g><g transform="translate(0,281)"><g xmlns:sketch="http://www.bohemiancoding.com/sketch/ns" id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g id="Artboard-1" sketch:type="MSArtboardGroup">. <g id="Oval-26-+-ic_link_24px-3" sketch:type="MSLayerGroup">. <circle id="Oval-26" fill="#558B2F" sketch:type="MSShapeGroup" cx="12" cy="12" r="12

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2018)
Category:	downloaded
Size (bytes):	4817972
Entropy (8bit):	5.634932172779785
Encrypted:	false
SSDEEP:	49152:RSHJVpgMlAkzGu22BYVwF8E5+KSl3xJdUmBWQfG1HWC:YH5jDvYo
MD5:	54057EF8B1D7506C11867E5704457B7D
SHA1:	A798208D46C9E5E0ABB65A57C9D9B005901A6B86
SHA-256:	CD5883FB21FB8C7BBACD55AC80D31D41E8B52FCB7F43747F136899EBAFFA3554
SHA-512:	9D875D0DB708175149D8AFA9C0F07F9023A2F82C97EC583F5ACFB696D7AF25DE841888F35013E58FD54174E2AC0FD9BB5EEE9C4A7BC83D0CB752D8E748488B42
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/2738495476-client_js_prod_kix_tertiary.js
Preview:	FJ(E_a);./.. Copyright 2021 Google LLC.. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././*.. Copyright 2024 Google LLC.. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	24291
Entropy (8bit):	2.9545368105511347
Encrypted:	false
SSDEEP:	48:TDtLe7tZYTn7CNOAMUFuIuV///b//3///k//u//+///3q///NtLNhesjfXKzgE:0gfCN9F0AG7eIazT
MD5:	05F2F2059412502B0CF2140369A01612
SHA1:	ED998506B18948CBD20A4C7103199A10CF723922
SHA-256:	3D45292EEF3C671FCAFB8CE679C08FCCED09A3835E46F9ED51C7FA9AF2E0E11F
SHA-512:	E337A5A29179ACD05347D125AF5DA24813238E94736F403A18131B0C97E32A17C9F5B667173BA8DE2297B37067D0FDCA306A6CF4EAE2892923661F42994C0982
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........@@.... .(B..V......... .e...~W..(....... ..... ..........................B`.B..B..B..B..B..B..B..B..B..B..B..B..B..B..B`.B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..............................B..B..B..B..B..B..B..B..B..............................B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..........................................B..B..B..B..B..B..........................................B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..........................................B..B..B..B..B..B..........................................B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (904)
Category:	downloaded
Size (bytes):	2679379
Entropy (8bit):	5.629237424041442
Encrypted:	false
SSDEEP:	24576:394pAtBCl4R9gFvcAsZiYNMxrG+z1yECB93p9cUK1BuQpnUyM:39pJHFZNNMxrGU293p9g1gQpvM
MD5:	A3D8F6282AFBCEEF749B75D5935AB9C2
SHA1:	2BCB45FDCAEA3F736FCACAF12A02883F9DC19A05
SHA-256:	027900BABAC6EA944F3D9F4B0A5C9904934FF4EFC0769B4595D843F7FF3C971B
SHA-512:	DF192DA378553D621089B1C5B2D34EB0C5E7A61B49F47D296E87DF0667F07F1752752314D04EA0F2722823AAB623541CAB79403F9E5096133F378A5F60E5AA45
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/1761216827-client_js_prod_kix_app.js
Preview:	FJ(s_a);./*.. Copyright 2020 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,. OUT OF OR

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7989)
Category:	downloaded
Size (bytes):	96567
Entropy (8bit):	5.808886091371191
Encrypted:	false
SSDEEP:	1536:rl19n3hxBdlgnXTKB2osyM6gOL6W5QzywOAlMdKqtqGF0nGcjozj1321Kjd:tnZ4GB6iQmtDsKajozj1321+
MD5:	8AB31D7B94208730605F09806ECCDAF9
SHA1:	8A80970278A4D1B249951AE126387DE07099A237
SHA-256:	02BC4755F3D14AB6B1B10F00E863EF221E16FD509DE44CBFF613B57A3C856A65
SHA-512:	1543CD3BA2463AE2D321D6EEB5C399D3B0A86CA79391AB95DE9269585F04FA46300368F9DA4EF8EA8CF53AAF9D210AA9003AE591710A97FC9119CB4BC40A6A9B
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/570078452-client_js_prod_kix_pre_tertiary_deps.js
Preview:	var i9k="kix_pre_tertiary_deps";FJ(i9k);.var j9k='" alt="">',k9k="/drive/v2internal",l9k=";base64,",m9k="ASSET_COUNT_EXCEEDED",n9k="ASSET_MEMORY_EXCEEDED",o9k="AVAILABLE",p9k="BAD_REQUEST",q9k="COMMENT_COUNT_EXCEEDED",r9k="CONTENT_REVIEW",s9k="CONVERSION_INPUT_TOO_LARGE",t9k="CONVERSION_OUTPUT_TOO_LARGE",u9k="Can't import this file right now. Try again later.",v9k="Couldn\u2019t load user",w9k="Description",x9k="Dismiss banner",y9k="FILE_TOO_LARGE",z9k="Got it</span></div></div>",A9k="INTERNAL_SERVER_ERROR",pZ="L4",B9k="MAX_CELLS_EXCEEDED",.C9k="NotReadableError",D9k="PENDING",E9k="RESPONSE_TOO_LARGE",F9k="Revision no longer available",G9k="SHA-256",H9k="SHEETS",I9k="SLIDES",J9k="SecurityError",K9k="Today",L9k="USER_QUOTA_EXCEEDED",M9k="USER_RATE_LIMIT_EXCEEDED",N9k="X-Goog-Drive-Resource-Keys",O9k="abuseIsAppealable",P9k="abuseNoticeReason",Q9k="accept-language",R9k="allow-downloads",S9k="alternateLink",T9k="anyone",U9k="application/json",V9k="application/json; charset=UTF-8",W9k="app

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	7.377496939127328
Encrypted:	false
SSDEEP:	24:uVMnb3t0IoMfPzIEPS4PcnCcyRVHYOR+H30+zTT:AMn3oMnzDcCHRVYORok+zTT
MD5:	F0B1AEF64ADA418B64DD50808A94E3FC
SHA1:	4344651F2F5F77AFF8CD8AC96044768F32694BC9
SHA-256:	3AFB3F840F47BDF0279AF4FAD7C5584B2EB3629ABB84F44466A80C903D7A3C01
SHA-512:	710EC96345200674C1B6D1FEF2F941114802F70F7A3E14264AC3B81CF677F1D948FDBAC4831E4DD66FD076EAF2F39A48CDC3DEFD1FE01CAC5CD4E6BC4AA021D0
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/frog_lg.png
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS..0...`...pP.@ . wJ....IDATx...z. ...I........-$Q.......a..!..D".H$..D".............G$."q.<>.....b>%...\...oI. .Gd...&....._......./.vd..P.Y.....c.,tT.^$..X{Y .#~.@.....R.....(......O....[..r....{....&..7....Y.Ti..J.v-...>......!.F...w..p....X~.}o_r^..._..........d.....a.6&...TX.zZ~p........Xa.4...X.`...................RY...J.......=h9z.....\|...P.....g".R>.......:.w....h.`cM.R.>.t..`.H....N}...`......[....q....7..Ev..j....J..[.p....7Q....WW.}.X8].m......{._.3]..p.p..X..@.!y.}.......,..O}..X...`0..ll;..oR.2......v.~.SM.....[..WSo1....'~/....a.X.q....t....d.gF....w.y..... .r."X..da..@...........J..xS....ah..l......RJ)),LG1z....<m....;.[.E3."y...I5..>...l.....y^........./..z.]g......=.v....E...=G..>....{......{...Y.V}..T$..D".H$..D"......N.j......IEND.B`.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64656, version 1.0
Category:	downloaded
Size (bytes):	64656
Entropy (8bit):	7.996287850457842
Encrypted:	true
SSDEEP:	1536:22fMmkOQ8l40fU4rMYDtbM/lv4ri2YdBRlJeZWmSbATNfL0lg3y:22Gof4YDBM/lzh1lsbScxfLkgC
MD5:	28E2B282CBDDE4FBEF925AA25DF6FEA3
SHA1:	764C6B373670D221C28CD5DA0584FCEB1C444905
SHA-256:	B1DE6EAC3059CA778E6D2367182C7F11EDC81E09971E56F788DB308A674EA7EC
SHA-512:	54D8A320ADDC0205D3A57D768B80A06B7AD09D47E79DD4248B068E20D0A65F00C5E96871FB6AC09B9CE2B8D8AA77656384FB11F58902A42D55A0DA804F0CE6DA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZ3zwprpvBS1izr_vOMscG6fA.woff2
Preview:	wOF2..............60.............................8.......`..d....m.....\..1.....6.$..X. ..`.....<[W.q.....D.nC -.u.Z..07.A._.N^.....q..nU.$`$......'.1.n..@E.J........0............^.`...d..+.f....;[.;..'2.[3z<...\|....^i.=...X[..6Q.m.L..7zO....XH>....i..m8........x.B.B.(.?.#x'/v...>.l..J...J.a..i..'....#.$.{.tIV.[w..q.&..37{.I.#L&....\..9....H....f.3F.zq2M+F..5..............yPI'...].%..'^.....N.7q.L...!....6`DM.1.KbLF.Pj....'(b.R...Q....b`....-.=....<..{_.......@0(!..EJ"B.`+A..5(.......8.=....r\...\..Xy..b..5.....z'...^.8..l..Ny.....3.....H.0...]~.!...@F..N.B.+Y.zP\|..gg..,.(.^.....x...Z5g.T"7x.:.a..BU.....2=.....S#L..mYQi.k./.77>m....F...].J..o.Q.F..!.1...3f.1c..3~C.1cF.1c..3cF..v.. .$..........KrI.._.K...JO!.z.RD......."...!B......... X..u.p.$...-.........L:L.i.-K!~...\|)..2v/......!.i...".mFR...?.YJM..l....Y.6..G...........2q.t..!dh..Uk`.0t....#.j..O......!&.Ql..9J....y...[qQm..V;_.j..8.a....m;...i..L.c7.`......?...^d..i.1.!..8...#.....

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1528, version 1.0
Category:	downloaded
Size (bytes):	1528
Entropy (8bit):	7.7753709629209045
Encrypted:	false
SSDEEP:	24:5agnVyeL5S2yekPsk9PfKFG8XUxRD5HLRRD14X9Yumi5+MoVOwhdv2jN:5agh5fBkUc8yRDPtudw/94N
MD5:	EB7377208715318B001D920F049E318B
SHA1:	9E428185FC78B5F18B11D1B29353433939B08B5B
SHA-256:	10505DF86B3638BE7B5707A542C0C7C80ED856F14E037BB1C64BFAF712B0AB75
SHA-512:	B6C0273E30938C67D2CC260D04A7E356CA750F3FE332700FC739966041AFC010AB2E04739E6F627A88042EAD1A5B14F37C580EF6E00D6869DDDD2E303DD04D35
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTI3jw.woff2
Preview:	wOF2.............................................2..2.d.`?STATH.d....D.L. ..6.$.8. ....u.....QTr...<.m5k..)..-.....q.....?..sW..._..7......JE....FE22.....N}..f.......t.N.!.v,......8q.'......p$.`fJ.JA:S..F.............'}..,...u..A..H...h<0.....G8...9_3.....q.....b ...0FB$,..........W.1...J. ..D..C@H.....D1.a.xp..(...c.v..\|.A../O....K,O......L1z..&...H.1!aN...d..s.....:...f..S..P.A..I....%..)....6..r..].v`.....V......c...a.IuE......".H..i......B.#W.....s.R......m.?...H......$q`X....T.i)C..^w.>]. ..;..Dx.5.@.4.^.P....k..........g3..\|..3.eYb.2hd.2K.L......wg-....;s......Q.'..(5..L'...f.W...L....<..9k%.6.v.$......&.w....w4..k......6..Bj....R.B.r....d...I.5cb.8...{w'...6J..98.q-.HLa.".J?.-.>...3+......)..gtwvb.j.8u..vW."*U.:......y.......+:....D.7=l....9j.v...T8r. .........`...qp=.<Tr=...D......d....H.C.^,..%..S.:.=3.....s.9.$ .8~.Q....t>.6262..8..SP....s#.r.S>y..(M.......I(v..JUL.....$y9.EU...&z:..T....QD..Kn.....p.xI$,.,I.......n\|...N.+

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1360)
Category:	downloaded
Size (bytes):	7875
Entropy (8bit):	5.501135641901946
Encrypted:	false
SSDEEP:	192:/KOX8vE9Mio8UYcmS+MMUFe339GsayhJ2Zr:/KO2cMz8zcmtfdzayir
MD5:	FC18354C75C49EE95664D517E57A6649
SHA1:	E2258A946103ED2BA22059FF1FA1B804071FD2DD
SHA-256:	464170EA3591F952AE7FB0164473F04C9276C5F0447A3FC439167E36F3CA4CD3
SHA-512:	9F50CDB934A9DE2737B11B6443622B8921DF070F2978D29FC8358B075BA8ED00D5EA84279E9F51011FBC0FAEAB08F37FD3A1077A02DA838C22ED994C6FA0FA03
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/3278450690-client_js_prod_kix_approvals.js
Preview:	FJ(t_a);.var Mgt="docs-approvals-toast-reload",Ngt="docs-approvals-toast-unlock",Ogt="editorApprovalsOnboard",Pgt="unlocked";function Qgt(a){this.Da=O(a)}J(Qgt,S);D=Qgt.prototype;D.getId=function(){return Mp(this,1)};D.Xc=function(a){return kq(this,1,a)};D.lA=function(){return Mp(this,5)};D.getStatus=function(){return Np(this,7)};D.Bm=function(){return wq(this,7)};D.getType=function(){return Np(this,13)};D.yc=function(a){return lq(this,13,a)};function Rgt(a){this.D=a}function Sgt(a,c){this.F=a;this.D=c}.function Tgt(a){if(a=$il(a)){var c={};return c[N9k]=a,c}return{}}var Ugt={inProgress:1,approved:2,declined:4,cancelled:3,statusUnspecified:0,artifactsPending:5,failed:6},Vgt={decisionUnspecified:0,noDecision:1,approved:2,declined:3},Wgt={typeUnspecified:0,contentReview:1,eSignature:2,alignment:3},Xgt={failureReasonUnspecified:0,artifactGenerationFailed:1};.function Ygt(a){a=xo(a);var c=Ugt[a.status];if(c===void 0)throw Error("f1");var d=new V2g;eq(d,3,a.capabilities!==void 0&&a.capabili

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7989)
Category:	dropped
Size (bytes):	96567
Entropy (8bit):	5.808886091371191
Encrypted:	false
SSDEEP:	1536:rl19n3hxBdlgnXTKB2osyM6gOL6W5QzywOAlMdKqtqGF0nGcjozj1321Kjd:tnZ4GB6iQmtDsKajozj1321+
MD5:	8AB31D7B94208730605F09806ECCDAF9
SHA1:	8A80970278A4D1B249951AE126387DE07099A237
SHA-256:	02BC4755F3D14AB6B1B10F00E863EF221E16FD509DE44CBFF613B57A3C856A65
SHA-512:	1543CD3BA2463AE2D321D6EEB5C399D3B0A86CA79391AB95DE9269585F04FA46300368F9DA4EF8EA8CF53AAF9D210AA9003AE591710A97FC9119CB4BC40A6A9B
Malicious:	false
Reputation:	low
Preview:	var i9k="kix_pre_tertiary_deps";FJ(i9k);.var j9k='" alt="">',k9k="/drive/v2internal",l9k=";base64,",m9k="ASSET_COUNT_EXCEEDED",n9k="ASSET_MEMORY_EXCEEDED",o9k="AVAILABLE",p9k="BAD_REQUEST",q9k="COMMENT_COUNT_EXCEEDED",r9k="CONTENT_REVIEW",s9k="CONVERSION_INPUT_TOO_LARGE",t9k="CONVERSION_OUTPUT_TOO_LARGE",u9k="Can't import this file right now. Try again later.",v9k="Couldn\u2019t load user",w9k="Description",x9k="Dismiss banner",y9k="FILE_TOO_LARGE",z9k="Got it</span></div></div>",A9k="INTERNAL_SERVER_ERROR",pZ="L4",B9k="MAX_CELLS_EXCEEDED",.C9k="NotReadableError",D9k="PENDING",E9k="RESPONSE_TOO_LARGE",F9k="Revision no longer available",G9k="SHA-256",H9k="SHEETS",I9k="SLIDES",J9k="SecurityError",K9k="Today",L9k="USER_QUOTA_EXCEEDED",M9k="USER_RATE_LIMIT_EXCEEDED",N9k="X-Goog-Drive-Resource-Keys",O9k="abuseIsAppealable",P9k="abuseNoticeReason",Q9k="accept-language",R9k="allow-downloads",S9k="alternateLink",T9k="anyone",U9k="application/json",V9k="application/json; charset=UTF-8",W9k="app

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4009)
Category:	downloaded
Size (bytes):	122795
Entropy (8bit):	5.471520385906562
Encrypted:	false
SSDEEP:	1536:KXIcfKjLlaGtzI2kgnfd89QV/G0O5viV/bcFAVY5shJN7yvy9m/De3qsU9MC++6Q:YIyKXnt9GVXFAVmYU9MCvlx8I
MD5:	02697EFA4CE54C8363D71567197A3259
SHA1:	313A52C8857F8E0869CAEC1944CCDC2D8626C8FF
SHA-256:	27CC5E9271177A924C7F2BB4FB602038757A78F4364341A3C63CB0F2AB17371A
SHA-512:	3468D6AC1D3072E402D9864511D262DBCD94ABD3CCB5366118848DCDDC9154F5C957E154CDD2830E4662F30D13FBD6E9115C5192B8790739E04DBFE961D2CE39
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41584, version 1.0
Category:	downloaded
Size (bytes):	41584
Entropy (8bit):	7.995215789973138
Encrypted:	true
SSDEEP:	768:cnPRm/UHl9U8GO5hwHxngXQ5lUAcPtU6Y3dC52hPgxSJ:cPRS0TjTcnEQ5GPLcdbhoUJ
MD5:	71151932FDCC1AC7E09BF80A592DDA78
SHA1:	7049019D7FA6D570CA9B57525224313656B36E8D
SHA-256:	68C3F849762D80F759A7702F52B6F9C432173951D7D5E830C98CEDFDEBA5E53E
SHA-512:	B438132A3327189B36CDF6675E52A4E319735A180AFA9B44261F3E1C36F5EDC86F4F8EDC873CAD4520FF639D5A2A617C84155F535516249D334BC02BF8815DA5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xoDF4xlVMF-BfR8bXMIjhOsXG-q2oeuFoqFrmAB-W4.woff2
Preview:	wOF2.......p......RL.............................4.`?STAT@..P........w..r..6.$..r. ........[J.qF..</(..RU...>.`.9.[%.N9....#.<H.;.Y.....".....x.GQ.3...p.Tx...r.Zs.j5.0...r..f..i.]O.xZ..\|...&;......j.8.i..&.......]...G...u....F.......]cs.x..a...r7...Udw+.+;P.R..Jh....U...puXL...>A...E........w..l.r.:m...T.VA...o....i.........Y./....H<@.(..0.Rp.....9FT{.}...]..[]....E.."...Tjr^..o..>...H....e H.mcD.u3V}K.......u...........[.D.F......-..v..v.d...1`....6"....F...>VR.......:<.....2.m.16.{.....uw\:..rD:Q.3..k.K%.......h....F..N}w.h..db:R....{y...."...#.N..i.34...<..n.O.`$..$..x/..x...........;...:!v.#.c..`..M..w.1!U"].ce......J...b.....u,g.(.\|+......%.}++...S...>.x.......o.+..L..>~{w...;..i.2.H..M....!K.#F.a.`..1[.-$>..9..y.:1..T.s/....u...V.C..`)..r....B....)"v...d0g+4....I.D.Ii.tw.ar.W.R5mO.......q0.Ys=>.A.U]...>.E.4U;n.....~.rx.....U9..v`.9./._...].$E..B..W....K...p)..)!...u.~...^.....I......N..o..Q......v....x.D..i.i........#.......

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41220, version 1.0
Category:	downloaded
Size (bytes):	41220
Entropy (8bit):	7.99561943989194
Encrypted:	true
SSDEEP:	768:gPAZkLg3cRlItx1huSxyO1hGxVgw8XQ5OgBRoKYMU1ZS/lgF9:g4k83xPuSxy6kxVgwCQ5r0hjA/g
MD5:	C8D3E0F677AC007C9FADBA09A1C4C7BC
SHA1:	83389D80FDF1BEE58E69DB1F38968404EAC57846
SHA-256:	A9ED2DC63202E8E1E06CC22EB23D39212A36034D90DBC76274EC7F85DEB1D3C2
SHA-512:	849C7C1D32C22286CB4216D92E2FA55E65FC3CD621780153F3758190694C0FB74821533B6F043C081F9B9327E5B911978B8BF7A79E12C1823090A5BE43200DF6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xoDF4xlVMF-BfR8bXMIjhOsXG-q2oeuFoqFrlnAOW4.woff2
Preview:	wOF2..............Q..............................4.`?STATD..P.....t..'..r..6.$..r. ..r.....[..q.y.g...C..MV0..@w..{.5...q.b.<_...g'.2.z.n..4..{..D..)s48J.2U.LToD ...Q3e..~..3J.K&..6.J...J..X6.l.S..n.h...h..w.N...........2).x...T.^.....~........ .-..a....=..l{dK..).S...X.:....V.......k.?..z.!.>..20v....c......j..A..5...D....M(....v.w..3..:...:.:g.;sgE.M.#....6...E..@%%.OQ...R?.C.n......2&!.2....,B..5$.(2D..Q....vX..X.a..V......u..[..(EZ....(.D.{{..U.dM.`#%F.........Gic....z.O.....k.UJ.t..#...P1A...?....yI.F....I.,..y`f..K.-Z... .....m0.%q....[Wz../.....k7..1..j....{.Py.....e..b..@...g.s?X3.H....y...I.A....y.H....x..a.]..B.(.&Ai@...19.D.4.a..ky.........F...4.N.Bw........... K. A.......6w...5........%DL#.o...>0...C~\|.L....v.B!... p}....n.p....!..;...^.$F..3!9".....Ak....~f."8%@f-u.Op..T..[..r.{...B.H.".(....\|.P./V....v...}T..r+.p....x.....r....?...;fO@.........T....r.$.....w..........\|.%..?...?S....@.5.k..h..4.\|.o..$......4@V7)..:@........>..

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 100756, version 1.0
Category:	downloaded
Size (bytes):	100756
Entropy (8bit):	7.997403019876083
Encrypted:	true
SSDEEP:	3072:u1cBLNytW4L2twQPpIoRuqamQ1SgRwwENO51ev:KE5yttYpX0mR5wmv
MD5:	4498A1A925FD2D5630BA89B78739E194
SHA1:	C757EDCF6538B1F0968F69A7618C564DCAF7150A
SHA-256:	54EFCB5570863B2329C2C677749C85C7ED337F5C16BF38CAEA17807196150293
SHA-512:	3510CF6C3ED3786716329466F5575F63563B6C0DFEC2F78E3CA8C881F6C17EC066AC21EDDA970ACB377E610F1A5C937D9CBBE38DC690A30F12FEF49EDD93189D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9SIc.woff2
Preview:	wOF2..................0..........................<...8..2.`?STAT...P.....D..).....6.$.... ..~.....[..r...GE3n...g.T....&..^Z........Q'..#.Q...u.....+...U6L..$!P.co......4w...rIQs.'.nXX9....@...N.W.....X...Z6SI.(.........I...zC.H.U.[.M."............\.....w.N....Q.w...L-zGg%..S.....Bcwq!].z.H..V..T........w...7...jE1.:.zR.U-.....f.e.'._9.y".$"#.(...M...=....[t.X..Rv..1.>..g.o.P.?..q ....4RsP..I..?........].Oq..k .q...PJ.ii..}?.W.r.BA.Y_.M..........$,.Nd.:.'..r..(.q:/i.e..C.......:...kq.....8.}.8.S53..=&6...+..Y.YY.......o.>....s..x"5X......z...'h.D8<N .E....s....v...hh+........RE..5....D^.....i.i\.f..........~.xJs....n......Gl......%..X.L.VW.1.A.........Us...xp.G.^4.J.... ......#b..=uF..\Z.F....[x".y{....g..>..Z1....`....;<.?.~'.ui.q.z.0...Nz...9.l....h...Qa....\|........R.RjZ7..2h...g.T..Z.U./.....nCj/._..Z...... 1. ...H...&%......es!tbf..\.....h.k.\|......=...1...,.sxI....dcW./k...o....._...{k.N.....:.`.?......`..T.K..k.._.. ...D.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	dropped
Size (bytes):	309620
Entropy (8bit):	5.350554726112599
Encrypted:	false
SSDEEP:	3072:GrzaefdyrjALvmocrSh7EMidMIh998oAWyRZ5D4KKfuO45//poorVECLr7dOwymV:cfdy3ALIrSi998oNyJUKNOKP8wy3/Qj
MD5:	05C760EF706D2CE08C0643828E7D0816
SHA1:	E785451E9914CAD18B5916290D0A1DC1D24774EB
SHA-256:	EE6F91613333F6B78D6BB61AF26FD8D6FDBA82AFF1027466075046BBF43B0803
SHA-512:	CE1DC99D11DE463E338B9F81F413183623754318490583F2FC618AE8A4F921870F655EE6DBCD1ACFD700B9175005C9979BF8BAF51E887E57A1A0FF11C39F657E
Malicious:	false
Reputation:	low
Preview:	FJ(B_a);.var lhf="#FFFFFF00",mhf="%s already belongs to %s",nhf="%s is not an allowed shape property for a MediaClip.",ohf="100",yL="11",phf="16",zL="24",qhf=":animation",rhf=":background",shf=":document",AL="AM",thf="Document does not contain MediaClip with ID %s",uhf="Illegal id: %s",vhf="Invalid nesting level: %s",whf="Not a shape: %s",xhf="OBJECT_WITH_CAPTION_TEXT",yhf="ONE_COLUMN_TEXT",zhf="PICTURE_WITH_CAPTION_TEXT",Ahf="SECTION_HEADER",Bhf="SECTION_TITLE_AND_DESCRIPTION",Chf="SPLIT_TITLE_AND_BODY",.Dhf="TITLE_AND_BODY",Ehf="TITLE_AND_TWO_COLUMNS",Fhf="TWO_OBJECTS_WITH_TEXT",Ghf="Transform %s is not valid for object %s",Hhf="VERTICAL_TITLE_AND_VERTICAL_TEXT",Ihf="bodyPlaceholderListEntity",Jhf="docs-easm",Khf="index %s is out of bounds",Lhf="properties",Mhf="sketchy-addAnimation",Nhf="sketchy-addEntity",Ohf="sketchy-addListEntity",Phf="sketchy-addMediaClip",Qhf="sketchy-addPage",Rhf="sketchy-animationProperies",Shf="sketchy-background",Thf="sketchy-changeShape",Uhf="sketchy-conve

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (773)
Category:	dropped
Size (bytes):	1451
Entropy (8bit):	5.369992473208254
Encrypted:	false
SSDEEP:	24:ko0Ym0nSOd1v6j+5YpQB/0VsFhqD43UfKhhpZuWBBGb7gVGbosazhOYu1hW+ra0y:DEbq1SjU+V4hH36sTQWDGb7SGbUGTrah
MD5:	8E6496A9E4858396E68591360D035BEC
SHA1:	DBBAFA113E287C0030274690A84266B9327630FC
SHA-256:	303A5D9910A039F77633E9771E2D8CD4324765E327A7F77158DD778083A983C4
SHA-512:	E4783B8088B92D168340D4B2ACA726D1C94F1344795C3FAC9B5E95D3DB796263D1B1A1A942FF233F6065B37FDFD7DE560FD29E59714F297944E9385BC7C776EE
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_SocialPeopleHovercardUi=this.default_SocialPeopleHovercardUi\|\|{};(function(_){var window=this;.try{._.y("P6sQOc");.var ZGa=!!(_.aj[0]>>18&1);var aHa=function(a,b,c,d,e){this.O=a;this.V=b;this.T=c;this.ha=d;this.W=e;this.H=0;this.N=$Ga(this)},bHa=function(a){var b={};_.Ca(a.Ys(),function(e){b[e]=!0});var c=a.Qs(),d=a.Ss();return new aHa(a.Rs(),c.H()1E3,a.Ks(),d.H()1E3,b)},$Ga=function(a){return Math.random()Math.min(a.VMath.pow(a.T,a.H),a.ha)},R5=function(a,b){return a.H>=a.O?!1:b!=null?!!a.W[b]:!0};var S5=function(a){_.S.call(this,a.Ca);this.N=a.service.Au;this.O=a.service.metadata;a=a.service.OJ;this.fetch=a.fetch.bind(a)};_.J(S5,_.S);S5.ta=function(){return{service:{Au:_.xGa,metadata:_.N5,OJ:_.nZ}}};S5.prototype.H=function(a,b){if(this.O.getType(a.Db())!==1)return _.$p(a);var c=this.N.du;(c=c?bHa(c):null)&&R5(c)?(b=cHa(this,a,b,c),a=new _.Zp(a,b,2)):a=_.$p(a);return a};.var cHa=function(a,b,c,d){return c.then(function(e){return e},function(e){if(ZGa)if(e

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2560, version 1.0
Category:	downloaded
Size (bytes):	2560
Entropy (8bit):	7.866416223385858
Encrypted:	false
SSDEEP:	48:vsV74S5ahyIWiGdLsQG9/UstEqFvtUYdaxqn78LTxbnBMUFWqeX0uGh:vY4at4Gurk+vtBdak7cTvVF7eXg
MD5:	AAD954B1FF4E297C5D137133C4BB36C3
SHA1:	781A7FFB51D787FA807F1D861A4D003BD33E42E8
SHA-256:	C28A9A498502C596ED0275021BDAEF2A57225D9460C650706907FC95F7BA6D80
SHA-512:	149F0D8CC70A8D6D3567917DA7F43D125BAB19D1B420E6921C38E278196E168E3D3FAB6C2C3608ACBDA01F0A660267B35A5672DF80CC671B3167A4CCE4DE6D9F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-6_RkAo9_.woff2
Preview:	wOF2...............$................................ ...`?STATH.......L.s."..6.$.>. ..h.c.....(...v..I....y~...KxD=....XL.#...Hc..?.....{.............vgz..E..\.O.(.@..,..........FD5DHW:.....3a1.L...M.C..7Dj`(.\....\D.q..<o...............).>.......-....m.....;.......@..C5.@].9.6..J....}o.........T..F..%$.08.G....g..M..(.\|..Y..(.R .R...9.{aK.`.b/h.f?C/K..9.\|..M`.O...b..i.}....s......O.;.....7.!........Ep.Xx.....#tl......c...>v...1.E#]..k...j.aLK4,.n[.......>..U(c.'..K .....g1..l=.. ....&.9Z..".r..P!.K.....I.I..J..)W.p..+..:....u]A.FGG.{..:e..)w....%...Zt5n...G..;...5!......0...0.`....(....R.bQ...o..l...m].._L...fp.Lp].=..v.u.k]6y..+`...V..k...9:.e....c...c..v..oC.(_....F\|.&..e.ny....(....V&....s6..I..VR...RW.*k.P5j...^R{.r....`]Z..Iij^;.C.QCO..4.a$'.w.HC...E...{....i...2.....K5y.j.....v.#%..n.3...y.o_..:.:....c]......;E\.k...v..AI...r"..1.3.~'..T..{=...N..amh.S...1.."H-.8..bl...U..Wz.<..Vr..gi._..cwB..8.k..~...{.+xx3....C.^...)..k.Kz...lr^

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4009)
Category:	dropped
Size (bytes):	122795
Entropy (8bit):	5.471520385906562
Encrypted:	false
SSDEEP:	1536:KXIcfKjLlaGtzI2kgnfd89QV/G0O5viV/bcFAVY5shJN7yvy9m/De3qsU9MC++6Q:YIyKXnt9GVXFAVmYU9MCvlx8I
MD5:	02697EFA4CE54C8363D71567197A3259
SHA1:	313A52C8857F8E0869CAEC1944CCDC2D8626C8FF
SHA-256:	27CC5E9271177A924C7F2BB4FB602038757A78F4364341A3C63CB0F2AB17371A
SHA-512:	3468D6AC1D3072E402D9864511D262DBCD94ABD3CCB5366118848DCDDC9154F5C957E154CDD2830E4662F30D13FBD6E9115C5192B8790739E04DBFE961D2CE39
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	951
Entropy (8bit):	7.3900876422522
Encrypted:	false
SSDEEP:	12:6v/7jeQKltnRzi59DTWtKyVvt1maYReAWwsIFIgZMccZQE2IiAFZYqimBWeABAAT:izKvRza9wKyV6xTWZXZQvAFiqiNDxDNt
MD5:	56B616D21A129E81EB9519B0BE402237
SHA1:	D25A1A2B6E306BEA11E5559A7C580773DCF827F6
SHA-256:	64644E24E0FDE6D566F4C36F4DEC2033D5C8957A46CC3045F12E9CCCF5A908E3
SHA-512:	B4AFBDA9405D7869019F0ED78BC99EF485245338546EA3C3A7A18EE2058D922A2DE1861B3FB6ABBDF19EB96BB109B7132AEDCA0270E20316287557EC73B23FC0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............P...~IDATx...Qr.0..a..ygZ..LI.4....HG.g..w.\|.l.7[km#..I C......-...uc,.^f..^..O....... h....G.r.#...: .....v.`....w.A......].....u0..!.....(....9(#A..........X............S@.o..q.>W.7 X.(..B0z.......].... ..1<5.t.Kw..k.p..... N.p....Y.......".....6.<...Z..!......B.Z..A..fR.[........M..$f.n-.C...\|a.t=......$..Tv. ....?1.B...C..@.... .`E......D..... YYxq.........2.._.. P/..=..(...&..T...........!\x...Je...4...5`..C.c...@.T...b .).7J".T.... .(.7....BY..;..BY.....e..~.,)...e .^.@...9.......YV.@.....G...=%.S). .~".JY..=..O"..................TG...dk.......l..!(...sQ.@p.d8m4...C`N.;...#.5.6..T...Y.^.=...........M..f...?.5.h..3.\...CP.=.TA0.A...@0..E{4.....Y.... .uO=... ..?WC0a.#... ...M...#./....F...%[\|\|....Em..oPF`.W.!.:....%6P...Q...Q........q.....A..`.~9.,..A.=.@$.....DB.......A..../...r=._..[D...m.v.U.P.}.X.........p..................................0.......IEND.B`.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (869)
Category:	dropped
Size (bytes):	164534
Entropy (8bit):	5.065772130811656
Encrypted:	false
SSDEEP:	3072:d06+kELOIM+I1Pxz0M52WVxUgBgQX4XGB:dNL+I1PN0M52WVxUUnX4XGB
MD5:	D64F5C80B75B3516613E3E63FBC0F2B8
SHA1:	9A80DB7EFD69E3C50BE11F0156F95DE4AFB077A6
SHA-256:	E449138BE5F36A73FEF2F7090C8FBE8DAD0539B5B32F0F9CCD1CF9B7B3AE8316
SHA-512:	E26D861B0C73958904E6A4D5145D231C7A28276F274FAB0B32505F1718816F4C2D2FBBD4559CEBC47D83876B9C6A289A69702E91706DB3E421EC6B49EB17EA61
Malicious:	false
Reputation:	low
Preview:	FJ(Tra);.var S6t="\u17a2\u17b6\u1791\u17b7\u178f\u17d2\u1799",T6t="\u17a2\u1784\u17d2\u1782\u17b6\u179a",U6t="\u179c\u17b7\u1785\u17d2\u1786\u17b7\u1780\u17b6",V6t="\u1798\u17b7\u1790\u17bb\u1793\u17b6",W6t="\u1780\u17bb\u1798\u17d2\u1797\u17c8",X6t="\u1780\u1780\u17d2\u1780\u178a\u17b6",Y6t="\u1021\u1004\u103a\u1039\u1002\u102b",Z6t="\u101e\u1031\u102c\u1000\u103c\u102c",$6t="\u1017\u102f\u1012\u1039\u1013\u101f\u1030\u1038",a7t="\u1012\u102f\u1010\u102d\u101a \u101e\u102f\u1036\u1038\u101c\u1015\u1010\u103a",.b7t="\u1010\u1014\u1004\u103a\u1039\u101c\u102c",c7t="\u1010\u1014\u1004\u103a\u1039\u1002\u1014\u103d\u1031",d7t="\u1005\u1010\u102f\u1010\u1039\u1011 \u101e\u102f\u1036\u1038\u101c\u1015\u1010\u103a",e7t="\u1000\u103c\u102c\u101e\u1015\u1010\u1031\u1038",f7t="\u0db6\u0dca\u200d\u0dbb\u0dc4\u0dc3\u0dca\u0db4\u0dad\u0dd2\u0db1\u0dca\u0daf\u0dcf",g7t="\u0d85\u0db4\u0dca\u200d\u0dbb\u0dda\u0dbd\u0dca",h7t="\u0cae\u0cbe\u0cb0\u0ccd\u0c9a\u0ccd",i7t="\u0cab\u0cc6\u0cac\u0ccd\u0cb0\u

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (558)
Category:	downloaded
Size (bytes):	2948877
Entropy (8bit):	5.5933003200755556
Encrypted:	false
SSDEEP:	49152:djM31FQekxIDUMp9ElygRvmBs+JB0khjN6X:dAIM0ls0
MD5:	BD5382180383506588D097691E7C3F33
SHA1:	730F0D1A59058A7AF50D78BACF02F09FF5FB586A
SHA-256:	C83E864C4A70628CAE870486F30FDD91C1F5A13EF40DE74F2DE3305D72492EE3
SHA-512:	EFDD001038D2F5DE839338504B540A1E19D85440D8A4FCC7B6FED2C5E249722F045ABEC8A9E99108669BD095F4D3B7713F0FEF722C507E561C4D54BCDCDC31CC
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/4047955786-client_js_prod_kix_core.js
Preview:	//# eagerCompilation=all.function _F_toggles_initialize(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="\r\n",ba=" ",da=" (",aaa=" and the blob url is revoked by ",baa=' style="display: none;"',k='">',ea='"></div>',ha='"></div></div></div>',ja='"></div></div><div class="',ka='"><div class="',caa="#$1$1$2$2$3$3$4$4",daa="#000",la="#000000",eaa="#009ef5",faa="#00ffff",gaa="#0b5394",haa="#0b57d0",iaa="#1155cc",jaa="#134f5c",kaa="#18803

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.815015818724121
Encrypted:	false
SSDEEP:	3:cJ0LGfnvMbdZXCn:40y/Id0
MD5:	30B8B277A7A1AC58A7EC3C2A57768D4D
SHA1:	3FF5F66B7B552CD065AF07D0FFAA1217957D6FEC
SHA-256:	D569145301ED92D20955E6E181ED67F0DDD3C7280E66D164A792BD682A51AF71
SHA-512:	A1CAFC51623ACD8FC5B317C4AC8EB6D38B2EF19C013882875ABDC64959354F4114E91E09E079AF6E560BF6C7C34C0792F7654AD3023F3C7E94BBF2B18348A786
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=config/exm=card,gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_2"
Preview:	gapi.loaded_2(function(_){var window=this;.});.// Google Inc..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25940, version 1.0
Category:	downloaded
Size (bytes):	25940
Entropy (8bit):	7.990402611464527
Encrypted:	true
SSDEEP:	768:h/no+9wjpn4U4LdAoKQfezKLBEKk5727+CmJsABNFjN:hvoZjeU4ioPLLGKkJ2l0VZ
MD5:	472997FA70DA7203D0AAF11F7B166C93
SHA1:	17B746D4980DF5C0EFFCB129B63FFF1FCBDB8999
SHA-256:	5110D967DAD4A4E2D1578B5A1E27E210F03DAD636892CEA6D7F8B1BB617BCF2B
SHA-512:	6BE9C1998D004BDB1299D23B2BCF3ADEE693893018842E9A5DE2E58B19023CADB16FE9A95F6FEF7DA70AFB203871C6C30E530221FE8E0FEA7AC08E911B34AF23
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WCzsW_LU.woff2
Preview:	wOF2......eT..........d....................................`?STAT............].....6.$.... .....x.........tJ.U.....@.lW3......G"L:#.......&.9l3O.u`.........CSX5m...i.%W..!...8i...V.I".&V...%J.w..u...6....OU....rLy....c_..t...L(k..z..2.\|S...Lu..TK..../u.Y..5.P.>T........BJ,......&.#....T..K..e.5......D..~....'.v_.......g..D;U+.!..i..D.......I.........O&fm...0...\...!.2.h..&K....$T-..P.."......R^.xt.<....&y....\...h{b.H.../.2h...."."0n...K..]..=o>.U....RjD..G.[.wI.!..Bh.....@.,..W@.A........Qy..X.bD....Ry).B@.. t..s.w9....U....(2....e...cc,..l0`..RO...30..........(.....8......Z.=......bo.E..HFa7%M...8U.G.g.Nv...8x.d..`......a...i3..1..Rb.....H..N..l..x`.[..S.B..t....`.g.C..TB!..I.5tCix.3.b....e.c..E.Yi.T...7...`......L....!..l.9.O.~...X.XH.;s..^{.o).R .."^..\|...R....n:P...:H.v"..+..T.......i...9(...z.`{.. .D..\|..^.Z.?..i.T..FO.~../....f.."...IWUd..`....kr].;};...g.b.Q.&+*'....J..f`....Y...6..x.W.~.."..t.K..dd.....m4.!.NH....q.m........^...

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 84892, version 1.0
Category:	downloaded
Size (bytes):	84892
Entropy (8bit):	7.997781229266095
Encrypted:	true
SSDEEP:	1536:HumAnFGBzYl9bxrG05M5ThANEoO4QrLn2da3f6f7kkz5NCuELhJe56NcYhDpI:O7KQxy05WTimoO4QrT2da3fakrG56Nc9
MD5:	0F0BE34D30705D3F21ECCBBFBFCBE983
SHA1:	96A0C04F6610AE014FC1179641861C1A96DD6DD0
SHA-256:	E05FD4C39D2671D0FEBCF551364287A41D4889CA4692817722459FF34940AC81
SHA-512:	45B00B7B0962DCB3BE109981A9D41682E36767F9A2056F6751B639B96F97824D59867B7700F61C68BABCF35FC1C4E3719E361B25339C10346CCB12694E1492C9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/pacifico/v22/FwZY7-Qmy14u9lezJ96F.woff2
Preview:	wOF2......K........x..K5..........................&...F..(.`..............@..6.. ..6.$..z. ..r.....K[.w.....>..f...G./...=[..l.Awl.e.....m[......p.`.MoL.........d"...Iv.IZ....._ac.6Ls...BWn.Rr&.4.y..]L...i..Ri.$5.>.......W...&./WtpW.I..$!...5.....#.k8.n..e....3...s].f.+.q.~.h..C...rZ..3B...._..d..W..5m.Y..%......H.z.)'M9O.U...yz:.m+-...>....N.:..2...[..nU...<G_z.;;......E.d...J....L1...{.....7..;{....I.K..s...x.JHF..Z@u.l......W.&..dp....#..>/..q&r!..0.0J/.........%.....j...k..].5...QM.O..t...A...m.69p.{..kr........w.v\|j...Cf...c\7...DZ.aL...l. .........{_o.6.cA.D.....a...3jb S..#....G.?C.'F7.. .....g........D.K...8...Z.J9D...T.ynU.............i.%Q.....H.1s........=.... F.T..(........5`."o...0X%.l#6rD..../v.Qo....~....~.!.m..y......g...!. ....pU..t..g..r..t.#1.0D...6...!.z.W6.N..P.$/..9..6.Q......7g....8.#...y.E8..#....?L-.80.B{..O...t..,..[[.E...6Y..T....$[.g...+.KX.. !4.xj.^..e.2+.:W.wV'.T/Z8..MJ...)M...............>.M.-.\|.k{

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	479
Entropy (8bit):	6.907722555270069
Encrypted:	false
SSDEEP:	12:6v/70f7XnKN+URXKLaFR4N8iY6w8IzuiWOZBy5VaJxSeHNRPXyF:9fTKpXKceN8iYeeZ85CSef/e
MD5:	EBEE417C131CC534EBE8F665BD588936
SHA1:	2EBD6063F631D8E596858CCBD2A545F7E6061DB8
SHA-256:	80C3885811A42DA7C6E7B9B811800AF8105E8F310C7ABDD59BF93AA8C4FBF769
SHA-512:	06F23550B06D2D49147DC770E0E66857C90FEC713D30F85C258A2ED12BBB13C9DB2D83C22F4A62460E991FEB008064B3886E2F19F9F3882DA115A21584D01F9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................NPLTE...@..B..C..B..B...g.@..A...g.D..B..@..B..A..B..B........B..B..C..@..B..B..A....T....tRNS.8....o$..<.(.K.....W...S.:.....&IDATx......1..Q.(.\|.7.....gx?. .....U...\|..-...:.P{.f....hH..X.K..\..A.E...\."H..@....D..&2....$.< E...".... ].......t.".t..RD~...A....E:H..A.H.)"?H.. A..i"?H..9@....... @?.:V..../...bS.......# @................./"... @...r... @.............].Z..].Z....il..u....GE.M.]EU.=-....v...q......=..-.[. .....IEND.B`.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2018)
Category:	dropped
Size (bytes):	4817972
Entropy (8bit):	5.634932172779785
Encrypted:	false
SSDEEP:	49152:RSHJVpgMlAkzGu22BYVwF8E5+KSl3xJdUmBWQfG1HWC:YH5jDvYo
MD5:	54057EF8B1D7506C11867E5704457B7D
SHA1:	A798208D46C9E5E0ABB65A57C9D9B005901A6B86
SHA-256:	CD5883FB21FB8C7BBACD55AC80D31D41E8B52FCB7F43747F136899EBAFFA3554
SHA-512:	9D875D0DB708175149D8AFA9C0F07F9023A2F82C97EC583F5ACFB696D7AF25DE841888F35013E58FD54174E2AC0FD9BB5EEE9C4A7BC83D0CB752D8E748488B42
Malicious:	false
Reputation:	low
Preview:	FJ(E_a);./.. Copyright 2021 Google LLC.. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././*.. Copyright 2024 Google LLC.. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1870)
Category:	dropped
Size (bytes):	39940
Entropy (8bit):	5.567499503766989
Encrypted:	false
SSDEEP:	768:iLDT4GYOwirkhkPoh8pp2tMAOPGSZTZ7zrsYifm+bj:F7GEO2tXSZTZo7nj
MD5:	101803E18ED2F8F678699AED102C2358
SHA1:	FB1FD2512D5C2070686B569E21ACF2F6B8F60D26
SHA-256:	4291210F15DCFDA9C77C615EF66B5A628C75AFB8DF53D562EEF86D6DCFCDD181
SHA-512:	801F82ACEC38BE1BC11E2E80EB0B214A6CBC80D33E396A453C8CE23BC1567899E71CECFEC476AF337551298751BEDA77FA9F12233F682650322ACE4E4A1E0D93
Malicious:	false
Reputation:	low
Preview:	FJ(Obb);.var C1v="docs-mic-palette-body-active",D1v="docs-mic-palette-body-hover",E1v="docs-mic-palette-focus",F1v="docs-mic-palette-help-hover",G1v="docs-mic-palette-recording",H1v="docs-palette-dictation",I1v="docs-voice-bubble-close",J1v="docs-voice-bubble-heavy",K1v="docs-voice-offline-bubble",L1v="https://docs.google.com/reserved/spoken_emoji",M1v="https://docs.google.com/reserved/spoken_punc",N1v="https://support.google.com/docs/?p=voice_typing",O1v="stopped";h_p.prototype.D=Y(1460,function(a){return rSb(a)});.HS.prototype.MRa=Y(1216,function(a){this.D.UCa=a});C_p.prototype.MRa=Y(1215,r());p6e.prototype.H=Y(1099,function(a){a=a.target;for(var c=0;c<this.D.length;c++){var d=this.D[c];d&&d.Ba()&&uI(d.Ba(),"docs-palette-top",d==a)}});RRc.prototype.LIa=Y(412,function(){return!!this.D.H});Zjd.prototype.LIa=Y(411,function(){return this.D.LIa()});RRc.prototype.Qwa=Y(410,function(){this.D.sx()});Zjd.prototype.Qwa=Y(409,function(){this.D.Qwa()});.RRc.prototype.yNa=Y(408,function(){var a=t

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	1119718
Entropy (8bit):	5.631175771756179
Encrypted:	false
SSDEEP:	6144:sfqjlcFXFtp2iwbgU1BBcPs4/sxGjcLRp/giRTmJa1z21zI1z21zitHL5Ov4C5yJ:CYlgMdd1EjcLxMJE4gay3Zqfcb
MD5:	D1E3A6639E8DBB83768C704A46ADDFF8
SHA1:	7993E89E21043C5FB37524DAA6751463B02318AE
SHA-256:	C0138A100DCCECE3A740810EB1B64108658FB7108724A619BF644217214C4FED
SHA-512:	F89DB27A5D6ED6B1F954E0D615D1AF2D1117C12FCC1E1A57CB6380932DADCE63C02D06D86BA60B18F178974B86842C68C1FD3BAB0826186F004C084F4DFDFDDC
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/661166313-client_js_prod_kix_docos.js
Preview:	FJ(x_a);.var wEj=" corrected to ",xEj=' data-is-search="true"',yEj=" group, press enter",zEj=" others have reacted.",AEj=' style="display: none"',BEj=" to ",CEj=" \| ",DEj='" aria-hidden="true"/><div class="',EEj='" aria-hidden="true">•</div>',FEj='" aria-hidden="true">•</div><div class="',GEj='" aria-hidden="true"></div></div>',HEj='" data-hovercard-id="',IEj='" data-name="',JEj='" dir="ltr"><div class="',KEj='" draggable="false" alt="">',sX='" peoplekit-id="',LEj='" role="button" tabindex="0" style="display: none"></div>',.MEj='" role="button" tabindex="0" style="display:none">',NEj='" role="heading">',OEj='" role="presentation">',PEj='" style="display: none"></div>',QEj='" style="display: none"><div class="',REj='" style="display: none;">',SEj='" style="display: none;"></div>',TEj='" style="display: none;"><div class="docos-replyview-attribution-warning-image"><img src="//ssl.gstatic.com/docs/common/profile/invalid_attribution_warning_16.svg" alt=""></div><div class="',UEj=

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	866638
Entropy (8bit):	5.754588603090571
Encrypted:	false
SSDEEP:	12288:fCljTlbxVkYA/Z/7C9OQEpC8y4GvfdVxSQyyJR:fCljThxVkY6cOQE8h4GdHSQyyJR
MD5:	CBB6D3C9CC919CCCBD6E725742DCB083
SHA1:	A41615A6EBD2F03981F05D0A369D486A1CCCD7A8
SHA-256:	F9AD26146C2F51B5EBA4083F6A3B63B1562F0BB4CD8014A33D20A284C69EF9C8
SHA-512:	430B567ED6D0748D08973D34CC850F1B3F032C03FF54157362991EA2A9444A8C984ABBCC76E5695B782DC3024397552B40A4463F0C2BF0589D9E0C35F6D4EF52
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".KL4X6e{background:#eee;bottom:0;left:0;opacity:0;position:absolute;right:0;top:0}.TuA45b{opacity:.8}.VfPpkd-JGcpL-uI4vCe-LkdAo,.VfPpkd-JGcpL-IdXvz-LkdAo-Bd00G{stroke:#6200ee;stroke:var(--mdc-theme-primary,#6200ee)}@media (-ms-high-contrast:active),screen and (forced-colors:active){.VfPpkd-JGcpL-uI4vCe-LkdAo,.VfPpkd-JGcpL-IdXvz-LkdAo-Bd00G{stroke:CanvasText}}.VfPpkd-JGcpL-uI4vCe-u014N{stroke:transparent}@keyframes mdc-circular-progress-container-rotate{to{transform:rotate(1turn)}}@keyframes mdc-circular-progress-spinner-layer-rotate{12.5%{transform:rotate(135deg)}25%{transform:rotate(270deg)}37.5%{transform:rotate(405deg)}50%{transform:rotate(540deg)}62.5%{transform:rotate(675deg)}75%{transform:rotate(810deg)}87.5%{transform:rotate(945deg)}100%{transform:rotate(3turn)}}@keyframes mdc-circular-progress-color-1-fade-in-out{from{opacity:.99}25%{opacity:.99}26%{opacity:0}89%{opacity:0}90%{opacity:.99}to{opacity:.99}}@keyframes mdc-circular-progress-color-2-fade-

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	867
Entropy (8bit):	7.556149935629039
Encrypted:	false
SSDEEP:	12:6v/7eBierg0rgRar/RMA5Qi1kmgNBvymmj16rmJueascFm+9UjmPIY:NBi6rgRC5MA5Qi1Wuz4rBeascAqUyP3
MD5:	149EFB73C2240A121D8DF09714638203
SHA1:	F0F077DCB74B5EF9C8FA6DAF94D68BDBE2A17ACB
SHA-256:	4FB42880117BAB426C67D0C9E1660E5D967A0B9F0C425E23BB94C99662D90791
SHA-512:	D83088ECF21AEA88BC40889DC6EE948997C39C37EED4D969EE5B6FF5F2A673302834DEF7318F8E3B33255A00437186C75374BA6D8A51163E9680AD91855C2F8C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'....IDATh..[.. ...=........`., .a.....tb;\l@..E..\|.%t...x.......K..V6..+.D.n...p...'....7.&.......p.h"\.............rV...B.&.z..{. ....0.8.0......a8....`C..IB....'.k..ZN$t[..j.......{.>....p.5M.....f.J...I....."BW..Y.......$F..i......3.v.;QD..+...a..H.,L.N.D<.y..D..Qb...c.0..Ff....8Gx..$%Lk...J.........<...2.@...(.IB..D.0...L..%..J..i.;..W.l l.q...m....y..6..H..t3...g._..T).y.....F..S..k'..,Q...@ ..Y.IHx....%.G.~....&DcI.....x. ...v._.t7....I.....<G...,C9....#.X..O.{.#.......j. B..0.+.,...d.<'vUk$6I&G.$. /......#..%..T..q..#h.L2.,...2aZ.B..<.;.eq.DH..j.?E.../DB...g...0...s-.....I.[..#...A..n.....]m...;.p..Q......(........F..p.....,;.s.H......N.=Z.{d.....#..a....~.0....i..\.F.>......N.r...j.... .:U}.......n..W..T..v.i.~......?P*........IEND.B`.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1761)
Category:	downloaded
Size (bytes):	96962
Entropy (8bit):	5.498943205996377
Encrypted:	false
SSDEEP:	1536:G2Ex99zkR8J3b/+WkyU9JrXD8l8Y/e9JtSlEKPyr2RTZglV0y6D3qCS:ax9lQk3bSjrA//e9JtSKt28kbDM
MD5:	9BF597B991F9EC95D9E900790B116C81
SHA1:	CB3F458ACC1360C0EBFB2B7878C8A69EA92961F6
SHA-256:	649D3EBFDA6DB7F5949AB34AF0DAEE51B89829EBB8AFC209E367AE2D065964A1
SHA-512:	03A015ACB416DDC5F6C3701A04B9418979BDE66ACA8418A0843880E731ECD0359A4417D1CE163B58F5D115D08CA6D6C1F6657C7452663E421A568781BF84D406
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=card/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.Ti=function(a){a&&typeof a.dispose=="function"&&a.dispose()};_.Ui=function(){this.Tg=this.Tg;this.Xo=this.Xo};_.Ui.prototype.Tg=!1;_.Ui.prototype.isDisposed=function(){return this.Tg};_.Ui.prototype.dispose=function(){this.Tg\|\|(this.Tg=!0,this.va())};_.Ui.prototype[Symbol.dispose]=function(){this.dispose()};_.Wi=function(a,b){_.Vi(a,_.cb(_.Ti,b))};_.Vi=function(a,b){a.Tg?b():(a.Xo\|\|(a.Xo=[]),a.Xo.push(b))};_.Ui.prototype.va=function(){if(this.Xo)for(;this.Xo.length;)this.Xo.shift()()};.var bj=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return!0;return!1};_.dj=function(a,b){this.type="function"==typeof _.cj&&a instanceof _.cj?String(a):a;this.currentTarget=this.target=b;this.defaultPrevented=this.Rv=!1};_.dj.prototype.stopPropagation=function(){this.Rv=!0};_.dj.prototype.preventDefault=function(){this.defaultPrevented=!0};_.ej=function(a,b){_.dj.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.but

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	913
Entropy (8bit):	7.628329229132998
Encrypted:	false
SSDEEP:	24:3tLAj0uLHLwpeuI5tNfXHyWikLpDak3Ag1a:9LE0qLw4uI5/fHMkLpDFa
MD5:	19562AB0E4A9E0714961A586C7614D59
SHA1:	3742BDA8BCF44A86AF73E17969342409B64B4146
SHA-256:	11DDAED5D22EFF3ADC116704E96A4974E61CF5015D039CA1FDD86BA821D92C7D
SHA-512:	8FA976375FD59C1463DD8FCFC93E409397E3D3C7A18DFD00572F83EAF3839089F22CFC4E8CD772D914559E37A62235C67D54721619D1A09E91330237AAD2EEDF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'...)IDATh..m.. .......P..h.....H....v.41`...J+.R~.)O.._......}..?.1m.u....sN.B.w..fQB....f.s..V.\|.l#a..sc.A...Fp.D.......!.5....b.#.>a.'.........B...Z......".u....:B...:......\>.I...c....s.Ab....1..!..P.S....r...S9...K9A..[N.."\.....y.BP..N....z....@-f..-..>...S.......%.......&_f...B.........>...O.`G"tn....<_.8..x.'..\|K...Z..0...7K.I.F..2.O.pS..~..1..Xyy.OXU@.@.LN......c..Q.0z...-...67.=.....:%W!....qm.:.T...XL..&.P...jT...0\....A........)R'C.=^..1V.....h"L6..j......=...:.....l...+.k.0......lW..)hH.....9K....`a..ej2K.}..............A..-.C.7q(p.....Z...$..../..........h..\...W..:.E>...>.%&.H.$\.....q.r.TG}v....>.1...5H.+M.a..N<..%.R....7S....m...@..Yo6u.j..@..S5o.i9...u.'Zg...>.b...j..4KD&S.s.7...>....2.5..y...3Jk.3OQ.....?E .;".....!...z.v*!.]b.W;W.K....../D$?.._......;XJ.....IEND.B`.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	719862
Entropy (8bit):	4.821900356544728
Encrypted:	false
SSDEEP:	3072:MFAkPPAkmL6teQi3tYj7LBbXbTrgb/qTITNSC/JR/IGGu8oH9vw7OA64XpFuLFzQ:FXKNcKFulp8w8DYsU2rYB/BB+REXU3X
MD5:	9BB0EE5F296903639CFA005496526D7D
SHA1:	69D2C6268516FF054C93C3373BC745742A8B31D9
SHA-256:	FECFB85FF92AA255EDFFA4EF56CE9E636B97B6B0DE368EF613E0834E7425AA7F
SHA-512:	B5249345AB08881A63C0EEFB3B7ECF19D410D07AF1AC9FC88F736B7DA0711D03DFDEB92F18A3B201C48271F1F24EC43F41449BA0D3C2BAC6DA0FD6C6B224BF48
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="1384px" height="1748px" viewBox="0 0 1384 1748" preserveAspectRatio="none"><g transform="translate(264,958)"><path fill="#fff" d="M5 10c-1.39583 0-2.57812-.48438-3.54688-1.45312C.484375 7.57812 0 6.39583 0 5c0-1.39583.484375-2.57812 1.45312-3.54688C2.42188.484375 3.60417 0 5 0c.71875 0 1.40625.148438 2.0625.445313S8.28125 1.16667 8.75 1.71875V0H10v4.375H5.625v-1.25H8.25c-.33333-.58333-.78906-1.04167-1.36719-1.375-.57812-.33333-1.20573-.5-1.88281-.5-1.04167 0-1.92708.36458-2.65625 1.09375C1.61458 3.07292 1.25 3.95833 1.25 5s.36458 1.92708 1.09375 2.65625C3.07292 8.38542 3.95833 8.75 5 8.75c.80208 0 1.52604-.22917 2.17188-.6875C7.81771 7.60417 8.27083 7 8.53125 6.25h1.3125c-.29167 1.10417-.88542 2.00521-1.78125 2.70312C7.16667 9.65104 6.145

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50032, version 1.0
Category:	downloaded
Size (bytes):	50032
Entropy (8bit):	7.99687526963219
Encrypted:	true
SSDEEP:	1536:h8sQnAgDeh7Kf63FlHVeVEV9R4998yO5d4NWvFI:6s0AquH1lHAqV9RYJO34sv2
MD5:	3A1D827D4C9CEA1A4D9AC216BF6A3D0B
SHA1:	B3464CCD91897B1DB6CF5EB06E7A4F89F31EDB94
SHA-256:	CC7B21390D89052DA348CF014A9F38412956B535BA362D5021CF9B2707F03DF6
SHA-512:	E2D8C5FC730AB3E648E2DCA07F462E993E2125D777B16A5FE393D1EB3A2EFEEBEFB65A7BACD058AE04B3A6B3E0883F6952824692AE28696011052C7737BBB19F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Me4A.woff2
Preview:	wOF2.......p......................................j...j..j.`....T..<..... .....Z...x.6.$..0. ..t. ..I[K.q..v..T.n2.H7.u%....A.-.r.L...MCx...p...%......8.o;.mw.T....&.Ia...J)%.t...5g.mo.......p..Y....O...yV..j^.Li.5a.1....:66?.)..).G...ptC..e..aS.K...r.....(.w.l..r...wE..iC..F.U._jK...S.mT.j.)>.."....T.{L!.?>7t.....wUn}.d"...:\...0.J..@.....Z...-M\|.8JRe3...a.'.?E........Z.).R..!?....6.%.....gI...../.Wc....{...J$!+ ..$..]XG..}..y~n..{.`..aQ.1.9b...0..#.. ....&..........G+"6.....7@s.ncTKJ..D.........5r..6j0......Ry.Q.~.xq/.=[.3..h..\|SRD.I.....ss.].!)$.I.......9.......d......c..a;..[R_..f'.Pw`...]..~.....\|......p<."..........,...9o...$..H......@.+\...t....5vJ...Y.GI .,.}k......k?O.V.X....a5..X $<B...]..P..d..T...o....d`FFDF.VRqC=l..?..Cn.........%..YB....{#\..o...f-.DdL....}\|.!.=.~k...,.....H^....c;..e[.`.c....t.^...0\|.3..G...u.D0...tN..hX...(.....S\|..a.".\|a........j"...o...1N4..c.n...L.PM...?......jT.on..+-,.e.....b??...yY..k..v.+a.Z........J.,.7.....

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37800, version 1.0
Category:	downloaded
Size (bytes):	37800
Entropy (8bit):	7.993884030418155
Encrypted:	true
SSDEEP:	768:SO2l7xREG7vwgbAhzZMu7I/5WqSdZxoIMfKLhDAm7Yl68:S9HRDI3Mu0UqkPMfKLhD97Yv
MD5:	2B097CB2DC262C764A2C97D4E233918D
SHA1:	83DB49B6B6DDA13ADC82726197CC2B243EF647DC
SHA-256:	7615AED2ED8F1361D3ABA2B6CE6612468463E660E8BD4A4302B24C113EC57308
SHA-512:	74193AA72286C60886138955917F87171F2FE483D6C2F35BB1CF1D17A0390F05149FF73EF7AC5550281A45CB0F9608D9C1BBB3AA5C3DA2843D21F61111601333
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_Of2PRg.woff2
Preview:	wOF2..............7....L.........................4.`?STATD..`.....$.."..r..6.$..r. ..l........'pg..q;h...g.......E...U0.....x.}......Td.6...c......Q...j..M...e5EJ.V'..#%.Y..m....\..>.....S..k.$/.g$.gZn>..0..S..&\Y..A{.......t.......6....A.!.y.Y;.].~..........?G.'...u....U`...Q+NT.._/...}FrF:.'.+7.q_....%=...1....,...=:...A.....,@B.D..x.......7...~{.WAd..VU.../.>.Rb..!B....tX.i$.,H...a.......)....b..z..>........y....1`.`...T.h4....\...b...fV....#O9.$...MCB.W.~Z..N^.6.5..<.x.u.X.....$U8.G`4N".'<Dp.wY...2=.kXK...0..........7.......M.....!p..@D..:v.:.-.o...)...a..8..l....<.\...x.gT..........m...0..8.A>..h...[0...0..8A.%r...{.......f.......L..9....*p..........q.[^6..s.....[h.-.. ....#.E._..Z&.g......)....T7%,![........A.8...b......C...@....Z..9QK{.4.{4.T...o.....D.1ib..Y.9.=.}.3.T.h.b%B.f.&."-R2$.......R....+y...+OW....T.Jgy..(..F.2.}...F.)......^.T.....a.t..i.....g....."....R.J@.s.BU....,fvAp......H../../Q.;,...`..y....+&9.T.(C..sw.;We...nzwn.+.........q.`.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 57236, version 1.0
Category:	downloaded
Size (bytes):	57236
Entropy (8bit):	7.99608783144297
Encrypted:	true
SSDEEP:	1536:L3JWy0wublqOS8eUCwnd3nVvgx5iMYZsFFcnEzHcV12+1w:L5pAbllS8iwndXVvwUsFFUqHcV1f1w
MD5:	212D9F17F0F5D037532FA3B8FC14B8DE
SHA1:	C332A9F57F2C7931F2A930B5D91BCF244E38FC42
SHA-256:	53B183E10D8C5DB234637E82BEF4014117BD41C956C69AF55FA0165A7BE31666
SHA-512:	F36B776390830548F3B7931B223E94301D1711C41D8E9F0AE43A50EAF9B3D0B1FDC66708802E2C53F416A7DCFE8937EFAF1BA0CF15CF83E20C955AA3853D1710
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNpWg.woff2
Preview:	wOF2..............P..............................t..^..T.`..(.....m.....`........6.$..\|. ..Z.....1[....n;.U.p....JF+._.7.Sn..IA..o.l..n.,...p......d!r.}.>I.6PU..f$....);9.R.j.J..B.....PJ..!...u.\|.'{/K.M.L)..h1.......g..k.9^3f.y.S..>].z.o."(......V}.?LE...EyF.Y.J..v.v..E..S...:..+.{......Rag.DOT.1._.....Up..V.V..5.W....xg.G......}.fH"!........'q.....{t...z}i).9.C)E.CR.;..5.......#.W..W[.l......A..D[..m.k.Y9y......U....W...?...o.{...(...$G.3D.c..s...6....;.:.msn..v..lv........{...4..-3.-....T.vJ....-W$...:<.$\.....{>{.u.....&qSq......"L.E4.u.......{^.>.iT..2.d...R...JX....j..X.{g..9...A0....q"C..G....W.e...vM!t.@.=Q......G....3...0.D....X.......pwQBa.HC..`wm.d............@.B v...@.$A........j.......n..uZ...n.^.+..K.o.@w.ap).a..!Q....4....f..Q.k.....1..P?.....a.....'>....5.<...... ../.....8...~.S...z...iT.\.k...;K......D~..K....P.7.?.....P..!.%P..Z....r...U{..'......2kDP.8.......L'..A...C....k.M.P.nJ........$'...bW...a..v.j.hv{+.?.;.._.L...A=b.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	919
Entropy (8bit):	7.433361107145316
Encrypted:	false
SSDEEP:	24:u19Z3VJHa+6+DYEl9dyxThJ+8ITM0zNcLtwyyh3oX:GXn69El9dyxTbg5K+yaM
MD5:	BBCFCBE5B9963396C6408DCFF02F6C39
SHA1:	701743EA68FD44246CC479655B1CD1628926E821
SHA-256:	18863BC04D54F25CB32589F3F3891223E4DB169E89BC3C9859900A0A2A5777D7
SHA-512:	F4EF95E4EBA2E4681C67C5993F8B8C3FDE254818367E3D4B99228C3BEEE38EB13BBC6EC9F2B81D5109DDAAF01DD720ACD67210A63745409D5ABD365A2112AB00
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/alligator_lg.png
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS...`.. .p...@P0..J....IDATx.... ......y..=....H.9=.\|+.."..C... .. .. .. .?.k..B..H1.3.......;C\..P8....v...4e..p...M..:.xo.\B..f..(Z......+............vJu. ..D?..>Bu.`?.`..p.......4o...i<..n.N.w.#.36......;...c....I.)`........]\...z..g./..\|......he.^(..@....y.{-@M.0..... ._.....^...._. ...&`...." ...,.kl..<.....>.P....8]>....m@,.......N..SH/......n..E@.+.P..-.\.`wSI........T.Yu/@..iJCa.p.i.4.s.......z...i.eN...K.4.LG..B@Z...K.1f4kr....{;.G.c..x~.N....qc...s...:.ZZ.!.mK...;...#S.......C......P,W.!.~snp.+i..U..C...v.[.#.....%..[)V...Xr.,.B....u<...k.'8.).E..l.K.c5.V.......wC.vk./.q..w...X.:.m.._$...!.JZ.........K3. .kC.x\|S.#..J.8.S0.l.X$..u.J.....M.....M*eG.c..M..`[......S.a..v..g...[....._....<.....@."}..=..q.......F..!.. .. .. .?.?..-.a..B....IEND.B`.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	913
Entropy (8bit):	7.628329229132998
Encrypted:	false
SSDEEP:	24:3tLAj0uLHLwpeuI5tNfXHyWikLpDak3Ag1a:9LE0qLw4uI5/fHMkLpDFa
MD5:	19562AB0E4A9E0714961A586C7614D59
SHA1:	3742BDA8BCF44A86AF73E17969342409B64B4146
SHA-256:	11DDAED5D22EFF3ADC116704E96A4974E61CF5015D039CA1FDD86BA821D92C7D
SHA-512:	8FA976375FD59C1463DD8FCFC93E409397E3D3C7A18DFD00572F83EAF3839089F22CFC4E8CD772D914559E37A62235C67D54721619D1A09E91330237AAD2EEDF
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/kraken_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'...)IDATh..m.. .......P..h.....H....v.41`...J+.R~.)O.._......}..?.1m.u....sN.B.w..fQB....f.s..V.\|.l#a..sc.A...Fp.D.......!.5....b.#.>a.'.........B...Z......".u....:B...:......\>.I...c....s.Ab....1..!..P.S....r...S9...K9A..[N.."\.....y.BP..N....z....@-f..-..>...S.......%.......&_f...B.........>...O.`G"tn....<_.8..x.'..\|K...Z..0...7K.I.F..2.O.pS..~..1..Xyy.OXU@.@.LN......c..Q.0z...-...67.=.....:%W!....qm.:.T...XL..&.P...jT...0\....A........)R'C.=^..1V.....h"L6..j......=...:.....l...+.k.0......lW..)hH.....9K....`a..ej2K.}..............A..-.C.7q(p.....Z...$..../..........h..\...W..:.E>...>.%&.H.$\.....q.r.TG}v....>.1...5H.+M.a..N<..%.R....7S....m...@..Yo6u.j..@..S5o.i9...u.'Zg...>.b...j..4KD&S.s.7...>....2.5..y...3Jk.3OQ.....?E .;".....!...z.v*!.]b.W;W.K....../D$?.._......;XJ.....IEND.B`.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37632, version 1.0
Category:	downloaded
Size (bytes):	37632
Entropy (8bit):	7.994612552386459
Encrypted:	true
SSDEEP:	768:j3igNBn3RfzwBFOw6FZ5kUezAtdnMlWCTd18T8b4Coa/a5oUO3ULsegB45r:j33B3BaFO9FEUiATWT8T8bAaCeBEJh
MD5:	1FFAA430DEB705DF128762D9990F8EFE
SHA1:	847F8CA1CF199A602AEF0EF42AEBF5F825584E19
SHA-256:	2706DFABCBAAF2DEE90C3A10C168D5F5691CE787DCAE9E77CD038F66B08FC4BA
SHA-512:	24B0B6016AAFD2C96C5110B4EB19FDB965E4F12007552E710B33F38E7621F3329D28570BA40E25041E17FE27624DE52294890585836590B509F2BF28DD92736D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vqPRg.woff2
Preview:	wOF2..............7,.............................4.`?STATH..`.....p..n..r..6.$..r. .........A.'.m.....h.j..a.......II.k...q........d#.<x=..\|S3..@..;..#....J..p.xx.<..R.....E].&...R.....L....6k..(x.E."H....v.A...x[...1...Z.G....j....q.).....W.D.pe..w.8..M...{.\|....G...KlS..2.vi3DC...<.......b.$.n... ..J0gx~..N....M..S=....j..w....b%z.7Q[.....6......y...(x..3...y.~..Q..0.l@.c.c...t.17.......X..f.Q..z.7...r........,..-..x.+A..I"..M.i..?..?\|..).J7.F0......U.....z..i3..:%.X.0%.'...7..v{.......hCz..y..8u.....!.......`.z..../.=S.Jh...P.....T.&n%V[..sp^.aB.A.k.....f.8..n.i^[1#[..........d......-.....ST.}gN......ZK.Z. /I..b.H..4.y...m...g..#.GI.s....F8..d...V..L.........i.....g${.......t..Q..M...s...u.%K...\|..0.6...\|..<......6.....;.0".....P.x.y..y.\P.B\.......e6..Y.nq9.v$....=....'....?...B....d9E.....,f9.....b..d+\..S.k\|].d.\Y..>.9..[..f.=c]...36.$,~UQMU.@.`0..c......4.Z.v..s.KkM.^..^..E......?Uu......{...0..K...i.6B..A..I5..I.....\|..LN.-k.....1.jPu.F

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43772, version 1.0
Category:	downloaded
Size (bytes):	43772
Entropy (8bit):	7.99497933742288
Encrypted:	true
SSDEEP:	768:nl5ER4tVdeSUthhWfoDHea0tGdFOIHPyCdHLBdv6pGXw9XozpskEePJBsfJM3V:WO00uea0twFO2TdrBgpGg5wtBBsfJMl
MD5:	36338672609C9EC1D83AF4E1AFF7B0AD
SHA1:	287BF3611440E9377DD71C0620AA63448D632F06
SHA-256:	E268433F792E81D03D24617E0A4D6ECB5728278A805E7D12493E06802AA671A7
SHA-512:	6A4F62F6BFB02679F2887CB62E1BAB06F5FAFEB80BA44AED733ABFD0FBD1F8EAF545316958CC8D5FD74E6685D68CDC1BC037FA02810FFF98BC9EB95719DA7A1C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_k-UbtM.woff2
Preview:	wOF2..............................................d...$..f.`?STAT@..t.....l..=..\..6.$..4. ........[.{..5.....+..kL.J.....)x.].....J..'...R.........IE.K3.vcx.....Bp..G.:D..UT...{C......P@F..r8+..d.!Si.$..F..7..v...{.>..+u..u..,v.g.J..%g.%.D%Q).^2..n....JT..jF.7C..H..8...d..D.V".&...\|>^[.e.l...J.YYD0W0_..n..ulm..y..2...M_<.b'3H..'..+Yb. .w#..h..o.1.coJ........)mO..s....!'J^D....KC.,sa-.?.../Q....3....o.......g.....t).y.=..U.%o..q#k.&_.?C..ff....8.82..W..0...D.V@..$-.BZ.$JE.8...<D....@.m....%.....w..rw.jr.XP1.H.Q%.. ...."..H.(.X..-...A....q...v.....]K....D.QB.Eb.q..</.....y..G..<v....w1/W1.i...O...sU....P.z.L{.K4.T.I.po.^g...]....JK..7}......._x.7.g.a.w.%..r....`..+5.a....>A=......H#1...s.58/..d....#....-?l.[y.........i...p.x....@@.v....AhF4...!........A.....}._.........V.J.(.D(.R.G!.RPa...? .W...Wo......%5h......Q....J#ZI..oN.......I../......K..(...)@....h.R.+...9.9...C.Q........z.u.DI......L..7.p.{...l*J.&..y!.I..C......W..vEk.....k.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5044, version 1.0
Category:	downloaded
Size (bytes):	5044
Entropy (8bit):	7.951901332858743
Encrypted:	false
SSDEEP:	96:9gXfiL8sKiR//gg+2nyE6gbhIs64Ib/i8E66d2Rt+6TRtzBr886h:WPehKiRXgg/nEuk4k6366dS+6TDBrU
MD5:	5E37F6030CF935F9CBD3FF5A22E08D2E
SHA1:	C77AE7DD7501F4F578884BC034004F8619FC3D17
SHA-256:	867352B1C82C47D71A11744E3886441A848780DCA87928BAC596E5F3473BFAA3
SHA-512:	32D2C92FE4A8EA3A5DA9F103F6E36CF035804F529DD488A593A700566FF14A1B6F2A02AB9527818F7891DB88C6DAF5451251D21A6C8CD2FAA637884D142D3C08
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/pacifico/v22/FwZY7-Qmy14u9lezJ-6B6Mk.woff2
Preview:	wOF2..............)`...W............................h....`.t.................6.$.X. ..r....K..&#........<./...1.x."..T.Vx..j.)...UUoG....@..X...d.~.W....l.3H.Y.e.......+?RX.(.Z.#.....#.i...y.~?...x.M...7..%..D"$.....i..).25f..2.........f..%.ifB..mQc....2=4%]I.....WWrQ%..(..g.......k..o.z..]...$`....._....Y"..Y8b.......(m..O..WM:...1."...H..r...B..!..sN..,%In.P....1pH.$.i.g. .+K1.V..{%. ..A....l9.x.P...'..W.$...B......M.5W...j.3..gc%..zk4.[.E............m.q.6G@DT.Q..S...5vY3j.!....i...h...=.Ox..._9Q$WPX\..2..<..R+qYG..H..K./.F^}.....=.\/W<.6.....4.l.\t.......^.Q...Q....`.Hn.Y..Z.BI...eCP.......\....f\|w......5..^..eK~\~p.....$!....S3.....-..e@w.....2..f.W....`?d.'...........)(..8^.cO.}.f\.(...[.;q[.Q..e.wR./S.@q......q.l..q.z..m\|.p.H....9...W.....-...5..ZB:.......YV.jC....[.....7...n;m.d.I.F.ly...O.bW.R.d....c..M...^v9[j....'......r.z_......7./...~A....W.\|Mci...Q.7...9.A..i...\....2.`.W_ ....6...()..s....7.\..j.....@o....m....w...6.....,

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1254)
Category:	dropped
Size (bytes):	205940
Entropy (8bit):	5.480824840802998
Encrypted:	false
SSDEEP:	3072:GzlaBVJaahSkppfoUS5Qk+P3KglDNM4tbcYR8:GzlaBVoVG3hMvm8
MD5:	12AAC0481FD69CB00907BAF81D4D4F7A
SHA1:	145F9D17998A49F9E2BE15F82719C44342DF24DC
SHA-256:	91AF72F4133087FAC978C89CEB89C10FC361B2FA4E9F8AE7236F883DB249ED9B
SHA-512:	94F13D21FA6E8B60681F885AFED678D7D2C5A1E827DC78952408461F4A39591EF637713246565B647EC95F2C6E9F36242B575EF7242DEA041B0334173C3B1ABD
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_SocialPeopleHovercardUi=this.default_SocialPeopleHovercardUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xd601838, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var ea,aaa,Ea,baa,Ha,Ya,pb,eaa,Ib,Ob,Rb,Tb,Yb,faa,gaa,hc,iaa,oc,kaa,tc,uc,vc,Bc,Kc,Rc,Tc,Oc,Wc,paa,od,qaa,pd,raa,saa,Gd,Fd,taa,Jd,uaa,Od,vaa,Rd,waa,Ud,xaa,Zd,fe,qe,re,ze,Be,Pe,Se,bf,$e,cf,C,gf,kf,of,vf,Af,Daa,Eaa,Faa,Gaa,Haa,Iaa,Jaa,Kaa,Laa,Maa,Naa,Oaa,Qaa,Raa,ug,zg,Xaa,Vaa,Ng,$aa,Ug,Xg,bba,cba,Zg,gba,hba,qh,rh,iba,jba,kba,lba,Ih,mba,nba,Yh,Zh,pba,qba,ci,di,uba,wba,xba,yba,zba,Aba,Bba,Cba,Eba,Fba,Gba,Iba,Jba,vi,aa,wi,xi,Kba,zi,A

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1429)
Category:	downloaded
Size (bytes):	23351
Entropy (8bit):	5.447728519960374
Encrypted:	false
SSDEEP:	384:iVlK9Vcdgk0hYP9ZzBoyMsz0pWOBtURdfUGEZNdSMejeF:iyKdgknqyM/WOBtU7fUhYbjM
MD5:	B5E21B254C8D9ABF3725C212CE10EA55
SHA1:	9678CFFD476702E7A5729EAECDB4C05B50C527A6
SHA-256:	FC90C372C57294A542491EA70BA3CA90218DE78E0F0761DD4E15CEE02292D497
SHA-512:	C76D028418170AF2C8F001EC99C14B62D89F7019768DECF12E2C29B9E40EAA352FDEBFCEDD9A5768FAEB87ED101264263411C878553240D16073F694133E8A53
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/js/358792001-client_js_prod_peoplehovercard.js
Preview:	FJ(w3a);.var xUu="C__HC_94253229",yUu="I__HC_94253229",zUu="No email data found in handlerInput for Events.Calendar: ",AUu="__HM_173584019",BUu="boqSocialpeoplehovercardV2HovercardAnimating",CUu="buganizer-system+",DUu="docsHeaderConfig",EUu="forceHide",FUu="hideTriggeredByMouse",GUu="hovercard-id",HUu="hovercardAlign",IUu="hovercardHoverTriggerDisabled",JUu="hovercardOwnerId",KUu="this.el_ is falsy",LUu="yaqs-carrier-pigeon+";yre.prototype.YNa=Y(749,Ul(hg));.ZAe.prototype.YNa=Y(748,function(a){ZAe.Nc.YNa.call(this,a);bBe(this)});function MUu(a){this.Da=O(a)}J(MUu,S);function NUu(a){this.Da=O(a)}J(NUu,S);D=NUu.prototype;D.getMetadata=function(){return Q(this,MUu,1)};D.getValue=function(){return Mp(this,2)};D.setValue=function(a){return kq(this,2,a)};D.getType=function(){return Mp(this,3)};D.yc=function(a){return kq(this,3,a)};function OUu(a){this.Da=O(a)}J(OUu,S);OUu.prototype.getEmail=function(){return Q(this,NUu,1)};.OUu.prototype.Us=function(){return sp(this,NUu,1)};function PUu(a){

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 142920, version 1.0
Category:	downloaded
Size (bytes):	142920
Entropy (8bit):	7.998331954193963
Encrypted:	true
SSDEEP:	3072:wQumXsnnqTz5xa0PfTg2r1coEUOUKO+rE/FYSgEpF4XONoe:wQOU5xRhroqCrE/FHgEQ+Ke
MD5:	643086F598435216DC497F1FE1174F85
SHA1:	FD3050CC2BFCB38D36876B66CAA15D97AD3098BE
SHA-256:	15FCE9FC686A7ED24AE85F394838CCA6DC46CA2AA43DF5E35A9EDCD3EAF3577F
SHA-512:	CC899A561B18A00EBD949238CCEEFB78EBB0D7F61579C20DE1EBC6AD1273D6C393E3CB7DF0A41A8DEEE3B30EC9325F3443C5A760ED9C9BEC93BBE5E185A6C68A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-DPNUBg.woff2
Preview:	wOF2.......H.........-...........................>......P.`?STATD...B.....$........6.$.... ..P...J..[2..^y..>_..h\|..m.L..M.`...n.Yy<Oc.......<7.c.c...........!......{0R............F...m6.~...p..H.C....P....%Qaj.Y.4....rV.........K)..v].....pF5.l0lJ.F.i`.$KED.......j..'o.s.xi-...u.Z..L..Y...%r.H.E.....(....+..+.LT....@.(..@..Z&$../.....v.e...2.5R.;.JK$&)-.}{s.;.....?.3.6........Z..\.....O.C....,.z..\|...-.#.R._ZJ..<;0..C.\.p.F..k.r.....Uj..?..k.."0?.~...`F.^(.k.[...oP$.6~.5.Ya.....(.o.N/..<..5......s=..r...xa.8G.Wg...Zeb.Z...w.;..D....~."5..-l...0.z.F.,p...h........P$^..s.,.=..M?x.\|.[..[...0.s...Q..x._.Tl..Ej...S.......%I.,>.H....&.g<......Q?..I..W..O5.M\|.7.)\. .$.........J...O........_..>..;.....y.\t_....Zk...t.....2.....O....[...._(q.'..\|..Kt{....#g.....[.$.!e........~.....KOC..\...."........~..<I.Z.\|i...D.X........f.>....3..>.O./...n.;..)T....].-...b.......0k..b:....x.+.....k.U.f..".....U.+.........J..g.3.f9EtETZ.4q../....g.!.....][.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	919
Entropy (8bit):	7.433361107145316
Encrypted:	false
SSDEEP:	24:u19Z3VJHa+6+DYEl9dyxThJ+8ITM0zNcLtwyyh3oX:GXn69El9dyxTbg5K+yaM
MD5:	BBCFCBE5B9963396C6408DCFF02F6C39
SHA1:	701743EA68FD44246CC479655B1CD1628926E821
SHA-256:	18863BC04D54F25CB32589F3F3891223E4DB169E89BC3C9859900A0A2A5777D7
SHA-512:	F4EF95E4EBA2E4681C67C5993F8B8C3FDE254818367E3D4B99228C3BEEE38EB13BBC6EC9F2B81D5109DDAAF01DD720ACD67210A63745409D5ABD365A2112AB00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS...`.. .p...@P0..J....IDATx.... ......y..=....H.9=.\|+.."..C... .. .. .. .?.k..B..H1.3.......;C\..P8....v...4e..p...M..:.xo.\B..f..(Z......+............vJu. ..D?..>Bu.`?.`..p.......4o...i<..n.N.w.#.36......;...c....I.)`........]\...z..g./..\|......he.^(..@....y.{-@M.0..... ._.....^...._. ...&`...." ...,.kl..<.....>.P....8]>....m@,.......N..SH/......n..E@.+.P..-.\.`wSI........T.Yu/@..iJCa.p.i.4.s.......z...i.eN...K.4.LG..B@Z...K.1f4kr....{;.G.c..x~.N....qc...s...:.ZZ.!.mK...;...#S.......C......P,W.!.~snp.+i..U..C...v.[.#.....%..[)V...Xr.,.B....u<...k.'8.).E..l.K.c5.V.......wC.vk./.q..w...X.:.m.._$...!.JZ.........K3. .kC.x\|S.#..J.8.S0.l.X$..u.J.....M.....M*eG.c..M..`[......S.a..v..g...[....._....<.....@."}..=..q.......F..!.. .. .. .?.?..-.a..B....IEND.B`.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (904)
Category:	dropped
Size (bytes):	2679379
Entropy (8bit):	5.629237424041442
Encrypted:	false
SSDEEP:	24576:394pAtBCl4R9gFvcAsZiYNMxrG+z1yECB93p9cUK1BuQpnUyM:39pJHFZNNMxrGU293p9g1gQpvM
MD5:	A3D8F6282AFBCEEF749B75D5935AB9C2
SHA1:	2BCB45FDCAEA3F736FCACAF12A02883F9DC19A05
SHA-256:	027900BABAC6EA944F3D9F4B0A5C9904934FF4EFC0769B4595D843F7FF3C971B
SHA-512:	DF192DA378553D621089B1C5B2D34EB0C5E7A61B49F47D296E87DF0667F07F1752752314D04EA0F2722823AAB623541CAB79403F9E5096133F378A5F60E5AA45
Malicious:	false
Reputation:	low
Preview:	FJ(s_a);./*.. Copyright 2020 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,. OUT OF OR

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	479
Entropy (8bit):	6.907722555270069
Encrypted:	false
SSDEEP:	12:6v/70f7XnKN+URXKLaFR4N8iY6w8IzuiWOZBy5VaJxSeHNRPXyF:9fTKpXKceN8iYeeZ85CSef/e
MD5:	EBEE417C131CC534EBE8F665BD588936
SHA1:	2EBD6063F631D8E596858CCBD2A545F7E6061DB8
SHA-256:	80C3885811A42DA7C6E7B9B811800AF8105E8F310C7ABDD59BF93AA8C4FBF769
SHA-512:	06F23550B06D2D49147DC770E0E66857C90FEC713D30F85C258A2ED12BBB13C9DB2D83C22F4A62460E991FEB008064B3886E2F19F9F3882DA115A21584D01F9A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/docs_2020q4/v7/web-144dp/logo_docs_2020q4_color_1x_web_144dp.png
Preview:	.PNG........IHDR...................NPLTE...@..B..C..B..B...g.@..A...g.D..B..@..B..A..B..B........B..B..C..@..B..B..A....T....tRNS.8....o$..<.(.K.....W...S.:.....&IDATx......1..Q.(.\|.7.....gx?. .....U...\|..-...:.P{.f....hH..X.K..\..A.E...\."H..@....D..&2....$.< E...".... ].......t.".t..RD~...A....E:H..A.H.)"?H.. A..i"?H..9@....... @?.:V..../...bS.......# @................./"... @...r... @.............].Z..].Z....il..u....GE.M.]EU.=-....v...q......=..-.[. .....IEND.B`.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2986855
Entropy (8bit):	5.044142976440696
Encrypted:	false
SSDEEP:	12288:ggKgzUEoGmKp6YL9Cvmp3V5LD++vHtc9D0+JABRG9Nd2Pi0bvtvZs:dz+JAENN
MD5:	430FAB61BEB691C2ECF036D67015773F
SHA1:	EB9338D495EE010B90B94B69D872308DFCC7C043
SHA-256:	79BA2024EB01E8942CD1EB4247139B8D2CC28B895570E2849451A906407C4908
SHA-512:	436283AF913AB012B7BAB1349A1F7B23275194134EC7F0A09C01989B335D21F0EAB67FACADE00F679B7B9FCBC99A6A788BFEFB39CF6F4A4D18F7A9E8300ED85D
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/document/client/css/1302052441-KixCss_ltr.css
Preview:	@charset "UTF-8";.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}:first-child+html .goog-inline-block{display:inline}.goog-palette{cursor:default;outline:none}.goog-palette-table{border:1px solid #666;border-collapse:collapse;margin:5px}.goog-palette-cell{border:0;border-right:1px solid #666;cursor:pointer;height:18px;margin:0;text-align:center;vertical-align:middle;width:18px}.goog-palette-cell .goog-palette-colorswatch{border:none;font-size:x-small;height:18px;position:relative;width:18px}.goog-palette-cell-hover .goog-palette-colorswatch{border:1px solid #fff;height:16px;width:16px}.goog-palette-cell-selected .goog-palette-colorswatch{background:url(//ssl.gstatic.com/editor/editortoolbar.png) no-repeat -368px 0;border:1px solid #333;color:#fff;font-weight:700;height:16px;width:16px}.goog-palette-customcolor{background-color:#fafafa;border:1px solid #eee;color:#666;font-size:x-small;height:15px;position:relati

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 129848, version 1.0
Category:	downloaded
Size (bytes):	129848
Entropy (8bit):	7.998140890095368
Encrypted:	true
SSDEEP:	3072:5Pxah+PkeDK1M6rUtoWrUzhK3gBMNopGuvUpRx1sH:1gh+EM6omeWhKvNop9yRx16
MD5:	07987CC4A39B31CF6AFFFDE675F1D849
SHA1:	7ADA46987D0E1AAE2D3288272F8C97AABA4792E5
SHA-256:	DAE2E505F61E23A088E4FB91523643D2E0B816F29DB2BD57AFB3F56F00D080F3
SHA-512:	7AACFB569ADCA23716E0E3CA1D81073126DAFCAEFC33F4F43261A60F3F30BDF6FE0F1303BC8F038A2E55C574F6B59EBA85E7997F2A457B7E8D42D9ECA798FFEB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGFmQSNjdsmc35JDF1K5GRwUjcdlttVFm-rI7dbR49_.woff2
Preview:	wOF2.......8.........................................8....`?STAT@.........\|.....P..6.$..L. ..v...n..[S...Sd{.....n.i.ID.D4..C.w..(I....1.`...\O]G.Z....z..I@.m.....1...........[X..n..&..W....4A...w.+..0..N.>...d!..;..^v\|S..z}..`(..h,.p.SN.(...1.q..5..sx8....X.r.C.!V.j......m..9....Q5&>..j#hZ.Z.1.i.I2.{..>....S'Q...h'..f:S./)....Onx.#b.....0g.....0.`(...X....x..%'........s.F...........pp.]/.PU!4..A\|/.t7a,.\|b..^b ?.]......J.x}.............)o........2...,o..0q.T...>q..y0..f.f.0.`.m..dCC.6A.{.;...bI....5..q.....-&.4.....7.8.4..q....4..is..q.1.z}...[....&......L...'..EP......B.^...~:.d.....vw7k....J....U.).4.F%\..0.......{..<.7.]..\|....2.Ko.<.}.g...".^..{.=...y......U?.?.(c.wX ...J..J..%...(p..3g.e'.^.!d.\aU......C..t.}...T.o.......X..0..Q.......li.R..E-.....f..e....:(...?@........>v.K. 7.]'.Z..5cV.k.#.<48......nXx.....w...bS">....../[.g..p.I..?UR5..k<.wc..G.2.......^..'3...E....fDU..;.f..-....S..?/...1.....T....kM4.......>g.L3..CT[.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47364, version 1.0
Category:	downloaded
Size (bytes):	47364
Entropy (8bit):	7.9944232758512355
Encrypted:	true
SSDEEP:	768:JXGmLkG8r2AzLYjh8URHJeHx85z4+Qn3BofJVBDwt6M//67Yxb3ds:AqkZ2AYzcxU41nRofJVBa66/6mbNs
MD5:	FCC676E93787A8D472AD00BF7F158D88
SHA1:	A28C8050BAA6E17C6ADEC60BCA582715403D500B
SHA-256:	1F6B8D8F7D462DC42D48B29E68062A707890AA2DD700C947806949F63D79694A
SHA-512:	887F1B666623249B995BF78562F87410D295619967C5146DBB5EFA01D6FA7C135D51D68F6A4C0A80A5B1EE1C0734713F6CA03605D2104BBA3AB991BC202AD3E6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vCJD.woff2
Preview:	wOF2...............$..................................f..l.`?STATD........D..K..t..6.$..d. ..P.....["...q.......d..s..?......<.Vv.j....S,a7..t..%j^......M.....m7.D.)C.o..7..)4.yF..mW.&v..Y..#s...1j.!..TG.{&O....P....-......Fq...D.......SQ.:^.P..P@.}...L..B...1!BN.<.....0_K....).U....}6..i.....eU.\3...WQ(c...m.Z.&.h.a.%.R......E..E.T2.T.&\|.uu..6m....R}t......]......x..8....}.....Kl..W]....<Y.....W&..]...w......^tU......s...S.g}......w.b........N11rQ.Q[cms.j..2u.....Jrf..%i......M.F.....S......bD`......t.h.l.....Z....@....d....9s.u!#)..hSa.X.....DVl...\|.....8.1N.fj...@........w.7.M.g.....0...7...T}.e.K..lod.y.e...P.r.j..@.%T..@....r{W..]..z........E....z.6...Vd........R0.@%rX.D.2.@.......g .....K#...\.D5.Mh.....h...p..!...=....r..8.!pv..V..X6.Lm.....H..tJ"TJ$..{h.t..I...o...Z.4.x..(...E=.H4.C$T.].x..U.w..eW40...h.........K.._.jy."..K[...K...5?.S.=..yVs.P8j....y.......%..h~g~%..(.V..(/S6..9....2...fr?V..Z.j..X..zY~...*... i,. .O.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	650
Entropy (8bit):	7.382799325385537
Encrypted:	false
SSDEEP:	12:6v/7FQCmqVLxcF4ztyN9Ayq8f5DRKTlOrd1fW0xBkK:AkFTk8f5DRyQbfPxBj
MD5:	4F8C6954B781131758A46CE5B983A11A
SHA1:	BA31CAD002A7DC789DCBDC29ABB12566153BF7D6
SHA-256:	0E9A2F11325397E1A1CFE7D77CC5BD8343A6CDA03716C027604A78BEB3E877CE
SHA-512:	7E5C1E3E266B824A8B997B3F887ED96FAFD09FD5AF0F42E85C1F932806A3151DF9BA0CA48829D78A609F8AAA482835FF76E0F46BD0603AAA2234D5E07054620E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/capybara_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS....@6......"IDATh...m.0.D.D...`.6.......[.Gd....A..6..............<..'V$A.[.a.pt...t.n.`......`M.'H\:[..E...``.........$<......YK0.u.#..@."E.Hh.!..!k..A!.G).'..e.Hk.A.O..G.....PD...S.C...H.y....c..0.9........%D...7.......+ ..B`...o.&.w.".T."".S.w.D..".c..pH]..{.'CcU.(..w3.Ee}H...F%B...(. .Z.rwg.E.G.zV..}.}..(......XVYd....,..(.8...c..U...Pt.z.`75....vC.Q..MP..r..... ..W2w.L.R....BCe.=.F.......0....n...h#.lc.m.F9..4U9..."..7..j/..U.w.0..k~4...?....k..M...g...T........R.LAn.N...K.ts..5#G..\VM.nv.....6..3/Z.5..V..`..--..v........o.@.8..+.....IEND.B`.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1360)
Category:	dropped
Size (bytes):	7875
Entropy (8bit):	5.501135641901946
Encrypted:	false
SSDEEP:	192:/KOX8vE9Mio8UYcmS+MMUFe339GsayhJ2Zr:/KO2cMz8zcmtfdzayir
MD5:	FC18354C75C49EE95664D517E57A6649
SHA1:	E2258A946103ED2BA22059FF1FA1B804071FD2DD
SHA-256:	464170EA3591F952AE7FB0164473F04C9276C5F0447A3FC439167E36F3CA4CD3
SHA-512:	9F50CDB934A9DE2737B11B6443622B8921DF070F2978D29FC8358B075BA8ED00D5EA84279E9F51011FBC0FAEAB08F37FD3A1077A02DA838C22ED994C6FA0FA03
Malicious:	false
Reputation:	low
Preview:	FJ(t_a);.var Mgt="docs-approvals-toast-reload",Ngt="docs-approvals-toast-unlock",Ogt="editorApprovalsOnboard",Pgt="unlocked";function Qgt(a){this.Da=O(a)}J(Qgt,S);D=Qgt.prototype;D.getId=function(){return Mp(this,1)};D.Xc=function(a){return kq(this,1,a)};D.lA=function(){return Mp(this,5)};D.getStatus=function(){return Np(this,7)};D.Bm=function(){return wq(this,7)};D.getType=function(){return Np(this,13)};D.yc=function(a){return lq(this,13,a)};function Rgt(a){this.D=a}function Sgt(a,c){this.F=a;this.D=c}.function Tgt(a){if(a=$il(a)){var c={};return c[N9k]=a,c}return{}}var Ugt={inProgress:1,approved:2,declined:4,cancelled:3,statusUnspecified:0,artifactsPending:5,failed:6},Vgt={decisionUnspecified:0,noDecision:1,approved:2,declined:3},Wgt={typeUnspecified:0,contentReview:1,eSignature:2,alignment:3},Xgt={failureReasonUnspecified:0,artifactGenerationFailed:1};.function Ygt(a){a=xo(a);var c=Ugt[a.status];if(c===void 0)throw Error("f1");var d=new V2g;eq(d,3,a.capabilities!==void 0&&a.capabili

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	743
Entropy (8bit):	7.5390371259473765
Encrypted:	false
SSDEEP:	12:6v/7KROZLAACT48mCmtNNDraS1b0h9rc29t1GXVTV5nxv2qGKEjpY00LJueD/:R0Smp/KctFv4qspZy3
MD5:	E0EE4EEA35EB4F7A8B44A7751F1D4771
SHA1:	32AB2CCDC3A075690F2D6923C1A7067F10D2C1FF
SHA-256:	FF52193F799AF08B0F58F60BB73D7AA2F61AFDAD0EF9D1B96E607A2D540E4F2B
SHA-512:	73D615D61090111695DF1380379181761CC6BD3B2348E3D2214545D48619CE5FAD8368B8BAE086468D7607005517E3C55416C2F20B3064CE2A0C0934A7404698
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS...@....)....IDATh....0..o..P.......&.. ..[..cKB....\|..s$........0#.m.?. 4xU.0..L..:B..u....1=.<Kh.....I.....$...+C.QvO.xZ..$...e.....L.z...R.`L..H......0..K.!qb.YB..Q$..W4.+.aE.a..:..7t.....s.!..8..'&.....3.c..A../........../R...%...c..2!.9. .CC..O."....#..QyB...T..hN..A.<5.....V7,.Yd..7W0..b{.&N/..nf.^....W...!;Fq..X.....WHh..V.,%.C.&V.Y.NL....b%...............j..(......FiE.W.Fy..3. .@A..:........t..$.'K./... ..^.O'.,..6.\xf....Yg...<};i..KO:[.........,..6[......Ec.f.!..>..:.Q9C...L'..VSD.[.)"xbu.QB.w............`.@..U..N8z5..l..,u...@F..:.Mv.,....@ne.%.4.q.u.....o.[>k.."t..[M0.......D................a...Q-9:....IEND.B`.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	7.308026484389956
Encrypted:	false
SSDEEP:	12:6v/7mwzyKUxaTPSzCuNVQADYJh2DLD9F2+y4gmFCG096DyiP:m6zC6QA0v2vD9WlG0Yx
MD5:	C08018BBFFF34E8DFDBB776685368D53
SHA1:	ACD4DF17F473BAFA23CFAE4C38EAB8224DCFFD6F
SHA-256:	F102719972F2C5FF28A2687B53786FEA296ACFF47F01AA1A88098AC1890EFAD1
SHA-512:	696BF3F690A8A3B77C75C398CE64AD3CC46B5CBEDB8335DDD5AF2F60EFB7EA365FB210C69056B4B5650B4C3C5709CF0CBDEECAABA7ECC8306D0475BBD31A83B2
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/profile/ferret_lg.png
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'....IDATh...An.0......./J.....!.....*].&.\..W..g..'33...-E...m.....o.B...a..V.P...[.i...........\..........Z...V.....k".I^0.[,S).4-(ZX...`h......-.Ry..$.M5......E....3..f.R.`........e3is......S...$$./..0... ..........U1..w.....k...J(....3HX.n1.G...D....+..P......b.:...AB.WN.p.!..Ha...-L.q..6.BK.#s;XM:.00...a..^...6P...1...;Q.......e.`.......X./.}....v.c.Dh...{\|..FP?.>..O;?..#h.zo2....a{....]..7.,RH."......yj&.Zl....IEND.B`.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 53884, version 1.0
Category:	downloaded
Size (bytes):	53884
Entropy (8bit):	7.995657719654049
Encrypted:	true
SSDEEP:	1536:e2ESZvfEEuCnkbGrXul6qhJi7nvl3xM3WxNXfA:e2ESZvfE1CkGald8rlhMmxZA
MD5:	11E65682C5D363ECD17CDD1CE3615418
SHA1:	89CC3F37B6EBE724BC22045AEA74EF2BC6932DA1
SHA-256:	41A98AC11A50E26C91A33CD44D8FF75B7F5963B33CB63AF48099EA48D0BF5E9A
SHA-512:	6E6FDA35E1356D13C0B936C815B9ECEDE941DAF4B853ABDD721C2737B80A6155DB47BF908615374C0FBDBDB8E75DE69D18776BB4C051774DB06BDF2F5A5DF29D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu52xK.woff2
Preview:	wOF2.......\|.......D..............................j...j..j.`....R..<.....d.....Z...x.6.$..0. .... ..D[..q...WF2n.....e..T.6.e...n......m:B..p[........,.P.....4"J..,M.u....!Z..(...1gh..E.N...[.-$.R..a..g]b.\|Lw.bp...(....r.:K4..w.L!.c..$.m..#.E~...2w...^n....{.A.^]..B......j.e....u..._(6)T.h....i7t7q`.).=....:K.bA.r..T.T{g.U...:!a.2..B\........Re..a.y...TC3.....3..2?.o.._B.._E..6yE.+>...$.[..!I.....E...0W9e.$...$.l.:.n...P:b/.<C.....ynr..D..,..Q(PU;U...n..U.........o%.....ZP.6j....&..a...O.....0...0.H3.P....m.3...J..8...."..H.Z..u.......P.Tl.[K....k..$..?'..ok.I...w...@#...[.>o.wWCu.#.7o>.....p?.e.K........I.?....jD{..r......X.Sg..L.....Q ..Q.S1.0z...9.>sk.}.y.^.S=.=.T.q.Z.YE.O... $.... Z[....>L!(X..N...,..@c...&s..S5.[....Fm.b.S.6....@...dRm.N.s!..}.b.f.=.OI....rJo.....DMu..l.M..YU.L..5.:....f.q.c..Y{.TV.ez.HeX<....Y.....]."F.M..h......MV...u.?.&.....IJ+.....;.v......CF\|.6.Z...L(.3~....&. .G....Y.!......'..L...]9u..s.F........!.qC......{Q/cw.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 129, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	707
Entropy (8bit):	7.516128924043621
Encrypted:	false
SSDEEP:	12:6v/7wUaJANVQ8Rc4WADrH6a42fd70ADO8p7LttmQCsAd8ugVlOXnKESRP:xUMANu8Rc4RrH6aFJp7LttjWqTOXKDRP
MD5:	4C7361C63F570512781316753E239BDA
SHA1:	2F9D29FD3EEEDC400DAFB100C3B946B7CEA59DC6
SHA-256:	407F86F9431AF3A3F2702567F64651D294D37A335957D2C9F4E424ECDBE26185
SHA-512:	D6C79964DC0FDAC5CE690D1D9C36DBF849E89A98796F3CF99A471E870C160770BF73FE693B8873148A6965E961117FA976632E9CF24489E6A4335C41714183D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................c....PLTE..........................tRNS..@....'...[IDATh...aN. ..`. .=@...."........W.~..tw..K4&2...}.2S.\|yi.E.?.*.m.Q.x-....5...s...Z..Bf.R.W...&.L...Ya...R.X,.1.O..s....:.:rQK.rkEh..pZ.q.K.(..a...H&..EY.;`V.$......=7.....~.2a.n_!Xv....+..4...7...-..Q....E"..,.^...cj.X.....DD...Q...4...._..#...k...D.FV.2...NB........................rZ,...0.F....wb.34R.....<...$.J...^.v....8....k\..$..............!...n7...n.>m...b=..`.}..P.dG...'...v.......C.~TX.-..r...RM>%.?,P.fZx.c>......q..j....a,5.........iAL.=._....IE........6/J.........\......tA.&..u.V... }.....k{..._8..X..N..gYQ"r.v.g...7".....\|c..S...[.9^d.$.ww...V.~....B..-Z.h....4.........IEND.B`.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4280, version 1.0
Category:	downloaded
Size (bytes):	4280
Entropy (8bit):	7.938204175548688
Encrypted:	false
SSDEEP:	96:Tt2MC9hRyCoDgukpdZAfYeNXx6EU+jtckAh/G44MBUAgcD/o:u9v6g9ZAfYeRUutckAh/G44MBUAB8
MD5:	35F2221688A86314A271F11BBF8E76BD
SHA1:	2E56E5FCCE211EEA8CA3709E0A8B33DD89CEDA92
SHA-256:	3C1D1B09AF9EA0E4A497CF8F1BAAF915BB032ECA2AE369869566282D156CB25D
SHA-512:	188B20E8E1D6C3759B5427A6EA56AB9AD509DDC7A8F6480B6C8E55CD742E26E15D5804B0B518D62226361DDA70AB02C5B2D302D7259F7D521617DC245F2D52FB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIOpYQ.woff2
Preview:	wOF2.............. h...Y.........................2..f..j.`?STAT..l....x.d.0..6.$.Z. ..~..G.....#......>...L..Y=.......h..mv..t..z........}...If....?7.I........2.....C....fR."O....~.{.-..R...E.n.&c0d.]S...m.4.f..\.Z.]....5....KA?.&(8...:r...........z&..\|...mk.&.H..H.T.x9./.'50........0..(\...1;.4o.v....W.$$.0..TY.B..V.Y.j...!....r....V...e...~.1..,.....J1..`K}......`. ....P 6Cj...e.f......U..... ..P.;...5W.....2PS@X.+.1k&..88>9..H.H.o./.W.a..F...~.._..t.{../.(...7.......5...5Z.\.T$.:...'.!.=.=.DJ.........F..1....@6.?>..;;.....L..s..A.wq..B..:2....+9...KT..Dt.a.+/...v..P......v[h.j$.rA.d@TB..B.&.)!.I.n.w.._t.w!...[.&.N..a....HL.z.Y.....t.F<0..`....2i..L"....+<.h$....... p...).i..+!..5...+=j..=h..mm.,....o~.u6.Iy.5SQ.....e<..aI....n..&..[..s@.Z.......-.l..J6...=.'>.9..8.&............;n..#.1..8....L.......A.3.....z8L.A.>...c,....z....k.*&.$;.;.QSkA..m...!4. .@V Q...eX..... hh..b..H....?...k.Yf.......;(..(.`/@....9.I@.2.....Q......i^.[I.wa...D..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	980
Entropy (8bit):	7.3567548093378
Encrypted:	false
SSDEEP:	24:uJBfdpjlDpBiptQi3nbS0ND1WFhWZ4p3g9EZbGQYgfz:uBfdpjlpQNX9ND1F2gEpGQYgr
MD5:	064FEA5CD4277FA3D888D17BDDF65A02
SHA1:	93D7AB059A5962482123C7613C54BAC30BECC7A6
SHA-256:	9C986B93CA38159EF13E438DDAD3F77F14F743CD4B2308C03C168346E5E9033B
SHA-512:	C36A0A752F101D4DA3FA6CFFD0850FC26E151A17F9DFB5A545A51D5D64393880DFAD157D6F41DBA19BE5DA2D18D698B2BCB226D4692C9EC5412638E9229B6022
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................6PLTE......................................................S.......tRNS.. ..P.`@p....0........<IDATx...z. ... ....jW[E@...s...G..$..45555.?u.....@8...ZJ.W?.....bC...@(...x...@ .g.L..@..`......A.=;.....Q.....g .@..~.Q.Waz.Ahg.....Jl'l..Y.......<.[@$.~1IB....g.u....O......=..l\.....h.<.3{%.C...."j..XT5..p.)`H..X..&.kD........@.....K.8...@..3....s] ...$...$3.H..sC^....f.}.YP}qz....W.P....4........kE....%.:.w._.P..M.[ZJ..x.v.....p.......LGb..t...\|.bF...Zx'....Kw`......_avs.b.....}..Dv.8.S....>.b...!.....=.w...........#..)j}.\......0%..T....Y....@.....T4$.+.\..q...T4..7..'....@._T..8...g...b..U....#....></H4A.......[.}.f..(...]RK..lJ........."..M+JN.[6".b+....d.. ..T...u.E#V.VH..@F....#...8....5...}..*-RE,...C.... ..\...(..t...2l.........w.5....@.\|@<k4x..L!.Ju...W.XS..#..p~[H:2.......O.-sL..b..!...D....@....>@4.=.....$ ..y.....~QZ.&..%.....$....U/.5...D..g..]......Jx...hjjjjjj..~....Y^.M`....IEND.B`.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 105776, version 1.0
Category:	downloaded
Size (bytes):	105776
Entropy (8bit):	7.997698577634301
Encrypted:	true
SSDEEP:	1536:97gkIV3kNCPB6vwmOqaGQKpLEM93CVA0l5p/BGrNITrG3pI+fl5N5D10:97gX3JPBVmOq+x1BGr2KZI+vN5D10
MD5:	DF1878BEEF6F76B3B8B9C3A479BFA5CB
SHA1:	5724CF8D410C6BD487A002A14386231C29C933C6
SHA-256:	C7B73DC2A43D6620B4AE7B1E05EEA2342CF309352B4DCAADEB4491C5B72468E5
SHA-512:	C5B1B9312EF7111D95C07C863E19EF731155109AA5FDB451ECE9B509884146CEEBDA3B314F42A917230F81823FF8ABC89A70BF9719DCBA34BF327C2678A1C544
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjRV6SIc.woff2
Preview:	wOF2.......0.......T..............................<...X..2.`?STAT..P........Q.....6.$.... ..f.....[..r.fW.qt'..Z...E.Ds.~.........[..k.G.VR.I.......$...-<...........9.{..........EY.J.[MhHo=jkJuS..'...#...Q..-.dQ#,.aN...`E>},.N..n.%ShTI.T..SP...6.7SI.....K.E..6..J3.Bp.I..\|.c....&<.eM.......z..W/.V..%.GJ..%lOQD...Cq..e...p`C....z.~..n6%......\|/N(..,_....J.F.C.#C~..._e........3...[`(..@....2-[.q..\|........./...:....#Z.(..P..P.F...0jVnb..;...t...m.....`.....$F..@D...#...2..H.....%HJ..6"_.D.0Ds.m.5.5..Z]....F.....,"..H..#.1.....!.qO?3{d.......Jw%P.>..........s.o3.f.x.t...4.+fyLB...p.\|.]..++..gv ..t`...&s.C@=ID.Vcm..^..... .,Aw`.4.N....]...p...#.1.ak.R[H....{e...\|?'.........!.D....Be?...zEEA1...$:......?..ni.\.6..6qFg..Y..}>a0.~.F.PK...j....%.W.>.R...W.?.e.VrE#..[ ...H.U.l9.l).....Q........['....r.......w.n#.,sR.!Tbi......_..l.J...7....Hc..........@;..t.T.Zu.Z...b..^.?T.T.....4...#@&....L.n.A....=x.........}..]....3.0I.L...=..)......*Z..j,...."...

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42296, version 1.0
Category:	downloaded
Size (bytes):	42296
Entropy (8bit):	7.993503490899671
Encrypted:	true
SSDEEP:	768:IS4cNuQDLlcxmEyKRCyplk50W1AcLgmYVii3ZAv6MwHZtFqXeqRstTBVredGm+IX:IS/UQDqvyQq5j1AckQiaCMeXFtTH2SiV
MD5:	20A5ED564FE91199A53645DD2A8F8BCE
SHA1:	878AB8E8E2A0BBDE4F47359D625DB2B81F7AC0A1
SHA-256:	3109801208D4C4B75FF98BB721D0AEE286293C2F0D2F47F778DCFAD779E9F5EE
SHA-512:	A4195F0BAE426F2886058FC84630D3D6DAA855D8AE86FDD558858D19A2F2EBD0BA4515826827BAB85225D36CA53DCBBB8AFAE88F100B5793F70F1CE4B3E3C6A5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvUDV.woff2
Preview:	wOF2.......8.......(..............................X......,.`?STATH..t.....`.....j..6.$..P. ..x..U..[..AU...W....`@......h...7~......:.&.v.[a......R.............d...;...].!...A...Z...BdnQ.$E.E.$.T.&..0...{.......L.km..1...1^MK........Q.$So....9.^_M.Ky......V-..N.tN;D..Qy.D.h.&......Ew........N7.2.K...p.:{..O.F.#...1d5...9..4...2.0Gt"l...^=.=x.RY...t=......8.u&...T...ePT>..3..k..Y-B....:.M..C..p..t._..Q......^.L........{9..n...WW...._.C.vm.X.;z.....,.:Q.`....q......O.+ .5dp"<.y..,.:..rp.@.r.z({.Y.R..d.......[.....w?.Q":(..@.........;..m......A..r{.rQU...<...,.'.j.S.}..s.n6U..Kt..S{i.yVI^d..(...Gi.M..R.N......sQ.J.Vh....]...B.%.......3 ...B\|.......#......}]..M..G...#.I>....s.s...6..c..'...%-,..;>..P.haDMP.+"....b...rT.h.8...yg%....<c..}.xrm...IT...T.d..yH...Oco.........4...I%.6.HSK.-5."C.@1.b2lc...e.:&l.........=Tl........F!&[...bm.M........@E.,.<+.....X!$WV2....L..B.u"....dc.>.Z).@..YJdp..+7R.@....Q.P..P....@..SW.9M..i.......~......yC.*$.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1420, version 1.0
Category:	downloaded
Size (bytes):	1420
Entropy (8bit):	7.723110473429003
Encrypted:	false
SSDEEP:	24:PIOJL9JTXY3oLB09sXzsG2PGl589W5VCBMSVtR+dSGwf6UJ93ciyuJL:PIOJLTXeMK2s1el5b5VLKtR+8zfxZci3
MD5:	F8FB2BDE26ED2B7A60BA773D42DD2150
SHA1:	70871B9E74126289901A00F44B8271849A125DBD
SHA-256:	9DAA921A21820750F7FE6223AC35072394F99209C374409981F6EFD1B2E3DCD5
SHA-512:	B397932A81E81F76E31E85731A92CF468EE523E89313DA0D78A1513F7CD48C8D5BAAC83C3E02BACBEE45C9CBFDDE8D69BE0D1B6DC584C67624DAC1F027942CE1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJHkq0.woff2
Preview:	wOF2...............`...1............................F...`?STATH.d....D.m....6.$.$. ..h.H..._.(.....5.$a..3.\|...7......B.7.BT.4...5..:D.k6......4.G....D...8.3.W..+..e",f!.(.RL..K4.$..B.TB{.2b!1d.I...[.9...;..j..F8!...... .......H419...O.....0....@...].. \V..1...$..)&..0<.....x.......Ls.\|.......$.1...%`@..."..i6...;.\...]...$.!.. -..Q..T.?.....h.'?.........l$.<0...{........(.4....-..R...A.$.oK...@.0.(!d4.#.@.0...B..\...~=N&.nj{.5......MjBq.......S2..@..7....e......J.....<..Rj.......J......u.5.)...mr.K6-.iQ\[8y2...{......ft....e...O.2.QZ.N..f`.....D...g..+K.]"..S..l?..^$...]J".sw./<l6a.t......s.....:.y.Z..;.x....R.1...d`......y..:..oi...Iv.\|[..../.G..4.i..J'..v..?.-.M^..\i...n.".d.I.L..9xt....R.%K........>}}^..";.C.'\|.n.j..L......[...b..m..j}U.'...w..XI..,...G....{X...!3o...j.R..q.w.bO99...Zm..c.J.'Q9.....i......mJ..aG.....'Jd.:.J..S.mXaN)jV..7gk..q..s....T.....5.B....{c...9q...............Q.5.. /..!.........h...$..'..>.......X..0.cbm..f.'......8..R

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 49980, version 1.0
Category:	downloaded
Size (bytes):	49980
Entropy (8bit):	7.996799215294005
Encrypted:	true
SSDEEP:	768:4NDq0SoQR6dpJ1vmaM6qe0DxytWLtO20RlJ0G9dPPlBeeeWsx9HiKdfbZ2g3A:SoR6d/BmaFq/LEPiM3+HPx9CKqwA
MD5:	7B69C53249D749F80F5AC911A9F6A416
SHA1:	D6283C043883942BFB577D0F7F2477DB7C7B10B2
SHA-256:	AF6B37D5CEC7927D3BDFBCD8C75D7BF80C29C583D71B75ADE321EF706A10BE32
SHA-512:	F191626E8DF898011470510827C91750C64463BB7A739243A4AF205E0AE76F8EEB98C9BBD4C2B46484864F35BBF318E748EF6D1DBEBD71A3D9E5EA8C585787CA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlvBg.woff2
Preview:	wOF2.......<......................................j...L..j.`....H..<........4..Z...x.6.$..0. ..~. ..)[....d.z..WP.!@.g..L~.jds...nCj3.I...........)....oH&qX..I..`][mO..A...D...#.9.Y..."BxD0..u."..$w.}.B......=.O$....<.p_cBd...xn.9h/.d..a....3:d....S}......M1....... ...03PP'W7.$%...,K.<.l]OAT...H.T.Y.m...V.&......>...\|`\|.f..._G.?._. .#p......L.N.fg.C&...;..s.1D.5....<:...9../F..#..x.o..v.F...l.....)Ie.~...w.+..1..QY.?.x..BT.L-..c..z'\|`.;D-H.E..h..K.b..}j.....<.8......C.$U.7..j.XX"....D.P.Y..........F...%#t..rD....@...FR....%T...`.~Q..H.J.E1.z..r6Q:.... ^.......}.5...6y[...0ID.&..5DB.R..m.h...u........m.Z..VP..BW....Ku.].(.........B....N.`.....gr.=.\..E..$.S.>.xmP........... .....9......p!.GtC;..a.zF\.....;.^i\T..7k...[.M)..........X.p..k.}.CT.T.*.....=h..7@..].....{..aa&2.g..pO..p3..Y.AV8X1....T....L..<.....@..9..1..k...k.....h...b^...^.0=..b"z.c.bi6.T.....L5:...s:n.)...Q.IG..'...#..yM..ey....V.......@zk............h.].7......^d.Q.X...n..`

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44980, version 1.0
Category:	downloaded
Size (bytes):	44980
Entropy (8bit):	7.994798586860677
Encrypted:	true
SSDEEP:	768:bsAmH++kJwbmKlSq79G/siQusuXt6zp9tDWW8jVMbfIvTvrqk+61+hpd5USy/EF1:bsr++mwJlSq790lQLud6zp9tt8jVMcvm
MD5:	A32CAE41AA72AD6CA75FF8B5A7A11606
SHA1:	FC29CA3935D5F85C169448D7CC6410C2560D92BC
SHA-256:	33EA7445E374A6AAB69F4E13DDBC9FC0E356C731E2D1F093619B93D4281BBE2E
SHA-512:	CC5EA4383668E7E20CCC76EF91551C967371781BB7A09947B7B2C55916A9282219A15AB11D747D9774D91C51DC2E379E7CC8D25C8CFDAEFFB1E4B4224F486228
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNirXA3jw.woff2
Preview:	wOF2...................N..........................$...x..4.`?STATD.......P..V..6..6.$..^. ........[......./...H.!..VK..m.`n-..6.l/ ...N.v..../_...........](.IZ.....S....=.&..MH.NsP[.-H\|.c.y.....6.N....U.....Y\|n......~Tz..S.uK..vG"....F.........F)^.7S.;=d.....c<.s....b...m.4X.T.l.....Uf..{......;......O,....~...x#a.=..f...4...s.3.R$.)sg..2;m.I......G@.@PP...3.!u..de@.La}.....nJ.H....F.N...3j..S...~...z`..JtS...+..:....h.......^LR.0.^R..o..ODI,..$G....M...G.!.n?o.Y,..B....u$.q%$_X$..$.t..._....h..ulK..q.>w...^w..&\..NU..CR.gI$.E'6F .?`w.N.l..o..\|....{.{.r..F."V`,.....u........7]..E...\|......J.4.&m#"m..MSOR7Z....>...cl01L..6&.l...@@B.I....[.uz.....vM.ejY.es...4.l...n....,.....2.*..@..UZy.p..i?..o.-.n......s.?..t.............D>P1jS.....q9Tu..zD......:....f.8. ...d..,X.E^.%....}......L.x.L.I$.b........'l.(L...)..I.c.p=.....+61&l.}qEe...p.....x.c...a[..j1../`...N.!..O!....7E;P.~..-x(...D%^+h.xH4J.y..wO/u..`.2Y2..%.so.Y.y+x.w..d...qkk.De..`.$..7...

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	dropped
Size (bytes):	215614
Entropy (8bit):	5.528413851049405
Encrypted:	false
SSDEEP:	6144:tpzrnwz27bzO6I+wZDDjuBv5Vjq3B30GSXOA2Pnpm6UzDnI13o2MnNzKD/t0jq:Hrnwz27bzO6I+wZDDjuBv5Vjq3B30GSY
MD5:	102ABCC451D422BD0BCA6E0FB732FD2E
SHA1:	5B194A8BDDA070D1FB0430EB3F94F72B56E93997
SHA-256:	2BC2123067EA754720D0F5B76C8D0A65987D02DA970BEA8D5AE59A871C26CF93
SHA-512:	BF7ED974F79CD80A5D3F9FE2F6C59E76E09D069441F7B932D316FEA000DE8F6A9C09FAF2470E640DBFCF5671C81A505F202F563771BF63B45012AB13A4C40420
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Je=function(a){return _.Qb(a)&&a.nodeType==1};_.Ke=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.Ge(a),a.appendChild(_.we(a).createTextNode(String(b)))};var Le;_.Me=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;c===""\|\|c==void 0?(Le\|\|(Le={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Le,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Qe;_.Pe=function(a,b,c,d,e,f){if(_.tc&&e)return _.Ne(a);if(e&&!d)return!1;if(!_.rc){typeof b==="number"&&(b=_.Oe(b));var g=b==17\|\|b==18\|\|_.tc&&b==91;if((!c\|\|_.tc)&&g\|\|_.tc&&b

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 54212, version 1.0
Category:	downloaded
Size (bytes):	54212
Entropy (8bit):	7.996118207813738
Encrypted:	true
SSDEEP:	1536:8sEB4tJYg9vMHihmW3kiesSO/Iy/EEbOPK:8sE0JSCsWZesSaIsnOS
MD5:	DFA374BE8A198433A11856E9967E96F9
SHA1:	9E8D11BA6270CCB1254686C0F24A05F21D33A661
SHA-256:	0BC130FEA6C21498BF358680BE297533AF347EBCDBC18576629FF1D89F8638F7
SHA-512:	C18730EE5A9E1BC97E441726D74FEA87222F9AC0CDA4B02C7EAAA97A4F1319BBBBB7B5257037AB3687AB8345FD1E73F933005875A538087A84EE447F2F103E8B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBhc4.woff2
Preview:	wOF2...................^..........................j...L..j.`....J..<.....@..Y..Z...x.6.$..0. ..&. ...[..q....iX.e.....ySkC...........1....I..(....~R..r.v......U.\"9<..(CT.Y..2R.>%<U..a...w..1.K.B..w....}....dJ..n..OI.)..9"2.i0w.N.w~....&...A.U<$(.%.I..#HX"....;>7s-.v^0.1 ..."......#./...K\7.s..dJ.d..q.p..tq.\|....E........'.3.n.2.lw..&....^8.)3.B.q_...HUV.h]v.....~. ..2..[.F..+O.$...~un.......+n........s.{......"...Ed..C.0.R.....`Tl.Fm......?.....#Z....'.#G.........0..F...........`...].'^................2~.~...........=r..=......O.........,..RZPB@T.(.6(..X.........{_.C&$.e,..$.e1.....8..xg.....\|,/.].......`)....4....w+..h...?..........5.F?.....V.b...../...?.r...w..J....LZ..!..Y$.a^~s.B.^..Hi&..&....6...D.{;UY'..(5I..,U. .`.n..."..F..d.+.....o.`vX.y../........w.6..%..B.1....Z~...g.{zb....M.1 ;+QW.B...O.....;.e...3.j......ts*..AjA...r..1.,..G. s.t.95{w<..}.........=3.4..f..>.8.I..$..g.9..>...r..B...% ....4...%x.h].2......!.m[......

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5685
Entropy (8bit):	5.417847317797427
Encrypted:	false
SSDEEP:	96:GhOLzFZMOLK3qOLnOLjJc+u+OL7NMhOg7FZMOg93qOggOgEJc+u+OgjNMhOCzFZk:GEdK3PC3W+vi93kaAJmJY132g4vK
MD5:	2F4390015925BE2DBF2F216A486759B5
SHA1:	5D4872433FBD0F82A8FFE267C0D88431779EF303
SHA-256:	E1B5A501FC26EB56E0B99CD686A022BFAD51B34E3942E51170473CBE4FDECAF1
SHA-512:	101A1CD7B9AF83581E0EBFF3B94C423BD48F7EC71803BAA1B15D740DBC0823BC1CB51126B5C8C597417C4260C5589BC08DCDC07BEA4855808693BD5EF5EFCF96
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text_old:wght@400;500;700
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 20:39:37.867495060 CET	192.168.2.5	1.1.1.1	0xa863	Standard query (0)	bit.ly	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:37.867629051 CET	192.168.2.5	1.1.1.1	0xb6d	Standard query (0)	bit.ly	65	IN (0x0001)	false
Oct 30, 2024 20:39:38.706063986 CET	192.168.2.5	1.1.1.1	0x9189	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:38.706219912 CET	192.168.2.5	1.1.1.1	0xdc8a	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:39:40.670553923 CET	192.168.2.5	1.1.1.1	0x89ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:40.671241045 CET	192.168.2.5	1.1.1.1	0xa238	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:39:47.311712980 CET	192.168.2.5	1.1.1.1	0xb692	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:47.311969042 CET	192.168.2.5	1.1.1.1	0x717e	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:39:50.022452116 CET	192.168.2.5	1.1.1.1	0x1fef	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:50.022631884 CET	192.168.2.5	1.1.1.1	0x725a	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:39:51.019416094 CET	192.168.2.5	1.1.1.1	0xad3a	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:51.019875050 CET	192.168.2.5	1.1.1.1	0xb13c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:39:54.905798912 CET	192.168.2.5	1.1.1.1	0x451c	Standard query (0)	0.docs.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:54.908472061 CET	192.168.2.5	1.1.1.1	0x792c	Standard query (0)	0.docs.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:39:56.396162987 CET	192.168.2.5	1.1.1.1	0x525f	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:56.396636963 CET	192.168.2.5	1.1.1.1	0x5a25	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:39:56.398932934 CET	192.168.2.5	1.1.1.1	0x30d4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:56.399343967 CET	192.168.2.5	1.1.1.1	0x86d4	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:40:00.544723988 CET	192.168.2.5	1.1.1.1	0x140	Standard query (0)	peoplestack-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:00.545088053 CET	192.168.2.5	1.1.1.1	0x4b86	Standard query (0)	peoplestack-pa.clients6.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:40:07.522697926 CET	192.168.2.5	1.1.1.1	0xea31	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:07.522697926 CET	192.168.2.5	1.1.1.1	0xc49b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:40:13.605161905 CET	192.168.2.5	1.1.1.1	0x9cf6	Standard query (0)	contacts.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:13.605376959 CET	192.168.2.5	1.1.1.1	0x3934	Standard query (0)	contacts.google.com	65	IN (0x0001)	false
Oct 30, 2024 20:40:16.839346886 CET	192.168.2.5	1.1.1.1	0xfb4e	Standard query (0)	contacts.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:16.839788914 CET	192.168.2.5	1.1.1.1	0x7c52	Standard query (0)	contacts.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 20:39:37.875220060 CET	1.1.1.1	192.168.2.5	0xa863	No error (0)	bit.ly		67.199.248.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:37.875220060 CET	1.1.1.1	192.168.2.5	0xa863	No error (0)	bit.ly		67.199.248.11	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:38.713869095 CET	1.1.1.1	192.168.2.5	0x9189	No error (0)	docs.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:40.678260088 CET	1.1.1.1	192.168.2.5	0x89ad	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:40.678994894 CET	1.1.1.1	192.168.2.5	0xa238	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 20:39:47.318897009 CET	1.1.1.1	192.168.2.5	0xb692	No error (0)	docs.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:50.029820919 CET	1.1.1.1	192.168.2.5	0x1fef	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:39:50.029820919 CET	1.1.1.1	192.168.2.5	0x1fef	No error (0)	plus.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:50.031269073 CET	1.1.1.1	192.168.2.5	0x725a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:39:51.027297974 CET	1.1.1.1	192.168.2.5	0xad3a	No error (0)	play.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:53.350167036 CET	1.1.1.1	192.168.2.5	0xd747	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:39:53.350167036 CET	1.1.1.1	192.168.2.5	0xd747	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:53.365297079 CET	1.1.1.1	192.168.2.5	0x7db5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:39:53.365297079 CET	1.1.1.1	192.168.2.5	0x7db5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:54.917802095 CET	1.1.1.1	192.168.2.5	0x451c	No error (0)	0.docs.google.com	browserchannel-sites.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:39:54.917802095 CET	1.1.1.1	192.168.2.5	0x451c	No error (0)	browserchannel-sites.l.google.com		74.125.206.189	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:54.920212030 CET	1.1.1.1	192.168.2.5	0x792c	No error (0)	0.docs.google.com	browserchannel-sites.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:39:56.404015064 CET	1.1.1.1	192.168.2.5	0x525f	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:39:56.404015064 CET	1.1.1.1	192.168.2.5	0x525f	No error (0)	plus.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:39:56.404515982 CET	1.1.1.1	192.168.2.5	0x5a25	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:39:56.406686068 CET	1.1.1.1	192.168.2.5	0x30d4	No error (0)	play.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:00.552923918 CET	1.1.1.1	192.168.2.5	0x140	No error (0)	peoplestack-pa.clients6.google.com		142.250.185.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:06.996421099 CET	1.1.1.1	192.168.2.5	0xeccb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:40:06.996421099 CET	1.1.1.1	192.168.2.5	0xeccb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:07.529767990 CET	1.1.1.1	192.168.2.5	0xc49b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 20:40:07.531040907 CET	1.1.1.1	192.168.2.5	0xea31	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:13.612426996 CET	1.1.1.1	192.168.2.5	0x9cf6	No error (0)	contacts.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:40:13.612426996 CET	1.1.1.1	192.168.2.5	0x9cf6	No error (0)	plus.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:13.612596035 CET	1.1.1.1	192.168.2.5	0x3934	No error (0)	contacts.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:40:16.847320080 CET	1.1.1.1	192.168.2.5	0xfb4e	No error (0)	contacts.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:40:16.847320080 CET	1.1.1.1	192.168.2.5	0xfb4e	No error (0)	plus.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:16.847687960 CET	1.1.1.1	192.168.2.5	0x7c52	No error (0)	contacts.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:40:29.114728928 CET	1.1.1.1	192.168.2.5	0x72f5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:40:29.114728928 CET	1.1.1.1	192.168.2.5	0x72f5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 20:40:49.143198013 CET	1.1.1.1	192.168.2.5	0x3bdd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 20:40:49.143198013 CET	1.1.1.1	192.168.2.5	0x3bdd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	67.199.248.10	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:38 UTC	666	OUT	GET /va-voter-purge-c3 HTTP/1.1 Host: bit.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 19:39:38 UTC	558	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Wed, 30 Oct 2024 19:39:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 149 Cache-Control: private, max-age=90 Content-Security-Policy: referrer always; Location: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?usp=sharing Referrer-Policy: unsafe-url Set-Cookie: _bit=o9ujDC-bf77520fc17a6d1910-00R; Domain=bit.ly; Expires=Mon, 28 Apr 2025 19:39:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:38 UTC	149	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 2f 64 2f 31 52 5f 69 52 61 61 77 69 31 67 5a 45 72 30 79 70 70 51 77 76 6f 74 4d 5a 49 45 42 6c 66 70 5f 52 42 75 50 36 48 33 65 4f 48 76 6f 2f 65 64 69 74 3f 75 73 70 3d 73 68 61 72 69 6e 67 22 3e 6d 6f 76 65 64 20 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><a href="https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?usp=sharing">moved here</a></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:39 UTC	730	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?usp=sharing HTTP/1.1 Host: docs.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 19:39:40 UTC	5673	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Link: </static/document/client/css/1302052441-KixCss_ltr.css>;rel=preload;as=style;nonce=U2V8VCB0xHLHIKeaiGqm9A,</static/document/client/js/4047955786-client_js_prod_kix_core.js>;rel=preload;as=script;nonce=U2V8VCB0xHLHIKeaiGqm9A Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:40 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubDomains Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=,Ap3AAAMPGQdpsdaCmhccZ9PVcAc8wgfls3lmUoeAbR5xAnl6eSaF0eLG/QkQVNw2ihrBAOn6QgkNr0PQZbyNswoAAABkeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IlJlZ2lvbkNhcHR1cmUiLCJleHBpcnkiOjE2NjY3NDIzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-U2V8VCB0xHLHIKeaiGqm9A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Reporting-Endpoints: default="/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/web-reports?bl=editors.documents-frontend_20241022.02_p3&clss=1&context=eJwV0HdU1UcWB_Dx95v7s_AoomhEQRQsiBiKxkITHu_tgwgSC_OTWCKCHKMLEVHXLsb1rKjrQaPYgEcvz6dGl2MXjdiJJbYVXaKslaIrSDe8_eaPz8ycmblz79xe9Q72HdGsALYpgkX0ECwb7sJaK8HMcEIj2A0IthMsD5ztBRvhIJgWKmB-P8HK-ws2-gvBTBDhKJjLQMGiBwmW7yzYosGCdQ4VLM5VMM1wwZzgAnSOEsx6tGC9oRg8PAXbNUawLd6C6ccJlgZ7wPKVYFPHC3Z_gmAvISgQOb8WbCl8MxO1qIKNh7sxgj2H7LmCPZ4v2BvoGSfYAHgYL9jYxYKFQt1y5IZ_bxTsLRSnCnYKbm8SrBpCfxRsBkzYIZgB0vYKdgCGZQg2Drr2CWazX7BNh1AvbMrGDKONgvnDwXz0Aa7AQ7hpFqwK-h4TzA1Ol6GfUH1esPcw5Kpg3rAOdkDYdcFmQfAt_A_0legl7IcS8LgrmB-UPUIOaAL5sWD_fCJYFhRU4QxOww34pVqw38D5hWBjIOOlYEVg-0qwwXAcfoGr8AjevBWsFWIbBUuG19ACsbYquwh3QWOnskHwpr_Kwh1VFgN2Y1XmAvO-UtlyOAu34MBElZXCI3gNPSNUFhilskj4CbZMV9leOKmq7EWMylLnqCwdguer7Bu4FKuye2C3DO_DjBSVrV-PONgNByELCuEZvIROkDeobCC4Qh6Y4BRchMtwC2qgFlrBAr873GMxo-qkWNg--6P0E1QlfJRq4O-XP0o7IKGmUUqCAV82SUMgKrpJUuHomGbpJFzyapacDc3ScJi5rlmaA4M2Nktu0H9TszQYWs40S11w6EqzlA83FrdK92CVf [TRUNCATED] Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; Domain=.docs.google.com; Expires=Wed, 30-Oct-2024 20:39:40 GMT; Path=/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo; Secure; HttpOnly; Priority=LOW; SameSite=none Set-Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; expires=Thu, 01-May-2025 19:39:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: GFE_RTT=212; Domain=.docs.google.com; Expires=Wed, 30-Oct-2024 19:44:40 GMT; Path=/; Secure; Priority=LOW; SameSite=strict Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:40 UTC	4392	IN	Data Raw: 31 31 32 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 32 56 38 56 43 42 30 78 48 4c 48 49 4b 65 61 69 47 71 6d 39 41 22 3e 76 61 72 20 44 4f 43 53 5f 74 69 6d 69 6e 67 3d 7b 7d 3b 20 44 4f 43 53 5f 74 69 6d 69 6e 67 5b 27 70 6c 73 27 5d 3d 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 43 Data Ascii: 1120<!DOCTYPE html><html lang="en"><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><script nonce="U2V8VCB0xHLHIKeaiGqm9A">var DOCS_timing={}; DOCS_timing['pls']=new Date().getTime();</script><meta property="og:title" content="SC
2024-10-30 19:39:40 UTC	1378	IN	Data Raw: 31 63 61 62 0d 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 77 36 31 59 68 5f 45 43 35 4d 47 37 38 32 73 5f 37 4b 71 49 4e 41 22 3e 2e 67 62 5f 31 64 3a 6e 6f 74 28 2e 67 62 5f 6f 65 29 7b 66 6f 6e 74 3a 31 33 70 78 2f 32 37 70 78 20 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7a 2d 69 6e 64 65 78 3a 39 38 36 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 67 62 5f 5f 61 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 62 5f 5f 61 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 61 2e 67 62 5f 50 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 34 32 38 35 66 34 3b 63 75 72 73 6f 72 3a 64 65 Data Ascii: 1cab<style nonce="w61Yh_EC5MG782s_7KqINA">.gb_1d:not(.gb_oe){font:13px/27px Roboto,Arial,sans-serif;z-index:986}@-webkit-keyframes gb__a{0%{opacity:0}50%{opacity:1}}@keyframes gb__a{0%{opacity:0}50%{opacity:1}}a.gb_Pa{border:none;color:#4285f4;cursor:de
2024-10-30 19:39:40 UTC	1378	IN	Data Raw: 23 34 33 38 37 66 64 2c 23 34 36 38 33 65 61 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 34 33 38 37 66 64 2c 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 34 36 38 33 65 61 2c 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 7d 23 67 62 20 61 2e 67 62 5f 54 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 67 62 5f 54 61 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 7d 2e 67 62 5f 54 61 3a 61 63 74 69 76 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 3b 62 61 63 6b Data Ascii: #4387fd,#4683ea);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr=#4387fd,endColorstr=#4683ea,GradientType=0)}#gb a.gb_Ta{color:#fff}.gb_Ta:hover{box-shadow:0 1px 0 rgba(0,0,0,.15)}.gb_Ta:active{box-shadow:inset 0 2px 0 rgba(0,0,0,.15);back
2024-10-30 19:39:40 UTC	1378	IN	Data Raw: 69 76 65 7d 2e 67 62 5f 41 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 77 69 64 74 68 3a 34 30 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 67 62 23 67 62 20 61 2e 67 62 5f 41 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 67 62 5f 41 2c 61 2e 67 62 5f 41 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 67 62 5f 62 64 7b 62 6f 72 64 65 72 2d 63 6f Data Ascii: ive}.gb_A{display:inline-block;outline:none;vertical-align:middle;border-radius:2px;box-sizing:border-box;height:40px;width:40px;cursor:pointer;text-decoration:none}#gb#gb a.gb_A{cursor:pointer;text-decoration:none}.gb_A,a.gb_A{color:#000}.gb_bd{border-co
2024-10-30 19:39:40 UTC	1378	IN	Data Raw: 74 6f 70 3a 2d 31 30 70 78 7d 2e 67 62 5f 61 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 67 62 73 66 77 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 2e 67 62 5f 61 64 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 67 62 5f 45 61 2e 67 62 5f 50 65 20 2e 67 62 5f 61 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 67 62 5f 51 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 67 62 5f 31 63 20 2e 67 62 5f 51 65 2c 2e 67 62 5f 48 64 20 2e 67 62 5f 51 65 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 67 62 5f 41 7b 70 61 64 64 69 6e 67 3a 38 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 67 62 5f 41 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c Data Ascii: top:-10px}.gb_ad:first-child,#gbsfw:first-child+.gb_ad{padding-left:4px}.gb_Ea.gb_Pe .gb_ad:first-child{padding-left:0}.gb_Qe{position:relative}.gb_1c .gb_Qe,.gb_Hd .gb_Qe{float:right}.gb_A{padding:8px;cursor:pointer}.gb_A::after{content:"";position:absol
2024-10-30 19:39:40 UTC	1378	IN	Data Raw: 2c 36 37 2c 2e 31 32 29 7d 2e 67 62 5f 4b 63 20 2e 67 62 5f 67 64 2e 67 62 5f 68 64 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 2e 67 62 5f 67 64 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 2e 67 62 5f 41 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 36 30 2c 36 34 2c 36 37 2c 2e 30 38 29 7d 2e 67 62 5f 56 61 20 2e 67 62 5f 41 2e 67 62 5f 58 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 67 62 5f 41 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 2c 2e 67 62 5f 41 3a 68 6f 76 65 72 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 39 35 2c Data Ascii: ,67,.12)}.gb_Kc .gb_gd.gb_hd button:hover svg,.gb_gd button:hover svg,.gb_A:hover{background-color:rgba(60,64,67,.08)}.gb_Va .gb_A.gb_Xa:hover{background-color:transparent}.gb_A[aria-expanded=true],.gb_A:hover[aria-expanded=true]{background-color:rgba(95,
2024-10-30 19:39:40 UTC	457	IN	Data Raw: 79 3a 6e 6f 6e 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 7d 2e 67 62 5f 50 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 67 62 5f 38 63 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 6f 67 6c 65 20 53 61 6e 73 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 32 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 38 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 Data Ascii: y:none;visibility:hidden}}.gb_P{display:none}.gb_8c{font-family:Google Sans,Roboto,Helvetica,Arial,sans-serif;font-size:20px;font-weight:400;letter-spacing:0.25px;line-height:48px;margin-bottom:2px;opacity:1;overflow:hidden;padding-left:16px;position:rela
2024-10-30 19:39:40 UTC	1378	IN	Data Raw: 33 64 32 38 0d 0a 64 2e 67 62 5f 73 64 20 2e 67 62 5f 38 63 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 67 62 5f 45 61 2e 67 62 5f 62 63 20 2e 67 62 5f 74 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 32 70 78 7d 2e 67 62 5f 45 61 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 32 35 30 6d 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 32 35 30 6d 73 7d 2e 67 62 5f 45 61 2e 67 62 5f 52 63 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 70 78 7d 2e 67 62 5f 45 61 2e 67 62 5f 75 64 20 2e 67 62 5f 76 64 7b 64 69 73 70 Data Ascii: 3d28d.gb_sd .gb_8c{padding-left:4px}.gb_Ea.gb_bc .gb_td{position:relative;top:-2px}.gb_Ea{color:black;min-width:160px;position:relative;-webkit-transition:box-shadow 250ms;transition:box-shadow 250ms}.gb_Ea.gb_Rc{min-width:120px}.gb_Ea.gb_ud .gb_vd{disp
2024-10-30 19:39:40 UTC	1378	IN	Data Raw: 25 7d 2e 67 62 5f 71 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 20 30 20 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 20 30 20 61 75 74 6f 7d 2e 67 62 5f 45 61 2e 67 62 5f 62 63 20 2e 67 62 5f 71 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 34 70 78 7d 2e 67 62 5f 7a 64 7b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 20 31 20 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 20 31 20 31 30 30 25 7d 2e 67 62 5f 7a 64 3e 3a 6f 6e 6c 79 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 67 62 5f 41 64 2e 67 62 Data Ascii: %}.gb_qd{padding-right:30px;box-sizing:border-box;-webkit-flex:1 0 auto;-webkit-box-flex:1;flex:1 0 auto}.gb_Ea.gb_bc .gb_qd{padding-right:14px}.gb_zd{-webkit-flex:1 1 100%;-webkit-box-flex:1;flex:1 1 100%}.gb_zd>:only-child{display:inline-block}.gb_Ad.gb
2024-10-30 19:39:40 UTC	1378	IN	Data Raw: 79 3a 31 7d 2e 67 62 5f 4b 63 20 73 76 67 2c 2e 67 62 5f 4f 63 2e 67 62 5f 54 63 20 73 76 67 2c 2e 67 62 5f 4b 63 20 2e 67 62 5f 71 64 20 2e 67 62 5f 72 64 2c 2e 67 62 5f 4b 63 20 2e 67 62 5f 71 64 20 2e 67 62 5f 4a 63 2c 2e 67 62 5f 4b 63 20 2e 67 62 5f 71 64 20 2e 67 62 5f 74 64 2c 2e 67 62 5f 4f 63 2e 67 62 5f 54 63 20 2e 67 62 5f 72 64 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 38 37 29 7d 2e 67 62 5f 4b 63 20 2e 67 62 5f 71 64 20 2e 67 62 5f 4d 64 3a 6e 6f 74 28 2e 67 62 5f 4e 64 29 7b 6f 70 61 63 69 74 79 3a 2e 38 37 7d 2e 67 62 5f 39 63 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 6f 70 61 63 69 74 79 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 2d 77 Data Ascii: y:1}.gb_Kc svg,.gb_Oc.gb_Tc svg,.gb_Kc .gb_qd .gb_rd,.gb_Kc .gb_qd .gb_Jc,.gb_Kc .gb_qd .gb_td,.gb_Oc.gb_Tc .gb_rd{color:rgba(255,255,255,.87)}.gb_Kc .gb_qd .gb_Md:not(.gb_Nd){opacity:.87}.gb_9c{color:inherit;opacity:1;text-rendering:optimizeLegibility;-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:41 UTC	1008	OUT	GET /static/document/client/css/1302052441-KixCss_ltr.css HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?usp=sharing Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; GFE_RTT=212
2024-10-30 19:39:41 UTC	794	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 2986855 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 16:30:58 GMT Expires: Thu, 30 Oct 2025 16:30:58 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 11323 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:41 UTC	584	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2a 20 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 67 6f 6f 67 2d 70 61 6c 65 74 74 65 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 67 6f 6f 67 2d 70 61 6c 65 74 74 65 2d 74 61 62 6c 65 7b 62 Data Ascii: @charset "UTF-8";.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}:first-child+html .goog-inline-block{display:inline}.goog-palette{cursor:default;outline:none}.goog-palette-table{b
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 2d 63 65 6c 6c 2d 68 6f 76 65 72 20 2e 67 6f 6f 67 2d 70 61 6c 65 74 74 65 2d 63 6f 6c 6f 72 73 77 61 74 63 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 67 6f 6f 67 2d 70 61 6c 65 74 74 65 2d 63 65 6c 6c 2d 73 65 6c 65 63 74 65 64 20 2e 67 6f 6f 67 2d 70 61 6c 65 74 74 65 2d 63 6f 6c 6f 72 73 77 61 74 63 68 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 64 69 74 6f 72 2f 65 64 69 74 6f 72 74 6f 6f 6c 62 61 72 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 36 38 70 78 20 30 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 33 33 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 77 65 Data Ascii: -cell-hover .goog-palette-colorswatch{border:1px solid #fff;height:16px;width:16px}.goog-palette-cell-selected .goog-palette-colorswatch{background:url(//ssl.gstatic.com/editor/editortoolbar.png) no-repeat -368px 0;border:1px solid #333;color:#fff;font-we
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 2d 62 6f 78 2c 3a 3a 72 6f 6f 74 20 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 6f 75 74 65 72 2d 62 6f 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 3a 3a 72 6f 6f 74 20 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 63 61 70 74 69 6f 6e 2c 3a 3a 72 6f 6f 74 20 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 64 72 6f 70 64 6f 77 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 2e 33 3b 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 2e 33 3b 66 69 6c 74 65 72 3a Data Ascii: goog-menu-button-inner-box,::root .goog-menu-button-outer-box{line-height:0}::root .goog-menu-button-caption,::root .goog-menu-button-dropdown{line-height:normal}.goog-menu-button-disabled{background-image:none!important;opacity:.3;-moz-opacity:.3;filter:
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 6f 6e 2d 69 6e 6e 65 72 2d 62 6f 78 2c 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2d 72 69 67 68 74 20 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 6f 75 74 65 72 2d 62 6f 78 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2d 6c 65 66 74 2c 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2d 6c 65 66 74 20 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 2d 62 6f 78 2c 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2d 6c 65 66 74 20 2e 67 6f 6f 67 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 6f 75 74 65 72 2d 62 6f 78 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d Data Ascii: on-inner-box,.goog-menu-button-collapse-right .goog-menu-button-outer-box{margin-right:0}.goog-menu-button-collapse-left,.goog-menu-button-collapse-left .goog-menu-button-inner-box,.goog-menu-button-collapse-left .goog-menu-button-outer-box{margin-left:0}
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 3a 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 36 62 39 30 64 61 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 6f 6f 67 2d 74 61 62 2d 62 61 72 2d 74 6f 70 20 2e 67 6f 6f 67 2d 74 61 62 2d 73 65 6c 65 63 74 65 64 7b 74 6f 70 3a 31 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 2e 67 6f 6f 67 2d 74 61 62 2d 62 61 72 2d 62 6f 74 74 6f 6d 20 2e 67 6f 6f 67 2d 74 61 62 2d 73 65 6c 65 63 74 65 64 7b 74 6f 70 3a 2d 31 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 70 78 7d 2e 67 6f 6f 67 2d 74 61 62 2d 62 61 72 Data Ascii: :5px!important;padding-left:5px!important;border-bottom:1px solid #6b90da!important}.goog-tab-bar-top .goog-tab-selected{top:1px;margin-top:0;padding-bottom:5px}.goog-tab-bar-bottom .goog-tab-selected{top:-1px;margin-bottom:0;padding-top:5px}.goog-tab-bar
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 6c 61 74 69 76 65 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 62 66 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 7d 2e 6b 69 78 2d 61 70 70 76 69 65 77 2d 63 6c 69 70 70 65 64 2d 75 69 2d 65 6c 65 6d 65 6e 74 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 34 31 7d 2e 6b 69 78 2d 61 70 70 76 69 65 77 2d 63 6c 69 70 70 65 64 2d 75 69 2d 65 6c 65 6d 65 Data Ascii: lative;outline:none;white-space:normal;background-color:#f9fbfd;background-repeat:no-repeat;-webkit-tap-highlight-color:rgba(0,0,0,0)}.kix-appview-clipped-ui-elements-container{pointer-events:none;position:absolute;z-index:41}.kix-appview-clipped-ui-eleme
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 64 65 72 2d 6c 65 66 74 3a 39 70 78 20 73 6f 6c 69 64 20 23 37 62 61 38 65 36 7d 2e 64 6f 63 73 2d 67 6d 20 2e 6b 69 78 2d 62 6f 6f 6b 6d 61 72 6b 2d 62 75 62 62 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 61 64 63 65 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 31 70 78 20 72 67 62 61 28 36 30 2c 36 34 2c 36 37 2c 2e 31 35 29 3b 63 6f 6c 6f 72 3a 23 33 63 34 30 34 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 52 6f 62 6f 74 6f 44 72 61 66 74 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 Data Ascii: der-left:9px solid #7ba8e6}.docs-gm .kix-bookmark-bubble{background-color:#fff;border-color:#dadce0;border-radius:8px;border-width:0;box-shadow:0 1px 3px 1px rgba(60,64,67,.15);color:#3c4043;font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;font-s
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 6e 2d 63 61 70 74 69 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 36 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 38 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 23 6b 69 78 2d 62 6f 72 64 65 72 73 73 68 61 64 69 6e 67 64 69 61 6c 6f 67 2d 62 6f 72 64 65 72 64 61 73 68 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 70 78 7d 2e 6b 69 78 2d 62 6f 72 64 65 72 73 73 68 61 64 69 6e 67 64 69 61 6c 6f 67 2d 6d 65 6e 75 20 2e 67 6f 6f 67 2d 6d 65 6e 75 69 74 65 6d 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 3b 70 Data Ascii: n-caption{min-width:16px;max-width:18px;margin-left:-3px;margin-top:2px;overflow:hidden;word-wrap:normal}#kix-bordersshadingdialog-borderdash .docs-icon-img{margin-left:-1px;margin-top:-2px}.kix-bordersshadingdialog-menu .goog-menuitem{padding-left:16px;p
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 41 43 57 68 32 35 32 41 41 41 41 51 6c 42 4d 56 45 56 48 63 45 77 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 7a 30 37 54 37 41 41 41 41 46 58 52 53 54 6c 4d 41 53 77 6a 31 45 65 56 63 52 62 54 77 30 53 2f 42 36 6f 52 6c 73 4b 44 63 4f 54 66 61 54 72 55 41 41 41 41 41 59 55 6c 45 51 56 51 6f 7a 38 57 4f 52 77 37 41 49 41 77 45 54 54 57 51 58 76 7a 2f 72 30 5a 52 6d 6f 6d 41 33 4d 4b 63 76 4e 5a 6f 74 51 42 2f 6f 59 49 46 45 56 52 65 6b 4d 73 38 47 5a 54 37 36 65 6a 45 78 63 70 4b 65 42 78 30 38 79 71 35 4d 6e 48 4b 77 76 4f 4c 42 4c 34 68 4b 57 52 2f Data Ascii: ACWh252AAAAQlBMVEVHcEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABz07T7AAAAFXRSTlMASwj1EeVcRbTw0S/B6oRlsKDcOTfaTrUAAAAAYUlEQVQoz8WORw7AIAwETTWQXvz/r0ZRmomA3MKcvNZotQB/oYIFEVRekMs8GZT76ejExcpKeBx08yq5MnHKwvOLBL4hKWR/
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 6f 72 64 65 72 2d 6c 65 66 74 3a 32 70 78 20 73 6f 6c 69 64 7d 2e 6b 69 78 2d 63 75 72 73 6f 72 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 32 70 78 20 32 70 78 20 30 3b 74 6f 70 3a 2d 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a 35 70 78 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 35 70 78 7d 2e 6b 69 78 2d 63 75 72 73 6f 72 2d 6e 61 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 20 34 70 78 20 34 70 78 20 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 6f 67 Data Ascii: order-left:2px solid}.kix-cursor-top{position:absolute;border-radius:0 2px 2px 0;top:-2px;font-size:0;height:5px;left:0;width:5px}.kix-cursor-name{position:absolute;color:#fff;white-space:nowrap;font-weight:500;border-radius:4px 4px 4px 0;font-family:Goog

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:41 UTC	1005	OUT	GET /static/document/client/js/4047955786-client_js_prod_kix_core.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?usp=sharing Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; GFE_RTT=212
2024-10-30 19:39:41 UTC	789	IN	HTTP/1.1 200 OK Vary: Accept-Encoding, Origin Accept-Ranges: bytes Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 2948877 Date: Wed, 30 Oct 2024 19:39:41 GMT Expires: Thu, 30 Oct 2025 19:39:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:41 UTC	589	IN	Data Raw: 2f 2f 23 20 65 61 67 65 72 43 6f 6d 70 69 6c 61 74 69 6f 6e 3d 61 6c 6c 0a 66 75 6e 63 74 69 6f 6e 20 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 5b 5d 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 Data Ascii: //# eagerCompilation=allfunction _F_toggles_initialize(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);/* Copyright The Closure Library Authors. SPDX-License-Identifier: A
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 5c 72 5c 6e 22 2c 62 61 3d 22 20 20 22 2c 64 61 3d 22 20 28 22 2c 61 61 61 3d 22 20 61 6e 64 20 74 68 65 20 62 6c 6f 62 20 75 72 6c 20 69 73 20 72 65 76 6f 6b 65 64 20 62 79 20 22 2c 62 61 61 3d 27 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 27 2c 6b 3d 27 22 3e 27 2c 65 61 3d 27 22 3e 3c 2f 64 69 76 3e 27 2c 68 61 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 2c 6a 61 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 6b 61 3d 27 22 3e 3c Data Ascii: The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="\r\n",ba=" ",da=" (",aaa=" and the blob url is revoked by ",baa=' style="display: none;"',k='">',ea='"></div>',ha='"></div></div></div>',ja='"></div></div><div class="',ka='"><
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 65 3a 20 64 61 72 6b 29 22 2c 74 61 3d 22 2c 20 22 2c 75 61 3d 22 2d 2d 22 2c 6e 62 61 3d 22 2d 64 65 66 61 75 6c 74 22 2c 6f 62 61 3d 22 2d 72 74 6c 22 2c 76 61 3d 22 2e 2e 2e 22 2c 70 62 61 3d 22 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 77 61 3d 22 2f 2f 22 2c 71 62 61 3d 22 2f 61 2f 24 31 2f 64 72 61 77 69 6e 67 73 2f 22 2c 72 62 61 3d 22 2f 63 72 65 61 74 65 22 2c 73 62 61 3d 22 2f 64 2f 22 2c 74 62 61 3d 22 2f 65 64 69 74 22 2c 75 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 63 6f 6d 6d 65 6e 74 22 2c 76 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 65 64 69 74 22 2c 77 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 65 72 72 6f 72 22 2c 0a 46 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 68 73 22 2c 47 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 76 69 65 77 22 2c 48 62 61 3d 22 2f 6f Data Ascii: e: dark)",ta=", ",ua="--",nba="-default",oba="-rtl",va="...",pba=".google.com",wa="//",qba="/a/$1/drawings/",rba="/create",sba="/d/",tba="/edit",uba="/offline/comment",vba="/offline/edit",wba="/offline/error",Fba="/offline/hs",Gba="/offline/view",Hba="/o
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 65 77 20 74 61 73 6b 73 20 66 72 6f 6d 20 74 61 62 6c 65 22 2c 7a 63 61 3d 22 41 75 64 69 6f 22 2c 41 63 61 3d 22 41 75 67 22 2c 42 63 61 3d 22 42 4c 4f 43 4b 51 55 4f 54 45 22 2c 43 63 61 3d 22 42 4f 44 59 22 2c 44 63 61 3d 22 42 4f 4c 44 22 2c 45 63 61 3d 22 42 52 22 2c 46 63 61 3d 22 42 55 54 54 22 2c 49 61 3d 22 42 55 54 54 4f 4e 22 2c 47 63 61 3d 22 42 6c 6f 62 4d 65 74 61 64 61 74 61 22 2c 48 63 61 3d 22 42 6f 72 64 65 72 20 63 6f 6c 6f 72 22 2c 49 63 61 3d 22 42 6f 72 64 65 72 20 64 61 73 68 22 2c 4a 63 61 3d 22 42 6f 74 74 6f 6d 22 2c 4b 63 61 3d 22 42 6f 74 74 6f 6d 20 6c 65 66 74 22 2c 4c 63 61 3d 22 42 6f 74 74 6f 6d 20 72 69 67 68 74 22 2c 4a 61 3d 22 43 41 4e 56 41 53 22 2c 4d 63 61 3d 22 43 48 49 50 5f 44 49 41 4c 4f 47 22 2c 4e 63 61 3d 22 Data Ascii: ew tasks from table",zca="Audio",Aca="Aug",Bca="BLOCKQUOTE",Cca="BODY",Dca="BOLD",Eca="BR",Fca="BUTT",Ia="BUTTON",Gca="BlobMetadata",Hca="Border color",Ica="Border dash",Jca="Bottom",Kca="Bottom left",Lca="Bottom right",Ja="CANVAS",Mca="CHIP_DIALOG",Nca="
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 74 72 6c 2b 22 2c 42 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 45 6e 74 65 72 22 2c 43 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 45 71 75 61 6c 73 22 2c 44 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 4e 75 6d 2d 4d 69 6e 75 73 22 2c 45 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 4e 75 6d 2d 50 6c 75 73 22 2c 46 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 53 68 69 66 74 2b 44 22 2c 47 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 53 68 69 66 74 2b 4a 22 2c 48 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 53 68 69 66 74 2b 58 22 2c 49 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 6f 70 65 6e 2d 73 71 75 61 72 65 2d 62 72 61 63 6b 65 74 22 2c 4a 64 61 3d 22 43 74 72 6c 2b 43 22 2c 4b 64 61 3d 22 43 75 73 74 6f 6d 20 62 75 69 6c 64 69 6e 67 20 62 6c 6f 63 6b 22 2c 4c 64 61 3d 22 43 75 73 74 6f 6d 45 Data Ascii: trl+",Bda="Ctrl+Alt+Enter",Cda="Ctrl+Alt+Equals",Dda="Ctrl+Alt+Num-Minus",Eda="Ctrl+Alt+Num-Plus",Fda="Ctrl+Alt+Shift+D",Gda="Ctrl+Alt+Shift+J",Hda="Ctrl+Alt+Shift+X",Ida="Ctrl+Alt+open-square-bracket",Jda="Ctrl+C",Kda="Custom building block",Lda="CustomE
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 61 3d 22 45 64 67 65 22 2c 79 65 61 3d 22 45 64 69 74 22 2c 7a 65 61 3d 22 45 64 69 74 20 69 6d 61 67 65 22 2c 41 65 61 3d 22 45 64 69 74 69 6e 67 22 2c 65 62 3d 22 45 66 22 2c 42 65 61 3d 22 45 6d 61 69 6c 22 2c 43 65 61 3d 22 45 6d 61 69 6c 20 63 6f 6c 6c 61 62 6f 72 61 74 6f 72 73 22 2c 44 65 61 3d 22 45 6d 61 69 6c 20 64 72 61 66 74 22 2c 45 65 61 3d 22 45 6d 61 69 6c 20 6d 65 65 74 69 6e 67 20 6e 6f 74 65 73 22 2c 46 65 61 3d 22 45 6d 61 69 6c 20 74 68 69 73 20 66 69 6c 65 22 2c 47 65 61 3d 22 45 6d 6f 6a 69 20 72 65 61 63 74 69 6f 6e 22 2c 48 65 61 3d 22 45 6e 61 62 6c 65 20 62 72 61 69 6c 6c 65 20 73 75 70 70 6f 72 74 22 2c 0a 66 62 3d 22 45 6e 74 65 72 22 2c 49 65 61 3d 22 45 6e 74 69 74 79 20 77 69 74 68 20 69 64 20 25 73 20 64 6f 65 73 20 6e 6f Data Ascii: a="Edge",yea="Edit",zea="Edit image",Aea="Editing",eb="Ef",Bea="Email",Cea="Email collaborators",Dea="Email draft",Eea="Email meeting notes",Fea="Email this file",Gea="Emoji reaction",Hea="Enable braille support",fb="Enter",Iea="Entity with id %s does no
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 22 2c 49 66 61 3d 22 48 65 6c 70 20 6d 65 20 77 72 69 74 65 22 2c 4a 66 61 3d 22 48 69 67 68 6c 69 67 68 74 20 63 6f 6c 6f 72 22 2c 4b 66 61 3d 22 49 44 4c 45 22 2c 4c 66 61 3d 22 49 44 4c 45 5f 4c 4f 47 49 4e 5f 45 52 52 4f 52 22 2c 6b 62 3d 22 49 46 52 41 4d 45 22 2c 4d 66 61 3d 22 49 4d 41 47 45 22 2c 4e 66 61 3d 22 49 4d 41 47 45 5f 42 59 54 45 5f 55 50 4c 4f 41 44 22 2c 6c 62 3d 22 49 4d 47 22 2c 6d 62 3d 22 49 4e 50 55 54 22 2c 4f 66 61 3d 22 49 4e 53 45 52 54 41 42 4c 45 5f 54 45 4d 50 4c 41 54 45 53 22 2c 50 66 61 3d 22 49 4e 5f 50 52 4f 47 52 45 53 53 22 2c 51 66 61 3d 22 49 4e 5f 50 52 4f 47 52 45 53 53 5f 4c 4f 47 49 4e 5f 45 52 52 4f 52 22 2c 52 66 61 3d 22 49 4e 5f 50 52 4f 47 52 45 53 53 5f 4f 46 46 4c 49 4e 45 22 2c 53 66 61 3d 22 49 54 41 Data Ascii: ",Ifa="Help me write",Jfa="Highlight color",Kfa="IDLE",Lfa="IDLE_LOGIN_ERROR",kb="IFRAME",Mfa="IMAGE",Nfa="IMAGE_BYTE_UPLOAD",lb="IMG",mb="INPUT",Ofa="INSERTABLE_TEMPLATES",Pfa="IN_PROGRESS",Qfa="IN_PROGRESS_LOGIN_ERROR",Rfa="IN_PROGRESS_OFFLINE",Sfa="ITA
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 22 4c 6f 61 64 69 6e 67 5c 75 32 30 32 36 22 2c 50 67 61 3d 22 4d 45 4e 55 22 2c 51 67 61 3d 22 4d 46 60 22 2c 52 67 61 3d 22 4d 49 53 53 49 4e 47 5f 45 58 54 45 4e 53 49 4f 4e 22 2c 53 67 61 3d 22 4d 49 54 45 52 22 2c 54 67 61 3d 22 4d 4f 55 53 45 22 2c 55 67 61 3d 22 4d 53 20 47 6f 74 68 69 63 22 2c 56 67 61 3d 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 57 67 61 3d 22 4d 53 20 50 4d 69 6e 63 68 6f 22 2c 77 62 3d 22 4d 61 22 2c 58 67 61 3d 22 4d 61 6b 65 20 61 20 63 6f 70 79 22 2c 59 67 61 3d 22 4d 61 6b 65 20 61 6e 20 65 6e 63 72 79 70 74 65 64 20 63 6f 70 79 22 2c 5a 67 61 3d 22 4d 61 6b 65 20 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 69 6e 65 22 2c 78 62 3d 22 4d 61 72 22 2c 79 62 3d 22 4d 61 79 22 2c 7a 62 3d 22 4d 65 64 69 75 6d 22 2c 24 67 61 3d 22 4d Data Ascii: "Loading\u2026",Pga="MENU",Qga="MF`",Rga="MISSING_EXTENSION",Sga="MITER",Tga="MOUSE",Uga="MS Gothic",Vga="MS PGothic",Wga="MS PMincho",wb="Ma",Xga="Make a copy",Yga="Make an encrypted copy",Zga="Make available offline",xb="Mar",yb="May",zb="Medium",$ga="M
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 68 61 3d 22 50 65 6e 64 69 6e 67 51 75 65 75 65 73 22 2c 59 68 61 3d 22 50 65 6f 70 6c 65 22 2c 5a 68 61 3d 22 50 65 72 66 6f 72 6d 20 64 72 6f 70 22 2c 24 68 61 3d 22 50 65 72 73 6f 6e 61 6c 20 64 69 63 74 69 6f 6e 61 72 79 22 2c 61 69 61 3d 22 50 68 6f 74 6f 73 22 2c 62 69 61 3d 22 50 6c 61 79 62 61 63 6b 20 6f 70 74 69 6f 6e 73 22 2c 63 69 61 3d 22 50 6f 6c 69 63 79 20 63 68 65 63 6b 20 66 61 69 6c 65 64 22 2c 64 69 61 3d 22 50 6f 6c 6c 22 2c 65 69 61 3d 22 50 6f 70 20 6f 75 74 20 76 69 65 77 65 72 22 2c 0a 66 69 61 3d 22 50 6f 73 69 74 69 6f 6e 69 6e 67 20 6f 66 20 73 6f 6d 65 20 69 6d 61 67 65 73 20 6f 72 20 64 72 61 77 69 6e 67 73 20 77 69 6c 6c 20 62 65 20 63 68 61 6e 67 65 64 22 2c 67 69 61 3d 22 50 72 65 66 65 72 65 6e 63 65 73 22 2c 68 69 61 3d Data Ascii: ha="PendingQueues",Yha="People",Zha="Perform drop",$ha="Personal dictionary",aia="Photos",bia="Playback options",cia="Policy check failed",dia="Poll",eia="Pop out viewer",fia="Positioning of some images or drawings will be changed",gia="Preferences",hia=
2024-10-30 19:39:41 UTC	1378	IN	Data Raw: 22 53 65 65 20 76 65 72 73 69 6f 6e 20 68 69 73 74 6f 72 79 22 2c 61 6a 61 3d 22 53 65 6c 65 63 74 20 61 6c 6c 22 2c 62 6a 61 3d 22 53 65 6c 65 63 74 20 6e 6f 6e 65 22 2c 63 6a 61 3d 22 53 65 70 22 2c 64 6a 61 3d 22 53 68 61 70 65 73 20 61 6e 64 20 6c 69 6e 65 73 22 2c 65 6a 61 3d 22 53 68 61 72 65 22 2c 50 62 3d 22 53 68 69 66 74 22 2c 66 6a 61 3d 22 53 68 69 66 74 2b 44 6f 77 6e 22 2c 67 6a 61 3d 22 53 68 69 66 74 2b 4c 65 66 74 22 2c 68 6a 61 3d 22 53 68 69 66 74 2b 52 69 67 68 74 22 2c 69 6a 61 3d 22 53 68 69 66 74 2b 55 70 22 2c 6a 6a 61 3d 22 53 68 6f 77 20 61 6c 6c 20 63 6f 6d 6d 65 6e 74 73 22 2c 6b 6a 61 3d 22 53 68 6f 77 20 6c 69 6e 6b 20 64 65 74 61 69 6c 73 22 2c 6c 6a 61 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 66 6f 22 2c 6d 6a 61 3d 22 53 Data Ascii: "See version history",aja="Select all",bja="Select none",cja="Sep",dja="Shapes and lines",eja="Share",Pb="Shift",fja="Shift+Down",gja="Shift+Left",hja="Shift+Right",ija="Shift+Up",jja="Show all comments",kja="Show link details",lja="Show more info",mja="S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 19:39:43 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=248759 Date: Wed, 30 Oct 2024 19:39:43 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:44 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 19:39:44 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=248815 Date: Wed, 30 Oct 2024 19:39:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 19:39:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:48 UTC	709	OUT	GET /static/document/client/js/4047955786-client_js_prod_kix_core.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; GFE_RTT=212
2024-10-30 19:39:48 UTC	797	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 2948877 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 19:39:41 GMT Expires: Thu, 30 Oct 2025 19:39:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 7 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:48 UTC	581	IN	Data Raw: 2f 2f 23 20 65 61 67 65 72 43 6f 6d 70 69 6c 61 74 69 6f 6e 3d 61 6c 6c 0a 66 75 6e 63 74 69 6f 6e 20 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 5b 5d 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 Data Ascii: //# eagerCompilation=allfunction _F_toggles_initialize(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);/* Copyright The Closure Library Authors. SPDX-License-Identifier: A
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 5c 72 5c 6e 22 2c 62 61 3d 22 20 20 22 2c 64 61 3d 22 20 28 22 2c 61 61 61 3d 22 20 61 6e 64 20 74 68 65 20 62 6c 6f 62 20 75 72 6c 20 69 73 20 72 65 76 6f 6b 65 64 20 62 79 20 22 2c 62 61 61 3d 27 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 27 2c 6b 3d 27 22 3e 27 2c 65 61 3d 27 22 3e 3c 2f 64 69 76 3e 27 2c 68 61 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 2c 6a 61 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 Data Ascii: opyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="\r\n",ba=" ",da=" (",aaa=" and the blob url is revoked by ",baa=' style="display: none;"',k='">',ea='"></div>',ha='"></div></div></div>',ja='"></div></div><div class="'
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 22 2c 74 61 3d 22 2c 20 22 2c 75 61 3d 22 2d 2d 22 2c 6e 62 61 3d 22 2d 64 65 66 61 75 6c 74 22 2c 6f 62 61 3d 22 2d 72 74 6c 22 2c 76 61 3d 22 2e 2e 2e 22 2c 70 62 61 3d 22 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 77 61 3d 22 2f 2f 22 2c 71 62 61 3d 22 2f 61 2f 24 31 2f 64 72 61 77 69 6e 67 73 2f 22 2c 72 62 61 3d 22 2f 63 72 65 61 74 65 22 2c 73 62 61 3d 22 2f 64 2f 22 2c 74 62 61 3d 22 2f 65 64 69 74 22 2c 75 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 63 6f 6d 6d 65 6e 74 22 2c 76 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 65 64 69 74 22 2c 77 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 65 72 72 6f 72 22 2c 0a 46 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 68 73 22 2c 47 62 61 3d 22 2f 6f 66 66 6c 69 6e 65 2f 76 69 65 77 22 Data Ascii: or-scheme: dark)",ta=", ",ua="--",nba="-default",oba="-rtl",va="...",pba=".google.com",wa="//",qba="/a/$1/drawings/",rba="/create",sba="/d/",tba="/edit",uba="/offline/comment",vba="/offline/edit",wba="/offline/error",Fba="/offline/hs",Gba="/offline/view"
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 41 73 73 69 67 6e 20 6e 65 77 20 74 61 73 6b 73 20 66 72 6f 6d 20 74 61 62 6c 65 22 2c 7a 63 61 3d 22 41 75 64 69 6f 22 2c 41 63 61 3d 22 41 75 67 22 2c 42 63 61 3d 22 42 4c 4f 43 4b 51 55 4f 54 45 22 2c 43 63 61 3d 22 42 4f 44 59 22 2c 44 63 61 3d 22 42 4f 4c 44 22 2c 45 63 61 3d 22 42 52 22 2c 46 63 61 3d 22 42 55 54 54 22 2c 49 61 3d 22 42 55 54 54 4f 4e 22 2c 47 63 61 3d 22 42 6c 6f 62 4d 65 74 61 64 61 74 61 22 2c 48 63 61 3d 22 42 6f 72 64 65 72 20 63 6f 6c 6f 72 22 2c 49 63 61 3d 22 42 6f 72 64 65 72 20 64 61 73 68 22 2c 4a 63 61 3d 22 42 6f 74 74 6f 6d 22 2c 4b 63 61 3d 22 42 6f 74 74 6f 6d 20 6c 65 66 74 22 2c 4c 63 61 3d 22 42 6f 74 74 6f 6d 20 72 69 67 68 74 22 2c 4a 61 3d 22 43 41 4e 56 41 53 22 2c 4d 63 61 3d 22 43 48 49 50 5f 44 49 41 4c 4f Data Ascii: Assign new tasks from table",zca="Audio",Aca="Aug",Bca="BLOCKQUOTE",Cca="BODY",Dca="BOLD",Eca="BR",Fca="BUTT",Ia="BUTTON",Gca="BlobMetadata",Hca="Border color",Ica="Border dash",Jca="Bottom",Kca="Bottom left",Lca="Bottom right",Ja="CANVAS",Mca="CHIP_DIALO
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 22 2c 55 61 3d 0a 22 43 74 72 6c 2b 22 2c 42 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 45 6e 74 65 72 22 2c 43 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 45 71 75 61 6c 73 22 2c 44 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 4e 75 6d 2d 4d 69 6e 75 73 22 2c 45 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 4e 75 6d 2d 50 6c 75 73 22 2c 46 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 53 68 69 66 74 2b 44 22 2c 47 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 53 68 69 66 74 2b 4a 22 2c 48 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 53 68 69 66 74 2b 58 22 2c 49 64 61 3d 22 43 74 72 6c 2b 41 6c 74 2b 6f 70 65 6e 2d 73 71 75 61 72 65 2d 62 72 61 63 6b 65 74 22 2c 4a 64 61 3d 22 43 74 72 6c 2b 43 22 2c 4b 64 61 3d 22 43 75 73 74 6f 6d 20 62 75 69 6c 64 69 6e 67 20 62 6c 6f 63 6b 22 2c 4c 64 61 3d Data Ascii: ",Ua="Ctrl+",Bda="Ctrl+Alt+Enter",Cda="Ctrl+Alt+Equals",Dda="Ctrl+Alt+Num-Minus",Eda="Ctrl+Alt+Num-Plus",Fda="Ctrl+Alt+Shift+D",Gda="Ctrl+Alt+Shift+J",Hda="Ctrl+Alt+Shift+X",Ida="Ctrl+Alt+open-square-bracket",Jda="Ctrl+C",Kda="Custom building block",Lda=
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 3d 22 45 61 22 2c 78 65 61 3d 22 45 64 67 65 22 2c 79 65 61 3d 22 45 64 69 74 22 2c 7a 65 61 3d 22 45 64 69 74 20 69 6d 61 67 65 22 2c 41 65 61 3d 22 45 64 69 74 69 6e 67 22 2c 65 62 3d 22 45 66 22 2c 42 65 61 3d 22 45 6d 61 69 6c 22 2c 43 65 61 3d 22 45 6d 61 69 6c 20 63 6f 6c 6c 61 62 6f 72 61 74 6f 72 73 22 2c 44 65 61 3d 22 45 6d 61 69 6c 20 64 72 61 66 74 22 2c 45 65 61 3d 22 45 6d 61 69 6c 20 6d 65 65 74 69 6e 67 20 6e 6f 74 65 73 22 2c 46 65 61 3d 22 45 6d 61 69 6c 20 74 68 69 73 20 66 69 6c 65 22 2c 47 65 61 3d 22 45 6d 6f 6a 69 20 72 65 61 63 74 69 6f 6e 22 2c 48 65 61 3d 22 45 6e 61 62 6c 65 20 62 72 61 69 6c 6c 65 20 73 75 70 70 6f 72 74 22 2c 0a 66 62 3d 22 45 6e 74 65 72 22 2c 49 65 61 3d 22 45 6e 74 69 74 79 20 77 69 74 68 20 69 64 20 25 73 Data Ascii: ="Ea",xea="Edge",yea="Edit",zea="Edit image",Aea="Editing",eb="Ef",Bea="Email",Cea="Email collaborators",Dea="Email draft",Eea="Email meeting notes",Fea="Email this file",Gea="Emoji reaction",Hea="Enable braille support",fb="Enter",Iea="Entity with id %s
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 61 6e 20 69 6d 61 67 65 22 2c 49 66 61 3d 22 48 65 6c 70 20 6d 65 20 77 72 69 74 65 22 2c 4a 66 61 3d 22 48 69 67 68 6c 69 67 68 74 20 63 6f 6c 6f 72 22 2c 4b 66 61 3d 22 49 44 4c 45 22 2c 4c 66 61 3d 22 49 44 4c 45 5f 4c 4f 47 49 4e 5f 45 52 52 4f 52 22 2c 6b 62 3d 22 49 46 52 41 4d 45 22 2c 4d 66 61 3d 22 49 4d 41 47 45 22 2c 4e 66 61 3d 22 49 4d 41 47 45 5f 42 59 54 45 5f 55 50 4c 4f 41 44 22 2c 6c 62 3d 22 49 4d 47 22 2c 6d 62 3d 22 49 4e 50 55 54 22 2c 4f 66 61 3d 22 49 4e 53 45 52 54 41 42 4c 45 5f 54 45 4d 50 4c 41 54 45 53 22 2c 50 66 61 3d 22 49 4e 5f 50 52 4f 47 52 45 53 53 22 2c 51 66 61 3d 22 49 4e 5f 50 52 4f 47 52 45 53 53 5f 4c 4f 47 49 4e 5f 45 52 52 4f 52 22 2c 52 66 61 3d 22 49 4e 5f 50 52 4f 47 52 45 53 53 5f 4f 46 46 4c 49 4e 45 22 2c Data Ascii: an image",Ifa="Help me write",Jfa="Highlight color",Kfa="IDLE",Lfa="IDLE_LOGIN_ERROR",kb="IFRAME",Mfa="IMAGE",Nfa="IMAGE_BYTE_UPLOAD",lb="IMG",mb="INPUT",Ofa="INSERTABLE_TEMPLATES",Pfa="IN_PROGRESS",Qfa="IN_PROGRESS_LOGIN_ERROR",Rfa="IN_PROGRESS_OFFLINE",
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 72 22 2c 4f 67 61 3d 0a 22 4c 6f 61 64 69 6e 67 5c 75 32 30 32 36 22 2c 50 67 61 3d 22 4d 45 4e 55 22 2c 51 67 61 3d 22 4d 46 60 22 2c 52 67 61 3d 22 4d 49 53 53 49 4e 47 5f 45 58 54 45 4e 53 49 4f 4e 22 2c 53 67 61 3d 22 4d 49 54 45 52 22 2c 54 67 61 3d 22 4d 4f 55 53 45 22 2c 55 67 61 3d 22 4d 53 20 47 6f 74 68 69 63 22 2c 56 67 61 3d 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 57 67 61 3d 22 4d 53 20 50 4d 69 6e 63 68 6f 22 2c 77 62 3d 22 4d 61 22 2c 58 67 61 3d 22 4d 61 6b 65 20 61 20 63 6f 70 79 22 2c 59 67 61 3d 22 4d 61 6b 65 20 61 6e 20 65 6e 63 72 79 70 74 65 64 20 63 6f 70 79 22 2c 5a 67 61 3d 22 4d 61 6b 65 20 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 69 6e 65 22 2c 78 62 3d 22 4d 61 72 22 2c 79 62 3d 22 4d 61 79 22 2c 7a 62 3d 22 4d 65 64 69 75 6d Data Ascii: r",Oga="Loading\u2026",Pga="MENU",Qga="MF`",Rga="MISSING_EXTENSION",Sga="MITER",Tga="MOUSE",Uga="MS Gothic",Vga="MS PGothic",Wga="MS PMincho",wb="Ma",Xga="Make a copy",Yga="Make an encrypted copy",Zga="Make available offline",xb="Mar",yb="May",zb="Medium
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 6d 61 6e 64 73 22 2c 58 68 61 3d 22 50 65 6e 64 69 6e 67 51 75 65 75 65 73 22 2c 59 68 61 3d 22 50 65 6f 70 6c 65 22 2c 5a 68 61 3d 22 50 65 72 66 6f 72 6d 20 64 72 6f 70 22 2c 24 68 61 3d 22 50 65 72 73 6f 6e 61 6c 20 64 69 63 74 69 6f 6e 61 72 79 22 2c 61 69 61 3d 22 50 68 6f 74 6f 73 22 2c 62 69 61 3d 22 50 6c 61 79 62 61 63 6b 20 6f 70 74 69 6f 6e 73 22 2c 63 69 61 3d 22 50 6f 6c 69 63 79 20 63 68 65 63 6b 20 66 61 69 6c 65 64 22 2c 64 69 61 3d 22 50 6f 6c 6c 22 2c 65 69 61 3d 22 50 6f 70 20 6f 75 74 20 76 69 65 77 65 72 22 2c 0a 66 69 61 3d 22 50 6f 73 69 74 69 6f 6e 69 6e 67 20 6f 66 20 73 6f 6d 65 20 69 6d 61 67 65 73 20 6f 72 20 64 72 61 77 69 6e 67 73 20 77 69 6c 6c 20 62 65 20 63 68 61 6e 67 65 64 22 2c 67 69 61 3d 22 50 72 65 66 65 72 65 6e 63 Data Ascii: mands",Xha="PendingQueues",Yha="People",Zha="Perform drop",$ha="Personal dictionary",aia="Photos",bia="Playback options",cia="Policy check failed",dia="Poll",eia="Pop out viewer",fia="Positioning of some images or drawings will be changed",gia="Preferenc
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 65 73 22 2c 24 69 61 3d 22 53 65 65 20 76 65 72 73 69 6f 6e 20 68 69 73 74 6f 72 79 22 2c 61 6a 61 3d 22 53 65 6c 65 63 74 20 61 6c 6c 22 2c 62 6a 61 3d 22 53 65 6c 65 63 74 20 6e 6f 6e 65 22 2c 63 6a 61 3d 22 53 65 70 22 2c 64 6a 61 3d 22 53 68 61 70 65 73 20 61 6e 64 20 6c 69 6e 65 73 22 2c 65 6a 61 3d 22 53 68 61 72 65 22 2c 50 62 3d 22 53 68 69 66 74 22 2c 66 6a 61 3d 22 53 68 69 66 74 2b 44 6f 77 6e 22 2c 67 6a 61 3d 22 53 68 69 66 74 2b 4c 65 66 74 22 2c 68 6a 61 3d 22 53 68 69 66 74 2b 52 69 67 68 74 22 2c 69 6a 61 3d 22 53 68 69 66 74 2b 55 70 22 2c 6a 6a 61 3d 22 53 68 6f 77 20 61 6c 6c 20 63 6f 6d 6d 65 6e 74 73 22 2c 6b 6a 61 3d 22 53 68 6f 77 20 6c 69 6e 6b 20 64 65 74 61 69 6c 73 22 2c 6c 6a 61 3d 22 53 68 6f 77 20 6d 6f 72 65 20 69 6e 66 6f Data Ascii: es",$ia="See version history",aja="Select all",bja="Select none",cja="Sep",dja="Shapes and lines",eja="Share",Pb="Shift",fja="Shift+Down",gja="Shift+Left",hja="Shift+Right",ija="Shift+Up",jja="Show all comments",kja="Show link details",lja="Show more info

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49731	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:48 UTC	1017	OUT	GET /static/document/client/js/463190011-client_js_prod_kix_nestedsketchycore.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?usp=sharing Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; GFE_RTT=212
2024-10-30 19:39:48 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 309620 Date: Wed, 30 Oct 2024 19:39:48 GMT Expires: Thu, 30 Oct 2025 19:39:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:48 UTC	590	IN	Data Raw: 46 4a 28 42 5f 61 29 3b 0a 76 61 72 20 6c 68 66 3d 22 23 46 46 46 46 46 46 30 30 22 2c 6d 68 66 3d 22 25 73 20 61 6c 72 65 61 64 79 20 62 65 6c 6f 6e 67 73 20 74 6f 20 25 73 22 2c 6e 68 66 3d 22 25 73 20 69 73 20 6e 6f 74 20 61 6e 20 61 6c 6c 6f 77 65 64 20 73 68 61 70 65 20 70 72 6f 70 65 72 74 79 20 66 6f 72 20 61 20 4d 65 64 69 61 43 6c 69 70 2e 22 2c 6f 68 66 3d 22 31 30 30 22 2c 79 4c 3d 22 31 31 22 2c 70 68 66 3d 22 31 36 22 2c 7a 4c 3d 22 32 34 22 2c 71 68 66 3d 22 3a 61 6e 69 6d 61 74 69 6f 6e 22 2c 72 68 66 3d 22 3a 62 61 63 6b 67 72 6f 75 6e 64 22 2c 73 68 66 3d 22 3a 64 6f 63 75 6d 65 6e 74 22 2c 41 4c 3d 22 41 4d 22 2c 74 68 66 3d 22 44 6f 63 75 6d 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 4d 65 64 69 61 43 6c 69 70 20 77 Data Ascii: FJ(B_a);var lhf="#FFFFFF00",mhf="%s already belongs to %s",nhf="%s is not an allowed shape property for a MediaClip.",ohf="100",yL="11",phf="16",zL="24",qhf=":animation",rhf=":background",shf=":document",AL="AM",thf="Document does not contain MediaClip w
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 66 3d 22 54 72 61 6e 73 66 6f 72 6d 20 25 73 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 66 6f 72 20 6f 62 6a 65 63 74 20 25 73 22 2c 48 68 66 3d 22 56 45 52 54 49 43 41 4c 5f 54 49 54 4c 45 5f 41 4e 44 5f 56 45 52 54 49 43 41 4c 5f 54 45 58 54 22 2c 49 68 66 3d 22 62 6f 64 79 50 6c 61 63 65 68 6f 6c 64 65 72 4c 69 73 74 45 6e 74 69 74 79 22 2c 4a 68 66 3d 22 64 6f 63 73 2d 65 61 73 6d 22 2c 4b 68 66 3d 22 69 6e 64 65 78 20 25 73 20 69 73 20 6f 75 74 20 6f 66 20 62 6f 75 6e 64 73 22 2c 4c 68 66 3d 22 70 72 6f 70 65 72 74 69 65 73 22 2c 4d 68 66 3d 22 73 6b 65 74 63 68 79 2d 61 64 64 41 6e 69 6d 61 74 69 6f 6e 22 2c 4e 68 66 3d 22 73 6b 65 74 63 68 79 2d 61 64 64 45 6e 74 69 74 79 22 2c 4f 68 66 3d 22 73 6b 65 74 63 68 79 2d 61 64 64 4c 69 73 74 45 6e 74 69 Data Ascii: f="Transform %s is not valid for object %s",Hhf="VERTICAL_TITLE_AND_VERTICAL_TEXT",Ihf="bodyPlaceholderListEntity",Jhf="docs-easm",Khf="index %s is out of bounds",Lhf="properties",Mhf="sketchy-addAnimation",Nhf="sketchy-addEntity",Ohf="sketchy-addListEnti
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 69 6d 70 6c 22 2c 77 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6c 69 76 65 2d 70 6f 69 6e 74 65 72 2d 63 6f 6f 72 64 69 6e 61 74 65 73 2d 65 6d 70 74 79 22 2c 0a 78 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6c 69 76 65 2d 70 6f 69 6e 74 65 72 2d 63 6f 6f 72 64 69 6e 61 74 65 73 2d 69 6d 70 6c 22 2c 79 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 64 69 61 43 6c 69 70 22 2c 7a 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 64 69 61 43 6c 69 70 2d 65 6d 70 74 79 22 2c 41 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 64 69 61 43 6c 69 70 2d 69 6d 70 6c 22 2c 42 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 70 61 67 Data Ascii: impl",wif="sketchy-selection-live-pointer-coordinates-empty",xif="sketchy-selection-live-pointer-coordinates-impl",yif="sketchy-selection-mediaClip",zif="sketchy-selection-mediaClip-empty",Aif="sketchy-selection-mediaClip-impl",Bif="sketchy-selection-pag
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 68 79 2d 75 70 64 61 74 65 43 6f 6c 75 6d 6e 57 69 64 74 68 73 22 2c 6a 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 45 6e 74 69 74 79 22 2c 6b 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 4c 69 73 74 45 6e 74 69 74 79 22 2c 6c 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 52 6f 77 48 65 69 67 68 74 73 22 2c 6d 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 54 61 62 6c 65 42 6f 72 64 65 72 53 74 79 6c 65 73 22 2c 6e 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 54 61 62 6c 65 43 65 6c 6c 50 72 6f 70 65 72 74 69 65 73 22 2c 6f 6a 66 3d 22 73 6b 65 74 63 68 79 2d 7a 4f 72 64 65 72 22 3b 0a 66 75 6e 63 74 69 6f 6e 20 47 4c 28 61 2c 63 2c 64 2c 65 29 7b 7a 73 28 61 21 3d 3d 70 67 2c 22 6c 71 22 29 3b 72 65 74 75 72 6e Data Ascii: hy-updateColumnWidths",jjf="sketchy-updateEntity",kjf="sketchy-updateListEntity",ljf="sketchy-updateRowHeights",mjf="sketchy-updateTableBorderStyles",njf="sketchy-updateTableCellProperties",ojf="sketchy-zOrder";function GL(a,c,d,e){zs(a!==pg,"lq");return
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 66 37 63 28 74 68 69 73 2c 61 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 64 3d 74 68 69 73 2e 48 2c 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 5b 65 5d 2e 73 70 6c 69 63 65 28 61 2c 30 2c 63 28 29 29 7d 29 3b 54 41 2e 70 72 6f 74 6f 74 79 70 65 2e 45 6c 3d 59 28 31 38 33 2c 7a 28 22 46 22 29 29 3b 43 4a 64 2e 70 72 6f 74 6f 74 79 70 65 2e 45 6c 3d 59 28 31 38 32 2c 7a 28 22 48 22 29 29 3b 43 51 64 2e 70 72 6f 74 6f 74 79 70 65 2e 45 6c 3d 59 28 31 38 31 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 2e 44 2e 44 7d 29 3b 78 51 64 2e 70 72 6f 74 6f 74 79 70 65 2e 45 6c 3d 59 28 31 38 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 2e 44 2e 44 7d Data Ascii: function(a,c){f7c(this,a,!0);for(var d=this.H,e=0;e<d.length;e++)d[e].splice(a,0,c())});TA.prototype.El=Y(183,z("F"));CJd.prototype.El=Y(182,z("H"));CQd.prototype.El=Y(181,function(){return this.D.D.D});xQd.prototype.El=Y(180,function(){return this.D.D.D}
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 65 3b 61 2e 4b 6f 3d 63 2e 4d 70 2a 64 2b 63 2e 4b 6f 2a 65 3b 64 3d 61 2e 44 3b 65 3d 61 2e 46 3b 61 2e 44 3d 63 2e 4c 70 2a 64 2b 63 2e 77 70 2a 65 2b 63 2e 44 3b 61 2e 46 3d 63 2e 4d 70 2a 64 2b 63 2e 4b 6f 2a 65 2b 63 2e 46 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 7a 6a 66 28 61 29 7b 76 61 72 20 63 3d 56 7a 63 28 61 29 3b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 63 29 26 26 69 73 46 69 6e 69 74 65 28 61 2e 44 29 26 26 69 73 46 69 6e 69 74 65 28 61 2e 46 29 26 26 63 21 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 41 6a 66 28 29 7b 7d 4a 28 41 6a 66 2c 4b 29 3b 41 6a 66 2e 70 72 6f 74 6f 74 79 70 65 2e 45 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 73 28 74 68 69 73 2e 48 29 26 26 62 75 28 74 68 69 73 2e 44 29 26 26 28 Data Ascii: e;a.Ko=c.Mpd+c.Koe;d=a.D;e=a.F;a.D=c.Lpd+c.wpe+c.D;a.F=c.Mpd+c.Koe+c.F;return a}function zjf(a){var c=Vzc(a);return isFinite(c)&&isFinite(a.D)&&isFinite(a.F)&&c!=0}function Ajf(){}J(Ajf,K);Ajf.prototype.Eb=function(){return Ls(this.H)&&bu(this.D)&&(
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 6a 66 28 61 29 7b 4a 4b 62 28 29 3b 72 65 74 75 72 6e 20 4e 6a 66 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 31 45 33 29 2c 62 6e 28 61 25 31 45 33 2a 31 45 36 29 29 7d 66 75 6e 63 74 69 6f 6e 20 50 6a 66 28 61 2c 63 29 7b 4e 4c 62 28 29 3b 72 65 74 75 72 6e 20 4e 6a 66 28 63 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 2d 61 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 2c 63 2e 44 2d 61 2e 44 7c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 51 6a 66 28 61 2c 63 29 7b 4e 4c 62 28 29 3b 4d 4c 62 2e 63 6f 6e 74 61 69 6e 73 28 4e 28 63 29 29 7c 7c 28 61 2b 3d 63 2f 31 45 39 7c 30 2c 63 3d 63 25 31 45 39 7c 30 29 3b 63 3c 30 26 26 28 63 3d 63 2b 31 45 39 7c 30 2c 2d 2d 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 43 4b 62 28 61 2c 63 29 Data Ascii: (a,c)}function Ojf(a){JKb();return Njf(Math.floor(a/1E3),bn(a%1E3*1E6))}function Pjf(a,c){NLb();return Njf(c.getSeconds()-a.getSeconds(),c.D-a.D\|0)}function Qjf(a,c){NLb();MLb.contains(N(c))\|\|(a+=c/1E9\|0,c=c%1E9\|0);c<0&&(c=c+1E9\|0,--a);return new CKb(a,c)
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 28 34 2c 61 6b 66 29 29 2c 4e 28 35 29 2c 44 6e 28 35 2c 61 6b 66 29 29 2c 4e 28 36 29 2c 44 6e 28 36 2c 61 6b 66 29 29 2c 4e 28 37 29 2c 44 6e 28 37 2c 61 6b 66 29 29 2c 4e 28 38 29 2c 44 6e 28 38 2c 61 6b 66 29 29 2c 4e 28 39 29 2c 44 6e 28 39 2c 61 6b 66 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 6b 66 28 61 29 7b 63 6b 66 28 29 3b 72 65 74 75 72 6e 20 47 6e 28 48 73 28 44 6e 28 47 6e 28 62 6b 66 2e 67 65 74 28 4e 28 61 29 29 29 2c 61 6b 66 29 2c 22 49 6e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6b 66 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 46 3d 3d 31 26 26 61 2e 76 6e 28 29 3d 3d 30 7d 76 61 72 20 66 6b 66 3b 66 75 6e 63 74 69 6f 6e 20 67 6b 66 28 61 2c 63 2c 64 29 7b 68 6b 66 28 29 3b 74 68 69 73 2e 46 3d 30 3b 74 68 69 73 2e 48 3d 61 3b 74 68 69 73 Data Ascii: (4,akf)),N(5),Dn(5,akf)),N(6),Dn(6,akf)),N(7),Dn(7,akf)),N(8),Dn(8,akf)),N(9),Dn(9,akf)))}function dkf(a){ckf();return Gn(Hs(Dn(Gn(bkf.get(N(a))),akf),"In"))}function ekf(a){return a.F==1&&a.vn()==0}var fkf;function gkf(a,c,d){hkf();this.F=0;this.H=a;this
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 66 28 29 3b 74 68 69 73 2e 44 3d 47 73 28 61 29 3b 74 68 69 73 2e 4f 3d 47 73 28 63 29 3b 74 68 69 73 2e 52 3d 47 73 28 64 29 3b 74 68 69 73 2e 48 3d 65 3b 74 68 69 73 2e 4a 3d 66 3b 74 68 69 73 2e 46 3d 67 3b 7a 73 28 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 4f 2e 44 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 52 2e 44 2e 6c 65 6e 67 74 68 26 26 28 21 74 68 69 73 2e 48 7c 7c 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 48 2e 44 2e 6c 65 6e 67 74 68 29 26 26 28 21 74 68 69 73 2e 4a 7c 7c 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 4a 2e 44 2e 6c 65 6e 67 74 68 29 26 26 28 21 74 68 69 73 2e 46 7c 7c 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 Data Ascii: f();this.D=Gs(a);this.O=Gs(c);this.R=Gs(d);this.H=e;this.J=f;this.F=g;zs(this.D.D.length==this.O.D.length&&this.D.D.length==this.R.D.length&&(!this.H\|\|this.D.D.length==this.H.D.length)&&(!this.J\|\|this.D.D.length==this.J.D.length)&&(!this.F\|\|this.D.D.lengt
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 62 28 61 2e 44 29 29 3b 63 2e 70 75 73 68 28 61 2e 46 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 76 6b 66 28 61 29 7b 76 61 72 20 63 3d 52 74 28 61 2c 30 29 2c 64 3d 4d 79 62 28 61 5b 31 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 67 6b 66 28 63 2c 64 2c 52 74 28 61 2c 32 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 4c 28 61 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 2e 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 64 3d 31 2e 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 65 3d 2d 31 2e 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 66 3d 2d 31 2e 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 67 3d 30 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 67 3c 68 3b 67 3d 67 2b 32 7c 30 29 7b 76 61 72 Data Ascii: b(a.D));c.push(a.F);return c}function vkf(a){var c=Rt(a,0),d=Myb(a[1]);return new gkf(c,d,Rt(a,2))}function OL(a){for(var c=1.7976931348623157E308,d=1.7976931348623157E308,e=-1.7976931348623157E308,f=-1.7976931348623157E308,g=0,h=a.length;g<h;g=g+2\|0){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49732	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:48 UTC	1004	OUT	GET /static/document/client/js/1761216827-client_js_prod_kix_app.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?usp=sharing Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; GFE_RTT=212
2024-10-30 19:39:48 UTC	801	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 2679379 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 29 Oct 2024 21:08:01 GMT Expires: Wed, 29 Oct 2025 21:08:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 81107 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:48 UTC	577	IN	Data Raw: 46 4a 28 73 5f 61 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0a 20 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 72 65 73 74 72 69 63 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 Data Ascii: FJ(s_a);/* Copyright 2020 Google Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 0a 20 46 49 54 4e 45 53 53 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 Data Ascii: tantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHA
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 0a 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 0a 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 76 61 72 20 68 43 66 3d 22 5c 6e 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 5c 6e 22 2c 70 4d 3d 22 20 2d 20 22 2c 69 43 66 3d 22 20 2d 20 32 34 70 78 29 22 2c 6a Data Ascii: R ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/var hCf="\n-------------\n",pM=" - ",iCf=" - 24px)",j
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 63 75 73 2d 6c 6f 67 69 63 3d 27 74 72 75 65 27 22 2c 54 43 66 3d 22 20 64 69 73 61 62 6c 65 64 22 2c 55 43 66 3d 27 20 64 69 73 61 62 6c 65 64 3d 22 27 2c 56 43 66 3d 22 20 66 6f 63 75 73 3a 22 2c 57 43 66 3d 22 20 66 6f 63 75 73 3a 68 30 36 52 38 3b 20 62 6c 75 72 3a 7a 6a 68 36 72 62 3b 6d 6c 6e 52 4a 62 3a 66 4c 69 50 7a 64 3b 22 2c 58 43 66 3d 27 20 68 72 65 66 3d 22 27 2c 74 4d 3d 27 20 69 64 3d 22 27 2c 59 43 66 3d 22 20 69 73 20 6e 6f 74 20 61 74 20 61 20 76 61 6c 69 64 20 74 61 62 6c 65 20 6c 6f 63 61 74 69 6f 6e 2e 22 2c 5a 43 66 3d 22 20 69 73 20 74 68 65 20 6f 77 6e 65 72 22 2c 24 43 66 3d 27 20 6a 73 61 63 74 69 6f 6e 3d 22 27 2c 61 44 66 3d 27 20 6a 73 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 27 2c 75 4d 3d 27 20 6a 73 6e 61 6d 65 3d 22 27 2c 62 Data Ascii: cus-logic='true'",TCf=" disabled",UCf=' disabled="',VCf=" focus:",WCf=" focus:h06R8; blur:zjh6rb;mlnRJb:fLiPzd;",XCf=' href="',tM=' id="',YCf=" is not at a valid table location.",ZCf=" is the owner",$Cf=' jsaction="',aDf=' jscontroller="',uM=' jsname="',b
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 65 63 74 2d 62 6c 6f 63 6b 6c 69 73 74 2d 6b 65 79 3d 22 27 2c 0a 4d 44 66 3d 27 22 20 64 61 74 61 2d 61 75 74 6f 63 6f 72 72 65 63 74 2d 66 65 65 64 62 61 63 6b 2d 64 61 74 61 2d 70 72 6f 76 69 64 65 72 2d 6b 65 79 3d 22 27 2c 4e 44 66 3d 27 22 20 64 61 74 61 2d 69 73 2d 68 6f 69 73 74 65 64 3d 22 27 2c 4f 44 66 3d 27 22 20 64 61 74 61 2d 6c 69 73 74 2d 74 79 70 65 3d 22 27 2c 50 44 66 3d 27 22 20 64 61 74 61 2d 70 72 6f 67 72 65 73 73 76 61 6c 75 65 3d 22 27 2c 51 44 66 3d 27 22 20 64 61 74 61 2d 73 68 6f 75 6c 64 2d 66 6c 69 70 2d 63 6f 72 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 6c 79 3d 22 27 2c 52 44 66 3d 27 22 20 64 61 74 61 2d 73 74 61 79 2d 69 6e 2d 76 69 65 77 70 6f 72 74 3d 22 27 2c 53 44 66 3d 27 22 20 64 61 74 61 2d 75 72 6c 3d 22 27 2c 54 Data Ascii: ect-blocklist-key="',MDf='" data-autocorrect-feedback-data-provider-key="',NDf='" data-is-hoisted="',ODf='" data-list-type="',PDf='" data-progressvalue="',QDf='" data-should-flip-corner-horizontally="',RDf='" data-stay-in-viewport="',SDf='" data-url="',T
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2c 7a 45 66 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 27 2c 41 45 66 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 3c 2f 64 69 76 3e 27 2c 42 45 66 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 27 2c 43 45 66 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 3c 2f 64 69 76 3e 27 2c 44 45 66 3d 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 72 65 66 65 72 72 65 72 22 20 74 61 62 49 6e 64 65 78 3d 22 30 22 27 2c 0a 45 45 66 3d 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 27 2c 46 45 66 3d 27 22 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 27 2c 47 45 66 3d Data Ascii: utton" aria-label="',zEf='" tabindex="0" role="button">',AEf='" tabindex="0" role="button"></div>',BEf='" tabindex="0">',CEf='" tabindex="0"></div>',DEf='" target="_blank" rel="noreferrer" tabIndex="0"',EEf='" target="_blank">',FEf='" to dictionary',GEf=
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 74 46 66 3d 22 23 65 36 65 36 65 36 22 2c 54 4d 3d 22 23 66 30 66 34 66 39 22 2c 75 46 66 3d 22 23 66 66 63 38 61 61 22 2c 76 46 66 3d 22 23 66 66 63 66 63 39 22 2c 57 46 66 3d 22 23 66 66 65 35 61 30 22 2c 58 46 66 3d 22 25 36 2e 22 2c 59 46 66 3d 22 25 37 2e 22 2c 5a 46 66 3d 22 25 38 2e 22 2c 24 46 66 3d 22 26 6e 62 73 70 3b 22 2c 61 47 66 3d 22 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 22 2c 62 47 66 3d 22 28 5b 5e 28 5c 5c 73 5d 2b 28 5c 5c 28 5b 5e 29 5d 2a 5c 5c 29 29 3f 29 22 2c 63 47 66 3d 22 28 63 65 6e 74 69 6d 65 74 65 72 73 29 22 2c 64 47 66 3d 22 28 69 6e 63 68 65 73 29 22 2c 65 47 66 3d 22 28 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3d 74 72 75 65 29 22 2c 66 47 66 3d 27 29 22 20 64 61 74 61 2d 61 75 74 6f 63 6f 72 72 65 63 74 2d 66 65 Data Ascii: tFf="#e6e6e6",TM="#f0f4f9",uFf="#ffc8aa",vFf="#ffcfc9",WFf="#ffe5a0",XFf="%6.",YFf="%7.",ZFf="%8.",$Ff=" ",aGf="'><div class=\"",bGf="([^(\\s]+(\$[^)]*\$)?)",cGf="(centimeters)",dGf="(inches)",eGf="(preventDefault=true)",fGf=')" data-autocorrect-fe
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 66 22 2c 24 47 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 74 6f 6f 6c 73 2f 66 65 65 64 62 61 63 6b 22 2c 0a 61 48 66 3d 22 2f 66 69 6c 65 2f 64 2f 22 2c 62 48 66 3d 22 2f 6c 6f 67 49 6d 70 72 65 73 73 69 6f 6e 73 22 2c 63 48 66 3d 22 2f 70 65 72 75 73 65 72 63 68 72 6f 6d 65 22 2c 64 48 66 3d 22 2f 72 2f 65 76 65 6e 74 65 64 69 74 22 2c 65 48 66 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 72 70 63 5f 72 65 6c 61 79 2e 68 74 6d 6c 22 2c 58 4d 3d 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 22 2c 66 48 66 3d 22 30 20 30 20 31 38 20 31 38 22 2c 67 48 66 3d 22 30 20 30 20 32 34 20 32 34 22 2c 68 48 66 3d 22 31 30 70 78 22 2c 59 4d 3d 22 31 36 70 78 22 2c 69 48 66 3d 22 31 42 31 35 38 38 32 33 2d 42 36 42 34 2d 34 38 34 36 2d 41 45 43 32 2d 43 37 Data Ascii: f",$Gf="//www.google.com/tools/feedback",aHf="/file/d/",bHf="/logImpressions",cHf="/peruserchrome",dHf="/r/eventedit",eHf="/resources/rpc_relay.html",XM="0 -960 960 960",fHf="0 0 18 18",gHf="0 0 24 24",hHf="10px",YM="16px",iHf="1B158823-B6B4-4846-AEC2-C7
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 73 70 61 6e 3e 3c 2f 64 69 76 3e 22 2c 64 49 66 3d 22 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 2c 65 49 66 3d 22 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 2c 66 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 67 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2c 68 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 61 20 63 6c 61 73 73 3d 22 27 2c 69 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 0a 6a 4e 3d 27 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2c 6a 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 6a 73 61 63 74 69 6f 6e 3d 22 27 2c 6b 49 66 3d 27 3c 2f 73 70 61 6e Data Ascii: span></div>",dIf="</span></div></div>",eIf="</span></div></div></div>",fIf='</span></div><div class="',gIf='</span></span><span class="',hIf='</span><a class="',iIf='</span><div class="',jN='</span><span class="',jIf='</span><span jsaction="',kIf='</span
2024-10-30 19:39:48 UTC	1378	IN	Data Raw: 75 4e 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 27 2c 55 49 66 3d 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 27 2c 56 49 66 3d 27 3c 74 72 20 63 6c 61 73 73 3d 22 27 2c 57 49 66 3d 27 3c 75 6c 20 63 6c 61 73 73 3d 22 27 2c 58 49 66 3d 22 3e 3c 2f 64 69 76 3e 22 2c 76 4e 3d 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 59 49 66 3d 27 3e 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 27 2c 5a 49 66 3d 22 3e 3c 64 69 76 3e 22 2c 24 49 66 3d 27 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 27 2c 61 4a 66 3d 27 3e 3c 70 61 74 68 20 64 3d 22 4d 32 35 36 2d 32 30 30 6c 2d 35 36 2d 35 36 4c 34 32 34 2d 34 38 30 4c 32 30 30 2d 37 30 34 6c 35 36 2d 35 36 4c 34 38 30 2d 35 Data Ascii: uN='<svg width="',UIf='<svg xmlns="http://www.w3.org/2000/svg" width="',VIf='<tr class="',WIf='<ul class="',XIf="></div>",vN='><div class="',YIf='><div jsname="',ZIf="><div>",$If='><input class="',aJf='><path d="M256-200l-56-56L424-480L200-704l56-56L480-5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49739	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:50 UTC	721	OUT	GET /static/document/client/js/463190011-client_js_prod_kix_nestedsketchycore.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; GFE_RTT=212
2024-10-30 19:39:50 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 309620 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 19:39:48 GMT Expires: Thu, 30 Oct 2025 19:39:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:50 UTC	582	IN	Data Raw: 46 4a 28 42 5f 61 29 3b 0a 76 61 72 20 6c 68 66 3d 22 23 46 46 46 46 46 46 30 30 22 2c 6d 68 66 3d 22 25 73 20 61 6c 72 65 61 64 79 20 62 65 6c 6f 6e 67 73 20 74 6f 20 25 73 22 2c 6e 68 66 3d 22 25 73 20 69 73 20 6e 6f 74 20 61 6e 20 61 6c 6c 6f 77 65 64 20 73 68 61 70 65 20 70 72 6f 70 65 72 74 79 20 66 6f 72 20 61 20 4d 65 64 69 61 43 6c 69 70 2e 22 2c 6f 68 66 3d 22 31 30 30 22 2c 79 4c 3d 22 31 31 22 2c 70 68 66 3d 22 31 36 22 2c 7a 4c 3d 22 32 34 22 2c 71 68 66 3d 22 3a 61 6e 69 6d 61 74 69 6f 6e 22 2c 72 68 66 3d 22 3a 62 61 63 6b 67 72 6f 75 6e 64 22 2c 73 68 66 3d 22 3a 64 6f 63 75 6d 65 6e 74 22 2c 41 4c 3d 22 41 4d 22 2c 74 68 66 3d 22 44 6f 63 75 6d 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 4d 65 64 69 61 43 6c 69 70 20 77 Data Ascii: FJ(B_a);var lhf="#FFFFFF00",mhf="%s already belongs to %s",nhf="%s is not an allowed shape property for a MediaClip.",ohf="100",yL="11",phf="16",zL="24",qhf=":animation",rhf=":background",shf=":document",AL="AM",thf="Document does not contain MediaClip w
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 54 45 58 54 22 2c 47 68 66 3d 22 54 72 61 6e 73 66 6f 72 6d 20 25 73 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 66 6f 72 20 6f 62 6a 65 63 74 20 25 73 22 2c 48 68 66 3d 22 56 45 52 54 49 43 41 4c 5f 54 49 54 4c 45 5f 41 4e 44 5f 56 45 52 54 49 43 41 4c 5f 54 45 58 54 22 2c 49 68 66 3d 22 62 6f 64 79 50 6c 61 63 65 68 6f 6c 64 65 72 4c 69 73 74 45 6e 74 69 74 79 22 2c 4a 68 66 3d 22 64 6f 63 73 2d 65 61 73 6d 22 2c 4b 68 66 3d 22 69 6e 64 65 78 20 25 73 20 69 73 20 6f 75 74 20 6f 66 20 62 6f 75 6e 64 73 22 2c 4c 68 66 3d 22 70 72 6f 70 65 72 74 69 65 73 22 2c 4d 68 66 3d 22 73 6b 65 74 63 68 79 2d 61 64 64 41 6e 69 6d 61 74 69 6f 6e 22 2c 4e 68 66 3d 22 73 6b 65 74 63 68 79 2d 61 64 64 45 6e 74 69 74 79 22 2c 4f 68 66 3d 22 73 6b 65 74 63 68 79 2d 61 64 64 Data Ascii: TEXT",Ghf="Transform %s is not valid for object %s",Hhf="VERTICAL_TITLE_AND_VERTICAL_TEXT",Ihf="bodyPlaceholderListEntity",Jhf="docs-easm",Khf="index %s is out of bounds",Lhf="properties",Mhf="sketchy-addAnimation",Nhf="sketchy-addEntity",Ohf="sketchy-add
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 65 6e 74 50 61 67 65 2d 69 6d 70 6c 22 2c 77 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6c 69 76 65 2d 70 6f 69 6e 74 65 72 2d 63 6f 6f 72 64 69 6e 61 74 65 73 2d 65 6d 70 74 79 22 2c 0a 78 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6c 69 76 65 2d 70 6f 69 6e 74 65 72 2d 63 6f 6f 72 64 69 6e 61 74 65 73 2d 69 6d 70 6c 22 2c 79 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 64 69 61 43 6c 69 70 22 2c 7a 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 64 69 61 43 6c 69 70 2d 65 6d 70 74 79 22 2c 41 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 64 69 61 43 6c 69 70 2d 69 6d 70 6c 22 2c 42 69 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 Data Ascii: entPage-impl",wif="sketchy-selection-live-pointer-coordinates-empty",xif="sketchy-selection-live-pointer-coordinates-impl",yif="sketchy-selection-mediaClip",zif="sketchy-selection-mediaClip-empty",Aif="sketchy-selection-mediaClip-impl",Bif="sketchy-selec
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 43 6f 6c 75 6d 6e 57 69 64 74 68 73 22 2c 6a 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 45 6e 74 69 74 79 22 2c 6b 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 4c 69 73 74 45 6e 74 69 74 79 22 2c 6c 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 52 6f 77 48 65 69 67 68 74 73 22 2c 6d 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 54 61 62 6c 65 42 6f 72 64 65 72 53 74 79 6c 65 73 22 2c 6e 6a 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 54 61 62 6c 65 43 65 6c 6c 50 72 6f 70 65 72 74 69 65 73 22 2c 6f 6a 66 3d 22 73 6b 65 74 63 68 79 2d 7a 4f 72 64 65 72 22 3b 0a 66 75 6e 63 74 69 6f 6e 20 47 4c 28 61 2c 63 2c 64 2c 65 29 7b 7a 73 28 61 21 3d 3d 70 67 2c 22 6c 71 22 Data Ascii: f="sketchy-updateColumnWidths",jjf="sketchy-updateEntity",kjf="sketchy-updateListEntity",ljf="sketchy-updateRowHeights",mjf="sketchy-updateTableBorderStyles",njf="sketchy-updateTableCellProperties",ojf="sketchy-zOrder";function GL(a,c,d,e){zs(a!==pg,"lq"
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 61 3d 59 28 34 38 33 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 66 37 63 28 74 68 69 73 2c 61 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 64 3d 74 68 69 73 2e 48 2c 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 5b 65 5d 2e 73 70 6c 69 63 65 28 61 2c 30 2c 63 28 29 29 7d 29 3b 54 41 2e 70 72 6f 74 6f 74 79 70 65 2e 45 6c 3d 59 28 31 38 33 2c 7a 28 22 46 22 29 29 3b 43 4a 64 2e 70 72 6f 74 6f 74 79 70 65 2e 45 6c 3d 59 28 31 38 32 2c 7a 28 22 48 22 29 29 3b 43 51 64 2e 70 72 6f 74 6f 74 79 70 65 2e 45 6c 3d 59 28 31 38 31 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 2e 44 2e 44 7d 29 3b 78 51 64 2e 70 72 6f 74 6f 74 79 70 65 2e 45 6c 3d 59 28 31 38 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: a=Y(483,function(a,c){f7c(this,a,!0);for(var d=this.H,e=0;e<d.length;e++)d[e].splice(a,0,c())});TA.prototype.El=Y(183,z("F"));CJd.prototype.El=Y(182,z("H"));CQd.prototype.El=Y(181,function(){return this.D.D.D});xQd.prototype.El=Y(180,function(){return thi
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 2a 64 2b 63 2e 77 70 2a 65 3b 61 2e 4b 6f 3d 63 2e 4d 70 2a 64 2b 63 2e 4b 6f 2a 65 3b 64 3d 61 2e 44 3b 65 3d 61 2e 46 3b 61 2e 44 3d 63 2e 4c 70 2a 64 2b 63 2e 77 70 2a 65 2b 63 2e 44 3b 61 2e 46 3d 63 2e 4d 70 2a 64 2b 63 2e 4b 6f 2a 65 2b 63 2e 46 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 7a 6a 66 28 61 29 7b 76 61 72 20 63 3d 56 7a 63 28 61 29 3b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 63 29 26 26 69 73 46 69 6e 69 74 65 28 61 2e 44 29 26 26 69 73 46 69 6e 69 74 65 28 61 2e 46 29 26 26 63 21 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 41 6a 66 28 29 7b 7d 4a 28 41 6a 66 2c 4b 29 3b 41 6a 66 2e 70 72 6f 74 6f 74 79 70 65 2e 45 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 73 28 74 68 69 73 2e 48 29 26 26 62 75 28 74 68 Data Ascii: d+c.wpe;a.Ko=c.Mpd+c.Koe;d=a.D;e=a.F;a.D=c.Lpd+c.wpe+c.D;a.F=c.Mpd+c.Koe+c.F;return a}function zjf(a){var c=Vzc(a);return isFinite(c)&&isFinite(a.D)&&isFinite(a.F)&&c!=0}function Ajf(){}J(Ajf,K);Ajf.prototype.Eb=function(){return Ls(this.H)&&bu(th
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 20 6e 65 77 20 45 4b 62 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 6a 66 28 61 29 7b 4a 4b 62 28 29 3b 72 65 74 75 72 6e 20 4e 6a 66 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 31 45 33 29 2c 62 6e 28 61 25 31 45 33 2a 31 45 36 29 29 7d 66 75 6e 63 74 69 6f 6e 20 50 6a 66 28 61 2c 63 29 7b 4e 4c 62 28 29 3b 72 65 74 75 72 6e 20 4e 6a 66 28 63 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 2d 61 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 2c 63 2e 44 2d 61 2e 44 7c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 51 6a 66 28 61 2c 63 29 7b 4e 4c 62 28 29 3b 4d 4c 62 2e 63 6f 6e 74 61 69 6e 73 28 4e 28 63 29 29 7c 7c 28 61 2b 3d 63 2f 31 45 39 7c 30 2c 63 3d 63 25 31 45 39 7c 30 29 3b 63 3c 30 26 26 28 63 3d 63 2b 31 45 39 7c 30 2c 2d 2d 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 Data Ascii: new EKb(a,c)}function Ojf(a){JKb();return Njf(Math.floor(a/1E3),bn(a%1E3*1E6))}function Pjf(a,c){NLb();return Njf(c.getSeconds()-a.getSeconds(),c.D-a.D\|0)}function Qjf(a,c){NLb();MLb.contains(N(c))\|\|(a+=c/1E9\|0,c=c%1E9\|0);c<0&&(c=c+1E9\|0,--a);return new
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 2c 4e 28 34 29 2c 44 6e 28 34 2c 61 6b 66 29 29 2c 4e 28 35 29 2c 44 6e 28 35 2c 61 6b 66 29 29 2c 4e 28 36 29 2c 44 6e 28 36 2c 61 6b 66 29 29 2c 4e 28 37 29 2c 44 6e 28 37 2c 61 6b 66 29 29 2c 4e 28 38 29 2c 44 6e 28 38 2c 61 6b 66 29 29 2c 4e 28 39 29 2c 44 6e 28 39 2c 61 6b 66 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 6b 66 28 61 29 7b 63 6b 66 28 29 3b 72 65 74 75 72 6e 20 47 6e 28 48 73 28 44 6e 28 47 6e 28 62 6b 66 2e 67 65 74 28 4e 28 61 29 29 29 2c 61 6b 66 29 2c 22 49 6e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6b 66 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 46 3d 3d 31 26 26 61 2e 76 6e 28 29 3d 3d 30 7d 76 61 72 20 66 6b 66 3b 66 75 6e 63 74 69 6f 6e 20 67 6b 66 28 61 2c 63 2c 64 29 7b 68 6b 66 28 29 3b 74 68 69 73 2e 46 3d 30 3b 74 68 69 73 2e Data Ascii: ,N(4),Dn(4,akf)),N(5),Dn(5,akf)),N(6),Dn(6,akf)),N(7),Dn(7,akf)),N(8),Dn(8,akf)),N(9),Dn(9,akf)))}function dkf(a){ckf();return Gn(Hs(Dn(Gn(bkf.get(N(a))),akf),"In"))}function ekf(a){return a.F==1&&a.vn()==0}var fkf;function gkf(a,c,d){hkf();this.F=0;this.
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 2c 66 2c 67 29 7b 6c 6b 66 28 29 3b 74 68 69 73 2e 44 3d 47 73 28 61 29 3b 74 68 69 73 2e 4f 3d 47 73 28 63 29 3b 74 68 69 73 2e 52 3d 47 73 28 64 29 3b 74 68 69 73 2e 48 3d 65 3b 74 68 69 73 2e 4a 3d 66 3b 74 68 69 73 2e 46 3d 67 3b 7a 73 28 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 4f 2e 44 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 52 2e 44 2e 6c 65 6e 67 74 68 26 26 28 21 74 68 69 73 2e 48 7c 7c 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 48 2e 44 2e 6c 65 6e 67 74 68 29 26 26 28 21 74 68 69 73 2e 4a 7c 7c 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 4a 2e 44 2e 6c 65 6e 67 74 68 29 26 26 28 21 74 68 69 73 2e 46 7c 7c 74 68 69 73 2e 44 Data Ascii: ,f,g){lkf();this.D=Gs(a);this.O=Gs(c);this.R=Gs(d);this.H=e;this.J=f;this.F=g;zs(this.D.D.length==this.O.D.length&&this.D.D.length==this.R.D.length&&(!this.H\|\|this.D.D.length==this.H.D.length)&&(!this.J\|\|this.D.D.length==this.J.D.length)&&(!this.F\|\|this.D
2024-10-30 19:39:50 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 4c 79 62 28 61 2e 44 29 29 3b 63 2e 70 75 73 68 28 61 2e 46 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 76 6b 66 28 61 29 7b 76 61 72 20 63 3d 52 74 28 61 2c 30 29 2c 64 3d 4d 79 62 28 61 5b 31 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 67 6b 66 28 63 2c 64 2c 52 74 28 61 2c 32 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 4c 28 61 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 2e 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 64 3d 31 2e 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 65 3d 2d 31 2e 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 66 3d 2d 31 2e 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 67 3d 30 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 67 3c 68 3b 67 3d 67 2b Data Ascii: .push(Lyb(a.D));c.push(a.F);return c}function vkf(a){var c=Rt(a,0),d=Myb(a[1]);return new gkf(c,d,Rt(a,2))}function OL(a){for(var c=1.7976931348623157E308,d=1.7976931348623157E308,e=-1.7976931348623157E308,f=-1.7976931348623157E308,g=0,h=a.length;g<h;g=g+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49746	172.217.16.142	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:50 UTC	1020	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U
2024-10-30 19:39:51 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 15:42:11 GMT Expires: Thu, 30 Oct 2025 15:42:11 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 14260 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:51 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-10-30 19:39:51 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49749	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:52 UTC	997	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 906 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U
2024-10-30 19:39:52 UTC	906	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 30 33 31 37 31 38 38 39 38 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1730317188988",null,null,null,
2024-10-30 19:39:52 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ; expires=Thu, 01-May-2025 19:39:52 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:39:52 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 30 Oct 2024 19:39:52 GMT Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:52 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 19:39:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49751	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:53 UTC	1001	OUT	GET /static/document/client/js/661166313-client_js_prod_kix_docos.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; GFE_RTT=212
2024-10-30 19:39:53 UTC	789	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 1119718 Date: Wed, 30 Oct 2024 19:39:53 GMT Expires: Thu, 30 Oct 2025 19:39:53 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:53 UTC	589	IN	Data Raw: 46 4a 28 78 5f 61 29 3b 0a 76 61 72 20 77 45 6a 3d 22 20 63 6f 72 72 65 63 74 65 64 20 74 6f 20 22 2c 78 45 6a 3d 27 20 64 61 74 61 2d 69 73 2d 73 65 61 72 63 68 3d 22 74 72 75 65 22 27 2c 79 45 6a 3d 22 20 67 72 6f 75 70 2c 20 70 72 65 73 73 20 65 6e 74 65 72 22 2c 7a 45 6a 3d 22 20 6f 74 68 65 72 73 20 68 61 76 65 20 72 65 61 63 74 65 64 2e 22 2c 41 45 6a 3d 27 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 27 2c 42 45 6a 3d 22 20 74 6f 20 22 2c 43 45 6a 3d 22 20 7c 20 22 2c 44 45 6a 3d 27 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 45 45 6a 3d 27 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 26 62 75 6c 6c 3b 3c 2f 64 69 76 3e 27 2c 46 45 6a 3d 27 22 20 Data Ascii: FJ(x_a);var wEj=" corrected to ",xEj=' data-is-search="true"',yEj=" group, press enter",zEj=" others have reacted.",AEj=' style="display: none"',BEj=" to ",CEj=" \| ",DEj='" aria-hidden="true"/><div class="',EEj='" aria-hidden="true">•</div>',FEj='"
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 6e 6f 6e 65 22 3e 27 2c 4e 45 6a 3d 27 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 3e 27 2c 4f 45 6a 3d 27 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3e 27 2c 50 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 3c 2f 64 69 76 3e 27 2c 51 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 52 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 27 2c 53 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 3c 2f 64 69 76 3e 27 2c 54 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f Data Ascii: none">',NEj='" role="heading">',OEj='" role="presentation">',PEj='" style="display: none"></div>',QEj='" style="display: none"><div class="',REj='" style="display: none;">',SEj='" style="display: none;"></div>',TEj='" style="display: none;"><div class="do
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 46 6a 3d 27 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 63 6c 61 73 73 3d 22 27 2c 43 46 6a 3d 27 3c 64 69 76 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 27 2c 44 46 6a 3d 22 3c 69 3e 4d 61 64 65 20 61 20 73 75 67 67 65 73 74 69 6f 6e 3c 2f 69 3e 22 2c 45 46 6a 3d 0a 27 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 27 2c 46 46 6a 3d 27 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 62 6f 74 68 3b 22 3e 3c 2f 73 70 61 6e 3e 27 2c 47 46 6a 3d 27 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 63 6c 61 73 73 3d 22 27 2c 48 46 6a 3d 27 3c 74 64 20 63 6c 61 73 73 3d 22 27 2c 49 46 6a 3d 27 3e 3c 70 61 74 68 20 64 3d 22 4d 37 38 34 2d Data Ascii: Fj='<div style="display: none" class="',CFj='<div tabindex="-1" class="',DFj="<i>Made a suggestion</i>",EFj='<input type="text" class="',FFj='<span style="clear:both;"></span>',GFj='<svg viewBox="0 0 24 24" class="',HFj='<td class="',IFj='><path d="M784-
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 5f 45 58 43 45 45 44 45 44 22 2c 67 47 6a 3d 22 44 69 73 63 61 72 64 20 43 68 61 6e 67 65 73 22 2c 68 47 6a 3d 22 44 69 73 63 61 72 64 20 63 68 61 6e 67 65 73 22 2c 69 47 6a 3d 22 44 69 73 63 61 72 64 20 63 6f 6d 6d 65 6e 74 22 2c 6a 47 6a 3d 22 44 69 73 70 6c 61 79 20 61 6c 6c 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6b 47 6a 3d 22 44 69 73 70 6c 61 79 20 6f 70 65 6e 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6c 47 6a 3d 22 44 69 73 70 6c 61 79 20 72 65 73 6f 6c 76 65 64 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6d 47 6a 3d 22 44 69 73 70 6c 61 79 69 6e 67 20 6f 70 65 6e 20 61 6e 64 20 72 65 73 6f 6c 76 65 64 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6e 47 6a 3d 22 44 69 73 70 6c 61 79 69 6e 67 20 6f 70 65 6e 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6f 47 6a 3d 22 44 69 73 70 6c 61 Data Ascii: _EXCEEDED",gGj="Discard Changes",hGj="Discard changes",iGj="Discard comment",jGj="Display all comments.",kGj="Display open comments.",lGj="Display resolved comments.",mGj="Displaying open and resolved comments.",nGj="Displaying open comments.",oGj="Displa
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 2c 68 48 6a 3d 22 53 75 67 67 65 73 74 69 6f 6e 20 61 63 63 65 70 74 65 64 22 2c 69 48 6a 3d 22 53 75 67 67 65 73 74 69 6f 6e 20 72 65 6a 65 63 74 65 64 22 2c 6a 48 6a 3d 22 53 78 39 4b 77 63 22 2c 6b 48 6a 3d 22 54 49 4d 45 4f 55 54 22 2c 78 58 3d 22 55 55 22 2c 6c 48 6a 3d 22 55 6e 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 69 6e 65 22 2c 6d 48 6a 3d 22 55 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 72 72 6f 72 20 63 6f 64 65 22 2c 6e 48 6a 3d 22 56 69 65 77 20 73 6d 61 72 74 20 73 75 67 67 65 73 74 69 6f 6e 22 2c 6f 48 6a 3d 22 56 69 65 77 65 72 73 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 63 61 6e 20 73 65 65 20 63 6f 6d 6d 65 6e 74 73 20 61 6e 64 20 73 75 67 67 65 73 74 69 6f 6e 73 22 2c 70 48 6a 3d 22 Data Ascii: e was encountered",hHj="Suggestion accepted",iHj="Suggestion rejected",jHj="Sx9Kwc",kHj="TIMEOUT",xX="UU",lHj="Unavailable offline",mHj="Unrecognized error code",nHj="View smart suggestion",oHj="Viewers of this file can see comments and suggestions",pHj="
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 22 2c 62 49 6a 3d 22 62 65 66 6f 72 65 2d 73 75 67 67 65 73 74 69 6f 6e 2d 72 65 6a 65 63 74 65 64 22 2c 63 49 6a 3d 22 62 65 66 6f 72 65 2d 76 69 65 77 2d 66 6c 75 73 68 65 64 22 2c 64 49 6a 3d 22 62 65 66 6f 72 65 5f 75 6e 64 6f 22 2c 65 49 6a 3d 22 62 65 66 6f 72 65 63 68 61 6e 67 65 22 2c 66 49 6a 3d 22 62 65 66 6f 72 65 66 6f 63 75 73 22 2c 67 49 6a 3d 22 62 65 66 6f 72 65 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 2c 0a 68 49 6a 3d 22 62 6c 6f 63 6b 65 64 22 2c 69 49 6a 3d 22 62 6f 6c 64 22 2c 6a 49 6a 3d 22 63 4a 30 6d 4d 63 22 2c 6b 49 6a 3d 22 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 22 2c 6c 49 6a 3d 22 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 2d 61 63 63 65 70 74 22 2c 6d 49 6a 3d 22 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 2d 64 69 73 Data Ascii: ",bIj="before-suggestion-rejected",cIj="before-view-flushed",dIj="before_undo",eIj="beforechange",fIj="beforefocus",gIj="beforeselectionchange",hIj="blocked",iIj="bold",jIj="cJ0mMc",kIj="call-to-action",lIj="call-to-action-accept",mIj="call-to-action-dis
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 68 6f 6c 64 65 72 22 2c 67 4a 6a 3d 22 64 6f 63 6f 73 2d 61 70 70 72 6f 76 65 72 2d 62 61 64 67 65 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 68 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 6e 6f 6e 65 22 2c 69 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 6f 74 68 65 72 22 2c 6a 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 73 65 6c 65 63 74 2d 66 6f 63 75 73 22 2c 6b 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 79 6f 75 22 2c 6c 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 22 2c 6d 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 2d 61 73 73 69 67 6e 65 65 2d 74 65 78 74 22 2c 6e 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 2d 6c 61 62 65 6c 22 2c 6f 4a 6a Data Ascii: holder",gJj="docos-approver-badge-container",hJj="docos-assignee-none",iJj="docos-assignee-other",jJj="docos-assignee-select-focus",kJj="docos-assignee-you",lJj="docos-assigneeview",mJj="docos-assigneeview-assignee-text",nJj="docos-assigneeview-label",oJj
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 6f 63 6f 73 2d 64 69 73 22 2c 54 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 6d 65 6e 75 2d 64 72 6f 70 64 6f 77 6e 22 2c 55 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 6d 65 6e 75 2d 76 69 73 69 62 6c 65 22 2c 56 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 61 63 74 69 76 65 22 2c 57 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 63 6f 6d 6d 65 6e 74 22 2c 58 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 69 6e 70 75 74 2d 70 61 6e 65 22 2c 59 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 6f 70 65 6e 22 2c 5a 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 70 6c 79 63 6f 6e 74 61 69 6e 65 72 22 2c 24 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 73 6f 6c 76 65 22 2c 61 4b 6a 3d Data Ascii: ocos-dis",TJj="docos-docomenu-dropdown",UJj="docos-docomenu-visible",VJj="docos-docoview-active",WJj="docos-docoview-comment",XJj="docos-docoview-input-pane",YJj="docos-docoview-reopen",ZJj="docos-docoview-replycontainer",$Jj="docos-docoview-resolve",aKj=
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 61 6e 65 6c 22 2c 48 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 61 74 2d 72 65 70 6c 79 2d 6d 65 73 73 61 67 65 22 2c 49 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 62 75 74 74 6f 6e 2d 72 6f 77 22 2c 4a 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 62 75 74 74 6f 6e 73 22 2c 4b 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 63 61 6e 63 65 6c 22 2c 4c 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 6e 6f 68 69 64 65 22 2c 0a 4d 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 70 61 6e 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 4e 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 70 6f 73 74 22 2c 4f 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 74 65 78 74 61 72 65 61 22 2c 50 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 74 79 70 69 6e 67 Data Ascii: anel",HKj="docos-input-at-reply-message",IKj="docos-input-button-row",JKj="docos-input-buttons",KKj="docos-input-cancel",LKj="docos-input-nohide",MKj="docos-input-pane-placeholder",NKj="docos-input-post",OKj="docos-input-textarea",PKj="docos-input-typing
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 71 75 6f 74 65 2d 63 6f 6c 6c 61 70 73 65 64 22 2c 42 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 71 75 6f 74 65 2d 65 78 70 61 6e 64 22 2c 43 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 71 75 6f 74 65 2d 65 78 70 61 6e 64 65 64 22 2c 44 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 72 65 70 6c 79 2d 63 6f 75 6e 74 22 2c 45 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 72 65 73 6f 6c 76 65 2d 62 75 74 74 6f 6e 22 2c 46 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 73 74 61 74 69 63 22 2c 47 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 74 69 6d 65 73 74 61 6d 70 22 2c 48 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 Data Ascii: Lj="docos-replyview-quote-collapsed",BLj="docos-replyview-quote-expand",CLj="docos-replyview-quote-expanded",DLj="docos-replyview-reply-count",ELj="docos-replyview-resolve-button",FLj="docos-replyview-static",GLj="docos-replyview-timestamp",HLj="docos-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49752	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:53 UTC	1252	OUT	POST /document/font/getmetadata?includes_info_params=true&usp=sharing&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 231 X-Build: editors.documents-frontend_20241022.02_p3 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Rel-Id: 2a3.3b22f16c.s X-Client-Deadline-Ms: 20000 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; lbcs=0
2024-10-30 19:39:53 UTC	231	OUT	Data Raw: 66 61 6d 69 6c 69 65 73 3d 41 6d 61 74 69 63 25 32 30 53 43 25 32 43 43 61 76 65 61 74 25 32 43 43 6f 6d 66 6f 72 74 61 61 25 32 43 45 42 25 32 30 47 61 72 61 6d 6f 6e 64 25 32 43 4c 65 78 65 6e 64 25 32 43 4c 6f 62 73 74 65 72 25 32 43 4c 6f 72 61 25 32 43 4d 6f 6e 74 73 65 72 72 61 74 25 32 43 4e 75 6e 69 74 6f 25 32 43 4f 73 77 61 6c 64 25 32 43 50 61 63 69 66 69 63 6f 25 32 43 50 6c 61 79 66 61 69 72 25 32 30 44 69 73 70 6c 61 79 25 32 43 52 6f 62 6f 74 6f 25 32 43 52 6f 62 6f 74 6f 25 32 30 4d 6f 6e 6f 25 32 43 52 6f 62 6f 74 6f 25 32 30 53 65 72 69 66 25 32 43 53 70 65 63 74 72 61 6c 26 75 73 65 41 6c 6c 53 75 62 73 65 74 73 3d 74 72 75 65 26 66 6f 72 6d 61 74 3d 77 6f 66 66 32 Data Ascii: families=Amatic%20SC%2CCaveat%2CComfortaa%2CEB%20Garamond%2CLexend%2CLobster%2CLora%2CMontserrat%2CNunito%2COswald%2CPacifico%2CPlayfair%20Display%2CRoboto%2CRoboto%20Mono%2CRoboto%20Serif%2CSpectral&useAllSubsets=true&format=woff2
2024-10-30 19:39:53 UTC	945	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:53 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:53 UTC	433	IN	Data Raw: 37 30 30 36 0d 0a 29 5d 7d 27 0a 7b 22 66 6f 6e 74 4d 65 74 61 64 61 74 61 4d 61 70 22 3a 7b 22 43 61 76 65 61 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 66 6f 6e 74 46 61 63 65 73 22 3a 5b 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c Data Ascii: 7006)]}'{"fontMetadataMap":{"Caveat":{"documentFont":false,"fontFaces":[{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 66 4a 39 53 49 63 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 41 4c 4c 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 2a 22 2c 22 77 65 69 67 68 74 22 3a 34 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 52 65 67 75 6c 61 72 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 Data Ascii: gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9SIc.woff2"}],"style":"normal","subset":"ALL","subsetValue":"*","weight":400,"weightedFontFamily":"Caveat Regular"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascend
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 Data Ascii: se,"codepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,"ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstat
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 68 37 70 63 70 4e 76 4f 78 2d 70 6a 63 42 39 53 49 63 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 41 4c 4c 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 2a 22 2c 22 77 65 69 67 68 74 22 3a 35 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 4d 65 64 69 75 6d 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 Data Ascii: h7pcpNvOx-pjcB9SIc.woff2"}],"style":"normal","subset":"ALL","subsetValue":"*","weight":500,"weightedFontFamily":"Caveat Medium"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00"
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f Data Ascii: Selection":192,"lineGap":0,"ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvO
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 75 62 73 65 74 22 3a 22 41 4c 4c 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 2a 22 2c 22 77 65 69 67 68 74 22 3a 36 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 53 65 6d 69 42 6f 6c 64 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 Data Ascii: ubset":"ALL","subsetValue":"*","weight":600,"weightedFontFamily":"Caveat SemiBold"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":192,"li
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 53 78 36 65 49 57 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 Data Ascii: ge1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjSx6eIWpYQ.woff2"}],"style":"normal","
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 74 22 3a 37 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 42 6f 6c 64 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 36 30 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 Data Ascii: t":700,"weightedFontFamily":"Caveat Bold"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":160,"lineGap":0,"ulCodePageRange1":151,"unitsPer
2024-10-30 19:39:53 UTC	1378	IN	Data Raw: 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 52 56 36 65 49 57 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 4c 41 54 49 4e 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 6c 61 74 69 6e 22 2c 22 77 65 69 67 68 74 22 3a 37 30 Data Ascii: inDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjRV6eIWpYQ.woff2"}],"style":"normal","subset":"LATIN","subsetValue":"latin","weight":70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49754	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:53 UTC	541	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://docs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 19:39:53 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:39:53 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49753	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:53 UTC	541	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://docs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 19:39:53 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:39:53 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49757	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:53 UTC	1594	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/test?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=0&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&MODE=init&zx=qpdb7snflgdf&t=1 HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; lbcs=0
2024-10-30 19:39:54 UTC	936	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet x-client-wire-protocol: HTTP/1.1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:54 GMT Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:54 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-30 19:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49755	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:53 UTC	1543	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/trash/read?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&includes_info_params=true&usp=sharing&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive X-Build: editors.documents-frontend_20241022.02_p3 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Rel-Id: 2a3.3b22f16c.s X-Client-Deadline-Ms: 20000 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; lbcs=0
2024-10-30 19:39:53 UTC	1006	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet X-Restart: SOON X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:53 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:53 UTC	28	IN	Data Raw: 31 36 0d 0a 29 5d 7d 27 0a 7b 22 54 52 41 53 48 45 44 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 16)]}'{"TRASHED":false}
2024-10-30 19:39:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49756	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:53 UTC	1546	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/peruserchrome?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&includes_info_params=true&usp=sharing&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive X-Build: editors.documents-frontend_20241022.02_p3 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Rel-Id: 2a3.3b22f16c.s X-Client-Deadline-Ms: 20000 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; NID=518=imHjPxOtLh-Dog_2arnhrloQjp1A9DD5dZVQYpfyoydvIwIse7o5QDK5LuyFl9Vm9fMuzDo6aCl8-ZH-zBOUbwZu1VGT0jz8wPR7AMwnWY8PLNm3nU1dzk5r-OEbB1iGVo90-9EtVoq7Yn-ICUMHS8tJGBTFtHVPhw_e_BKW3WlpgzfmN8U; lbcs=0
2024-10-30 19:39:54 UTC	1006	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet X-Restart: SOON X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:53 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:54 UTC	12	IN	Data Raw: 37 0d 0a 29 5d 7d 27 0a 7b 7d 0d 0a Data Ascii: 7)]}'{}
2024-10-30 19:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:54 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:54 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:54 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193954Z-17c5cb586f62vrfquq10qybcuw00000001hg000000002zpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:54 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 19:39:54 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49763	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:54 UTC	1014	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 8701 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:54 UTC	8701	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 36 2c 5b 5b 22 31 37 33 30 33 31 37 31 39 31 35 31 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],56,[["1730317191515",null,null,null,n
2024-10-30 19:39:54 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:39:54 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:54 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 19:39:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49762	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:54 UTC	711	OUT	GET /static/document/client/js/1761216827-client_js_prod_kix_app.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:54 UTC	801	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 2679379 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 29 Oct 2024 21:08:01 GMT Expires: Wed, 29 Oct 2025 21:08:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 81113 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:54 UTC	577	IN	Data Raw: 46 4a 28 73 5f 61 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0a 20 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 72 65 73 74 72 69 63 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 Data Ascii: FJ(s_a);/* Copyright 2020 Google Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 0a 20 46 49 54 4e 45 53 53 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 Data Ascii: tantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHA
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 0a 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 0a 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 76 61 72 20 68 43 66 3d 22 5c 6e 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 5c 6e 22 2c 70 4d 3d 22 20 2d 20 22 2c 69 43 66 3d 22 20 2d 20 32 34 70 78 29 22 2c 6a Data Ascii: R ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/var hCf="\n-------------\n",pM=" - ",iCf=" - 24px)",j
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 63 75 73 2d 6c 6f 67 69 63 3d 27 74 72 75 65 27 22 2c 54 43 66 3d 22 20 64 69 73 61 62 6c 65 64 22 2c 55 43 66 3d 27 20 64 69 73 61 62 6c 65 64 3d 22 27 2c 56 43 66 3d 22 20 66 6f 63 75 73 3a 22 2c 57 43 66 3d 22 20 66 6f 63 75 73 3a 68 30 36 52 38 3b 20 62 6c 75 72 3a 7a 6a 68 36 72 62 3b 6d 6c 6e 52 4a 62 3a 66 4c 69 50 7a 64 3b 22 2c 58 43 66 3d 27 20 68 72 65 66 3d 22 27 2c 74 4d 3d 27 20 69 64 3d 22 27 2c 59 43 66 3d 22 20 69 73 20 6e 6f 74 20 61 74 20 61 20 76 61 6c 69 64 20 74 61 62 6c 65 20 6c 6f 63 61 74 69 6f 6e 2e 22 2c 5a 43 66 3d 22 20 69 73 20 74 68 65 20 6f 77 6e 65 72 22 2c 24 43 66 3d 27 20 6a 73 61 63 74 69 6f 6e 3d 22 27 2c 61 44 66 3d 27 20 6a 73 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 27 2c 75 4d 3d 27 20 6a 73 6e 61 6d 65 3d 22 27 2c 62 Data Ascii: cus-logic='true'",TCf=" disabled",UCf=' disabled="',VCf=" focus:",WCf=" focus:h06R8; blur:zjh6rb;mlnRJb:fLiPzd;",XCf=' href="',tM=' id="',YCf=" is not at a valid table location.",ZCf=" is the owner",$Cf=' jsaction="',aDf=' jscontroller="',uM=' jsname="',b
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 65 63 74 2d 62 6c 6f 63 6b 6c 69 73 74 2d 6b 65 79 3d 22 27 2c 0a 4d 44 66 3d 27 22 20 64 61 74 61 2d 61 75 74 6f 63 6f 72 72 65 63 74 2d 66 65 65 64 62 61 63 6b 2d 64 61 74 61 2d 70 72 6f 76 69 64 65 72 2d 6b 65 79 3d 22 27 2c 4e 44 66 3d 27 22 20 64 61 74 61 2d 69 73 2d 68 6f 69 73 74 65 64 3d 22 27 2c 4f 44 66 3d 27 22 20 64 61 74 61 2d 6c 69 73 74 2d 74 79 70 65 3d 22 27 2c 50 44 66 3d 27 22 20 64 61 74 61 2d 70 72 6f 67 72 65 73 73 76 61 6c 75 65 3d 22 27 2c 51 44 66 3d 27 22 20 64 61 74 61 2d 73 68 6f 75 6c 64 2d 66 6c 69 70 2d 63 6f 72 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 6c 79 3d 22 27 2c 52 44 66 3d 27 22 20 64 61 74 61 2d 73 74 61 79 2d 69 6e 2d 76 69 65 77 70 6f 72 74 3d 22 27 2c 53 44 66 3d 27 22 20 64 61 74 61 2d 75 72 6c 3d 22 27 2c 54 Data Ascii: ect-blocklist-key="',MDf='" data-autocorrect-feedback-data-provider-key="',NDf='" data-is-hoisted="',ODf='" data-list-type="',PDf='" data-progressvalue="',QDf='" data-should-flip-corner-horizontally="',RDf='" data-stay-in-viewport="',SDf='" data-url="',T
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2c 7a 45 66 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 27 2c 41 45 66 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 3c 2f 64 69 76 3e 27 2c 42 45 66 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 27 2c 43 45 66 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 3c 2f 64 69 76 3e 27 2c 44 45 66 3d 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 72 65 66 65 72 72 65 72 22 20 74 61 62 49 6e 64 65 78 3d 22 30 22 27 2c 0a 45 45 66 3d 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 27 2c 46 45 66 3d 27 22 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 27 2c 47 45 66 3d Data Ascii: utton" aria-label="',zEf='" tabindex="0" role="button">',AEf='" tabindex="0" role="button"></div>',BEf='" tabindex="0">',CEf='" tabindex="0"></div>',DEf='" target="_blank" rel="noreferrer" tabIndex="0"',EEf='" target="_blank">',FEf='" to dictionary',GEf=
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 74 46 66 3d 22 23 65 36 65 36 65 36 22 2c 54 4d 3d 22 23 66 30 66 34 66 39 22 2c 75 46 66 3d 22 23 66 66 63 38 61 61 22 2c 76 46 66 3d 22 23 66 66 63 66 63 39 22 2c 57 46 66 3d 22 23 66 66 65 35 61 30 22 2c 58 46 66 3d 22 25 36 2e 22 2c 59 46 66 3d 22 25 37 2e 22 2c 5a 46 66 3d 22 25 38 2e 22 2c 24 46 66 3d 22 26 6e 62 73 70 3b 22 2c 61 47 66 3d 22 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 22 2c 62 47 66 3d 22 28 5b 5e 28 5c 5c 73 5d 2b 28 5c 5c 28 5b 5e 29 5d 2a 5c 5c 29 29 3f 29 22 2c 63 47 66 3d 22 28 63 65 6e 74 69 6d 65 74 65 72 73 29 22 2c 64 47 66 3d 22 28 69 6e 63 68 65 73 29 22 2c 65 47 66 3d 22 28 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3d 74 72 75 65 29 22 2c 66 47 66 3d 27 29 22 20 64 61 74 61 2d 61 75 74 6f 63 6f 72 72 65 63 74 2d 66 65 Data Ascii: tFf="#e6e6e6",TM="#f0f4f9",uFf="#ffc8aa",vFf="#ffcfc9",WFf="#ffe5a0",XFf="%6.",YFf="%7.",ZFf="%8.",$Ff=" ",aGf="'><div class=\"",bGf="([^(\\s]+(\$[^)]*\$)?)",cGf="(centimeters)",dGf="(inches)",eGf="(preventDefault=true)",fGf=')" data-autocorrect-fe
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 66 22 2c 24 47 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 74 6f 6f 6c 73 2f 66 65 65 64 62 61 63 6b 22 2c 0a 61 48 66 3d 22 2f 66 69 6c 65 2f 64 2f 22 2c 62 48 66 3d 22 2f 6c 6f 67 49 6d 70 72 65 73 73 69 6f 6e 73 22 2c 63 48 66 3d 22 2f 70 65 72 75 73 65 72 63 68 72 6f 6d 65 22 2c 64 48 66 3d 22 2f 72 2f 65 76 65 6e 74 65 64 69 74 22 2c 65 48 66 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 72 70 63 5f 72 65 6c 61 79 2e 68 74 6d 6c 22 2c 58 4d 3d 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 22 2c 66 48 66 3d 22 30 20 30 20 31 38 20 31 38 22 2c 67 48 66 3d 22 30 20 30 20 32 34 20 32 34 22 2c 68 48 66 3d 22 31 30 70 78 22 2c 59 4d 3d 22 31 36 70 78 22 2c 69 48 66 3d 22 31 42 31 35 38 38 32 33 2d 42 36 42 34 2d 34 38 34 36 2d 41 45 43 32 2d 43 37 Data Ascii: f",$Gf="//www.google.com/tools/feedback",aHf="/file/d/",bHf="/logImpressions",cHf="/peruserchrome",dHf="/r/eventedit",eHf="/resources/rpc_relay.html",XM="0 -960 960 960",fHf="0 0 18 18",gHf="0 0 24 24",hHf="10px",YM="16px",iHf="1B158823-B6B4-4846-AEC2-C7
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 73 70 61 6e 3e 3c 2f 64 69 76 3e 22 2c 64 49 66 3d 22 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 2c 65 49 66 3d 22 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 2c 66 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 67 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2c 68 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 61 20 63 6c 61 73 73 3d 22 27 2c 69 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 0a 6a 4e 3d 27 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2c 6a 49 66 3d 27 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 6a 73 61 63 74 69 6f 6e 3d 22 27 2c 6b 49 66 3d 27 3c 2f 73 70 61 6e Data Ascii: span></div>",dIf="</span></div></div>",eIf="</span></div></div></div>",fIf='</span></div><div class="',gIf='</span></span><span class="',hIf='</span><a class="',iIf='</span><div class="',jN='</span><span class="',jIf='</span><span jsaction="',kIf='</span
2024-10-30 19:39:54 UTC	1378	IN	Data Raw: 75 4e 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 27 2c 55 49 66 3d 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 27 2c 56 49 66 3d 27 3c 74 72 20 63 6c 61 73 73 3d 22 27 2c 57 49 66 3d 27 3c 75 6c 20 63 6c 61 73 73 3d 22 27 2c 58 49 66 3d 22 3e 3c 2f 64 69 76 3e 22 2c 76 4e 3d 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 59 49 66 3d 27 3e 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 27 2c 5a 49 66 3d 22 3e 3c 64 69 76 3e 22 2c 24 49 66 3d 27 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 27 2c 61 4a 66 3d 27 3e 3c 70 61 74 68 20 64 3d 22 4d 32 35 36 2d 32 30 30 6c 2d 35 36 2d 35 36 4c 34 32 34 2d 34 38 30 4c 32 30 30 2d 37 30 34 6c 35 36 2d 35 36 4c 34 38 30 2d 35 Data Ascii: uN='<svg width="',UIf='<svg xmlns="http://www.w3.org/2000/svg" width="',VIf='<tr class="',WIf='<ul class="',XIf="></div>",vN='><div class="',YIf='><div jsname="',ZIf="><div>",$If='><input class="',aJf='><path d="M256-200l-56-56L424-480L200-704l56-56L480-5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49764	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:54 UTC	1015	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 10758 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:54 UTC	10758	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 36 2c 5b 5b 22 31 37 33 30 33 31 37 31 39 31 35 35 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],56,[["1730317191552",null,null,null,n
2024-10-30 19:39:55 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:39:54 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:55 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 19:39:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49765	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:55 UTC	1005	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 911 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:55 UTC	911	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 30 33 31 37 31 39 32 31 39 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1730317192192",null,null,null,
2024-10-30 19:39:56 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:39:56 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:56 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 19:39:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49766	74.125.206.189	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:55 UTC	867	OUT	OPTIONS /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/test?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=2&ar=1722&arat=uH6mD8k7J9-waQ&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&TYPE=xmlhttp&zx=1dnkc0b4d5rd&t=1 HTTP/1.1 Host: 0.docs.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-same-domain Origin: https://docs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 19:39:56 UTC	738	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:56 GMT Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Headers: x-same-domain X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49773	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:56 UTC	1015	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 47739 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:56 UTC	16384	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 36 2c 5b 5b 22 31 37 33 30 33 31 37 31 39 34 31 36 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],56,[["1730317194163",null,null,null,n
2024-10-30 19:39:56 UTC	16384	OUT	Data Raw: 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 30 5d 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 32 37 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 37 30 39 35 30 30 30 5d 5d 2c 31 2c 6e 75 6c 6c 2c 5b 5b 31 37 33 30 33 31 37 31 Data Ascii: ull,null,null,null,null,null,null,null,null,null,[0],0,null,null,null,null,null,null,null,[27],null,null,null,null,null,1],null,null,null,null,null,null,null,null,null,null,[1],null,null,null,null,null,null,null,null,null,null,[7095000]],1,null,[[17303171
2024-10-30 19:39:56 UTC	14971	OUT	Data Raw: 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 32 37 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 36 30 30 30 5d 5d 2c 31 2c 6e 75 6c 6c 2c 5b 5b 31 37 33 30 33 31 37 31 39 31 34 31 32 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 31 33 33 33 35 33 2c 6e 75 6c 6c 2c 38 30 2c 38 30 5d 2c 5b 34 31 2c 6e 75 6c 6c 2c 38 31 2c 31 37 33 30 33 31 37 31 39 31 34 31 Data Ascii: l,null,null,null,null,null,[27],null,null,null,null,null,1],null,null,null,null,null,null,null,null,null,null,[1],null,null,null,null,null,null,null,null,null,null,[6000]],1,null,[[1730317191412000],null,1],null,133353,null,80,80],[41,null,81,173031719141
2024-10-30 19:39:56 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:39:56 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:56 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 19:39:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49775	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:56 UTC	1016	OUT	GET /static/document/client/js/570078452-client_js_prod_kix_pre_tertiary_deps.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:57 UTC	787	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 96567 Date: Wed, 30 Oct 2024 19:39:56 GMT Expires: Thu, 30 Oct 2025 19:39:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:57 UTC	591	IN	Data Raw: 76 61 72 20 69 39 6b 3d 22 6b 69 78 5f 70 72 65 5f 74 65 72 74 69 61 72 79 5f 64 65 70 73 22 3b 46 4a 28 69 39 6b 29 3b 0a 76 61 72 20 6a 39 6b 3d 27 22 20 61 6c 74 3d 22 22 3e 27 2c 6b 39 6b 3d 22 2f 64 72 69 76 65 2f 76 32 69 6e 74 65 72 6e 61 6c 22 2c 6c 39 6b 3d 22 3b 62 61 73 65 36 34 2c 22 2c 6d 39 6b 3d 22 41 53 53 45 54 5f 43 4f 55 4e 54 5f 45 58 43 45 45 44 45 44 22 2c 6e 39 6b 3d 22 41 53 53 45 54 5f 4d 45 4d 4f 52 59 5f 45 58 43 45 45 44 45 44 22 2c 6f 39 6b 3d 22 41 56 41 49 4c 41 42 4c 45 22 2c 70 39 6b 3d 22 42 41 44 5f 52 45 51 55 45 53 54 22 2c 71 39 6b 3d 22 43 4f 4d 4d 45 4e 54 5f 43 4f 55 4e 54 5f 45 58 43 45 45 44 45 44 22 2c 72 39 6b 3d 22 43 4f 4e 54 45 4e 54 5f 52 45 56 49 45 57 22 2c 73 39 6b 3d 22 43 4f 4e 56 45 52 53 49 4f 4e 5f Data Ascii: var i9k="kix_pre_tertiary_deps";FJ(i9k);var j9k='" alt="">',k9k="/drive/v2internal",l9k=";base64,",m9k="ASSET_COUNT_EXCEEDED",n9k="ASSET_MEMORY_EXCEEDED",o9k="AVAILABLE",p9k="BAD_REQUEST",q9k="COMMENT_COUNT_EXCEEDED",r9k="CONTENT_REVIEW",s9k="CONVERSION_
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 53 50 4f 4e 53 45 5f 54 4f 4f 5f 4c 41 52 47 45 22 2c 46 39 6b 3d 22 52 65 76 69 73 69 6f 6e 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 76 61 69 6c 61 62 6c 65 22 2c 47 39 6b 3d 22 53 48 41 2d 32 35 36 22 2c 48 39 6b 3d 22 53 48 45 45 54 53 22 2c 49 39 6b 3d 22 53 4c 49 44 45 53 22 2c 4a 39 6b 3d 22 53 65 63 75 72 69 74 79 45 72 72 6f 72 22 2c 4b 39 6b 3d 22 54 6f 64 61 79 22 2c 4c 39 6b 3d 22 55 53 45 52 5f 51 55 4f 54 41 5f 45 58 43 45 45 44 45 44 22 2c 4d 39 6b 3d 22 55 53 45 52 5f 52 41 54 45 5f 4c 49 4d 49 54 5f 45 58 43 45 45 44 45 44 22 2c 4e 39 6b 3d 22 58 2d 47 6f 6f 67 2d 44 72 69 76 65 2d 52 65 73 6f 75 72 63 65 2d 4b 65 79 73 22 2c 4f 39 6b 3d 22 61 62 75 73 65 49 73 41 70 70 65 61 6c 61 62 6c 65 22 2c 50 39 6b 3d 22 61 62 75 73 65 4e 6f 74 69 63 65 Data Ascii: SPONSE_TOO_LARGE",F9k="Revision no longer available",G9k="SHA-256",H9k="SHEETS",I9k="SLIDES",J9k="SecurityError",K9k="Today",L9k="USER_QUOTA_EXCEEDED",M9k="USER_RATE_LIMIT_EXCEEDED",N9k="X-Goog-Drive-Resource-Keys",O9k="abuseIsAppealable",P9k="abuseNotice
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 3d 22 6f 72 67 61 6e 69 7a 65 72 22 2c 72 5a 3d 22 6f 77 6e 65 72 22 2c 44 24 6b 3d 22 70 72 69 6d 61 72 79 53 79 6e 63 50 61 72 65 6e 74 49 64 22 2c 45 24 6b 3d 22 71 75 6f 74 61 42 79 74 65 73 55 73 65 64 22 2c 46 24 6b 3d 22 72 65 61 64 65 72 22 2c 47 24 6b 3d 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 2c 48 24 6b 3d 22 73 68 61 72 65 64 22 2c 49 24 6b 3d 22 73 68 61 72 65 64 57 69 74 68 4d 65 44 61 74 65 22 2c 0a 4a 24 6b 3d 22 73 69 67 6e 22 2c 4b 24 6b 3d 22 74 65 61 6d 44 72 69 76 65 22 2c 4c 24 6b 3d 22 74 65 61 6d 44 72 69 76 65 49 64 22 2c 4d 24 6b 3d 22 74 72 61 73 68 65 64 22 2c 4e 24 6b 3d 22 77 72 69 74 65 72 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 24 6b 28 61 2c 63 2c 64 29 7b 69 66 28 61 3c 30 29 72 65 74 75 72 6e 20 41 73 28 63 62 61 2c 5b 64 Data Ascii: ="organizer",rZ="owner",D$k="primarySyncParentId",E$k="quotaBytesUsed",F$k="reader",G$k="restrictions",H$k="shared",I$k="sharedWithMeDate",J$k="sign",K$k="teamDrive",L$k="teamDriveId",M$k="trashed",N$k="writer";function O$k(a,c,d){if(a<0)return As(cba,[d
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 68 2e 70 72 6f 74 6f 74 79 70 65 2e 79 46 3d 59 28 31 32 35 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 44 70 28 74 68 69 73 2c 73 78 68 2c 32 2c 61 29 7d 29 3b 4e 53 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 45 3d 59 28 31 32 32 34 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 71 28 74 68 69 73 2c 32 2c 61 29 7d 29 3b 62 70 68 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 45 3d 59 28 31 32 32 33 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 46 70 28 74 68 69 73 2c 33 2c 62 70 68 2c 61 2c 76 6f 69 64 20 30 29 7d 29 3b 0a 63 70 68 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 45 3d 59 28 31 32 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 46 70 28 74 68 69 73 2c 32 2c 62 70 68 2c 61 2c 76 6f 69 64 20 30 29 7d 29 3b 4f 65 68 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 59 28 31 32 Data Ascii: h.prototype.yF=Y(1252,function(a){return Dp(this,sxh,2,a)});NS.prototype.NE=Y(1224,function(a){nq(this,2,a)});bph.prototype.NE=Y(1223,function(a){Fp(this,3,bph,a,void 0)});cph.prototype.NE=Y(1222,function(a){Fp(this,2,bph,a,void 0)});Oeh.prototype.H=Y(12
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 53 2e 70 72 6f 74 6f 74 79 70 65 2e 62 42 3d 59 28 36 35 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 6e 62 28 74 68 69 73 2c 31 34 29 7d 29 3b 72 71 62 2e 70 72 6f 74 6f 74 79 70 65 2e 51 68 3d 59 28 36 34 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 71 28 74 68 69 73 2c 31 29 7d 29 3b 50 31 64 2e 70 72 6f 74 6f 74 79 70 65 2e 51 68 3d 59 28 36 33 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 71 74 28 74 68 69 73 2e 56 2c 61 29 7d 29 3b 53 35 64 2e 70 72 6f 74 6f 74 79 70 65 2e 51 68 3d 59 28 36 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3b 72 65 74 75 72 6e 28 63 3d 74 68 69 73 2e 44 2c 63 28 29 29 2e 51 68 28 61 29 7d 29 3b 6d 33 67 2e 70 72 6f 74 6f 74 79 70 65 2e 51 68 3d 59 28 36 31 2c 66 75 Data Ascii: S.prototype.bB=Y(65,function(){return Dnb(this,14)});rqb.prototype.Qh=Y(64,function(){return vq(this,1)});P1d.prototype.Qh=Y(63,function(a){return qt(this.V,a)});S5d.prototype.Qh=Y(62,function(a){var c;return(c=this.D,c()).Qh(a)});m3g.prototype.Qh=Y(61,fu
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5a 24 6b 28 61 2c 63 29 7b 74 68 69 73 2e 73 65 74 28 63 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 5a 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 6e 70 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 24 24 6b 28 61 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 62 70 28 61 29 3b 66 3d 7a 6e 62 28 61 2c 66 2c 64 2c 63 29 3b 72 70 28 61 2c 66 2c 63 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 61 6c 28 61 2c 63 29 7b 76 61 72 20 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 61 6e 62 3a 64 3b 61 3d 6d 70 28 61 2c 63 29 3b 63 3d 74 79 70 65 6f 66 20 61 3b 61 3d 61 3d 3d 6e 75 6c 6c 3f 61 3a 63 3d 3d 3d 46 63 3f 65 70 28 42 69 67 49 6e 74 2e 61 73 55 69 6e 74 4e 28 36 34 2c 61 29 29 3a 66 6c 62 28 61 29 3f 63 3d 3d 3d 48 6b 3f 42 6c 62 28 61 29 3a 7a 6c Data Ascii: function Z$k(a,c){this.set(c,a)}function sZ(a,c){return np(a,c)}function $$k(a,c,d,e){var f=bp(a);f=znb(a,f,d,c);rp(a,f,c,e)}function aal(a,c){var d=d===void 0?anb:d;a=mp(a,c);c=typeof a;a=a==null?a:c===Fc?ep(BigInt.asUintN(64,a)):flb(a)?c===Hk?Blb(a):zl
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 60 22 2b 66 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2b 22 60 22 2b 63 2e 64 69 73 70 6c 61 79 4e 61 6d 65 29 3b 63 3d 64 26 32 3b 76 61 72 20 67 3d 24 6a 62 28 66 2e 44 61 29 3b 67 26 26 21 63 3f 66 3d 6b 70 28 66 29 3a 21 67 26 26 63 26 26 28 66 3d 6c 70 28 66 29 29 3b 65 21 3d 3d 66 26 26 72 70 28 61 2c 64 2c 32 2c 66 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 6c 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 56 70 62 28 61 29 21 3d 64 3f 6e 75 6c 6c 3a 6c 61 6c 28 61 2c 74 79 70 65 6f 66 20 63 3d 3d 3d 55 67 3f 63 3a 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 6c 28 61 29 7b 72 65 74 75 72 6e 20 4e 28 61 7c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 6c 28 61 29 7b 72 Data Ascii: `"+f.constructor.displayName+"`"+c.displayName);c=d&2;var g=$jb(f.Da);g&&!c?f=kp(f):!g&&c&&(f=lp(f));e!==f&&rp(a,d,2,f);return f}function mal(a,c,d){return Vpb(a)!=d?null:lal(a,typeof c===Ug?c:c.constructor)}function nal(a){return N(a\|0)}function oal(a){r
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 7d 4a 28 43 61 6c 2c 53 29 3b 43 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 70 28 74 68 69 73 2c 35 29 7d 3b 43 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 64 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 70 28 74 68 69 73 2c 31 33 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 61 6c 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 44 61 6c 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 45 61 6c 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 45 61 6c 2c 53 29 3b 45 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 57 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 71 28 74 68 69 73 2c 36 2c 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 61 6c 28 61 29 7b 74 68 69 73 2e 44 61 3d Data Ascii: }J(Cal,S);Cal.prototype.iq=function(){return Pp(this,5)};Cal.prototype.dA=function(){return Tp(this,13)};function Dal(a){this.Da=O(a)}J(Dal,S);function Eal(a){this.Da=O(a)}J(Eal,S);Eal.prototype.WG=function(a){return eq(this,6,a)};function Fal(a){this.Da=
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 2e 46 3d 65 3f 65 3a 22 23 37 30 37 30 37 30 22 3b 74 68 69 73 2e 4a 3d 66 7c 7c 6e 75 6c 6c 7d 4a 28 51 61 6c 2c 4b 29 3b 51 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 59 6a 3d 7a 28 22 4f 22 29 3b 51 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 48 32 61 3d 46 28 31 34 32 39 29 3b 66 75 6e 63 74 69 6f 6e 20 78 5a 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 70 5a 67 28 61 2c 63 2c 64 29 2e 79 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 52 61 6c 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 44 3d 3d 3d 30 3f 28 4f 33 65 28 61 2c 63 29 2c 21 30 29 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 53 61 6c 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 53 61 6c 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 54 61 6c 28 61 2c 63 29 7b 76 61 72 20 64 3d 51 28 61 2e 64 6e 2c 53 61 6c Data Ascii: .F=e?e:"#707070";this.J=f\|\|null}J(Qal,K);Qal.prototype.Yj=z("O");Qal.prototype.H2a=F(1429);function xZ(a,c,d){return pZg(a,c,d).ys()}function Ral(a,c){return a.D===0?(O3e(a,c),!0):!1}function Sal(a){this.Da=O(a)}J(Sal,S);function Tal(a,c){var d=Q(a.dn,Sal
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 6f 74 6f 74 79 70 65 3b 0a 44 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 54 6e 28 74 68 69 73 2e 44 2c 61 29 7d 3b 44 2e 68 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 6e 28 74 68 69 73 2e 44 29 7d 3b 44 2e 55 6f 3d 46 28 33 29 3b 44 2e 63 48 3d 21 30 3b 44 2e 62 38 3d 21 30 3b 66 75 6e 63 74 69 6f 6e 20 65 62 6c 28 61 29 7b 76 61 72 20 63 3d 6e 65 77 20 64 62 6c 3b 63 2e 44 3d 61 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 62 6c 28 61 29 7b 44 58 28 29 3b 72 65 74 75 72 6e 20 65 62 6c 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 62 6c 28 29 7b 76 61 72 20 61 3d 73 6f 28 29 2c 63 3d 22 22 3b 74 69 62 28 29 3f 28 63 3d 2f 57 69 6e 64 6f 77 73 20 28 3f 3a 4e 54 7c 50 68 6f 6e 65 29 20 28 5b 30 2d Data Ascii: ototype;D.Wa=function(a){return Tn(this.D,a)};D.hc=function(){return Vn(this.D)};D.Uo=F(3);D.cH=!0;D.b8=!0;function ebl(a){var c=new dbl;c.D=a;return c}function fbl(a){DX();return ebl(a)}function gbl(){var a=so(),c="";tib()?(c=/Windows (?:NT\|Phone) ([0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49776	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:56 UTC	1008	OUT	GET /static/document/client/js/2738495476-client_js_prod_kix_tertiary.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:57 UTC	801	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 4817972 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 29 Oct 2024 21:08:01 GMT Expires: Wed, 29 Oct 2025 21:08:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 81115 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:57 UTC	577	IN	Data Raw: 46 4a 28 45 5f 61 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 0a 20 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e Data Ascii: FJ(E_a);/* Copyright 2021 Google LLC Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICEN
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 0a 20 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 0a 20 Data Ascii: /* Copyright 2024 Google LLC Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 2d 63 6f 6e 74 65 6e 74 2d 65 6c 65 6d 65 6e 74 22 2c 51 6b 6c 3d 22 20 61 70 70 73 45 6c 65 6d 65 6e 74 73 53 69 64 65 6b 69 63 6b 53 63 72 6f 6c 6c 44 65 6c 69 6e 65 61 74 69 6f 6e 22 2c 52 6b 6c 3d 22 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 27 74 72 75 65 27 22 2c 53 6b 6c 3d 27 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 64 6f 63 73 2d 6d 6c 2d 70 72 6f 6d 6f 74 69 6f 6e 2d 61 72 69 61 2d 6c 61 62 65 6c 22 27 2c 54 6b 6c 3d 22 20 62 6f 71 41 64 64 6f 6e 73 63 61 72 64 73 72 65 6e 64 65 72 65 72 43 61 72 64 42 75 74 74 6f 6e 44 69 73 61 62 6c 65 64 43 75 73 74 6f 6d 49 63 6f 6e 22 2c 55 6b 6c 3d 22 20 62 6f 71 41 64 64 6f 6e 73 63 61 72 64 73 72 65 6e 64 65 72 65 72 43 61 72 64 42 75 74 74 6f 6e 46 75 6c 6c 57 69 64 74 68 42 75 74 74 6f Data Ascii: -content-element",Qkl=" appsElementsSidekickScrollDelineation",Rkl=" aria-disabled='true'",Skl=' aria-labelledby="docs-ml-promotion-aria-label"',Tkl=" boqAddonscardsrendererCardButtonDisabledCustomIcon",Ukl=" boqAddonscardsrendererCardButtonFullWidthButto
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 6c 6c 3d 22 20 74 6f 63 2d 73 69 64 65 62 61 72 2d 75 70 64 61 74 65 2d 75 6e 69 74 73 22 2c 44 6c 6c 3d 27 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 77 69 64 74 68 3d 27 2c 45 6c 6c 3d 27 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 27 2c 46 6c 6c 3d 22 20 77 68 65 6e 20 69 6d 70 6f 72 74 69 6e 67 20 69 6e 74 6f 20 61 6e 20 65 6e 63 72 79 70 74 65 64 20 22 2c 47 6c 6c 3d 22 20 77 69 74 68 20 65 78 65 63 75 74 6f 72 20 22 2c 48 6c 6c 3d 27 22 20 61 6c 74 3d 22 22 20 63 6c 61 73 73 3d 22 27 2c 49 6c 6c 3d 27 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 27 2c 4a 6c 6c 3d 27 22 20 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 64 6f 63 73 49 6d 61 67 65 47 65 6e 65 72 61 74 69 6f 6e 50 72 6f 6d 70 74 49 6e Data Ascii: ll=" toc-sidebar-update-units",Dll=' viewBox="0 0 20 20" width=',Ell=' viewBox="0 0 24 24" width=',Fll=" when importing into an encrypted ",Gll=" with executor ",Hll='" alt="" class="',Ill='" alt="" src="',Jll='" aria-controls="docsImageGenerationPromptIn
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 67 22 20 61 6c 74 3d 22 27 2c 6d 6d 6c 3d 27 22 20 73 74 79 6c 65 3d 22 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6f 72 64 65 72 3a 20 27 2c 6e 6d 6c 3d 27 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2c 6f 6d 6c 3d 27 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 27 2c 70 6d 6c 3d 27 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 27 2c 71 6d 6c 3d 0a 27 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 27 2c 72 6d 6c 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2c 73 6d 6c 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 27 2c 74 6d 6c 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 3c 64 69 76 20 Data Ascii: g" alt="',mml='" style="--animation-order: ',nml='" style="background-image: url(',oml='" style="background: ',pml='" style="height: ',qml='" style="width:',rml='" tabindex="-1" role="alert" aria-label="',sml='" tabindex="-1">',tml='" tabindex="-1"><div
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 2c 5a 6d 6c 3d 27 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 27 2c 24 6d 6c 3d 27 22 3e 3c 69 6d 67 20 6a 73 6e 61 6d 65 3d 22 27 2c 61 6e 6c 3d 27 22 3e 3c 69 6e 70 75 74 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 64 6f 2d 6e 6f 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 20 63 6c 61 73 73 3d 22 27 2c 62 6e 6c 3d 27 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 20 63 6c 61 73 73 3d 22 27 2c 63 6e 6c 3d 27 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 32 35 36 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2c 64 6e 6c 3d 27 22 3e 3c 74 61 62 6c 65 20 63 6c 61 73 73 3d 22 27 2c 65 6e 6c 3d 27 22 3e 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 27 Data Ascii: ,Zml='"><div style="background: ',$ml='"><img jsname="',anl='"><input autocomplete="do-not-autocomplete" class="',bnl='"><input type="number" class="',cnl='"><input type="text" maxlength="256" aria-label="',dnl='"><table class="',enl='"><textarea class="'
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 2d 64 61 72 6b 2d 74 68 65 6d 65 3a 22 2c 53 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3a 22 2c 54 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 22 2c 55 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 64 61 72 6b 2d 74 68 65 6d 65 3a 22 2c 56 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3a 22 2c 57 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 69 63 6f 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 22 2c 58 6e 6c 3d 22 2d 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6c Data Ascii: -dark-theme:",Snl="--section-background-color-light-theme:",Tnl="--section-border-radius: ",Unl="--section-icon-background-color-dark-theme:",Vnl="--section-icon-background-color-light-theme:",Wnl="--section-icon-border-radius: ",Xnl="--text-decoration: l
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 3d 22 2d 75 70 64 61 74 65 2d 62 75 74 74 6f 6e 22 2c 52 6f 6c 3d 22 2d 76 61 72 69 61 62 6c 65 2d 6e 61 6d 65 22 2c 53 6f 6c 3d 22 2e 20 57 69 74 68 20 69 6e 70 75 74 3a 5c 6e 22 2c 54 6f 6c 3d 22 2e 61 70 70 73 45 6c 65 6d 65 6e 74 73 43 6f 6c 6f 72 50 69 63 6b 65 72 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 5f 5f 70 61 6c 65 74 74 65 22 2c 55 6f 6c 3d 22 2e 61 70 70 73 45 6c 65 6d 65 6e 74 73 43 6f 6c 6f 72 50 69 63 6b 65 72 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 5f 5f 73 77 61 74 63 68 22 2c 0a 56 6f 6c 3d 22 2e 6a 61 76 61 73 63 72 69 70 74 4d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 47 6d 33 57 69 7a 46 6f 72 6d 46 69 65 6c 64 2d 2d 6c 61 62 65 6c 22 2c 57 6f 6c 3d 22 2e 6a 61 76 61 73 63 72 69 70 74 4d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 47 6d 33 57 Data Ascii: ="-update-button",Rol="-variable-name",Sol=". With input:\n",Tol=".appsElementsColorPicker-color-picker__palette",Uol=".appsElementsColorPicker-color-picker__swatch",Vol=".javascriptMaterialdesignGm3WizFormField--label",Wol=".javascriptMaterialdesignGm3W
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 73 74 72 65 61 6d 7a 2f 64 72 69 76 65 5f 73 68 61 72 69 6e 67 2f 73 68 61 72 65 5f 63 6c 69 65 6e 74 2f 75 70 64 61 74 65 5f 61 63 74 69 6f 6e 73 5f 75 73 65 72 5f 69 73 5f 6c 6f 67 67 65 64 5f 69 6e 2f 63 6f 75 6e 74 22 2c 6d 70 6c 3d 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 64 72 69 76 65 5f 73 68 61 72 69 6e 67 2f 73 68 61 72 65 5f 63 6c 69 65 6e 74 5f 62 75 74 74 6f 6e 2f 73 65 74 5f 64 6c 70 5f 69 6e 66 6f 2f 63 6f 75 6e 74 22 2c 6e 70 6c 3d 22 2f 63 72 65 61 74 65 6e 61 6d 65 64 72 65 76 69 73 69 6f 6e 22 2c 6f 70 6c 3d 22 2f 64 72 69 76 65 2f 76 32 69 6e 74 65 72 6e 61 6c 2f 66 69 6c 65 73 2f 22 2c 70 70 6c 3d 22 2f 64 72 69 76 65 73 68 61 72 69 6e 67 2f 63 6c 69 65 6e 74 6d 6f 64 65 6c 22 2c 71 70 6c 3d 22 2f 65 6d 62 65 64 2f 63 6f 6e Data Ascii: streamz/drive_sharing/share_client/update_actions_user_is_logged_in/count",mpl="/client_streamz/drive_sharing/share_client_button/set_dlp_info/count",npl="/createnamedrevision",opl="/drive/v2internal/files/",ppl="/drivesharing/clientmodel",qpl="/embed/con
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 20 63 6c 61 73 73 3d 22 27 2c 0a 66 71 6c 3d 27 3c 2f 64 69 76 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 27 2c 67 71 6c 3d 27 3c 2f 64 69 76 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 27 2c 68 71 6c 3d 27 3c 2f 68 32 3e 3c 70 20 63 6c 61 73 73 3d 22 27 2c 69 71 6c 3d 22 3c 2f 68 33 3e 3c 2f 74 68 3e 3c 2f 74 72 3e 22 2c 6a 71 6c 3d 22 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 2c 6b 71 6c 3d 27 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 6c 71 6c 3d 27 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 6d 71 6c 3d 27 3c 2f 6c 61 62 65 6c 3e 3c Data Ascii: v style="display: none;" class="',fql='</div><input class="',gql='</div><ul class="',hql='</h2><p class="',iql="</h3></th></tr>",jql="</label></div></div></div></div>",kql='</label></div></div><div class="',lql='</label></div><div class="',mql='</label><

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:56 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:57 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:56 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193956Z-15b8d89586fdmfsg1u7xrpfws00000000cpg00000000eeku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:57 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:56 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:56 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193956Z-16849878b78hh85qc40uyr8sc800000008sg00000000efz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:57 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:56 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:57 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:56 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193956Z-16849878b78p49s6zkwt11bbkn0000000860000000008ksv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:57 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:56 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:57 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:57 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193957Z-16849878b786fl7gm2qg4r5y7000000008ng00000000z8wh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:57 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:56 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:57 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:56 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193956Z-16849878b78qfbkc5yywmsbg0c000000085g00000000ay03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:57 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49788	74.125.206.189	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:57 UTC	1598	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/test?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=2&ar=1722&arat=uH6mD8k7J9-waQ&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&TYPE=xmlhttp&zx=1dnkc0b4d5rd&t=1 HTTP/1.1 Host: 0.docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:57 UTC	1166	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:57 GMT Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Cache-Control,Content-Encoding,Content-Length,Content-Type,Date,Expires,Pragma,Server,Transfer-Encoding,X-Google-GFE-Backend-Request-Cost Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:57 UTC	10	IN	Data Raw: 35 0d 0a 31 31 31 31 31 0d 0a Data Ascii: 511111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49792	142.250.184.206	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:57 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:57 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 19:39:57 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:57 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 19:39:57 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49790	142.250.185.238	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:57 UTC	806	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:57 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 15:39:31 GMT Expires: Thu, 30 Oct 2025 15:39:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 14426 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:57 UTC	463	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 Data Ascii: totype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)retu
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 Data Ascii: ar b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.as
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 Data Ascii: function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 Data Ascii: promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=func
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f Data Ascii: or("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));fo
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 Data Ascii: r h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return t
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 Data Ascii: e=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 Data Ascii: pe.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)r
2024-10-30 19:39:57 UTC	1378	IN	Data Raw: 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 Data Ascii: +9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:57 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193957Z-16849878b78qwx7pmw9x5fub1c00000006g000000000yx63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:39:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:57 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:57 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193957Z-16849878b78qf2gleqhwczd21s00000008k000000000yss0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:57 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:58 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6ec01022-b01e-003e-1203-2b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193957Z-15b8d89586fvpb59307bn2rcac00000003k000000000dkmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-30 19:39:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:57 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:57 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193957Z-16849878b782d4lwcu6h6gmxnw000000084000000000mqrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:39:58 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:57 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:57 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193957Z-16849878b78bcpfn2qf7sm6hsn00000009zg00000000xn02 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:58 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49804	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:58 UTC	1719	OUT	POST /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/bind?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=5&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&RID=72110&CVER=1&zx=bzqknqlf9iyo&t=1 HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:58 UTC	7	OUT	Data Raw: 63 6f 75 6e 74 3d 30 Data Ascii: count=0
2024-10-30 19:39:59 UTC	902	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:59 GMT Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:59 UTC	476	IN	Data Raw: 31 61 61 32 0d 0a 36 38 31 33 0a 5b 5b 30 2c 5b 22 63 22 2c 22 31 36 45 30 36 42 44 36 41 43 36 33 41 35 36 32 22 2c 6e 75 6c 6c 2c 38 5d 5d 2c 5b 31 2c 5b 35 2c 31 37 33 30 33 31 34 35 36 34 33 36 36 2c 7b 22 63 68 61 74 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 41 33 35 41 30 30 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 20 44 75 6d 62 6f 20 4f 63 74 6f 70 75 73 22 2c 22 67 69 76 65 6e 4e 61 6d 65 22 3a 22 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 69 73 4d 65 22 3a 74 72 75 65 2c 22 69 73 4e 65 77 22 3a 74 72 75 65 2c 22 70 68 6f 74 6f 55 72 6c 22 3a 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 66 69 6c 65 Data Ascii: 1aa26813[[0,["c","16E06BD6AC63A562",null,8]],[1,[5,1730314564366,{"chatImplementation":0,"color":"#A35A00","displayName":"Anonymous Dumbo Octopus","givenName":"","isActive":true,"isMe":true,"isNew":true,"photoUrl":"//ssl.gstatic.com/docs/common/profile
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 79 6d 6f 75 73 20 43 6f 79 6f 74 65 22 2c 22 67 69 76 65 6e 4e 61 6d 65 22 3a 22 22 2c 22 69 73 41 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 4d 65 22 3a 66 61 6c 73 65 2c 22 69 73 4e 65 77 22 3a 66 61 6c 73 65 2c 22 70 68 6f 74 6f 55 72 6c 22 3a 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 66 69 6c 65 2f 63 6f 79 6f 74 65 5f 6c 67 2e 70 6e 67 22 2c 22 70 72 6f 66 69 6c 65 49 64 22 3a 22 22 2c 22 73 69 64 22 3a 22 34 39 32 61 34 66 65 35 34 35 35 31 65 31 33 38 22 2c 22 75 73 65 72 49 64 22 3a 22 41 4e 4f 4e 59 4d 4f 55 53 5f 30 36 32 38 37 35 31 37 39 31 31 32 35 36 34 35 37 33 31 37 22 2c 22 75 73 65 72 54 79 70 65 22 3a 31 2c 22 77 72 69 74 65 43 6f 6e 74 65 6e 74 42 69 74 22 3a 30 7d 5d 5d Data Ascii: ymous Coyote","givenName":"","isActive":false,"isMe":false,"isNew":false,"photoUrl":"//ssl.gstatic.com/docs/common/profile/coyote_lg.png","profileId":"","sid":"492a4fe54551e138","userId":"ANONYMOUS_06287517911256457317","userType":1,"writeContentBit":0}]]
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 63 74 69 76 65 22 3a 74 72 75 65 2c 22 69 73 4d 65 22 3a 66 61 6c 73 65 2c 22 69 73 4e 65 77 22 3a 66 61 6c 73 65 2c 22 70 68 6f 74 6f 55 72 6c 22 3a 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 66 69 6c 65 2f 72 68 69 6e 6f 5f 6c 67 2e 70 6e 67 22 2c 22 70 72 6f 66 69 6c 65 49 64 22 3a 22 22 2c 22 73 69 64 22 3a 22 37 32 33 32 35 63 65 37 30 66 33 38 37 37 39 36 22 2c 22 75 73 65 72 49 64 22 3a 22 41 4e 4f 4e 59 4d 4f 55 53 5f 30 36 32 38 37 35 31 37 39 31 31 32 35 36 34 35 37 33 31 37 22 2c 22 75 73 65 72 54 79 70 65 22 3a 32 2c 22 77 72 69 74 65 43 6f 6e 74 65 6e 74 42 69 74 22 3a 30 7d 5d 5d 2c 5b 37 2c 5b 35 2c 31 37 33 30 33 31 34 35 36 34 33 37 38 2c 7b 22 63 68 61 74 49 6d 70 6c 65 6d 65 6e Data Ascii: ctive":true,"isMe":false,"isNew":false,"photoUrl":"//ssl.gstatic.com/docs/common/profile/rhino_lg.png","profileId":"","sid":"72325ce70f387796","userId":"ANONYMOUS_06287517911256457317","userType":2,"writeContentBit":0}]],[7,[5,1730314564378,{"chatImplemen
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 70 68 6f 74 6f 55 72 6c 22 3a 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 66 69 6c 65 2f 6b 72 61 6b 65 6e 5f 6c 67 2e 70 6e 67 22 2c 22 70 72 6f 66 69 6c 65 49 64 22 3a 22 22 2c 22 73 69 64 22 3a 22 37 33 61 63 64 63 37 38 37 63 34 37 32 31 62 38 22 2c 22 75 73 65 72 49 64 22 3a 22 41 4e 4f 4e 59 4d 4f 55 53 5f 30 36 32 38 37 35 31 37 39 31 31 32 35 36 34 35 37 33 31 37 22 2c 22 75 73 65 72 54 79 70 65 22 3a 31 2c 22 77 72 69 74 65 43 6f 6e 74 65 6e 74 42 69 74 22 3a 30 7d 5d 5d 2c 5b 31 31 2c 5b 35 2c 31 37 33 30 33 31 34 35 36 34 33 38 36 2c 7b 22 63 68 61 74 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 43 35 32 32 31 46 22 2c 22 Data Ascii: ":false,"photoUrl":"//ssl.gstatic.com/docs/common/profile/kraken_lg.png","profileId":"","sid":"73acdc787c4721b8","userId":"ANONYMOUS_06287517911256457317","userType":1,"writeContentBit":0}]],[11,[5,1730314564386,{"chatImplementation":0,"color":"#C5221F","
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 6c 22 3a 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 66 69 6c 65 2f 75 6e 69 63 6f 72 6e 5f 6c 67 2e 70 6e 67 22 2c 22 70 72 6f 66 69 6c 65 49 64 22 3a 22 22 2c 22 73 69 64 22 3a 22 66 34 31 61 62 30 30 64 64 39 36 63 35 33 34 22 2c 22 75 73 65 72 49 64 22 3a 22 41 4e 4f 4e 59 4d 4f 55 53 5f 30 36 32 38 37 35 31 37 39 31 31 32 35 36 34 35 37 33 31 37 22 2c 22 75 73 65 72 54 79 70 65 22 3a 31 2c 22 77 72 69 74 65 43 6f 6e 74 65 6e 74 42 69 74 22 3a 30 7d 5d 5d 2c 5b 31 35 2c 5b 35 2c 31 37 33 30 33 31 34 35 36 34 33 39 34 2c 7b 22 63 68 61 74 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 43 35 32 32 31 46 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 6e Data Ascii: l":"//ssl.gstatic.com/docs/common/profile/unicorn_lg.png","profileId":"","sid":"f41ab00dd96c534","userId":"ANONYMOUS_06287517911256457317","userType":1,"writeContentBit":0}]],[15,[5,1730314564394,{"chatImplementation":0,"color":"#C5221F","displayName":"An
2024-10-30 19:39:59 UTC	838	IN	Data Raw: 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 66 69 6c 65 2f 72 61 63 63 6f 6f 6e 5f 6c 67 2e 70 6e 67 22 2c 22 70 72 6f 66 69 6c 65 49 64 22 3a 22 22 2c 22 73 69 64 22 3a 22 32 31 38 65 34 65 64 35 33 32 62 35 39 64 39 37 22 2c 22 75 73 65 72 49 64 22 3a 22 41 4e 4f 4e 59 4d 4f 55 53 5f 30 36 32 38 37 35 31 37 39 31 31 32 35 36 34 35 37 33 31 37 22 2c 22 75 73 65 72 54 79 70 65 22 3a 32 2c 22 77 72 69 74 65 43 6f 6e 74 65 6e 74 42 69 74 22 3a 30 7d 5d 5d 2c 5b 31 39 2c 5b 35 2c 31 37 33 30 33 31 34 35 36 34 34 30 32 2c 7b 22 63 68 61 74 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 39 33 33 34 45 36 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 20 50 79 74 68 6f 6e 22 2c 22 67 69 76 Data Ascii: /docs/common/profile/raccoon_lg.png","profileId":"","sid":"218e4ed532b59d97","userId":"ANONYMOUS_06287517911256457317","userType":2,"writeContentBit":0}]],[19,[5,1730314564402,{"chatImplementation":0,"color":"#9334E6","displayName":"Anonymous Python","giv
2024-10-30 19:39:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49805	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:58 UTC	729	OUT	GET /document/font/getmetadata?includes_info_params=true&usp=sharing&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:58 UTC	1201	IN	HTTP/1.1 400 Bad Request Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:58 GMT Content-Type: text/html; charset=utf-8 x-chromium-appcache-fallback-override: disallow-fallback Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-IDtzLQGH-eB-QPlYaGKvsg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:58 UTC	177	IN	Data Raw: 63 31 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: c18<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-widt
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f Data Ascii: h, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><link rel="shortcut icon" href="//docs.google.com/favicon.ico"><title>Page Not Found</title><meta name="referrer" content="strict-origin-when-cross-origin"><link href="//fonts.go
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 71 74 6c 72 6f 34 70 32 4c 35 49 58 43 70 45 78 4b 61 64 32 30 51 22 3e 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 61 2c 20 61 3a 6c 69 6e 6b 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f 72 3a 20 23 31 31 32 41 42 42 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 71 74 6c 72 6f 34 70 32 4c 35 49 58 43 70 45 78 4b Data Ascii: /style><style type="text/css" nonce="qtlro4p2L5IXCpExKad20Q">body {background-color: #fff; font-family: Arial,sans-serif; font-size: 13px; margin: 0; padding: 0;}a, a:link, a:visited {color: #112ABB;}</style><style type="text/css" nonce="qtlro4p2L5IXCpExK
2024-10-30 19:39:58 UTC	170	IN	Data Raw: 69 6e 65 72 20 7b 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 35 30 70 78 3b 7d 23 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: iner {margin: auto; max-width: 750px;}#innerContainer {margin-bottom: 20px; margin-left: 40px; margin-right: 40px; margin-top: 80px; position: relative;}</style></html>
2024-10-30 19:39:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49806	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:58 UTC	1138	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/trash/read?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&includes_info_params=true&usp=sharing&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:59 UTC	4181	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-wIQ65wk9T9it8yskhNJLGg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Reporting-Endpoints: default="/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/web-reports?bl=editors.documents-frontend_20241022.02_p3&context=eJwV0HtYjdkeB_DlfdfvRXt3ETGiCxWSjJJxSaV2e5-dEY1L69W4TCmO4dRIOO4yxnOE44khpNrd07YxnB7328i9ocbtiGPouHbhiF3JTPt854_Ps9azbt_f-tk9c3Fuj2XFsFkRLLqLYHlQDas0glngqFawaxDuJFghuDsLNtBFMB1UQnxPwc71EmzIZ4KZIdpVMM8-gsX2FazIXbD5HoJ96i9Yopdg2gGCucFZ-DRYMPshgnWDMvDzF2z7UME2BghmGCFYBuwE2xeCTRop2O1Rgj2DsFBkfinYIvhqGmpRBRsJ1XGCPYG8WYLdjxfsJXRNFKw33E0SLGiBYJHQsATZ8O91gr2CsnTBjsPN9YI9hsjvBZsKo7YKZoSMXYLtBZ8swUZAx27BHPYItn4f6oX1eRhhiEmwsZBdhD7AJbgL1y2C1UKPw4J5w4kK9BMenxHsDfS7LFgArIatEHVVsOkQfgP_A0MVegl7YD_4VQsWDBX3kAHvQb4v2D8fCJYLxbXYgxNwDX5-LNiv4P5UsKGQ9UywUnB8LpgHHIGf4TLcg5evBGuFhGbBUuEFtECCo8rOQzVonVTWF172Utl4V5XFgVOQyjxh9hcqWwKn4AbsHa2ycrgHL6BrtMpCY1Q2EX6EjVNUtguOqSp7Gqey9Jkqy4TweJV9BRcSVFYDTovxPkxNU9maNbgHOyAbcqEEHsEz-ATyWpX1AS84DufhItyAOqiHVrDBby41LG5wg5QAW2a8k36E2nnvpDr44eI7aSvMq2uWUqD35--lfhAT-15S4dBQq3QMLgyzSu5GqzQApq22SjOh7zqr5A291lslD2g5aZU6YN8lq1QE1xa0SjWwfGyblA5qSJv0DcTN [TRUNCATED] X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:59 UTC	28	IN	Data Raw: 31 36 0d 0a 29 5d 7d 27 0a 7b 22 54 52 41 53 48 45 44 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 16)]}'{"TRASHED":false}
2024-10-30 19:39:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49807	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:58 UTC	1141	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/peruserchrome?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&includes_info_params=true&usp=sharing&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:59 UTC	4188	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-Qr9dh7Ou4e4uK-fg4CSQnw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Reporting-Endpoints: default="/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/web-reports?bl=editors.documents-frontend_20241022.02_p3&context=eJwV0HlczekeB_DH7zzfn6XTImJECxWKTJuxpFKnc241SoN6fhrLSOkapkbC2JcxXle4XjFkq077chwMt5d9G2VtqEFGTEPX2sJVTiUznfuZP96v53k9y3fr88zOtiuWFcI2WbDIXoLlQDWssRDMCCfUgt2AYBvB8sHRVrARdoJpoALmDRDs4kDBRn8imAEi7QVzHixY7BDBChwFW-gk2MdhgiW4CKYeLpgDXICPHoJZjhasL5TAKE_Bdo0RbIu3YLqxgqXDHjB_JtjUcYLdHS_YMwgKRM7PBVsCX8SgFkWwcVAdJ9gTyJkj2IN5gr2E3gmCDYL7iYL5LRIsFJqWITd4foce4LcNgr2Cko2CnYLbmwSrh9DvBZsB43cIFgbpewU7AG6Zgo2F7n2CWe0XbNMh1A2bcrDCaL1gk-BgAeYBlXAfbhoFq4P-xwRzhdPlmCvUnxfsDQy9Kpg3rIUdEH5dsJkQfAt9gq4KM4X9UAoe1YJNhPJa5IA2UD0Q7N8PBcuGwjrcwWm4AT_XC_YrOD4VbAxkPhOsGKyfC-YEx-FnuAq18PKVYB0Q3ypYKryAdoi3VtglqAa1jcKGwMuBCouwV1gc2PgpzBnmfqawZXAWbsGBCQorg1p4Ab0jFRYYrbAo-BG2TFfYXjipKOxpnMI2zlZYBgTPU9gXcDleYTVgsxTxYUaawtatwz_YDQchG4rgMTyDwesV5gKn4BJcgVvQAI3QAWb4w66GxXk0SfGwfdY76UeoS3onNcAPV95JOyCpoVVKgUGftklDITq2TVLg6BiTdBIue5kkxzCTNBxi1pqk2TBkg0lyhYGbTJITtJ8xSd1wqNIkFcCNRR1SDayc1CltBCWgU_oK4hZ0 [TRUNCATED] X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:59 UTC	12	IN	Data Raw: 37 0d 0a 29 5d 7d 27 0a 7b 7d 0d 0a Data Ascii: 7)]}'{}
2024-10-30 19:39:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49809	142.250.184.206	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:58 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:58 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 19:39:58 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:58 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 19:39:58 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49808	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:58 UTC	1296	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/test?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=0&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&MODE=init&zx=qpdb7snflgdf&t=1 HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:58 UTC	4165	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet x-client-wire-protocol: HTTP/1.1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:39:58 GMT Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-aShqyXOq6E7Ub8sHaRS5Tw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Reporting-Endpoints: default="/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/web-reports?bl=editors.documents-frontend_20241022.02_p3&context=eJwV0HtYjdkeB_DlfdfvRe0uIkaUqFBkKhnXSu32PrvGpSGtV-MyUjqGU6PCcRm3MZ4jjCeGXGt3T9vGcHpcQoxybdC4jTgNHdcuHGWnMtM-3_nj86z1rNv3t342z5ydOmJYAWxRBJvcTbBsuA2rbQUzwwmNYNcg1FGwPHBzEmyIs2BaqIB5vQUr7yPY8E8EM8FkF8Hc-wkW01-wfDfBFg4Q7OMgweI9BNMMFswVzsNHH8HshgvWA4phmK9gO0YItslfMP0owdJhF1g_E2zqaMHujBHsGYQEI_NzwZbAFzNQiyrYaLgdK9gTyJ4j2IN5gr2E7vGC9YV7CYIFLhIsHBqWIht-WyfYKyheL9gpuLlBsFoI_06waBizTTADpO8WbB94ZQo2Cjr3CGa_V7ANB1AvbMjGCMONgk2A_fnoA1TCPbhuFqwGeh0TzBNOl6KfUHtOsDcw8LJg_vAtbIOIq4LNhNAb-B_oq9BL2AuHwOe2YOOg9D4yoAXkB4L98FCwLCiowR6chmvwc61gv4LbU8FGQOYzwYrA4blgA-A4_AyX4T68fCXYB4hrFiwFXkArxDmo7ALcBo2jyvrDyz4qi3RRWSw4BqrMHeZ-prKlUAY3YN9YlZXAfXgB3SerLDhKZVPgR9g0XWW74aSqsqexKls_W2UZEDpPZV_AxTiVVYNjKt6H6DSVrVmDe7AT9kMWFMJjeAbvoB36rVWZB5yCC3AJbsBv8AQ-gBV-d65msT4NUhxsnfVO-hFqEt9JdfD9pXfSNkisa5aSoe-nLdJAiIppkVQ4OsIinYSLfhbJzWCRBsOMby3SbOi_ziJ5Qp8NFmkAtJ6xSJ1woNIi5cO1RR-kalgxoU1aD2pQm_QV [TRUNCATED] X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:39:58 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-10-30 19:39:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49810	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:58 UTC	712	OUT	GET /static/document/client/js/661166313-client_js_prod_kix_docos.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:58 UTC	797	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 1119718 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 19:39:53 GMT Expires: Thu, 30 Oct 2025 19:39:53 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 5 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:58 UTC	581	IN	Data Raw: 46 4a 28 78 5f 61 29 3b 0a 76 61 72 20 77 45 6a 3d 22 20 63 6f 72 72 65 63 74 65 64 20 74 6f 20 22 2c 78 45 6a 3d 27 20 64 61 74 61 2d 69 73 2d 73 65 61 72 63 68 3d 22 74 72 75 65 22 27 2c 79 45 6a 3d 22 20 67 72 6f 75 70 2c 20 70 72 65 73 73 20 65 6e 74 65 72 22 2c 7a 45 6a 3d 22 20 6f 74 68 65 72 73 20 68 61 76 65 20 72 65 61 63 74 65 64 2e 22 2c 41 45 6a 3d 27 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 27 2c 42 45 6a 3d 22 20 74 6f 20 22 2c 43 45 6a 3d 22 20 7c 20 22 2c 44 45 6a 3d 27 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 45 45 6a 3d 27 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 26 62 75 6c 6c 3b 3c 2f 64 69 76 3e 27 2c 46 45 6a 3d 27 22 20 Data Ascii: FJ(x_a);var wEj=" corrected to ",xEj=' data-is-search="true"',yEj=" group, press enter",zEj=" others have reacted.",AEj=' style="display: none"',BEj=" to ",CEj=" \| ",DEj='" aria-hidden="true"/><div class="',EEj='" aria-hidden="true">•</div>',FEj='"
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 27 2c 4e 45 6a 3d 27 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 3e 27 2c 4f 45 6a 3d 27 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3e 27 2c 50 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 3c 2f 64 69 76 3e 27 2c 51 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 52 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 27 2c 53 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 3c 2f 64 69 76 3e 27 2c 54 45 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 3c 64 69 76 20 63 Data Ascii: display:none">',NEj='" role="heading">',OEj='" role="presentation">',PEj='" style="display: none"></div>',QEj='" style="display: none"><div class="',REj='" style="display: none;">',SEj='" style="display: none;"></div>',TEj='" style="display: none;"><div c
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 61 73 73 3d 22 27 2c 42 46 6a 3d 27 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 63 6c 61 73 73 3d 22 27 2c 43 46 6a 3d 27 3c 64 69 76 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 27 2c 44 46 6a 3d 22 3c 69 3e 4d 61 64 65 20 61 20 73 75 67 67 65 73 74 69 6f 6e 3c 2f 69 3e 22 2c 45 46 6a 3d 0a 27 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 27 2c 46 46 6a 3d 27 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 62 6f 74 68 3b 22 3e 3c 2f 73 70 61 6e 3e 27 2c 47 46 6a 3d 27 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 63 6c 61 73 73 3d 22 27 2c 48 46 6a 3d 27 3c 74 64 20 63 6c 61 73 73 3d 22 27 2c 49 46 6a 3d 27 3e 3c 70 61 74 68 20 Data Ascii: ass="',BFj='<div style="display: none" class="',CFj='<div tabindex="-1" class="',DFj="<i>Made a suggestion</i>",EFj='<input type="text" class="',FFj='<span style="clear:both;"></span>',GFj='<svg viewBox="0 0 24 24" class="',HFj='<td class="',IFj='><path
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 44 45 41 44 4c 49 4e 45 5f 45 58 43 45 45 44 45 44 22 2c 67 47 6a 3d 22 44 69 73 63 61 72 64 20 43 68 61 6e 67 65 73 22 2c 68 47 6a 3d 22 44 69 73 63 61 72 64 20 63 68 61 6e 67 65 73 22 2c 69 47 6a 3d 22 44 69 73 63 61 72 64 20 63 6f 6d 6d 65 6e 74 22 2c 6a 47 6a 3d 22 44 69 73 70 6c 61 79 20 61 6c 6c 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6b 47 6a 3d 22 44 69 73 70 6c 61 79 20 6f 70 65 6e 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6c 47 6a 3d 22 44 69 73 70 6c 61 79 20 72 65 73 6f 6c 76 65 64 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6d 47 6a 3d 22 44 69 73 70 6c 61 79 69 6e 67 20 6f 70 65 6e 20 61 6e 64 20 72 65 73 6f 6c 76 65 64 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6e 47 6a 3d 22 44 69 73 70 6c 61 79 69 6e 67 20 6f 70 65 6e 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 6f 47 6a Data Ascii: DEADLINE_EXCEEDED",gGj="Discard Changes",hGj="Discard changes",iGj="Discard comment",jGj="Display all comments.",kGj="Display open comments.",lGj="Display resolved comments.",mGj="Displaying open and resolved comments.",nGj="Displaying open comments.",oGj
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 2c 68 48 6a 3d 22 53 75 67 67 65 73 74 69 6f 6e 20 61 63 63 65 70 74 65 64 22 2c 69 48 6a 3d 22 53 75 67 67 65 73 74 69 6f 6e 20 72 65 6a 65 63 74 65 64 22 2c 6a 48 6a 3d 22 53 78 39 4b 77 63 22 2c 6b 48 6a 3d 22 54 49 4d 45 4f 55 54 22 2c 78 58 3d 22 55 55 22 2c 6c 48 6a 3d 22 55 6e 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 69 6e 65 22 2c 6d 48 6a 3d 22 55 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 72 72 6f 72 20 63 6f 64 65 22 2c 6e 48 6a 3d 22 56 69 65 77 20 73 6d 61 72 74 20 73 75 67 67 65 73 74 69 6f 6e 22 2c 6f 48 6a 3d 22 56 69 65 77 65 72 73 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 63 61 6e 20 73 65 65 20 63 6f 6d 6d 65 6e 74 73 20 61 6e 64 20 73 75 67 67 65 73 74 69 6f 6e Data Ascii: lid value was encountered",hHj="Suggestion accepted",iHj="Suggestion rejected",jHj="Sx9Kwc",kHj="TIMEOUT",xX="UU",lHj="Unavailable offline",mHj="Unrecognized error code",nHj="View smart suggestion",oHj="Viewers of this file can see comments and suggestion
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 61 63 63 65 70 74 65 64 22 2c 62 49 6a 3d 22 62 65 66 6f 72 65 2d 73 75 67 67 65 73 74 69 6f 6e 2d 72 65 6a 65 63 74 65 64 22 2c 63 49 6a 3d 22 62 65 66 6f 72 65 2d 76 69 65 77 2d 66 6c 75 73 68 65 64 22 2c 64 49 6a 3d 22 62 65 66 6f 72 65 5f 75 6e 64 6f 22 2c 65 49 6a 3d 22 62 65 66 6f 72 65 63 68 61 6e 67 65 22 2c 66 49 6a 3d 22 62 65 66 6f 72 65 66 6f 63 75 73 22 2c 67 49 6a 3d 22 62 65 66 6f 72 65 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 2c 0a 68 49 6a 3d 22 62 6c 6f 63 6b 65 64 22 2c 69 49 6a 3d 22 62 6f 6c 64 22 2c 6a 49 6a 3d 22 63 4a 30 6d 4d 63 22 2c 6b 49 6a 3d 22 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 22 2c 6c 49 6a 3d 22 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 2d 61 63 63 65 70 74 22 2c 6d 49 6a 3d 22 63 61 6c 6c 2d 74 6f 2d 61 63 Data Ascii: accepted",bIj="before-suggestion-rejected",cIj="before-view-flushed",dIj="before_undo",eIj="beforechange",fIj="beforefocus",gIj="beforeselectionchange",hIj="blocked",iIj="bold",jIj="cJ0mMc",kIj="call-to-action",lIj="call-to-action-accept",mIj="call-to-ac
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 77 2d 62 75 74 74 6f 6e 68 6f 6c 64 65 72 22 2c 67 4a 6a 3d 22 64 6f 63 6f 73 2d 61 70 70 72 6f 76 65 72 2d 62 61 64 67 65 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 68 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 6e 6f 6e 65 22 2c 69 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 6f 74 68 65 72 22 2c 6a 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 73 65 6c 65 63 74 2d 66 6f 63 75 73 22 2c 6b 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 79 6f 75 22 2c 6c 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 22 2c 6d 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 2d 61 73 73 69 67 6e 65 65 2d 74 65 78 74 22 2c 6e 4a 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 2d 6c 61 Data Ascii: w-buttonholder",gJj="docos-approver-badge-container",hJj="docos-assignee-none",iJj="docos-assignee-other",jJj="docos-assignee-select-focus",kJj="docos-assignee-you",lJj="docos-assigneeview",mJj="docos-assigneeview-assignee-text",nJj="docos-assigneeview-la
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 2c 0a 53 4a 6a 3d 22 64 6f 63 6f 73 2d 64 69 73 22 2c 54 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 6d 65 6e 75 2d 64 72 6f 70 64 6f 77 6e 22 2c 55 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 6d 65 6e 75 2d 76 69 73 69 62 6c 65 22 2c 56 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 61 63 74 69 76 65 22 2c 57 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 63 6f 6d 6d 65 6e 74 22 2c 58 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 69 6e 70 75 74 2d 70 61 6e 65 22 2c 59 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 6f 70 65 6e 22 2c 5a 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 70 6c 79 63 6f 6e 74 61 69 6e 65 72 22 2c 24 4a 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 73 6f 6c Data Ascii: ,SJj="docos-dis",TJj="docos-docomenu-dropdown",UJj="docos-docomenu-visible",VJj="docos-docoview-active",WJj="docos-docoview-comment",XJj="docos-docoview-input-pane",YJj="docos-docoview-reopen",ZJj="docos-docoview-replycontainer",$Jj="docos-docoview-resol
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 67 6e 6d 65 6e 74 2d 70 61 6e 65 6c 22 2c 48 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 61 74 2d 72 65 70 6c 79 2d 6d 65 73 73 61 67 65 22 2c 49 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 62 75 74 74 6f 6e 2d 72 6f 77 22 2c 4a 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 62 75 74 74 6f 6e 73 22 2c 4b 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 63 61 6e 63 65 6c 22 2c 4c 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 6e 6f 68 69 64 65 22 2c 0a 4d 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 70 61 6e 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 4e 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 70 6f 73 74 22 2c 4f 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 74 65 78 74 61 72 65 61 22 2c 50 4b 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 Data Ascii: gnment-panel",HKj="docos-input-at-reply-message",IKj="docos-input-button-row",JKj="docos-input-buttons",KKj="docos-input-cancel",LKj="docos-input-nohide",MKj="docos-input-pane-placeholder",NKj="docos-input-post",OKj="docos-input-textarea",PKj="docos-inpu
2024-10-30 19:39:58 UTC	1378	IN	Data Raw: 6c 61 70 73 65 22 2c 41 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 71 75 6f 74 65 2d 63 6f 6c 6c 61 70 73 65 64 22 2c 42 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 71 75 6f 74 65 2d 65 78 70 61 6e 64 22 2c 43 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 71 75 6f 74 65 2d 65 78 70 61 6e 64 65 64 22 2c 44 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 72 65 70 6c 79 2d 63 6f 75 6e 74 22 2c 45 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 72 65 73 6f 6c 76 65 2d 62 75 74 74 6f 6e 22 2c 46 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 73 74 61 74 69 63 22 2c 47 4c 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 74 69 6d 65 73 74 61 6d 70 22 2c 48 4c 6a 3d 22 64 Data Ascii: lapse",ALj="docos-replyview-quote-collapsed",BLj="docos-replyview-quote-expand",CLj="docos-replyview-quote-expanded",DLj="docos-replyview-reply-count",ELj="docos-replyview-resolve-button",FLj="docos-replyview-static",GLj="docos-replyview-timestamp",HLj="d

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:59 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: cb795b0b-301e-001f-35c7-2aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193959Z-17c5cb586f6lxnvgvs6hx6p0t800000000eg000000002x9y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:59 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 73421f5c-b01e-001e-1796-2a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193959Z-r197bdfb6b4wmcgqdschtyp7yg00000008p0000000003tmb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:59 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193959Z-16849878b787wpl5wqkt5731b4000000099g00000000633f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:59 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:59 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9b80997a-f01e-0003-4c76-2a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193959Z-159b85dff8f46f6ghC1DFW1p0n00000000kg00000000m7an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:59 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:39:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 359c92e3-901e-0064-7ce8-28e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T193959Z-17c5cb586f6sqz6f73fsew1zd800000002a0000000001b91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:39:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49817	142.250.184.206	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:59 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:59 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:59 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 19:39:59 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49816	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:59 UTC	724	OUT	GET /static/document/client/js/570078452-client_js_prod_kix_pre_tertiary_deps.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:59 UTC	795	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 96567 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 19:39:56 GMT Expires: Thu, 30 Oct 2025 19:39:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:59 UTC	583	IN	Data Raw: 76 61 72 20 69 39 6b 3d 22 6b 69 78 5f 70 72 65 5f 74 65 72 74 69 61 72 79 5f 64 65 70 73 22 3b 46 4a 28 69 39 6b 29 3b 0a 76 61 72 20 6a 39 6b 3d 27 22 20 61 6c 74 3d 22 22 3e 27 2c 6b 39 6b 3d 22 2f 64 72 69 76 65 2f 76 32 69 6e 74 65 72 6e 61 6c 22 2c 6c 39 6b 3d 22 3b 62 61 73 65 36 34 2c 22 2c 6d 39 6b 3d 22 41 53 53 45 54 5f 43 4f 55 4e 54 5f 45 58 43 45 45 44 45 44 22 2c 6e 39 6b 3d 22 41 53 53 45 54 5f 4d 45 4d 4f 52 59 5f 45 58 43 45 45 44 45 44 22 2c 6f 39 6b 3d 22 41 56 41 49 4c 41 42 4c 45 22 2c 70 39 6b 3d 22 42 41 44 5f 52 45 51 55 45 53 54 22 2c 71 39 6b 3d 22 43 4f 4d 4d 45 4e 54 5f 43 4f 55 4e 54 5f 45 58 43 45 45 44 45 44 22 2c 72 39 6b 3d 22 43 4f 4e 54 45 4e 54 5f 52 45 56 49 45 57 22 2c 73 39 6b 3d 22 43 4f 4e 56 45 52 53 49 4f 4e 5f Data Ascii: var i9k="kix_pre_tertiary_deps";FJ(i9k);var j9k='" alt="">',k9k="/drive/v2internal",l9k=";base64,",m9k="ASSET_COUNT_EXCEEDED",n9k="ASSET_MEMORY_EXCEEDED",o9k="AVAILABLE",p9k="BAD_REQUEST",q9k="COMMENT_COUNT_EXCEEDED",r9k="CONTENT_REVIEW",s9k="CONVERSION_
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 2c 45 39 6b 3d 22 52 45 53 50 4f 4e 53 45 5f 54 4f 4f 5f 4c 41 52 47 45 22 2c 46 39 6b 3d 22 52 65 76 69 73 69 6f 6e 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 76 61 69 6c 61 62 6c 65 22 2c 47 39 6b 3d 22 53 48 41 2d 32 35 36 22 2c 48 39 6b 3d 22 53 48 45 45 54 53 22 2c 49 39 6b 3d 22 53 4c 49 44 45 53 22 2c 4a 39 6b 3d 22 53 65 63 75 72 69 74 79 45 72 72 6f 72 22 2c 4b 39 6b 3d 22 54 6f 64 61 79 22 2c 4c 39 6b 3d 22 55 53 45 52 5f 51 55 4f 54 41 5f 45 58 43 45 45 44 45 44 22 2c 4d 39 6b 3d 22 55 53 45 52 5f 52 41 54 45 5f 4c 49 4d 49 54 5f 45 58 43 45 45 44 45 44 22 2c 4e 39 6b 3d 22 58 2d 47 6f 6f 67 2d 44 72 69 76 65 2d 52 65 73 6f 75 72 63 65 2d 4b 65 79 73 22 2c 4f 39 6b 3d 22 61 62 75 73 65 49 73 41 70 70 65 61 6c 61 62 6c 65 22 2c 50 39 6b 3d 22 61 62 75 Data Ascii: ,E9k="RESPONSE_TOO_LARGE",F9k="Revision no longer available",G9k="SHA-256",H9k="SHEETS",I9k="SLIDES",J9k="SecurityError",K9k="Today",L9k="USER_QUOTA_EXCEEDED",M9k="USER_RATE_LIMIT_EXCEEDED",N9k="X-Goog-Drive-Resource-Keys",O9k="abuseIsAppealable",P9k="abu
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 61 74 65 22 2c 43 24 6b 3d 22 6f 72 67 61 6e 69 7a 65 72 22 2c 72 5a 3d 22 6f 77 6e 65 72 22 2c 44 24 6b 3d 22 70 72 69 6d 61 72 79 53 79 6e 63 50 61 72 65 6e 74 49 64 22 2c 45 24 6b 3d 22 71 75 6f 74 61 42 79 74 65 73 55 73 65 64 22 2c 46 24 6b 3d 22 72 65 61 64 65 72 22 2c 47 24 6b 3d 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 2c 48 24 6b 3d 22 73 68 61 72 65 64 22 2c 49 24 6b 3d 22 73 68 61 72 65 64 57 69 74 68 4d 65 44 61 74 65 22 2c 0a 4a 24 6b 3d 22 73 69 67 6e 22 2c 4b 24 6b 3d 22 74 65 61 6d 44 72 69 76 65 22 2c 4c 24 6b 3d 22 74 65 61 6d 44 72 69 76 65 49 64 22 2c 4d 24 6b 3d 22 74 72 61 73 68 65 64 22 2c 4e 24 6b 3d 22 77 72 69 74 65 72 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 24 6b 28 61 2c 63 2c 64 29 7b 69 66 28 61 3c 30 29 72 65 74 75 72 6e 20 41 Data Ascii: ate",C$k="organizer",rZ="owner",D$k="primarySyncParentId",E$k="quotaBytesUsed",F$k="reader",G$k="restrictions",H$k="shared",I$k="sharedWithMeDate",J$k="sign",K$k="teamDrive",L$k="teamDriveId",M$k="trashed",N$k="writer";function O$k(a,c,d){if(a<0)return A
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 28 62 63 29 29 3b 77 78 68 2e 70 72 6f 74 6f 74 79 70 65 2e 79 46 3d 59 28 31 32 35 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 44 70 28 74 68 69 73 2c 73 78 68 2c 32 2c 61 29 7d 29 3b 4e 53 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 45 3d 59 28 31 32 32 34 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 71 28 74 68 69 73 2c 32 2c 61 29 7d 29 3b 62 70 68 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 45 3d 59 28 31 32 32 33 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 46 70 28 74 68 69 73 2c 33 2c 62 70 68 2c 61 2c 76 6f 69 64 20 30 29 7d 29 3b 0a 63 70 68 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 45 3d 59 28 31 32 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 46 70 28 74 68 69 73 2c 32 2c 62 70 68 2c 61 2c 76 6f 69 64 20 30 29 7d 29 3b 4f 65 68 2e 70 72 6f 74 6f 74 79 70 Data Ascii: (bc));wxh.prototype.yF=Y(1252,function(a){return Dp(this,sxh,2,a)});NS.prototype.NE=Y(1224,function(a){nq(this,2,a)});bph.prototype.NE=Y(1223,function(a){Fp(this,3,bph,a,void 0)});cph.prototype.NE=Y(1222,function(a){Fp(this,2,bph,a,void 0)});Oeh.prototyp
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 73 2c 33 29 7d 29 3b 4e 53 2e 70 72 6f 74 6f 74 79 70 65 2e 62 42 3d 59 28 36 35 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 6e 62 28 74 68 69 73 2c 31 34 29 7d 29 3b 72 71 62 2e 70 72 6f 74 6f 74 79 70 65 2e 51 68 3d 59 28 36 34 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 71 28 74 68 69 73 2c 31 29 7d 29 3b 50 31 64 2e 70 72 6f 74 6f 74 79 70 65 2e 51 68 3d 59 28 36 33 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 71 74 28 74 68 69 73 2e 56 2c 61 29 7d 29 3b 53 35 64 2e 70 72 6f 74 6f 74 79 70 65 2e 51 68 3d 59 28 36 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3b 72 65 74 75 72 6e 28 63 3d 74 68 69 73 2e 44 2c 63 28 29 29 2e 51 68 28 61 29 7d 29 3b 6d 33 67 2e 70 72 6f 74 6f 74 79 70 65 2e 51 68 Data Ascii: s,3)});NS.prototype.bB=Y(65,function(){return Dnb(this,14)});rqb.prototype.Qh=Y(64,function(){return vq(this,1)});P1d.prototype.Qh=Y(63,function(a){return qt(this.V,a)});S5d.prototype.Qh=Y(62,function(a){var c;return(c=this.D,c()).Qh(a)});m3g.prototype.Qh
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 28 61 2e 44 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 24 6b 28 61 2c 63 29 7b 74 68 69 73 2e 73 65 74 28 63 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 5a 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 6e 70 28 61 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 24 24 6b 28 61 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 62 70 28 61 29 3b 66 3d 7a 6e 62 28 61 2c 66 2c 64 2c 63 29 3b 72 70 28 61 2c 66 2c 63 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 61 6c 28 61 2c 63 29 7b 76 61 72 20 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 61 6e 62 3a 64 3b 61 3d 6d 70 28 61 2c 63 29 3b 63 3d 74 79 70 65 6f 66 20 61 3b 61 3d 61 3d 3d 6e 75 6c 6c 3f 61 3a 63 3d 3d 3d 46 63 3f 65 70 28 42 69 67 49 6e 74 2e 61 73 55 69 6e 74 4e 28 36 34 2c 61 29 29 3a 66 6c 62 28 61 29 3f 63 3d 3d 3d 48 6b 3f 42 Data Ascii: (a.Da))}function Z$k(a,c){this.set(c,a)}function sZ(a,c){return np(a,c)}function $$k(a,c,d,e){var f=bp(a);f=znb(a,f,d,c);rp(a,f,c,e)}function aal(a,c){var d=d===void 0?anb:d;a=mp(a,c);c=typeof a;a=a==null?a:c===Fc?ep(BigInt.asUintN(64,a)):flb(a)?c===Hk?B
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 72 72 6f 72 28 22 43 61 60 22 2b 66 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2b 22 60 22 2b 63 2e 64 69 73 70 6c 61 79 4e 61 6d 65 29 3b 63 3d 64 26 32 3b 76 61 72 20 67 3d 24 6a 62 28 66 2e 44 61 29 3b 67 26 26 21 63 3f 66 3d 6b 70 28 66 29 3a 21 67 26 26 63 26 26 28 66 3d 6c 70 28 66 29 29 3b 65 21 3d 3d 66 26 26 72 70 28 61 2c 64 2c 32 2c 66 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 6c 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 56 70 62 28 61 29 21 3d 64 3f 6e 75 6c 6c 3a 6c 61 6c 28 61 2c 74 79 70 65 6f 66 20 63 3d 3d 3d 55 67 3f 63 3a 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 6c 28 61 29 7b 72 65 74 75 72 6e 20 4e 28 61 7c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rror("Ca`"+f.constructor.displayName+"`"+c.displayName);c=d&2;var g=$jb(f.Da);g&&!c?f=kp(f):!g&&c&&(f=lp(f));e!==f&&rp(a,d,2,f);return f}function mal(a,c,d){return Vpb(a)!=d?null:lal(a,typeof c===Ug?c:c.constructor)}function nal(a){return N(a\|0)}function
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 2e 44 61 3d 4f 28 61 29 7d 4a 28 43 61 6c 2c 53 29 3b 43 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 70 28 74 68 69 73 2c 35 29 7d 3b 43 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 64 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 70 28 74 68 69 73 2c 31 33 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 61 6c 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 44 61 6c 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 45 61 6c 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 45 61 6c 2c 53 29 3b 45 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 57 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 71 28 74 68 69 73 2c 36 2c 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 61 6c 28 61 29 7b Data Ascii: .Da=O(a)}J(Cal,S);Cal.prototype.iq=function(){return Pp(this,5)};Cal.prototype.dA=function(){return Tp(this,13)};function Dal(a){this.Da=O(a)}J(Dal,S);function Eal(a){this.Da=O(a)}J(Eal,S);Eal.prototype.WG=function(a){return eq(this,6,a)};function Fal(a){
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 48 3d 64 3b 74 68 69 73 2e 46 3d 65 3f 65 3a 22 23 37 30 37 30 37 30 22 3b 74 68 69 73 2e 4a 3d 66 7c 7c 6e 75 6c 6c 7d 4a 28 51 61 6c 2c 4b 29 3b 51 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 59 6a 3d 7a 28 22 4f 22 29 3b 51 61 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 48 32 61 3d 46 28 31 34 32 39 29 3b 66 75 6e 63 74 69 6f 6e 20 78 5a 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 70 5a 67 28 61 2c 63 2c 64 29 2e 79 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 52 61 6c 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 44 3d 3d 3d 30 3f 28 4f 33 65 28 61 2c 63 29 2c 21 30 29 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 53 61 6c 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 53 61 6c 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 54 61 6c 28 61 2c 63 29 7b 76 61 72 20 64 3d 51 28 Data Ascii: H=d;this.F=e?e:"#707070";this.J=f\|\|null}J(Qal,K);Qal.prototype.Yj=z("O");Qal.prototype.H2a=F(1429);function xZ(a,c,d){return pZg(a,c,d).ys()}function Ral(a,c){return a.D===0?(O3e(a,c),!0):!1}function Sal(a){this.Da=O(a)}J(Sal,S);function Tal(a,c){var d=Q(
2024-10-30 19:39:59 UTC	1378	IN	Data Raw: 44 3d 64 62 6c 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 44 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 54 6e 28 74 68 69 73 2e 44 2c 61 29 7d 3b 44 2e 68 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 6e 28 74 68 69 73 2e 44 29 7d 3b 44 2e 55 6f 3d 46 28 33 29 3b 44 2e 63 48 3d 21 30 3b 44 2e 62 38 3d 21 30 3b 66 75 6e 63 74 69 6f 6e 20 65 62 6c 28 61 29 7b 76 61 72 20 63 3d 6e 65 77 20 64 62 6c 3b 63 2e 44 3d 61 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 62 6c 28 61 29 7b 44 58 28 29 3b 72 65 74 75 72 6e 20 65 62 6c 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 62 6c 28 29 7b 76 61 72 20 61 3d 73 6f 28 29 2c 63 3d 22 22 3b 74 69 62 28 29 3f 28 63 3d 2f 57 69 6e 64 6f 77 73 20 28 3f 3a 4e 54 7c 50 68 6f Data Ascii: D=dbl.prototype;D.Wa=function(a){return Tn(this.D,a)};D.hc=function(){return Vn(this.D)};D.Uo=F(3);D.cH=!0;D.b8=!0;function ebl(a){var c=new dbl;c.D=a;return c}function fbl(a){DX();return ebl(a)}function gbl(){var a=so(),c="";tib()?(c=/Windows (?:NT\|Pho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49822	142.250.184.206	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:39:59 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:39:59 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 19:39:59 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:39:59 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 19:39:59 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:00 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 8b96f0ab-501e-008c-5135-2acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194000Z-r197bdfb6b4zbthzeykwgnvx8s00000001a00000000065d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:00 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194000Z-16849878b7867ttgfbpnfxt44s00000008ag00000000gz9x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:00 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194000Z-16849878b78fkwcjkpn19c5dsn00000007hg0000000073r7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:00 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194000Z-16849878b78xblwksrnkakc08w00000007m0000000011xt3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:00 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194000Z-16849878b78sx229w7g7at4nkg00000006ng00000000u6k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:00 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49830	74.125.206.189	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	891	OUT	OPTIONS /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/bind?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&tab=t.0&lsq=1730314564404&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=7&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&RID=rpc&SID=16E06BD6AC63A562&CI=0&AID=20&TYPE=xmlhttp&zx=tpqre3td5muy&t=1 HTTP/1.1 Host: 0.docs.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-same-domain Origin: https://docs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 19:40:00 UTC	738	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:40:00 GMT Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Headers: x-same-domain X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:40:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49831	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	1311	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/bind?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=5&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&RID=72110&CVER=1&zx=bzqknqlf9iyo&t=1 HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:01 UTC	1201	IN	HTTP/1.1 400 Bad Request Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/html; charset=utf-8 x-chromium-appcache-fallback-override: disallow-fallback Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-wesZjdOnL9IYhlaXPhHtrQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:40:01 UTC	177	IN	Data Raw: 63 31 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: c18<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-widt
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f Data Ascii: h, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><link rel="shortcut icon" href="//docs.google.com/favicon.ico"><title>Page Not Found</title><meta name="referrer" content="strict-origin-when-cross-origin"><link href="//fonts.go
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 57 43 34 6a 33 74 53 49 69 38 53 4a 58 75 49 35 2d 38 70 50 78 77 22 3e 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 61 2c 20 61 3a 6c 69 6e 6b 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f 72 3a 20 23 31 31 32 41 42 42 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 57 43 34 6a 33 74 53 49 69 38 53 4a 58 75 49 35 2d Data Ascii: /style><style type="text/css" nonce="WC4j3tSIi8SJXuI5-8pPxw">body {background-color: #fff; font-family: Arial,sans-serif; font-size: 13px; margin: 0; padding: 0;}a, a:link, a:visited {color: #112ABB;}</style><style type="text/css" nonce="WC4j3tSIi8SJXuI5-
2024-10-30 19:40:01 UTC	170	IN	Data Raw: 69 6e 65 72 20 7b 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 35 30 70 78 3b 7d 23 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: iner {margin: auto; max-width: 750px;}#innerContainer {margin-bottom: 20px; margin-left: 40px; margin-right: 40px; margin-top: 80px; position: relative;}</style></html>
2024-10-30 19:40:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49838	142.250.184.206	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:01 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 19:40:00 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:01 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 19:40:01 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:00 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-15b8d89586fxdh48ft0acdbg44000000027000000000ez8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8d7929b6-101e-0017-6edc-2647c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-17c5cb586f6lxnvgvs6hx6p0t800000000n000000000165x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f99c795-b01e-0097-3bfd-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-15b8d89586fvk4kmbg8pf84y8800000009dg00000000716e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:01 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49843	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	716	OUT	GET /static/document/client/js/2738495476-client_js_prod_kix_tertiary.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:01 UTC	801	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 4817972 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 29 Oct 2024 21:08:01 GMT Expires: Wed, 29 Oct 2025 21:08:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 81120 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:01 UTC	577	IN	Data Raw: 46 4a 28 45 5f 61 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 0a 20 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e Data Ascii: FJ(E_a);/* Copyright 2021 Google LLC Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICEN
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 0a 20 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 0a 20 Data Ascii: /* Copyright 2024 Google LLC Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 2d 63 6f 6e 74 65 6e 74 2d 65 6c 65 6d 65 6e 74 22 2c 51 6b 6c 3d 22 20 61 70 70 73 45 6c 65 6d 65 6e 74 73 53 69 64 65 6b 69 63 6b 53 63 72 6f 6c 6c 44 65 6c 69 6e 65 61 74 69 6f 6e 22 2c 52 6b 6c 3d 22 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 27 74 72 75 65 27 22 2c 53 6b 6c 3d 27 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 64 6f 63 73 2d 6d 6c 2d 70 72 6f 6d 6f 74 69 6f 6e 2d 61 72 69 61 2d 6c 61 62 65 6c 22 27 2c 54 6b 6c 3d 22 20 62 6f 71 41 64 64 6f 6e 73 63 61 72 64 73 72 65 6e 64 65 72 65 72 43 61 72 64 42 75 74 74 6f 6e 44 69 73 61 62 6c 65 64 43 75 73 74 6f 6d 49 63 6f 6e 22 2c 55 6b 6c 3d 22 20 62 6f 71 41 64 64 6f 6e 73 63 61 72 64 73 72 65 6e 64 65 72 65 72 43 61 72 64 42 75 74 74 6f 6e 46 75 6c 6c 57 69 64 74 68 42 75 74 74 6f Data Ascii: -content-element",Qkl=" appsElementsSidekickScrollDelineation",Rkl=" aria-disabled='true'",Skl=' aria-labelledby="docs-ml-promotion-aria-label"',Tkl=" boqAddonscardsrendererCardButtonDisabledCustomIcon",Ukl=" boqAddonscardsrendererCardButtonFullWidthButto
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 6c 6c 3d 22 20 74 6f 63 2d 73 69 64 65 62 61 72 2d 75 70 64 61 74 65 2d 75 6e 69 74 73 22 2c 44 6c 6c 3d 27 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 77 69 64 74 68 3d 27 2c 45 6c 6c 3d 27 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 27 2c 46 6c 6c 3d 22 20 77 68 65 6e 20 69 6d 70 6f 72 74 69 6e 67 20 69 6e 74 6f 20 61 6e 20 65 6e 63 72 79 70 74 65 64 20 22 2c 47 6c 6c 3d 22 20 77 69 74 68 20 65 78 65 63 75 74 6f 72 20 22 2c 48 6c 6c 3d 27 22 20 61 6c 74 3d 22 22 20 63 6c 61 73 73 3d 22 27 2c 49 6c 6c 3d 27 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 27 2c 4a 6c 6c 3d 27 22 20 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 64 6f 63 73 49 6d 61 67 65 47 65 6e 65 72 61 74 69 6f 6e 50 72 6f 6d 70 74 49 6e Data Ascii: ll=" toc-sidebar-update-units",Dll=' viewBox="0 0 20 20" width=',Ell=' viewBox="0 0 24 24" width=',Fll=" when importing into an encrypted ",Gll=" with executor ",Hll='" alt="" class="',Ill='" alt="" src="',Jll='" aria-controls="docsImageGenerationPromptIn
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 67 22 20 61 6c 74 3d 22 27 2c 6d 6d 6c 3d 27 22 20 73 74 79 6c 65 3d 22 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6f 72 64 65 72 3a 20 27 2c 6e 6d 6c 3d 27 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2c 6f 6d 6c 3d 27 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 27 2c 70 6d 6c 3d 27 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 27 2c 71 6d 6c 3d 0a 27 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 27 2c 72 6d 6c 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2c 73 6d 6c 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 27 2c 74 6d 6c 3d 27 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 3c 64 69 76 20 Data Ascii: g" alt="',mml='" style="--animation-order: ',nml='" style="background-image: url(',oml='" style="background: ',pml='" style="height: ',qml='" style="width:',rml='" tabindex="-1" role="alert" aria-label="',sml='" tabindex="-1">',tml='" tabindex="-1"><div
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 2c 5a 6d 6c 3d 27 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 27 2c 24 6d 6c 3d 27 22 3e 3c 69 6d 67 20 6a 73 6e 61 6d 65 3d 22 27 2c 61 6e 6c 3d 27 22 3e 3c 69 6e 70 75 74 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 64 6f 2d 6e 6f 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 20 63 6c 61 73 73 3d 22 27 2c 62 6e 6c 3d 27 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 20 63 6c 61 73 73 3d 22 27 2c 63 6e 6c 3d 27 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 32 35 36 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2c 64 6e 6c 3d 27 22 3e 3c 74 61 62 6c 65 20 63 6c 61 73 73 3d 22 27 2c 65 6e 6c 3d 27 22 3e 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 27 Data Ascii: ,Zml='"><div style="background: ',$ml='"><img jsname="',anl='"><input autocomplete="do-not-autocomplete" class="',bnl='"><input type="number" class="',cnl='"><input type="text" maxlength="256" aria-label="',dnl='"><table class="',enl='"><textarea class="'
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 2d 64 61 72 6b 2d 74 68 65 6d 65 3a 22 2c 53 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3a 22 2c 54 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 22 2c 55 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 64 61 72 6b 2d 74 68 65 6d 65 3a 22 2c 56 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3a 22 2c 57 6e 6c 3d 22 2d 2d 73 65 63 74 69 6f 6e 2d 69 63 6f 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 22 2c 58 6e 6c 3d 22 2d 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6c Data Ascii: -dark-theme:",Snl="--section-background-color-light-theme:",Tnl="--section-border-radius: ",Unl="--section-icon-background-color-dark-theme:",Vnl="--section-icon-background-color-light-theme:",Wnl="--section-icon-border-radius: ",Xnl="--text-decoration: l
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 3d 22 2d 75 70 64 61 74 65 2d 62 75 74 74 6f 6e 22 2c 52 6f 6c 3d 22 2d 76 61 72 69 61 62 6c 65 2d 6e 61 6d 65 22 2c 53 6f 6c 3d 22 2e 20 57 69 74 68 20 69 6e 70 75 74 3a 5c 6e 22 2c 54 6f 6c 3d 22 2e 61 70 70 73 45 6c 65 6d 65 6e 74 73 43 6f 6c 6f 72 50 69 63 6b 65 72 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 5f 5f 70 61 6c 65 74 74 65 22 2c 55 6f 6c 3d 22 2e 61 70 70 73 45 6c 65 6d 65 6e 74 73 43 6f 6c 6f 72 50 69 63 6b 65 72 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 5f 5f 73 77 61 74 63 68 22 2c 0a 56 6f 6c 3d 22 2e 6a 61 76 61 73 63 72 69 70 74 4d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 47 6d 33 57 69 7a 46 6f 72 6d 46 69 65 6c 64 2d 2d 6c 61 62 65 6c 22 2c 57 6f 6c 3d 22 2e 6a 61 76 61 73 63 72 69 70 74 4d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 47 6d 33 57 Data Ascii: ="-update-button",Rol="-variable-name",Sol=". With input:\n",Tol=".appsElementsColorPicker-color-picker__palette",Uol=".appsElementsColorPicker-color-picker__swatch",Vol=".javascriptMaterialdesignGm3WizFormField--label",Wol=".javascriptMaterialdesignGm3W
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 73 74 72 65 61 6d 7a 2f 64 72 69 76 65 5f 73 68 61 72 69 6e 67 2f 73 68 61 72 65 5f 63 6c 69 65 6e 74 2f 75 70 64 61 74 65 5f 61 63 74 69 6f 6e 73 5f 75 73 65 72 5f 69 73 5f 6c 6f 67 67 65 64 5f 69 6e 2f 63 6f 75 6e 74 22 2c 6d 70 6c 3d 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 64 72 69 76 65 5f 73 68 61 72 69 6e 67 2f 73 68 61 72 65 5f 63 6c 69 65 6e 74 5f 62 75 74 74 6f 6e 2f 73 65 74 5f 64 6c 70 5f 69 6e 66 6f 2f 63 6f 75 6e 74 22 2c 6e 70 6c 3d 22 2f 63 72 65 61 74 65 6e 61 6d 65 64 72 65 76 69 73 69 6f 6e 22 2c 6f 70 6c 3d 22 2f 64 72 69 76 65 2f 76 32 69 6e 74 65 72 6e 61 6c 2f 66 69 6c 65 73 2f 22 2c 70 70 6c 3d 22 2f 64 72 69 76 65 73 68 61 72 69 6e 67 2f 63 6c 69 65 6e 74 6d 6f 64 65 6c 22 2c 71 70 6c 3d 22 2f 65 6d 62 65 64 2f 63 6f 6e Data Ascii: streamz/drive_sharing/share_client/update_actions_user_is_logged_in/count",mpl="/client_streamz/drive_sharing/share_client_button/set_dlp_info/count",npl="/createnamedrevision",opl="/drive/v2internal/files/",ppl="/drivesharing/clientmodel",qpl="/embed/con
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 20 63 6c 61 73 73 3d 22 27 2c 0a 66 71 6c 3d 27 3c 2f 64 69 76 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 27 2c 67 71 6c 3d 27 3c 2f 64 69 76 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 27 2c 68 71 6c 3d 27 3c 2f 68 32 3e 3c 70 20 63 6c 61 73 73 3d 22 27 2c 69 71 6c 3d 22 3c 2f 68 33 3e 3c 2f 74 68 3e 3c 2f 74 72 3e 22 2c 6a 71 6c 3d 22 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 2c 6b 71 6c 3d 27 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 6c 71 6c 3d 27 3c 2f 6c 61 62 65 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 6d 71 6c 3d 27 3c 2f 6c 61 62 65 6c 3e 3c Data Ascii: v style="display: none;" class="',fql='</div><input class="',gql='</div><ul class="',hql='</h2><p class="',iql="</h3></th></tr>",jql="</label></div></div></div></div>",kql='</label></div></div><div class="',lql='</label></div><div class="',mql='</label><

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 03fc6633-801e-0048-4d87-29f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-17c5cb586f6zcqf8r7the4ske000000000rg00000000kvnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:01 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-16849878b78bjkl8dpep89pbgg000000072000000000zs0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49849	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	1015	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 10306 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:01 UTC	10306	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 36 2c 5b 5b 22 31 37 33 30 33 31 37 31 39 39 33 37 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],56,[["1730317199372",null,null,null,n
2024-10-30 19:40:01 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:40:01 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 19:40:01 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 19:40:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49853	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	1243	OUT	GET /drivesharing/clientmodel?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&foreignService=kix&authuser=0&origin=https%3A%2F%2Fdocs.google.com HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:02 UTC	3462	IN	HTTP/1.1 302 Found Content-Type: application/binary X-Frame-Options: ALLOW-FROM https://docs.google.com Content-Security-Policy: frame-ancestors https://docs.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-6Zd1iUFSk8t5--6Oar8zeQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /drivesharing/_/DriveShareDialogUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /drivesharing/_/DriveShareDialogUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /drivesharing/_/DriveShareDialogUi/cspreport Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Location: https://accounts.google.com/ServiceLogin?passive=1209600&continue=https://docs.google.com/drivesharing/clientmodel?id%3D1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo%26foreignService%3Dkix%26authuser%3D0%26origin%3Dhttps://docs.google.com&followup=https://docs.google.com/drivesharing/clientmodel?id%3D1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo%26foreignService%3Dkix%26authuser%3D0%26origin%3Dhttps://docs.google.com Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://ww [TRUNCATED] Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Date: Wed, 30 Oct 2024 19:40:01 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49854	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	1013	OUT	GET /static/document/client/js/1526094273-client_js_prod_datetimeresources.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:01 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 164534 Date: Wed, 30 Oct 2024 19:40:01 GMT Expires: Thu, 30 Oct 2025 19:40:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:01 UTC	590	IN	Data Raw: 46 4a 28 54 72 61 29 3b 0a 76 61 72 20 53 36 74 3d 22 5c 75 31 37 61 32 5c 75 31 37 62 36 5c 75 31 37 39 31 5c 75 31 37 62 37 5c 75 31 37 38 66 5c 75 31 37 64 32 5c 75 31 37 39 39 22 2c 54 36 74 3d 22 5c 75 31 37 61 32 5c 75 31 37 38 34 5c 75 31 37 64 32 5c 75 31 37 38 32 5c 75 31 37 62 36 5c 75 31 37 39 61 22 2c 55 36 74 3d 22 5c 75 31 37 39 63 5c 75 31 37 62 37 5c 75 31 37 38 35 5c 75 31 37 64 32 5c 75 31 37 38 36 5c 75 31 37 62 37 5c 75 31 37 38 30 5c 75 31 37 62 36 22 2c 56 36 74 3d 22 5c 75 31 37 39 38 5c 75 31 37 62 37 5c 75 31 37 39 30 5c 75 31 37 62 62 5c 75 31 37 39 33 5c 75 31 37 62 36 22 2c 57 36 74 3d 22 5c 75 31 37 38 30 5c 75 31 37 62 62 5c 75 31 37 39 38 5c 75 31 37 64 32 5c 75 31 37 39 37 5c 75 31 37 63 38 22 2c 58 36 74 3d 22 5c 75 31 37 Data Ascii: FJ(Tra);var S6t="\u17a2\u17b6\u1791\u17b7\u178f\u17d2\u1799",T6t="\u17a2\u1784\u17d2\u1782\u17b6\u179a",U6t="\u179c\u17b7\u1785\u17d2\u1786\u17b7\u1780\u17b6",V6t="\u1798\u17b7\u1790\u17bb\u1793\u17b6",W6t="\u1780\u17bb\u1798\u17d2\u1797\u17c8",X6t="\u17
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 75 31 30 33 61 5c 75 31 30 33 39 5c 75 31 30 30 32 5c 75 31 30 31 34 5c 75 31 30 33 64 5c 75 31 30 33 31 22 2c 64 37 74 3d 22 5c 75 31 30 30 35 5c 75 31 30 31 30 5c 75 31 30 32 66 5c 75 31 30 31 30 5c 75 31 30 33 39 5c 75 31 30 31 31 20 5c 75 31 30 31 65 5c 75 31 30 32 66 5c 75 31 30 33 36 5c 75 31 30 33 38 5c 75 31 30 31 63 5c 75 31 30 31 35 5c 75 31 30 31 30 5c 75 31 30 33 61 22 2c 65 37 74 3d 22 5c 75 31 30 30 30 5c 75 31 30 33 63 5c 75 31 30 32 63 5c 75 31 30 31 65 5c 75 31 30 31 35 5c 75 31 30 31 30 5c 75 31 30 33 31 5c 75 31 30 33 38 22 2c 66 37 74 3d 22 5c 75 30 64 62 36 5c 75 30 64 63 61 5c 75 32 30 30 64 5c 75 30 64 62 62 5c 75 30 64 63 34 5c 75 30 64 63 33 5c 75 30 64 63 61 5c 75 30 64 62 34 5c 75 30 64 61 64 5c 75 30 64 64 32 5c 75 30 64 62 31 Data Ascii: u103a\u1039\u1002\u1014\u103d\u1031",d7t="\u1005\u1010\u102f\u1010\u1039\u1011 \u101e\u102f\u1036\u1038\u101c\u1015\u1010\u103a",e7t="\u1000\u103c\u102c\u101e\u1015\u1010\u1031\u1038",f7t="\u0db6\u0dca\u200d\u0dbb\u0dc4\u0dc3\u0dca\u0db4\u0dad\u0dd2\u0db1
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 5c 75 30 39 32 61 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 33 32 5c 75 30 39 34 62 20 5c 75 30 39 32 34 5c 75 30 39 34 64 5c 75 30 39 33 30 5c 75 30 39 34 38 5c 75 30 39 32 65 5c 75 30 39 33 65 5c 75 30 39 33 38 5c 75 30 39 33 66 5c 75 30 39 31 35 22 2c 0a 41 37 74 3d 22 5c 75 30 39 32 38 5c 75 30 39 34 62 5c 75 30 39 32 64 5c 75 30 39 34 37 5c 75 30 39 32 65 5c 75 30 39 34 64 5c 75 30 39 32 63 5c 75 30 39 33 30 22 2c 42 37 74 3d 22 5c 75 30 39 32 36 5c 75 30 39 34 62 5c 75 30 39 33 38 5c 75 30 39 34 64 5c 75 30 39 33 30 5c 75 30 39 34 62 20 5c 75 30 39 32 34 5c 75 30 39 34 64 5c 75 30 39 33 30 5c 75 30 39 34 38 5c 75 30 39 32 65 5c 75 30 39 33 65 5c 75 30 39 33 38 5c 75 30 39 33 66 5c 75 30 39 31 35 22 2c 43 37 74 3d 22 5c 75 30 39 32 34 5c 75 30 Data Ascii: \u092a\u0939\u093f\u0932\u094b \u0924\u094d\u0930\u0948\u092e\u093e\u0938\u093f\u0915",A7t="\u0928\u094b\u092d\u0947\u092e\u094d\u092c\u0930",B7t="\u0926\u094b\u0938\u094d\u0930\u094b \u0924\u094d\u0930\u0948\u092e\u093e\u0938\u093f\u0915",C7t="\u0924\u0
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 75 30 36 63 63 22 2c 24 37 74 3d 22 5c 75 30 36 32 63 5c 75 30 36 34 35 5c 75 30 36 33 39 5c 75 30 36 33 31 5c 75 30 36 32 37 5c 75 30 36 32 61 22 2c 61 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 61 39 5c 75 30 36 32 61 5c 75 30 36 34 38 5c 75 30 36 32 38 5c 75 30 36 33 31 22 2c 62 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 65 5c 75 30 36 34 35 5c 75 30 36 34 61 5c 75 30 36 33 33 22 2c 63 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 63 5c 75 30 36 34 35 5c 75 30 36 33 39 5c 75 30 36 32 39 22 2c 64 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 62 5c 75 30 36 34 34 5c 75 30 36 32 37 5c 75 30 36 32 62 5c 75 30 36 32 37 5c 75 30 36 32 31 22 2c 65 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 Data Ascii: u06cc",$7t="\u062c\u0645\u0639\u0631\u0627\u062a",a8t="\u0627\u06a9\u062a\u0648\u0628\u0631",b8t="\u0627\u0644\u062e\u0645\u064a\u0633",c8t="\u0627\u0644\u062c\u0645\u0639\u0629",d8t="\u0627\u0644\u062b\u0644\u0627\u062b\u0627\u0621",e8t="\u0627\u0644\u06
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 74 3d 22 79 20 4d 4d 4d 4d 20 64 2c 20 45 45 45 45 22 2c 4e 38 74 3d 22 79 20 4d 4d 4d 4d 22 2c 4f 38 74 3d 22 79 20 4d 4d 4d 20 64 2c 20 45 45 45 22 2c 50 38 74 3d 22 79 20 4d 4d 4d 20 64 22 2c 51 38 74 3d 22 76 69 65 72 6e 65 73 22 2c 52 38 74 3d 22 76 65 6e 64 72 65 64 69 22 2c 53 38 74 3d 22 76 65 6e 2e 22 2c 54 38 74 3d 22 74 6f 72 73 64 61 67 22 2c 55 38 74 3d 22 74 69 72 73 64 61 67 22 2c 56 38 74 3d 22 74 65 72 5c 75 30 30 65 37 61 2d 66 65 69 72 61 22 2c 57 38 74 3d 22 73 5c 75 30 30 66 38 6e 64 61 67 22 2c 58 38 74 3d 22 73 5c 75 30 30 65 31 62 61 64 6f 22 2c 59 38 74 3d 22 73 6f 62 6f 74 61 22 2c 5a 38 74 3d 22 73 65 78 74 61 2d 66 65 69 72 61 22 2c 24 38 74 3d 22 73 65 74 65 6d 62 72 6f 22 2c 61 39 74 3d 22 73 65 74 2e 22 2c 62 39 74 3d 22 73 Data Ascii: t="y MMMM d, EEEE",N8t="y MMMM",O8t="y MMM d, EEE",P8t="y MMM d",Q8t="viernes",R8t="vendredi",S8t="ven.",T8t="torsdag",U8t="tirsdag",V8t="ter\u00e7a-feira",W8t="s\u00f8ndag",X8t="s\u00e1bado",Y8t="sobota",Z8t="sexta-feira",$8t="setembro",a9t="set.",b9t="s
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 64 2f 4d 4d 2f 79 22 2c 79 24 74 3d 22 64 64 2f 4d 4d 22 2c 7a 24 74 3d 22 64 64 2e 4d 4d 2e 79 79 22 2c 41 24 74 3d 22 64 64 2e 4d 4d 2e 79 22 2c 42 24 74 3d 22 64 64 2e 4d 4d 22 2c 43 24 74 3d 22 64 64 2e 20 4d 4d 4d 4d 22 2c 70 38 3d 22 64 64 20 4d 4d 4d 4d 22 2c 44 24 74 3d 22 64 64 20 27 64 65 27 20 4d 4d 4d 4d 22 2c 0a 45 24 74 3d 22 64 2f 4d 2f 79 79 22 2c 71 38 3d 22 64 2f 4d 22 2c 46 24 74 3d 22 64 2e 20 4d 4d 4d 4d 20 79 22 2c 47 24 74 3d 22 64 2e 20 4d 4d 4d 4d 22 2c 48 24 74 3d 22 64 2e 20 4d 4d 4d 2c 20 48 48 3a 6d 6d 20 7a 7a 7a 7a 22 2c 49 24 74 3d 22 64 2e 20 4d 4d 4d 20 79 2e 22 2c 4a 24 74 3d 22 64 2e 20 4d 4d 4d 20 79 22 2c 4b 24 74 3d 22 64 2e 20 4d 4d 4d 20 48 48 3a 6d 6d 20 7a 7a 7a 7a 22 2c 4c 24 74 3d 22 64 2e 20 4d 4d 4d 22 2c 4d Data Ascii: d/MM/y",y$t="dd/MM",z$t="dd.MM.yy",A$t="dd.MM.y",B$t="dd.MM",C$t="dd. MMMM",p8="dd MMMM",D$t="dd 'de' MMMM",E$t="d/M/yy",q8="d/M",F$t="d. MMMM y",G$t="d. MMMM",H$t="d. MMM, HH:mm zzzz",I$t="d. MMM y.",J$t="d. MMM y",K$t="d. MMM HH:mm zzzz",L$t="d. MMM",M
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 7a 22 2c 54 61 75 3d 22 48 3a 6d 6d 3a 73 73 20 28 7a 7a 7a 7a 29 22 2c 55 61 75 3d 22 48 3a 6d 6d 3a 73 73 22 2c 56 61 75 3d 22 48 3a 6d 6d 22 2c 57 61 75 3d 22 47 20 79 22 2c 58 61 75 3d 22 46 65 62 72 75 61 72 69 22 2c 59 61 75 3d 22 45 45 45 45 2c 20 64 2e 20 4d 4d 4d 4d 20 79 2e 22 2c 5a 61 75 3d 22 45 45 45 45 2c 20 64 2e 20 4d 4d 4d 4d 20 79 22 2c 24 61 75 3d 22 45 45 45 45 2c 20 64 20 4d 4d 4d 4d 2c 20 79 22 2c 61 62 75 3d 22 45 45 45 45 2c 20 64 20 4d 4d 4d 4d 20 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 62 62 75 3d 22 45 45 45 45 2c 20 64 20 4d 4d 4d 4d 20 79 22 2c 63 62 75 3d 22 45 45 45 45 2c 20 64 20 27 64 65 27 20 4d 4d 4d 4d 20 27 64 65 27 20 79 22 2c 64 62 75 3d 22 45 45 45 45 20 64 2e 20 4d 4d 4d 4d 20 79 22 2c 65 62 75 3d 22 Data Ascii: z",Tau="H:mm:ss (zzzz)",Uau="H:mm:ss",Vau="H:mm",Wau="G y",Xau="Februari",Yau="EEEE, d. MMMM y.",Zau="EEEE, d. MMMM y",$au="EEEE, d MMMM, y",abu="EEEE, d MMMM y\u202f'\u0433'.",bbu="EEEE, d MMMM y",cbu="EEEE, d 'de' MMMM 'de' y",dbu="EEEE d. MMMM y",ebu="
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 73 6a 3a 22 79 22 2c 4e 6a 3a 4a 38 74 2c 0a 52 69 3a 22 4c 4c 4c 20 79 22 2c 59 69 3a 46 61 75 2c 4f 6a 3a 43 61 75 2c 67 69 3a 6d 5f 2c 55 69 3a 70 38 2c 65 6a 3a 22 64 2e 4d 22 2c 51 69 3a 73 38 2c 4b 68 3a 74 38 2c 58 69 3a 77 38 2c 71 6a 3a 6a 62 75 2c 6d 6a 3a 22 64 22 2c 54 6a 3a 55 24 74 7d 2c 62 67 3a 7b 73 6a 3a 22 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 4e 6a 3a 4a 38 74 2c 52 69 3a 22 4d 4d 2e 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 59 69 3a 22 4d 4d 4d 4d 20 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 4f 6a 3a 22 4d 4d 2e 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 67 69 3a 22 64 2e 4d 4d 22 2c 55 69 3a 73 38 2c 65 6a 3a 22 64 2e 4d 4d 22 2c 51 69 3a 73 38 2c 4b 68 3a 22 64 2e 4d 4d 2e 79 5c 75 Data Ascii: sj:"y",Nj:J8t,Ri:"LLL y",Yi:Fau,Oj:Cau,gi:m_,Ui:p8,ej:"d.M",Qi:s8,Kh:t8,Xi:w8,qj:jbu,mj:"d",Tj:U$t},bg:{sj:"y\u202f'\u0433'.",Nj:J8t,Ri:"MM.y\u202f'\u0433'.",Yi:"MMMM y\u202f'\u0433'.",Oj:"MM.y\u202f'\u0433'.",gi:"d.MM",Ui:s8,ej:"d.MM",Qi:s8,Kh:"d.MM.y\u
2024-10-30 19:40:01 UTC	1378	IN	Data Raw: 69 3a 6d 5f 2c 55 69 3a 44 24 74 2c 65 6a 3a 71 38 2c 51 69 3a 61 61 75 2c 4b 68 3a 74 38 2c 58 69 3a 77 38 2c 71 6a 3a 6a 62 75 2c 6d 6a 3a 22 64 22 2c 54 6a 3a 56 24 74 7d 2c 65 73 5f 34 31 39 3a 7b 73 6a 3a 22 79 22 2c 4e 6a 3a 79 50 2c 52 69 3a 51 4e 2c 59 69 3a 79 61 75 2c 4f 6a 3a 22 4d 2f 79 22 2c 67 69 3a 6d 5f 2c 55 69 3a 44 24 74 2c 65 6a 3a 71 38 2c 51 69 3a 61 61 75 2c 4b 68 3a 74 38 2c 58 69 3a 77 38 2c 71 6a 3a 6a 62 75 2c 0a 6d 6a 3a 22 64 22 2c 54 6a 3a 53 24 74 7d 2c 65 74 3a 7b 73 6a 3a 22 79 22 2c 4e 6a 3a 79 50 2c 52 69 3a 51 4e 2c 59 69 3a 52 4e 2c 4f 6a 3a 43 61 75 2c 67 69 3a 4c 24 74 2c 55 69 3a 43 24 74 2c 65 6a 3a 22 64 2e 4d 22 2c 51 69 3a 47 24 74 2c 4b 68 3a 4a 24 74 2c 58 69 3a 68 62 75 2c 71 6a 3a 22 45 45 45 2c 20 64 2e 20 Data Ascii: i:m_,Ui:D$t,ej:q8,Qi:aau,Kh:t8,Xi:w8,qj:jbu,mj:"d",Tj:V$t},es_419:{sj:"y",Nj:yP,Ri:QN,Yi:yau,Oj:"M/y",gi:m_,Ui:D$t,ej:q8,Qi:aau,Kh:t8,Xi:w8,qj:jbu,mj:"d",Tj:S$t},et:{sj:"y",Nj:yP,Ri:QN,Yi:RN,Oj:Cau,gi:L$t,Ui:C$t,ej:"d.M",Qi:G$t,Kh:J$t,Xi:hbu,qj:"EEE, d.
2024-10-30 19:40:02 UTC	1378	IN	Data Raw: 69 3a 73 38 2c 4b 68 3a 74 38 2c 58 69 3a 77 38 2c 71 6a 3a 6a 62 75 2c 6d 6a 3a 22 64 22 2c 54 6a 3a 54 24 74 7d 2c 68 72 3a 7b 73 6a 3a 22 79 2e 22 2c 4e 6a 3a 22 79 2e 20 47 22 2c 52 69 3a 22 4c 4c 4c 20 79 2e 22 2c 59 69 3a 22 4c 4c 4c 4c 20 79 2e 22 2c 4f 6a 3a 22 4d 4d 2e 20 79 2e 22 2c 67 69 3a 4c 24 74 2c 55 69 3a 43 24 74 2c 65 6a 3a 22 64 64 2e 20 4d 4d 2e 22 2c 51 69 3a 47 24 74 2c 4b 68 3a 49 24 74 2c 58 69 3a 68 62 75 2c 71 6a 3a 66 62 75 2c 6d 6a 3a 22 64 2e 22 2c 54 6a 3a 4b 24 74 7d 2c 68 75 3a 7b 73 6a 3a 22 79 2e 22 2c 4e 6a 3a 22 47 20 79 2e 22 2c 52 69 3a 22 79 2e 20 4d 4d 4d 22 2c 59 69 3a 22 79 2e 20 4d 4d 4d 4d 22 2c 4f 6a 3a 22 79 2e 20 4d 4d 2e 22 2c 67 69 3a 22 4d 4d 4d 20 64 2e 22 2c 55 69 3a 22 4d 4d 4d 4d 20 64 64 2e 22 2c 65 Data Ascii: i:s8,Kh:t8,Xi:w8,qj:jbu,mj:"d",Tj:T$t},hr:{sj:"y.",Nj:"y. G",Ri:"LLL y.",Yi:"LLLL y.",Oj:"MM. y.",gi:L$t,Ui:C$t,ej:"dd. MM.",Qi:G$t,Kh:I$t,Xi:hbu,qj:fbu,mj:"d.",Tj:K$t},hu:{sj:"y.",Nj:"G y.",Ri:"y. MMM",Yi:"y. MMMM",Oj:"y. MM.",gi:"MMM d.",Ui:"MMMM dd.",e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49856	74.125.206.189	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	1622	OUT	GET /document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/bind?id=1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo&sid=16adb852c8187343&includes_info_params=true&usp=sharing&cros_files=false&VER=8&tab=t.0&lsq=1730314564404&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=7&smv=65&smb=%5B2147483647%2C%20EA%3D%3D%5D&cimpl=0&RID=rpc&SID=16E06BD6AC63A562&CI=0&AID=20&TYPE=xmlhttp&zx=tpqre3td5muy&t=1 HTTP/1.1 Host: 0.docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV3csdSzEk11fVni_AhGTdvN2yLXkpPvMds9PktOOD4lF34w0LZDNbiSoa0tD8IcN7-L7WOGa-urb0_y4cKXVEPufm0WCAL0sQTpLZKk_WwI2903I_-Ln6cYwJr-kLRCMs4q5BhpzAAlriVdZQGjK2e3DCg7Y3Mz1pntZBbQ8WTGR5Lk7h8SPQfMoSLE8pW7K7T8W3mBjHmt1hTuQh-Np3O7XtvnL7ejlX9ziMQmJV2lSjE7dIbur0pHPSTPe80zeImskeG6Ut5VTo0Bsu1n6cwPIIlc3TsUMow==; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:02 UTC	1166	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:40:01 GMT Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Cache-Control,Content-Encoding,Content-Length,Content-Type,Date,Expires,Pragma,Server,Transfer-Encoding,X-Google-GFE-Backend-Request-Cost Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2024-10-30 19:40:02 UTC	24	IN	Data Raw: 31 32 0d 0a 31 35 0a 5b 5b 32 31 2c 5b 22 6e 6f 6f 70 22 5d 5d 5d 0d 0a Data Ascii: 1215[[21,["noop"]]]
2024-10-30 19:40:12 UTC	76	IN	Data Raw: 34 36 0d 0a 36 37 0a 5b 5b 32 32 2c 5b 31 34 2c 31 37 33 30 33 31 34 35 36 34 34 30 36 2c 7b 22 61 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 73 69 64 22 3a 22 37 31 38 38 39 32 34 34 30 65 30 39 63 31 32 38 22 7d 5d 5d 5d 0d 0a Data Ascii: 4667[[22,[14,1730314564406,{"active":false,"sid":"718892440e09c128"}]]]
2024-10-30 19:40:29 UTC	75	IN	Data Raw: 34 35 0d 0a 36 36 0a 5b 5b 32 33 2c 5b 31 34 2c 31 37 33 30 33 31 34 35 36 34 34 31 32 2c 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 73 69 64 22 3a 22 32 61 34 62 62 33 38 64 32 30 36 38 33 64 30 65 22 7d 5d 5d 5d 0d 0a Data Ascii: 4566[[23,[14,1730314564412,{"active":true,"sid":"2a4bb38d20683d0e"}]]]
2024-10-30 19:40:29 UTC	354	IN	Data Raw: 31 35 62 0d 0a 33 34 33 0a 5b 5b 32 34 2c 5b 35 2c 31 37 33 30 33 31 34 35 36 34 34 33 33 2c 7b 22 63 68 61 74 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 43 35 32 32 31 46 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 20 41 6c 6c 69 67 61 74 6f 72 22 2c 22 67 69 76 65 6e 4e 61 6d 65 22 3a 22 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 69 73 4d 65 22 3a 66 61 6c 73 65 2c 22 69 73 4e 65 77 22 3a 74 72 75 65 2c 22 70 68 6f 74 6f 55 72 6c 22 3a 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 66 69 6c 65 2f 61 6c 6c 69 67 61 74 6f 72 5f 6c 67 2e 70 6e 67 22 2c 22 70 72 6f 66 69 6c 65 49 64 22 3a 22 22 2c 22 73 69 64 22 3a Data Ascii: 15b343[[24,[5,1730314564433,{"chatImplementation":0,"color":"#C5221F","displayName":"Anonymous Alligator","givenName":"","isActive":true,"isMe":false,"isNew":true,"photoUrl":"//ssl.gstatic.com/docs/common/profile/alligator_lg.png","profileId":"","sid":
2024-10-30 19:40:30 UTC	356	IN	Data Raw: 31 35 64 0d 0a 33 34 35 0a 5b 5b 32 35 2c 5b 35 2c 31 37 33 30 33 31 34 35 36 34 34 37 37 2c 7b 22 63 68 61 74 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 30 2c 22 63 6f 6c 6f 72 22 3a 22 23 43 35 32 32 31 46 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 20 43 68 69 6e 63 68 69 6c 6c 61 22 2c 22 67 69 76 65 6e 4e 61 6d 65 22 3a 22 22 2c 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 69 73 4d 65 22 3a 66 61 6c 73 65 2c 22 69 73 4e 65 77 22 3a 74 72 75 65 2c 22 70 68 6f 74 6f 55 72 6c 22 3a 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 66 69 6c 65 2f 63 68 69 6e 63 68 69 6c 6c 61 5f 6c 67 2e 70 6e 67 22 2c 22 70 72 6f 66 69 6c 65 49 64 22 3a 22 22 2c 22 73 69 64 Data Ascii: 15d345[[25,[5,1730314564477,{"chatImplementation":0,"color":"#C5221F","displayName":"Anonymous Chinchilla","givenName":"","isActive":true,"isMe":false,"isNew":true,"photoUrl":"//ssl.gstatic.com/docs/common/profile/chinchilla_lg.png","profileId":"","sid
2024-10-30 19:40:31 UTC	102	IN	Data Raw: 36 30 0d 0a 39 33 0a 5b 5b 32 36 2c 5b 36 2c 31 37 33 30 33 31 34 35 36 34 34 39 38 2c 7b 22 73 69 64 22 3a 22 32 61 34 62 62 33 38 64 32 30 36 38 33 64 30 65 22 2c 22 75 73 65 72 49 64 22 3a 22 41 4e 4f 4e 59 4d 4f 55 53 5f 30 36 32 38 37 35 31 37 39 31 31 32 35 36 34 35 37 33 31 37 22 7d 5d 5d 5d 0d 0a Data Ascii: 6093[[26,[6,1730314564498,{"sid":"2a4bb38d20683d0e","userId":"ANONYMOUS_06287517911256457317"}]]]
2024-10-30 19:40:35 UTC	195	IN	Data Raw: 62 64 0d 0a 31 38 35 0a 5b 5b 32 37 2c 5b 36 2c 31 37 33 30 33 31 34 35 36 34 35 30 32 2c 7b 22 73 69 64 22 3a 22 36 65 66 34 32 34 63 34 37 39 31 65 37 39 66 38 22 2c 22 75 73 65 72 49 64 22 3a 22 41 4e 4f 4e 59 4d 4f 55 53 5f 30 36 32 38 37 35 31 37 39 31 31 32 35 36 34 35 37 33 31 37 22 7d 5d 5d 2c 5b 32 38 2c 5b 36 2c 31 37 33 30 33 31 34 35 36 34 35 30 33 2c 7b 22 73 69 64 22 3a 22 36 35 35 36 36 39 39 33 63 33 63 61 63 34 33 31 22 2c 22 75 73 65 72 49 64 22 3a 22 41 4e 4f 4e 59 4d 4f 55 53 5f 30 36 32 38 37 35 31 37 39 31 31 32 35 36 34 35 37 33 31 37 22 7d 5d 5d 5d 0d 0a Data Ascii: bd185[[27,[6,1730314564502,{"sid":"6ef424c4791e79f8","userId":"ANONYMOUS_06287517911256457317"}]],[28,[6,1730314564503,{"sid":"65566993c3cac431","userId":"ANONYMOUS_06287517911256457317"}]]]
2024-10-30 19:41:01 UTC	24	IN	Data Raw: 31 32 0d 0a 31 35 0a 5b 5b 32 39 2c 5b 22 6e 6f 6f 70 22 5d 5d 5d 0d 0a Data Ascii: 1215[[29,["noop"]]]

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: bb81791c-801e-00ac-6687-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-17c5cb586f64sw5wh0dfzbdtvw00000000s0000000001xth x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:01 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 50755ed9-801e-00ac-015e-27fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-r197bdfb6b4xfp4mncra29rqkc00000001u000000000xyye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-17c5cb586f672xmrz843mf85fn00000007g0000000000x95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:01 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194001Z-16849878b78fssff8btnns3b1400000008pg00000000vde2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:02 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194002Z-16849878b78fhxrnedubv5byks00000006q000000000z0kx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49879	142.250.184.206	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:02 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:03 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 19:40:03 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:03 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 19:40:03 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194002Z-16849878b78p49s6zkwt11bbkn000000084g00000000e80t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:03 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 25321125-401e-0047-18d5-288597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194003Z-r197bdfb6b4hsj5bywyqk9r2xw0000000a50000000003d1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:04 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:04 UTC	498	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: daa440d4-101e-0028-4cca-2a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194004Z-17c5cb586f659tsm88uwcmn6s4000000010g0000000065t1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 19:40:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:04 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:04 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194004Z-16849878b786fl7gm2qg4r5y7000000008u0000000006zzv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:04 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:04 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194004Z-16849878b78bcpfn2qf7sm6hsn0000000a1g00000000nqct x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:04 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:04 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194004Z-15b8d89586fmhkw429ba5n22m80000000a100000000044b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:04 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:04 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5cde4d2e-001e-0046-6764-2ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194004Z-r197bdfb6b4zbthzeykwgnvx8s000000018000000000eutt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:04 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49901	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:04 UTC	1001	OUT	GET /static/document/client/js/2681390919-client_js_prod_voice.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:04 UTC	787	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 39940 Date: Wed, 30 Oct 2024 19:40:04 GMT Expires: Thu, 30 Oct 2025 19:40:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:04 UTC	591	IN	Data Raw: 46 4a 28 4f 62 62 29 3b 0a 76 61 72 20 43 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 62 6f 64 79 2d 61 63 74 69 76 65 22 2c 44 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 62 6f 64 79 2d 68 6f 76 65 72 22 2c 45 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 66 6f 63 75 73 22 2c 46 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 68 65 6c 70 2d 68 6f 76 65 72 22 2c 47 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 72 65 63 6f 72 64 69 6e 67 22 2c 48 31 76 3d 22 64 6f 63 73 2d 70 61 6c 65 74 74 65 2d 64 69 63 74 61 74 69 6f 6e 22 2c 49 31 76 3d 22 64 6f 63 73 2d 76 6f 69 63 65 2d 62 75 62 62 6c 65 2d 63 6c 6f 73 65 22 2c 4a 31 76 3d 22 64 6f 63 73 2d 76 6f 69 63 65 2d 62 75 Data Ascii: FJ(Obb);var C1v="docs-mic-palette-body-active",D1v="docs-mic-palette-body-hover",E1v="docs-mic-palette-focus",F1v="docs-mic-palette-help-hover",G1v="docs-mic-palette-recording",H1v="docs-palette-dictation",I1v="docs-voice-bubble-close",J1v="docs-voice-bu
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 59 28 31 32 31 35 2c 72 28 29 29 3b 70 36 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 59 28 31 30 39 39 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 74 61 72 67 65 74 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 74 68 69 73 2e 44 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 44 5b 63 5d 3b 64 26 26 64 2e 42 61 28 29 26 26 75 49 28 64 2e 42 61 28 29 2c 22 64 6f 63 73 2d 70 61 6c 65 74 74 65 2d 74 6f 70 22 2c 64 3d 3d 61 29 7d 7d 29 3b 52 52 63 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 49 61 3d 59 28 34 31 32 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 44 2e 48 7d 29 3b 5a 6a 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 49 61 3d 59 28 34 31 31 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: Y(1215,r());p6e.prototype.H=Y(1099,function(a){a=a.target;for(var c=0;c<this.D.length;c++){var d=this.D[c];d&&d.Ba()&&uI(d.Ba(),"docs-palette-top",d==a)}});RRc.prototype.LIa=Y(412,function(){return!!this.D.H});Zjd.prototype.LIa=Y(411,function(){return thi
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 29 22 2c 65 73 5f 45 43 3a 22 45 73 70 2e 20 28 45 63 75 61 64 6f 72 29 22 2c 65 73 5f 45 53 3a 22 45 73 70 2e 20 28 45 73 70 61 5c 75 30 30 66 31 61 29 22 2c 65 73 5f 47 54 3a 22 45 73 70 2e 20 28 47 75 61 74 65 6d 61 6c 61 29 22 2c 65 73 5f 48 4e 3a 22 45 73 70 2e 20 28 48 6f 6e 64 75 72 61 73 29 22 2c 65 73 5f 4d 58 3a 22 45 73 70 2e 20 28 4d 5c 75 30 30 65 39 78 69 63 6f 29 22 2c 65 73 5f 4e 49 3a 22 45 73 70 2e 20 28 4e 69 63 61 72 61 67 75 61 29 22 2c 65 73 5f 50 41 3a 22 45 73 70 2e 20 28 50 61 6e 61 6d 5c 75 30 30 65 31 29 22 2c 65 73 5f 50 45 3a 22 45 73 70 2e 20 28 50 65 72 5c 75 30 30 66 61 29 22 2c 65 73 5f 50 52 3a 22 45 73 70 2e 20 28 50 75 65 72 74 6f 20 52 69 63 6f 29 22 2c 65 73 5f 50 59 3a 22 45 73 70 2e 20 28 50 61 72 61 67 75 61 79 29 Data Ascii: )",es_EC:"Esp. (Ecuador)",es_ES:"Esp. (Espa\u00f1a)",es_GT:"Esp. (Guatemala)",es_HN:"Esp. (Honduras)",es_MX:"Esp. (M\u00e9xico)",es_NI:"Esp. (Nicaragua)",es_PA:"Esp. (Panam\u00e1)",es_PE:"Esp. (Per\u00fa)",es_PR:"Esp. (Puerto Rico)",es_PY:"Esp. (Paraguay)
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 20 61 32 76 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 61 32 76 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 62 32 76 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 58 50 28 61 2c 24 31 76 2c 31 2c 63 32 76 2c 63 29 7d 76 61 72 20 63 32 76 3d 5b 31 2c 32 5d 3b 66 75 6e 63 74 69 6f 6e 20 64 32 76 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 64 32 76 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 65 32 76 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 65 32 76 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 66 32 76 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 2c 35 30 30 29 7d 4a 28 66 32 76 2c 53 29 3b 66 32 76 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 28 74 Data Ascii: nction a2v(a){this.Da=O(a)}J(a2v,S);function b2v(a,c){return XP(a,$1v,1,c2v,c)}var c2v=[1,2];function d2v(a){this.Da=O(a)}J(d2v,S);function e2v(a){this.Da=O(a)}J(e2v,S);function f2v(a){this.Da=O(a,500)}J(f2v,S);f2v.prototype.getError=function(){return Q(t
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 31 70 78 22 20 77 69 64 74 68 3d 22 32 31 70 78 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 79 3d 22 30 70 78 22 20 78 3d 22 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 32 31 20 32 31 22 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 70 61 6c 65 74 74 65 2d 63 6c 6f 73 65 2d 69 63 6f 6e 22 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 35 20 36 2e 34 31 34 20 31 33 2e 35 38 35 20 35 20 31 30 20 38 2e 35 38 36 20 36 2e 34 31 34 20 35 20 35 20 36 2e 34 31 34 20 38 2e 35 38 35 20 31 30 20 35 20 31 33 2e 35 38 36 20 36 2e 34 31 34 20 31 35 20 31 30 20 31 31 2e 34 31 34 20 31 33 2e 35 38 35 20 Data Ascii: /xlink" height="21px" width="21px" version="1.1" y="0px" x="0px" viewBox="0 0 21 21" enable-background="new 0 0 21 21" class="docs-palette-close-icon"><polygon points="15 6.414 13.585 5 10 8.586 6.414 5 5 6.414 8.585 10 5 13.586 6.414 15 10 11.414 13.585
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 74 65 2d 67 72 69 70 70 79 22 2c 63 2e 42 61 28 29 29 3b 61 3d 74 68 69 73 2e 41 67 3d 6e 65 77 20 79 4a 28 61 2c 63 29 3b 63 3d 74 68 69 73 2e 42 68 28 29 3b 61 2e 4f 3d 63 3b 74 68 69 73 2e 58 61 28 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 41 67 2c 46 6b 2c 74 68 69 73 2e 51 43 63 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 41 67 2c 24 66 2c 6a 6d 28 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 2c 74 68 69 73 2c 22 76 22 29 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 76 61 2c 22 66 22 2c 74 68 69 73 2e 52 43 63 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 42 61 28 29 2c 4e 67 2c 74 68 69 73 2e 4e 4e 62 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 4a 51 28 29 2e 42 61 28 29 2c 4e 67 2c 74 68 69 73 2e 4e 4e 62 29 7d 3b 44 2e 4e 4e 62 3d 66 75 6e 63 74 69 Data Ascii: te-grippy",c.Ba());a=this.Ag=new yJ(a,c);c=this.Bh();a.O=c;this.Xa().listen(this.Ag,Fk,this.QCc).listen(this.Ag,$f,jm(this.dispatchEvent,this,"v")).listen(this.va,"f",this.RCc).listen(this.Ba(),Ng,this.NNb).listen(this.JQ().Ba(),Ng,this.NNb)};D.NNb=functi
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 29 3b 65 2e 75 62 28 64 2e 6c 65 61 28 29 2c 61 2e 57 29 3b 69 66 28 65 3d 3d 61 2e 4a 2e 71 61 28 43 50 61 29 29 7b 65 3d 64 2e 6c 65 61 28 29 3b 66 6f 72 28 76 61 72 20 66 3d 31 3b 66 3c 65 3b 66 2b 2b 29 61 2e 4a 2e 71 61 28 43 50 61 29 2e 75 62 28 29 7d 7d 65 6c 73 65 20 78 32 76 28 61 29 3b 61 2e 44 3d 6e 75 6c 6c 3b 74 32 76 28 61 29 3b 72 65 74 75 72 6e 21 21 64 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 77 32 76 28 61 2c 63 29 7b 69 66 28 70 6f 28 63 29 29 69 66 28 72 6f 28 63 2c 22 5c 6e 22 29 29 63 3d 54 33 67 28 63 2c 22 5c 6e 22 29 2c 63 3d 5b 6e 65 77 20 65 67 68 28 61 2e 4a 2e 71 61 28 43 50 61 29 2c 7b 70 61 72 61 6d 65 74 65 72 3a 63 7d 29 5d 2c 63 3d 59 76 28 63 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 59 76 28 6e 75 6c 6c 29 3b 65 6c 73 65 Data Ascii: );e.ub(d.lea(),a.W);if(e==a.J.qa(CPa)){e=d.lea();for(var f=1;f<e;f++)a.J.qa(CPa).ub()}}else x2v(a);a.D=null;t2v(a);return!!d})}function w2v(a,c){if(po(c))if(ro(c,"\n"))c=T3g(c,"\n"),c=[new egh(a.J.qa(CPa),{parameter:c})],c=Yv(c);else return Yv(null);else
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 41 32 76 29 3b 66 75 6e 63 74 69 6f 6e 20 42 32 76 28 61 29 7b 4d 69 62 28 29 2e 6d 65 64 69 61 44 65 76 69 63 65 73 2e 67 65 74 55 73 65 72 4d 65 64 69 61 28 7b 61 75 64 69 6f 3a 21 30 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 4a 2e 70 75 73 68 28 63 29 3b 61 2e 69 73 41 63 74 69 76 65 28 29 26 26 63 2e 67 65 74 41 75 64 69 6f 54 72 61 63 6b 73 28 29 2e 6c 65 6e 67 74 68 21 3d 30 3f 61 2e 4f 2e 73 74 61 72 74 28 61 2e 44 2e 63 72 65 61 74 65 4d 65 64 69 61 53 74 72 65 61 6d 53 6f 75 72 63 65 28 63 29 29 3a 43 32 76 28 61 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 73 74 6f 70 28 29 3b 76 61 72 20 64 3d 61 2e 48 3b 73 77 69 74 63 68 28 63 2e 6e 61 6d 65 29 7b 63 61 73 65 20 71 7a 6c 3a 63 61 73 65 20 4a 39 6b 3a 64 2e 64 69 Data Ascii: A2v);function B2v(a){Mib().mediaDevices.getUserMedia({audio:!0}).then(function(c){a.J.push(c);a.isActive()&&c.getAudioTracks().length!=0?a.O.start(a.D.createMediaStreamSource(c)):C2v(a)},function(c){a.stop();var d=a.H;switch(c.name){case qzl:case J9k:d.di
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 74 63 68 45 76 65 6e 74 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 64 29 29 7d 29 7d 76 61 72 20 4b 32 76 3d 7b 7d 2c 48 32 76 3d 28 4b 32 76 5b 32 5d 3d 22 61 75 64 69 6f 2f 66 6c 61 63 22 2c 4b 32 76 5b 39 5d 3d 22 61 75 64 69 6f 2f 77 65 62 6d 3b 63 6f 64 65 63 73 3d 6f 70 75 73 22 2c 4b 32 76 29 2c 4c 32 76 3d 7b 7d 2c 49 32 76 3d 28 4c 32 76 5b 39 5d 3d 32 34 45 33 2c 4c 32 76 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 32 76 28 61 2c 63 2c 64 2c 65 2c 66 29 7b 45 32 76 2e 63 61 6c 6c 28 74 68 69 73 29 3b 76 61 72 20 67 3d 74 68 69 73 3b 74 68 69 73 2e 52 3d 64 3b 74 68 69 73 2e 4a 3d 65 3b 74 68 69 73 2e 4f 3d 66 3b 76 61 72 20 68 3d 74 68 69 73 2e 4f 2e 5a 68 28 22 76 77 6d 6c 22 29 3b 74 68 69 73 2e 46 3d 61 2e 61 75 64 69 6f 57 6f 72 6b 6c 65 74 2e Data Ascii: tchEvent(new Uint8Array(d))})}var K2v={},H2v=(K2v[2]="audio/flac",K2v[9]="audio/webm;codecs=opus",K2v),L2v={},I2v=(L2v[9]=24E3,L2v);function M2v(a,c,d,e,f){E2v.call(this);var g=this;this.R=d;this.J=e;this.O=f;var h=this.O.Zh("vwml");this.F=a.audioWorklet.
2024-10-30 19:40:04 UTC	1378	IN	Data Raw: 6c 69 6e 65 61 72 31 36 22 2c 64 2c 65 29 7d 2c 66 29 3b 5b 39 2c 32 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 4d 65 64 69 61 52 65 63 6f 72 64 65 72 2e 69 73 54 79 70 65 53 75 70 70 6f 72 74 65 64 28 48 32 76 5b 68 5d 29 26 26 28 67 5b 68 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 47 32 76 28 61 2c 68 29 7d 29 7d 29 3b 72 65 74 75 72 6e 20 67 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 32 76 28 29 7b 74 68 69 73 2e 4a 3d 74 68 69 73 2e 48 3d 74 68 69 73 2e 44 3d 6e 75 6c 6c 7d 51 32 76 2e 70 72 6f 74 6f 74 79 70 65 2e 44 6d 3d 55 6c 28 22 44 22 29 3b 51 32 76 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 28 6e 65 77 20 24 31 76 29 2e 73 65 74 43 6f 6e 66 69 67 28 Data Ascii: linear16",d,e)},f);[9,2].forEach(function(h){MediaRecorder.isTypeSupported(H2v[h])&&(g[h]=function(){return new G2v(a,h)})});return g};function Q2v(){this.J=this.H=this.D=null}Q2v.prototype.Dm=Ul("D");Q2v.prototype.ib=function(){var a=(new $1v).setConfig(

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:05 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194005Z-16849878b78nzcqcd7bed2fb6n0000000100000000003v0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:05 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:05 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194005Z-16849878b7867ttgfbpnfxt44s00000008dg0000000048f2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:40:05 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:05 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 4900665d-501e-0029-5111-29d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194005Z-15b8d89586fqj7k5h9gbd8vs9800000009k000000000kran x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:05 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:05 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194005Z-16849878b78smng4k6nq15r6s40000000a2g0000000037uu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:05 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:05 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:05 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194005Z-16849878b78p49s6zkwt11bbkn000000081g00000000vrqy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:05 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49915	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:05 UTC	721	OUT	GET /static/document/client/js/1526094273-client_js_prod_datetimeresources.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:05 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 164534 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 19:40:01 GMT Expires: Thu, 30 Oct 2025 19:40:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:05 UTC	582	IN	Data Raw: 46 4a 28 54 72 61 29 3b 0a 76 61 72 20 53 36 74 3d 22 5c 75 31 37 61 32 5c 75 31 37 62 36 5c 75 31 37 39 31 5c 75 31 37 62 37 5c 75 31 37 38 66 5c 75 31 37 64 32 5c 75 31 37 39 39 22 2c 54 36 74 3d 22 5c 75 31 37 61 32 5c 75 31 37 38 34 5c 75 31 37 64 32 5c 75 31 37 38 32 5c 75 31 37 62 36 5c 75 31 37 39 61 22 2c 55 36 74 3d 22 5c 75 31 37 39 63 5c 75 31 37 62 37 5c 75 31 37 38 35 5c 75 31 37 64 32 5c 75 31 37 38 36 5c 75 31 37 62 37 5c 75 31 37 38 30 5c 75 31 37 62 36 22 2c 56 36 74 3d 22 5c 75 31 37 39 38 5c 75 31 37 62 37 5c 75 31 37 39 30 5c 75 31 37 62 62 5c 75 31 37 39 33 5c 75 31 37 62 36 22 2c 57 36 74 3d 22 5c 75 31 37 38 30 5c 75 31 37 62 62 5c 75 31 37 39 38 5c 75 31 37 64 32 5c 75 31 37 39 37 5c 75 31 37 63 38 22 2c 58 36 74 3d 22 5c 75 31 37 Data Ascii: FJ(Tra);var S6t="\u17a2\u17b6\u1791\u17b7\u178f\u17d2\u1799",T6t="\u17a2\u1784\u17d2\u1782\u17b6\u179a",U6t="\u179c\u17b7\u1785\u17d2\u1786\u17b7\u1780\u17b6",V6t="\u1798\u17b7\u1790\u17bb\u1793\u17b6",W6t="\u1780\u17bb\u1798\u17d2\u1797\u17c8",X6t="\u17
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 34 5c 75 31 30 30 34 5c 75 31 30 33 61 5c 75 31 30 33 39 5c 75 31 30 30 32 5c 75 31 30 31 34 5c 75 31 30 33 64 5c 75 31 30 33 31 22 2c 64 37 74 3d 22 5c 75 31 30 30 35 5c 75 31 30 31 30 5c 75 31 30 32 66 5c 75 31 30 31 30 5c 75 31 30 33 39 5c 75 31 30 31 31 20 5c 75 31 30 31 65 5c 75 31 30 32 66 5c 75 31 30 33 36 5c 75 31 30 33 38 5c 75 31 30 31 63 5c 75 31 30 31 35 5c 75 31 30 31 30 5c 75 31 30 33 61 22 2c 65 37 74 3d 22 5c 75 31 30 30 30 5c 75 31 30 33 63 5c 75 31 30 32 63 5c 75 31 30 31 65 5c 75 31 30 31 35 5c 75 31 30 31 30 5c 75 31 30 33 31 5c 75 31 30 33 38 22 2c 66 37 74 3d 22 5c 75 30 64 62 36 5c 75 30 64 63 61 5c 75 32 30 30 64 5c 75 30 64 62 62 5c 75 30 64 63 34 5c 75 30 64 63 33 5c 75 30 64 63 61 5c 75 30 64 62 34 5c 75 30 64 61 64 5c 75 30 64 Data Ascii: 4\u1004\u103a\u1039\u1002\u1014\u103d\u1031",d7t="\u1005\u1010\u102f\u1010\u1039\u1011 \u101e\u102f\u1036\u1038\u101c\u1015\u1010\u103a",e7t="\u1000\u103c\u102c\u101e\u1015\u1010\u1031\u1038",f7t="\u0db6\u0dca\u200d\u0dbb\u0dc4\u0dc3\u0dca\u0db4\u0dad\u0d
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 30 22 2c 7a 37 74 3d 22 5c 75 30 39 32 61 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 33 32 5c 75 30 39 34 62 20 5c 75 30 39 32 34 5c 75 30 39 34 64 5c 75 30 39 33 30 5c 75 30 39 34 38 5c 75 30 39 32 65 5c 75 30 39 33 65 5c 75 30 39 33 38 5c 75 30 39 33 66 5c 75 30 39 31 35 22 2c 0a 41 37 74 3d 22 5c 75 30 39 32 38 5c 75 30 39 34 62 5c 75 30 39 32 64 5c 75 30 39 34 37 5c 75 30 39 32 65 5c 75 30 39 34 64 5c 75 30 39 32 63 5c 75 30 39 33 30 22 2c 42 37 74 3d 22 5c 75 30 39 32 36 5c 75 30 39 34 62 5c 75 30 39 33 38 5c 75 30 39 34 64 5c 75 30 39 33 30 5c 75 30 39 34 62 20 5c 75 30 39 32 34 5c 75 30 39 34 64 5c 75 30 39 33 30 5c 75 30 39 34 38 5c 75 30 39 32 65 5c 75 30 39 33 65 5c 75 30 39 33 38 5c 75 30 39 33 66 5c 75 30 39 31 35 22 2c 43 37 74 3d 22 5c Data Ascii: 0",z7t="\u092a\u0939\u093f\u0932\u094b \u0924\u094d\u0930\u0948\u092e\u093e\u0938\u093f\u0915",A7t="\u0928\u094b\u092d\u0947\u092e\u094d\u092c\u0930",B7t="\u0926\u094b\u0938\u094d\u0930\u094b \u0924\u094d\u0930\u0948\u092e\u093e\u0938\u093f\u0915",C7t="\
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 37 5c 75 30 36 32 36 5c 75 30 36 63 63 22 2c 24 37 74 3d 22 5c 75 30 36 32 63 5c 75 30 36 34 35 5c 75 30 36 33 39 5c 75 30 36 33 31 5c 75 30 36 32 37 5c 75 30 36 32 61 22 2c 61 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 61 39 5c 75 30 36 32 61 5c 75 30 36 34 38 5c 75 30 36 32 38 5c 75 30 36 33 31 22 2c 62 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 65 5c 75 30 36 34 35 5c 75 30 36 34 61 5c 75 30 36 33 33 22 2c 63 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 63 5c 75 30 36 34 35 5c 75 30 36 33 39 5c 75 30 36 32 39 22 2c 64 38 74 3d 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 62 5c 75 30 36 34 34 5c 75 30 36 32 37 5c 75 30 36 32 62 5c 75 30 36 32 37 5c 75 30 36 32 31 22 2c 65 38 74 3d 22 5c 75 30 36 32 37 5c 75 Data Ascii: 7\u0626\u06cc",$7t="\u062c\u0645\u0639\u0631\u0627\u062a",a8t="\u0627\u06a9\u062a\u0648\u0628\u0631",b8t="\u0627\u0644\u062e\u0645\u064a\u0633",c8t="\u0627\u0644\u062c\u0645\u0639\u0629",d8t="\u0627\u0644\u062b\u0644\u0627\u062b\u0627\u0621",e8t="\u0627\u
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 79 2d 4d 4d 22 2c 4d 38 74 3d 22 79 20 4d 4d 4d 4d 20 64 2c 20 45 45 45 45 22 2c 4e 38 74 3d 22 79 20 4d 4d 4d 4d 22 2c 4f 38 74 3d 22 79 20 4d 4d 4d 20 64 2c 20 45 45 45 22 2c 50 38 74 3d 22 79 20 4d 4d 4d 20 64 22 2c 51 38 74 3d 22 76 69 65 72 6e 65 73 22 2c 52 38 74 3d 22 76 65 6e 64 72 65 64 69 22 2c 53 38 74 3d 22 76 65 6e 2e 22 2c 54 38 74 3d 22 74 6f 72 73 64 61 67 22 2c 55 38 74 3d 22 74 69 72 73 64 61 67 22 2c 56 38 74 3d 22 74 65 72 5c 75 30 30 65 37 61 2d 66 65 69 72 61 22 2c 57 38 74 3d 22 73 5c 75 30 30 66 38 6e 64 61 67 22 2c 58 38 74 3d 22 73 5c 75 30 30 65 31 62 61 64 6f 22 2c 59 38 74 3d 22 73 6f 62 6f 74 61 22 2c 5a 38 74 3d 22 73 65 78 74 61 2d 66 65 69 72 61 22 2c 24 38 74 3d 22 73 65 74 65 6d 62 72 6f 22 2c 61 39 74 3d 22 73 65 74 2e Data Ascii: y-MM",M8t="y MMMM d, EEEE",N8t="y MMMM",O8t="y MMM d, EEE",P8t="y MMM d",Q8t="viernes",R8t="vendredi",S8t="ven.",T8t="torsdag",U8t="tirsdag",V8t="ter\u00e7a-feira",W8t="s\u00f8ndag",X8t="s\u00e1bado",Y8t="sobota",Z8t="sexta-feira",$8t="setembro",a9t="set.
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 22 2c 78 24 74 3d 22 64 64 2f 4d 4d 2f 79 22 2c 79 24 74 3d 22 64 64 2f 4d 4d 22 2c 7a 24 74 3d 22 64 64 2e 4d 4d 2e 79 79 22 2c 41 24 74 3d 22 64 64 2e 4d 4d 2e 79 22 2c 42 24 74 3d 22 64 64 2e 4d 4d 22 2c 43 24 74 3d 22 64 64 2e 20 4d 4d 4d 4d 22 2c 70 38 3d 22 64 64 20 4d 4d 4d 4d 22 2c 44 24 74 3d 22 64 64 20 27 64 65 27 20 4d 4d 4d 4d 22 2c 0a 45 24 74 3d 22 64 2f 4d 2f 79 79 22 2c 71 38 3d 22 64 2f 4d 22 2c 46 24 74 3d 22 64 2e 20 4d 4d 4d 4d 20 79 22 2c 47 24 74 3d 22 64 2e 20 4d 4d 4d 4d 22 2c 48 24 74 3d 22 64 2e 20 4d 4d 4d 2c 20 48 48 3a 6d 6d 20 7a 7a 7a 7a 22 2c 49 24 74 3d 22 64 2e 20 4d 4d 4d 20 79 2e 22 2c 4a 24 74 3d 22 64 2e 20 4d 4d 4d 20 79 22 2c 4b 24 74 3d 22 64 2e 20 4d 4d 4d 20 48 48 3a 6d 6d 20 7a 7a 7a 7a 22 2c 4c 24 74 3d 22 64 Data Ascii: ",x$t="dd/MM/y",y$t="dd/MM",z$t="dd.MM.yy",A$t="dd.MM.y",B$t="dd.MM",C$t="dd. MMMM",p8="dd MMMM",D$t="dd 'de' MMMM",E$t="d/M/yy",q8="d/M",F$t="d. MMMM y",G$t="d. MMMM",H$t="d. MMM, HH:mm zzzz",I$t="d. MMM y.",J$t="d. MMM y",K$t="d. MMM HH:mm zzzz",L$t="d
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 48 3a 6d 6d 3a 73 73 20 7a 22 2c 54 61 75 3d 22 48 3a 6d 6d 3a 73 73 20 28 7a 7a 7a 7a 29 22 2c 55 61 75 3d 22 48 3a 6d 6d 3a 73 73 22 2c 56 61 75 3d 22 48 3a 6d 6d 22 2c 57 61 75 3d 22 47 20 79 22 2c 58 61 75 3d 22 46 65 62 72 75 61 72 69 22 2c 59 61 75 3d 22 45 45 45 45 2c 20 64 2e 20 4d 4d 4d 4d 20 79 2e 22 2c 5a 61 75 3d 22 45 45 45 45 2c 20 64 2e 20 4d 4d 4d 4d 20 79 22 2c 24 61 75 3d 22 45 45 45 45 2c 20 64 20 4d 4d 4d 4d 2c 20 79 22 2c 61 62 75 3d 22 45 45 45 45 2c 20 64 20 4d 4d 4d 4d 20 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 62 62 75 3d 22 45 45 45 45 2c 20 64 20 4d 4d 4d 4d 20 79 22 2c 63 62 75 3d 22 45 45 45 45 2c 20 64 20 27 64 65 27 20 4d 4d 4d 4d 20 27 64 65 27 20 79 22 2c 64 62 75 3d 22 45 45 45 45 20 64 2e 20 4d 4d 4d 4d 20 Data Ascii: H:mm:ss z",Tau="H:mm:ss (zzzz)",Uau="H:mm:ss",Vau="H:mm",Wau="G y",Xau="Februari",Yau="EEEE, d. MMMM y.",Zau="EEEE, d. MMMM y",$au="EEEE, d MMMM, y",abu="EEEE, d MMMM y\u202f'\u0433'.",bbu="EEEE, d MMMM y",cbu="EEEE, d 'de' MMMM 'de' y",dbu="EEEE d. MMMM
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 24 74 7d 2c 62 65 3a 7b 73 6a 3a 22 79 22 2c 4e 6a 3a 4a 38 74 2c 0a 52 69 3a 22 4c 4c 4c 20 79 22 2c 59 69 3a 46 61 75 2c 4f 6a 3a 43 61 75 2c 67 69 3a 6d 5f 2c 55 69 3a 70 38 2c 65 6a 3a 22 64 2e 4d 22 2c 51 69 3a 73 38 2c 4b 68 3a 74 38 2c 58 69 3a 77 38 2c 71 6a 3a 6a 62 75 2c 6d 6a 3a 22 64 22 2c 54 6a 3a 55 24 74 7d 2c 62 67 3a 7b 73 6a 3a 22 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 4e 6a 3a 4a 38 74 2c 52 69 3a 22 4d 4d 2e 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 59 69 3a 22 4d 4d 4d 4d 20 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 4f 6a 3a 22 4d 4d 2e 79 5c 75 32 30 32 66 27 5c 75 30 34 33 33 27 2e 22 2c 67 69 3a 22 64 2e 4d 4d 22 2c 55 69 3a 73 38 2c 65 6a 3a 22 64 2e 4d 4d 22 2c 51 69 3a 73 38 2c 4b 68 3a 22 Data Ascii: $t},be:{sj:"y",Nj:J8t,Ri:"LLL y",Yi:Fau,Oj:Cau,gi:m_,Ui:p8,ej:"d.M",Qi:s8,Kh:t8,Xi:w8,qj:jbu,mj:"d",Tj:U$t},bg:{sj:"y\u202f'\u0433'.",Nj:J8t,Ri:"MM.y\u202f'\u0433'.",Yi:"MMMM y\u202f'\u0433'.",Oj:"MM.y\u202f'\u0433'.",gi:"d.MM",Ui:s8,ej:"d.MM",Qi:s8,Kh:"
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 3a 22 4d 2f 79 22 2c 67 69 3a 6d 5f 2c 55 69 3a 44 24 74 2c 65 6a 3a 71 38 2c 51 69 3a 61 61 75 2c 4b 68 3a 74 38 2c 58 69 3a 77 38 2c 71 6a 3a 6a 62 75 2c 6d 6a 3a 22 64 22 2c 54 6a 3a 56 24 74 7d 2c 65 73 5f 34 31 39 3a 7b 73 6a 3a 22 79 22 2c 4e 6a 3a 79 50 2c 52 69 3a 51 4e 2c 59 69 3a 79 61 75 2c 4f 6a 3a 22 4d 2f 79 22 2c 67 69 3a 6d 5f 2c 55 69 3a 44 24 74 2c 65 6a 3a 71 38 2c 51 69 3a 61 61 75 2c 4b 68 3a 74 38 2c 58 69 3a 77 38 2c 71 6a 3a 6a 62 75 2c 0a 6d 6a 3a 22 64 22 2c 54 6a 3a 53 24 74 7d 2c 65 74 3a 7b 73 6a 3a 22 79 22 2c 4e 6a 3a 79 50 2c 52 69 3a 51 4e 2c 59 69 3a 52 4e 2c 4f 6a 3a 43 61 75 2c 67 69 3a 4c 24 74 2c 55 69 3a 43 24 74 2c 65 6a 3a 22 64 2e 4d 22 2c 51 69 3a 47 24 74 2c 4b 68 3a 4a 24 74 2c 58 69 3a 68 62 75 2c 71 6a 3a 22 Data Ascii: :"M/y",gi:m_,Ui:D$t,ej:q8,Qi:aau,Kh:t8,Xi:w8,qj:jbu,mj:"d",Tj:V$t},es_419:{sj:"y",Nj:yP,Ri:QN,Yi:yau,Oj:"M/y",gi:m_,Ui:D$t,ej:q8,Qi:aau,Kh:t8,Xi:w8,qj:jbu,mj:"d",Tj:S$t},et:{sj:"y",Nj:yP,Ri:QN,Yi:RN,Oj:Cau,gi:L$t,Ui:C$t,ej:"d.M",Qi:G$t,Kh:J$t,Xi:hbu,qj:"
2024-10-30 19:40:05 UTC	1378	IN	Data Raw: 2c 65 6a 3a 71 38 2c 51 69 3a 73 38 2c 4b 68 3a 74 38 2c 58 69 3a 77 38 2c 71 6a 3a 6a 62 75 2c 6d 6a 3a 22 64 22 2c 54 6a 3a 54 24 74 7d 2c 68 72 3a 7b 73 6a 3a 22 79 2e 22 2c 4e 6a 3a 22 79 2e 20 47 22 2c 52 69 3a 22 4c 4c 4c 20 79 2e 22 2c 59 69 3a 22 4c 4c 4c 4c 20 79 2e 22 2c 4f 6a 3a 22 4d 4d 2e 20 79 2e 22 2c 67 69 3a 4c 24 74 2c 55 69 3a 43 24 74 2c 65 6a 3a 22 64 64 2e 20 4d 4d 2e 22 2c 51 69 3a 47 24 74 2c 4b 68 3a 49 24 74 2c 58 69 3a 68 62 75 2c 71 6a 3a 66 62 75 2c 6d 6a 3a 22 64 2e 22 2c 54 6a 3a 4b 24 74 7d 2c 68 75 3a 7b 73 6a 3a 22 79 2e 22 2c 4e 6a 3a 22 47 20 79 2e 22 2c 52 69 3a 22 79 2e 20 4d 4d 4d 22 2c 59 69 3a 22 79 2e 20 4d 4d 4d 4d 22 2c 4f 6a 3a 22 79 2e 20 4d 4d 2e 22 2c 67 69 3a 22 4d 4d 4d 20 64 2e 22 2c 55 69 3a 22 4d 4d 4d Data Ascii: ,ej:q8,Qi:s8,Kh:t8,Xi:w8,qj:jbu,mj:"d",Tj:T$t},hr:{sj:"y.",Nj:"y. G",Ri:"LLL y.",Yi:"LLLL y.",Oj:"MM. y.",gi:L$t,Ui:C$t,ej:"dd. MM.",Qi:G$t,Kh:I$t,Xi:hbu,qj:fbu,mj:"d.",Tj:K$t},hu:{sj:"y.",Nj:"G y.",Ri:"y. MMM",Yi:"y. MMMM",Oj:"y. MM.",gi:"MMM d.",Ui:"MMM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49921	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:06 UTC	1009	OUT	GET /static/document/client/js/3278450690-client_js_prod_kix_approvals.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:06 UTC	786	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 7875 Date: Wed, 30 Oct 2024 19:40:06 GMT Expires: Thu, 30 Oct 2025 19:40:06 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:06 UTC	592	IN	Data Raw: 46 4a 28 74 5f 61 29 3b 0a 76 61 72 20 4d 67 74 3d 22 64 6f 63 73 2d 61 70 70 72 6f 76 61 6c 73 2d 74 6f 61 73 74 2d 72 65 6c 6f 61 64 22 2c 4e 67 74 3d 22 64 6f 63 73 2d 61 70 70 72 6f 76 61 6c 73 2d 74 6f 61 73 74 2d 75 6e 6c 6f 63 6b 22 2c 4f 67 74 3d 22 65 64 69 74 6f 72 41 70 70 72 6f 76 61 6c 73 4f 6e 62 6f 61 72 64 22 2c 50 67 74 3d 22 75 6e 6c 6f 63 6b 65 64 22 3b 66 75 6e 63 74 69 6f 6e 20 51 67 74 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 51 67 74 2c 53 29 3b 44 3d 51 67 74 2e 70 72 6f 74 6f 74 79 70 65 3b 44 2e 67 65 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 70 28 74 68 69 73 2c 31 29 7d 3b 44 2e 58 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 71 28 74 68 69 73 2c 31 2c 61 29 7d 3b Data Ascii: FJ(t_a);var Mgt="docs-approvals-toast-reload",Ngt="docs-approvals-toast-unlock",Ogt="editorApprovalsOnboard",Pgt="unlocked";function Qgt(a){this.Da=O(a)}J(Qgt,S);D=Qgt.prototype;D.getId=function(){return Mp(this,1)};D.Xc=function(a){return kq(this,1,a)};
2024-10-30 19:40:06 UTC	1378	IN	Data Raw: 73 3a 31 2c 61 70 70 72 6f 76 65 64 3a 32 2c 64 65 63 6c 69 6e 65 64 3a 34 2c 63 61 6e 63 65 6c 6c 65 64 3a 33 2c 73 74 61 74 75 73 55 6e 73 70 65 63 69 66 69 65 64 3a 30 2c 61 72 74 69 66 61 63 74 73 50 65 6e 64 69 6e 67 3a 35 2c 66 61 69 6c 65 64 3a 36 7d 2c 56 67 74 3d 7b 64 65 63 69 73 69 6f 6e 55 6e 73 70 65 63 69 66 69 65 64 3a 30 2c 6e 6f 44 65 63 69 73 69 6f 6e 3a 31 2c 61 70 70 72 6f 76 65 64 3a 32 2c 64 65 63 6c 69 6e 65 64 3a 33 7d 2c 57 67 74 3d 7b 74 79 70 65 55 6e 73 70 65 63 69 66 69 65 64 3a 30 2c 63 6f 6e 74 65 6e 74 52 65 76 69 65 77 3a 31 2c 65 53 69 67 6e 61 74 75 72 65 3a 32 2c 61 6c 69 67 6e 6d 65 6e 74 3a 33 7d 2c 58 67 74 3d 7b 66 61 69 6c 75 72 65 52 65 61 73 6f 6e 55 6e 73 70 65 63 69 66 69 65 64 3a 30 2c 61 72 74 69 66 61 63 74 Data Ascii: s:1,approved:2,declined:4,cancelled:3,statusUnspecified:0,artifactsPending:5,failed:6},Vgt={decisionUnspecified:0,noDecision:1,approved:2,declined:3},Wgt={typeUnspecified:0,contentReview:1,eSignature:2,alignment:3},Xgt={failureReasonUnspecified:0,artifact
2024-10-30 19:40:06 UTC	1378	IN	Data Raw: 2f 6c 61 74 65 73 74 2c 69 74 65 6d 73 2f 69 6e 69 74 69 61 74 6f 72 2c 69 74 65 6d 73 2f 74 79 70 65 2c 69 74 65 6d 73 2f 66 61 69 6c 75 72 65 52 65 61 73 6f 6e 22 7d 29 2c 54 67 74 28 63 52 28 28 6e 65 77 20 62 52 29 2e 58 63 28 61 2e 44 2e 55 63 28 29 29 2c 61 2e 44 2e 4f 29 29 29 2c 33 29 2e 73 74 61 72 74 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5a 67 74 28 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 31 22 29 3b 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 31 22 29 3b 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 68 74 28 61 29 7b 72 65 74 75 72 6e 28 62 61 68 28 29 2c 24 24 67 29 2e 67 65 74 28 61 2c 33 32 2c 76 6f 69 64 20 30 29 Data Ascii: /latest,items/initiator,items/type,items/failureReason"}),Tgt(cR((new bR).Xc(a.D.Uc()),a.D.O))),3).start().then(function(e){return Zgt(e)},function(){throw Error("d1");})},function(){throw Error("d1");})}function aht(a){return(bah(),$$g).get(a,32,void 0)
2024-10-30 19:40:06 UTC	1378	IN	Data Raw: 20 61 3d 74 68 69 73 3b 42 53 2e 70 72 6f 74 6f 74 79 70 65 2e 52 61 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 58 61 28 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2c 72 4f 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 6b 65 79 3d 3d 3d 51 63 3f 28 61 2e 63 6c 6f 73 65 28 29 2c 61 2e 44 26 26 61 2e 44 28 29 29 3a 63 2e 6b 65 79 3d 3d 3d 6c 6a 26 26 28 61 2e 4c 61 28 21 31 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 41 69 22 29 2c 61 2e 44 73 26 26 61 2e 44 73 2e 63 61 6c 6c 62 61 63 6b 28 29 2c 61 2e 44 26 26 61 2e 44 28 29 29 7d 29 7d 3b 0a 65 68 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 4c 61 28 21 31 29 3b 74 68 69 73 2e 44 73 26 26 74 68 69 73 2e 44 73 2e 63 61 6e 63 65 6c 28 Data Ascii: a=this;BS.prototype.Ra.call(this);this.Xa().listen(this,rO,function(c){c.key===Qc?(a.close(),a.D&&a.D()):c.key===lj&&(a.La(!1),a.dispatchEvent("Ai"),a.Ds&&a.Ds.callback(),a.D&&a.D())})};eht.prototype.close=function(){this.La(!1);this.Ds&&this.Ds.cancel(
2024-10-30 19:40:06 UTC	1378	IN	Data Raw: 61 73 65 69 74 65 6d 2d 63 68 69 70 2d 63 6f 6e 74 65 6e 74 22 29 2b 51 4d 2b 56 28 22 64 72 69 76 65 4c 6f 63 6b 69 6e 67 44 69 61 6c 6f 67 62 61 73 65 69 74 65 6d 2d 63 68 69 70 2d 69 63 6f 6e 22 29 2b 49 4d 2b 56 28 70 53 28 64 29 29 2b 52 4d 2b 56 28 22 64 72 69 76 65 4c 6f 63 6b 69 6e 67 44 69 61 6c 6f 67 62 61 73 65 69 74 65 6d 2d 63 68 69 70 2d 74 69 74 6c 65 22 29 2b 0a 6b 2b 6c 53 28 63 29 2b 64 49 66 29 2b 64 4e 29 3b 72 65 74 75 72 6e 20 55 28 66 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 68 74 28 61 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 65 68 74 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 63 2c 67 3d 3d 3d 76 6f 69 64 20 30 3f 72 28 29 3a 67 2c 64 29 3b 74 68 69 73 2e 50 43 61 3d 66 7c 7c 6e 75 6c 6c 3b 74 68 69 73 2e 6f 69 62 3d 65 7c 7c 6e 75 6c 6c 3b Data Ascii: aseitem-chip-content")+QM+V("driveLockingDialogbaseitem-chip-icon")+IM+V(pS(d))+RM+V("driveLockingDialogbaseitem-chip-title")+k+lS(c)+dIf)+dN);return U(f)};function hht(a,c,d,e,f,g){eht.call(this,a,c,g===void 0?r():g,d);this.PCa=f\|\|null;this.oib=e\|\|null;
2024-10-30 19:40:06 UTC	1378	IN	Data Raw: 55 62 28 29 2c 74 68 69 73 2e 44 2e 67 65 74 4d 69 6d 65 54 79 70 65 28 29 2c 76 6f 69 64 20 30 2c 74 68 69 73 2e 44 2e 52 21 3d 6e 75 6c 6c 26 26 77 71 28 74 68 69 73 2e 44 2e 52 2c 31 33 29 3f 74 68 69 73 2e 44 2e 52 2e 67 65 74 54 79 70 65 28 29 3a 6e 75 6c 6c 2c 74 68 69 73 2e 44 2e 52 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 44 2e 52 2e 42 6d 28 29 3f 74 68 69 73 2e 44 2e 52 2e 67 65 74 53 74 61 74 75 73 28 29 3a 6e 75 6c 6c 29 3b 74 68 69 73 2e 78 61 28 74 68 69 73 2e 46 29 3b 74 68 69 73 2e 76 61 2e 6a 6b 28 74 68 69 73 2e 46 29 3b 74 68 69 73 2e 77 61 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 46 2c 22 41 69 22 2c 74 68 69 73 2e 4d 61 29 3b 74 68 69 73 2e 46 2e 4c 61 28 21 30 29 7d 3b 0a 69 68 74 2e 70 72 6f 74 6f 74 79 70 65 2e 48 62 3d 66 75 6e 63 74 Data Ascii: Ub(),this.D.getMimeType(),void 0,this.D.R!=null&&wq(this.D.R,13)?this.D.R.getType():null,this.D.R!=null&&this.D.R.Bm()?this.D.R.getStatus():null);this.xa(this.F);this.va.jk(this.F);this.wa.listen(this.F,"Ai",this.Ma);this.F.La(!0)};iht.prototype.Hb=funct
2024-10-30 19:40:06 UTC	393	IN	Data Raw: 45 28 61 2e 57 2c 6e 65 77 20 77 4b 28 67 75 61 2c 30 29 2c 67 75 61 29 3b 76 61 72 20 63 3d 47 45 28 61 2e 57 2c 67 75 61 29 3b 61 2e 41 61 2e 62 64 28 61 2e 48 2e 71 61 28 59 74 61 29 2c 78 78 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 2e 48 3b 64 2e 71 61 28 59 74 61 29 2e 78 5f 28 29 26 26 63 2e 73 65 74 56 61 6c 75 65 28 4d 61 74 68 2e 6d 69 6e 28 63 2e 67 65 74 56 61 6c 75 65 28 29 2b 31 2c 33 29 29 3b 62 68 74 28 63 2c 64 29 7d 29 3b 62 68 74 28 63 2c 61 2e 48 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 68 74 28 29 7b 44 4a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 4a 28 6f 68 74 2c 44 4a 29 3b 6f 68 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 72 28 29 3b 6f 68 74 2e 70 72 6f 74 6f 74 79 Data Ascii: E(a.W,new wK(gua,0),gua);var c=GE(a.W,gua);a.Aa.bd(a.H.qa(Yta),xx,function(){var d=a.H;d.qa(Yta).x_()&&c.setValue(Math.min(c.getValue()+1,3));bht(c,d)});bht(c,a.H)};function oht(){DJ.apply(this,arguments)}J(oht,DJ);oht.prototype.initialize=r();oht.prototy

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:06 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:06 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5af050aa-401e-000a-36a7-2a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194006Z-r197bdfb6b4zbthzeykwgnvx8s000000017000000000k4zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:06 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49925	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:06 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:06 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e113be9f-801e-0035-547f-2a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194006Z-r197bdfb6b4cnxt4mv5f3apubw0000000140000000008fph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:06 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:06 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5feeb856-001e-008d-0ae8-28d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194006Z-15b8d89586fcvr6p5956n5d0rc0000000eqg000000004829 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:06 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:06 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:06 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 5926a802-601e-0032-207f-2aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194006Z-15b8d89586fst84kttks1s2css000000024g00000000bn3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:06 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:06 UTC	498	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9f4f074d-601e-00ab-77c7-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194006Z-17c5cb586f67hfgj2durhqcxk800000007fg000000004x8b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 19:40:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49934	142.250.74.196	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:06 UTC	985	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:07 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Wed, 30 Oct 2024 19:40:06 GMT Expires: Wed, 30 Oct 2024 19:40:06 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:07 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 Data Ascii: /E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC
2024-10-30 19:40:07 UTC	1085	IN	Data Raw: d1 32 23 1c 00 ad 4b 7d 21 37 c0 72 a7 aa c3 51 27 9d 0b b8 a7 68 d0 ee ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa Data Ascii: 2#K}!7rQ'hP7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:07 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194007Z-15b8d89586fvpb59307bn2rcac00000003k000000000dkyb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:07 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: e05d2f30-201e-006e-17a7-2abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194007Z-r197bdfb6b4cnxt4mv5f3apubw000000011000000000mzt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:07 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 6c6fa777-201e-003c-1958-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194007Z-17c5cb586f62blg5ss55p9d6fn00000009k0000000001m1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49940	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:07 UTC	1010	OUT	GET /static/document/client/js/358792001-client_js_prod_peoplehovercard.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:07 UTC	787	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 23351 Date: Wed, 30 Oct 2024 19:40:07 GMT Expires: Thu, 30 Oct 2025 19:40:07 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:07 UTC	591	IN	Data Raw: 46 4a 28 77 33 61 29 3b 0a 76 61 72 20 78 55 75 3d 22 43 5f 5f 48 43 5f 39 34 32 35 33 32 32 39 22 2c 79 55 75 3d 22 49 5f 5f 48 43 5f 39 34 32 35 33 32 32 39 22 2c 7a 55 75 3d 22 4e 6f 20 65 6d 61 69 6c 20 64 61 74 61 20 66 6f 75 6e 64 20 69 6e 20 68 61 6e 64 6c 65 72 49 6e 70 75 74 20 66 6f 72 20 45 76 65 6e 74 73 2e 43 61 6c 65 6e 64 61 72 3a 20 22 2c 41 55 75 3d 22 5f 5f 48 4d 5f 31 37 33 35 38 34 30 31 39 22 2c 42 55 75 3d 22 62 6f 71 53 6f 63 69 61 6c 70 65 6f 70 6c 65 68 6f 76 65 72 63 61 72 64 56 32 48 6f 76 65 72 63 61 72 64 41 6e 69 6d 61 74 69 6e 67 22 2c 43 55 75 3d 22 62 75 67 61 6e 69 7a 65 72 2d 73 79 73 74 65 6d 2b 22 2c 44 55 75 3d 22 64 6f 63 73 48 65 61 64 65 72 43 6f 6e 66 69 67 22 2c 45 55 75 3d 22 66 6f 72 63 65 48 69 64 65 22 2c 46 Data Ascii: FJ(w3a);var xUu="C__HC_94253229",yUu="I__HC_94253229",zUu="No email data found in handlerInput for Events.Calendar: ",AUu="__HM_173584019",BUu="boqSocialpeoplehovercardV2HovercardAnimating",CUu="buganizer-system+",DUu="docsHeaderConfig",EUu="forceHide",F
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 4e 55 75 2c 53 29 3b 44 3d 4e 55 75 2e 70 72 6f 74 6f 74 79 70 65 3b 44 2e 67 65 74 4d 65 74 61 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 28 74 68 69 73 2c 4d 55 75 2c 31 29 7d 3b 44 2e 67 65 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 70 28 74 68 69 73 2c 32 29 7d 3b 44 2e 73 65 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 71 28 74 68 69 73 2c 32 2c 61 29 7d 3b 44 2e 67 65 74 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 70 28 74 68 69 73 2c 33 29 7d 3b 44 2e 79 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 71 28 74 68 69 73 2c 33 2c 61 29 7d 3b 66 75 6e 63 74 69 6f 6e Data Ascii: his.Da=O(a)}J(NUu,S);D=NUu.prototype;D.getMetadata=function(){return Q(this,MUu,1)};D.getValue=function(){return Mp(this,2)};D.setValue=function(a){return kq(this,2,a)};D.getType=function(){return Mp(this,3)};D.yc=function(a){return kq(this,3,a)};function
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 21 30 29 2c 74 73 28 61 2e 44 2c 31 29 2c 61 2e 48 2e 6e 65 78 74 28 7b 74 79 70 65 3a 30 7d 29 29 3a 53 38 28 4b 55 75 29 7d 7d 65 6c 73 65 20 61 2e 44 3f 28 61 2e 44 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 42 55 75 29 2c 75 73 28 61 2e 44 2c 21 30 29 2c 61 2e 48 2e 6e 65 78 74 28 7b 74 79 70 65 3a 30 7d 29 29 3a 53 38 28 4b 55 75 29 7d 66 75 6e 63 74 69 6f 6e 20 56 55 75 28 61 29 7b 76 61 72 20 63 3d 4e 74 62 28 61 29 3b 61 3d 61 2e 43 6e 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 66 73 28 63 2e 79 2b 31 32 2c 63 2e 78 2b 61 2e 77 69 64 74 68 2d 31 32 2c 63 2e 79 2b 61 2e 68 65 69 67 68 74 2d 31 32 2c 63 2e 78 2b 31 32 29 7d 66 75 6e 63 74 69 6f 6e 20 55 55 75 28 61 2c 63 2c 64 2c 65 2c 66 29 7b 66 3d 66 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 Data Ascii: !0),ts(a.D,1),a.H.next({type:0})):S8(KUu)}}else a.D?(a.D.classList.remove(BUu),us(a.D,!0),a.H.next({type:0})):S8(KUu)}function VUu(a){var c=Ntb(a);a=a.Cn();return new fs(c.y+12,c.x+a.width-12,c.y+a.height-12,c.x+12)}function UUu(a,c,d,e,f){f=f===void 0?!1
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 3b 61 3d 74 68 69 73 2e 46 3b 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 2e 44 2c 7b 43 5a 3a 21 30 2c 62 31 3a 21 31 7d 29 3b 24 55 75 28 61 2c 63 29 7d 3b 0a 61 56 75 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 44 2c 63 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 61 2e 48 3d 63 3b 61 3d 74 68 69 73 2e 46 3b 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 2e 44 2c 7b 43 5a 3a 21 31 7d 29 3b 24 55 75 28 61 2c 63 29 7d 3b 61 56 75 2e 70 72 6f 74 6f 74 79 70 65 2e 56 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 74 68 69 73 2e 44 2e 48 3d 63 3b 63 3d 74 68 69 73 2e 46 3b 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2e 44 2c 7b 43 5a 3a 21 31 2c 62 31 3a 21 30 2c Data Ascii: ;a=this.F;c=Object.assign({},a.D,{CZ:!0,b1:!1});$Uu(a,c)};aVu.prototype.O=function(){var a=this.D,c=Date.now();a.H=c;a=this.F;c=Object.assign({},a.D,{CZ:!1});$Uu(a,c)};aVu.prototype.V=function(a,c){this.D.H=c;c=this.F;a=Object.assign({},c.D,{CZ:!1,b1:!0,
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 6f 6e 20 42 56 75 28 61 2c 63 29 7b 76 61 72 20 64 3d 53 74 72 69 6e 67 28 68 6d 28 63 29 29 2c 65 3d 43 56 75 28 61 2c 63 29 3b 61 2e 56 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 44 56 75 28 66 29 26 26 61 2e 44 2e 6e 65 78 74 28 6e 65 77 20 78 56 75 28 66 2c 64 29 29 7d 3b 65 2e 6c 69 73 74 65 6e 28 63 2c 55 68 2c 61 2e 56 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 45 56 75 28 61 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 4d 72 28 63 29 2e 6a 64 28 29 2e 62 6f 64 79 3b 43 56 75 28 61 2c 63 29 2e 6c 69 73 74 65 6e 28 63 2c 52 69 2c 46 56 75 28 61 2c 63 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 44 56 75 28 68 29 26 26 61 2e 44 2e 6e 65 78 74 28 6e 65 77 20 73 56 75 28 68 2c 64 2c 65 2c 66 29 29 7d 29 29 2e 6c 69 73 74 65 6e 28 63 2c 51 69 2c 47 56 75 28 61 2c 63 Data Ascii: on BVu(a,c){var d=String(hm(c)),e=CVu(a,c);a.V=function(f){DVu(f)&&a.D.next(new xVu(f,d))};e.listen(c,Uh,a.V)}function EVu(a,c,d,e,f){var g=Mr(c).jd().body;CVu(a,c).listen(c,Ri,FVu(a,c,function(h){DVu(h)&&a.D.next(new sVu(h,d,e,f))})).listen(c,Qi,GVu(a,c
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 61 2c 63 29 7b 63 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 63 3b 69 66 28 21 24 72 28 61 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 21 31 3b 65 75 65 28 61 2c 49 55 75 29 26 26 28 64 3d 52 4a 28 61 2c 49 55 75 29 3d 3d 3d 70 6c 29 3b 72 65 74 75 72 6e 20 65 75 65 28 61 2c 55 34 6c 29 26 26 28 21 63 7c 7c 21 64 29 7d 66 75 6e 63 74 69 6f 6e 20 43 56 75 28 61 2c 63 29 7b 63 3d 70 61 72 73 65 49 6e 74 28 52 4a 28 63 2c 4a 55 75 29 7c 7c 57 4d 2c 31 30 29 3b 72 65 74 75 72 6e 20 61 2e 52 5b 63 5d 3d 61 2e 52 5b 63 5d 7c 7c 6e 65 77 20 78 49 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 56 75 28 61 2c 63 29 7b 63 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 63 3b 72 65 74 75 72 6e 20 65 73 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e Data Ascii: a,c){c=c===void 0?!1:c;if(!$r(a))return!1;var d=!1;eue(a,IUu)&&(d=RJ(a,IUu)===pl);return eue(a,U4l)&&(!c\|\|!d)}function CVu(a,c){c=parseInt(RJ(c,JUu)\|\|WM,10);return a.R[c]=a.R[c]\|\|new xI(a)}function MVu(a,c){c=c===void 0?!1:c;return es(a,function(d){return
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 61 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 28 74 68 69 73 2c 73 33 71 2c 32 29 7d 3b 76 61 72 20 53 56 75 3d 7b 45 51 61 3a 30 2c 50 67 62 3a 31 2c 6f 43 61 3a 32 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 54 56 75 28 61 2c 63 2c 64 2c 65 29 7b 4b 48 2e 63 61 6c 6c 28 74 68 69 73 29 3b 76 61 72 20 66 3d 74 68 69 73 3b 74 68 69 73 2e 4f 3d 65 3b 74 68 69 73 2e 65 61 3d 74 68 69 73 2e 45 61 3d 74 68 69 73 2e 76 61 3d 74 68 69 73 2e 4d 61 3d 74 68 69 73 2e 77 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 4e 76 61 3d 7b 78 3a 30 2c 79 3a 30 7d 3b 74 68 69 73 2e 54 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6f 61 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 74 68 69 73 2e 5a 66 3d 7b 7d 3b 74 68 69 73 2e 48 61 3d 6e 65 77 20 57 59 3b 74 68 69 73 2e 57 Data Ascii: adata=function(){return Q(this,s3q,2)};var SVu={EQa:0,Pgb:1,oCa:2};function TVu(a,c,d,e){KH.call(this);var f=this;this.O=e;this.ea=this.Ea=this.va=this.Ma=this.wa=null;this.Nva={x:0,y:0};this.Ta=null;this.oa=document.body;this.Zf={};this.Ha=new WY;this.W
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 7d 7d 7d 63 61 74 63 68 28 71 29 7b 53 38 28 22 45 72 72 6f 72 20 69 6e 20 63 6c 69 65 6e 74 20 66 6f 6f 74 65 72 20 63 61 6c 6c 62 61 63 6b 2e 22 29 7d 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 53 38 28 22 55 6e 6b 6e 6f 77 6e 20 63 6c 69 65 6e 74 20 63 6f 6e 74 65 6e 74 20 6d 65 73 73 61 67 65 20 49 44 3a 20 22 2b 67 2e 69 64 29 7d 7d 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 56 75 26 26 28 67 3d 67 2e 44 2c 21 28 67 2e 74 69 6d 65 73 74 61 6d 70 3c 66 2e 48 29 26 26 66 2e 44 29 29 7b 6c 3d 66 2e 44 2e 63 6f 6e 66 69 67 3b 68 3d 67 2e 64 61 74 61 7c 7c 6c 5b 47 55 75 5d 7c 7c 6c 2e 75 73 65 72 69 64 7c 7c 6c 2e 65 6d 61 69 6c 3b 73 77 69 74 63 68 28 67 2e 65 76 65 6e 74 54 79 70 65 29 7b 63 61 73 65 20 6d 59 66 3a 6c 3d 0a 6c 2e Data Ascii: }}}catch(q){S8("Error in client footer callback.")}break;default:S8("Unknown client content message ID: "+g.id)}}else if(g instanceof mVu&&(g=g.D,!(g.timestamp<f.H)&&f.D)){l=f.D.config;h=g.data\|\|l[GUu]\|\|l.userid\|\|l.email;switch(g.eventType){case mYf:l=l.
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 2e 52 2e 62 69 6e 64 28 74 68 69 73 2e 4a 29 3b 74 68 69 73 2e 4f 62 3d 74 68 69 73 2e 4a 2e 4f 2e 62 69 6e 64 28 74 68 69 73 2e 4a 29 3b 74 68 69 73 2e 57 62 3d 74 68 69 73 2e 4a 2e 56 2e 62 69 6e 64 28 74 68 69 73 2e 4a 29 3b 74 68 69 73 2e 4a 2e 48 2e 62 69 6e 64 28 74 68 69 73 2e 4a 29 3b 74 68 69 73 2e 5a 61 3d 21 31 3b 74 68 69 73 2e 43 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6c 75 3d 61 3b 74 68 69 73 2e 52 3d 64 7c 7c 6e 65 77 20 41 56 75 3b 74 68 69 73 2e 48 61 2e 61 64 64 28 47 4d 6d 28 74 68 69 73 2e 52 2e 44 29 2e 73 75 62 73 63 72 69 62 65 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 72 79 7b 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 56 75 29 66 2e 4d 75 28 4e 75 6d 62 65 72 28 67 2e 44 29 2c 67 2e 50 73 2c 21 31 29 3b 65 6c 73 65 20 69 66 Data Ascii: .R.bind(this.J);this.Ob=this.J.O.bind(this.J);this.Wb=this.J.V.bind(this.J);this.J.H.bind(this.J);this.Za=!1;this.Ca=null;this.lu=a;this.R=d\|\|new AVu;this.Ha.add(GMm(this.R.D).subscribe(function(g){try{if(g instanceof sVu)f.Mu(Number(g.D),g.Ps,!1);else if
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 63 65 20 77 68 65 6e 20 74 72 79 69 6e 67 20 74 6f 20 66 65 74 63 68 20 6c 6f 6f 6b 75 70 49 64 22 29 3b 72 65 74 75 72 6e 22 22 7d 29 3b 63 26 26 28 61 2e 66 62 3d 63 2c 61 2e 57 2e 44 3d 61 2e 66 62 2c 58 55 75 28 61 2e 57 29 29 7d 66 75 6e 63 74 69 6f 6e 20 59 56 75 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 6c 75 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 63 2e 6b 65 79 43 6f 64 65 3d 3d 3d 64 2e 6b 65 79 43 6f 64 65 26 26 21 21 63 2e 63 74 72 6c 4b 65 79 3d 3d 3d 21 21 64 2e 63 74 72 6c 4b 65 79 26 26 21 21 63 2e 61 6c 74 4b 65 79 3d 3d 3d 21 21 64 2e 61 6c 74 4b 65 79 26 26 21 21 63 2e 73 68 69 66 74 4b 65 79 3d 3d 3d 21 21 64 2e 73 68 69 66 74 4b 65 79 26 26 21 21 63 2e 6d 65 74 61 4b 65 79 3d 3d 3d 21 21 64 2e 6d Data Ascii: ce when trying to fetch lookupId");return""});c&&(a.fb=c,a.W.D=a.fb,XUu(a.W))}function YVu(a,c){return a.lu.some(function(d){return c.keyCode===d.keyCode&&!!c.ctrlKey===!!d.ctrlKey&&!!c.altKey===!!d.altKey&&!!c.shiftKey===!!d.shiftKey&&!!c.metaKey===!!d.m

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49947	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:07 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3efaf52f-501e-008c-0d35-29cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194007Z-15b8d89586fwzdd88qtcg4dr1800000000hg00000000fmn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:40:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49945	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:07 UTC	709	OUT	GET /static/document/client/js/2681390919-client_js_prod_voice.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:07 UTC	795	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 39940 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 19:40:04 GMT Expires: Thu, 30 Oct 2025 19:40:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:07 UTC	583	IN	Data Raw: 46 4a 28 4f 62 62 29 3b 0a 76 61 72 20 43 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 62 6f 64 79 2d 61 63 74 69 76 65 22 2c 44 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 62 6f 64 79 2d 68 6f 76 65 72 22 2c 45 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 66 6f 63 75 73 22 2c 46 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 68 65 6c 70 2d 68 6f 76 65 72 22 2c 47 31 76 3d 22 64 6f 63 73 2d 6d 69 63 2d 70 61 6c 65 74 74 65 2d 72 65 63 6f 72 64 69 6e 67 22 2c 48 31 76 3d 22 64 6f 63 73 2d 70 61 6c 65 74 74 65 2d 64 69 63 74 61 74 69 6f 6e 22 2c 49 31 76 3d 22 64 6f 63 73 2d 76 6f 69 63 65 2d 62 75 62 62 6c 65 2d 63 6c 6f 73 65 22 2c 4a 31 76 3d 22 64 6f 63 73 2d 76 6f 69 63 65 2d 62 75 Data Ascii: FJ(Obb);var C1v="docs-mic-palette-body-active",D1v="docs-mic-palette-body-hover",E1v="docs-mic-palette-focus",F1v="docs-mic-palette-help-hover",G1v="docs-mic-palette-recording",H1v="docs-palette-dictation",I1v="docs-voice-bubble-close",J1v="docs-voice-bu
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 79 70 65 2e 4d 52 61 3d 59 28 31 32 31 35 2c 72 28 29 29 3b 70 36 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 59 28 31 30 39 39 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 74 61 72 67 65 74 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 74 68 69 73 2e 44 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 44 5b 63 5d 3b 64 26 26 64 2e 42 61 28 29 26 26 75 49 28 64 2e 42 61 28 29 2c 22 64 6f 63 73 2d 70 61 6c 65 74 74 65 2d 74 6f 70 22 2c 64 3d 3d 61 29 7d 7d 29 3b 52 52 63 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 49 61 3d 59 28 34 31 32 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 44 2e 48 7d 29 3b 5a 6a 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 49 61 3d 59 28 34 31 31 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: ype.MRa=Y(1215,r());p6e.prototype.H=Y(1099,function(a){a=a.target;for(var c=0;c<this.D.length;c++){var d=this.D[c];d&&d.Ba()&&uI(d.Ba(),"docs-palette-top",d==a)}});RRc.prototype.LIa=Y(412,function(){return!!this.D.H});Zjd.prototype.LIa=Y(411,function(){re
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 6d 69 6e 69 63 61 6e 61 29 22 2c 65 73 5f 45 43 3a 22 45 73 70 2e 20 28 45 63 75 61 64 6f 72 29 22 2c 65 73 5f 45 53 3a 22 45 73 70 2e 20 28 45 73 70 61 5c 75 30 30 66 31 61 29 22 2c 65 73 5f 47 54 3a 22 45 73 70 2e 20 28 47 75 61 74 65 6d 61 6c 61 29 22 2c 65 73 5f 48 4e 3a 22 45 73 70 2e 20 28 48 6f 6e 64 75 72 61 73 29 22 2c 65 73 5f 4d 58 3a 22 45 73 70 2e 20 28 4d 5c 75 30 30 65 39 78 69 63 6f 29 22 2c 65 73 5f 4e 49 3a 22 45 73 70 2e 20 28 4e 69 63 61 72 61 67 75 61 29 22 2c 65 73 5f 50 41 3a 22 45 73 70 2e 20 28 50 61 6e 61 6d 5c 75 30 30 65 31 29 22 2c 65 73 5f 50 45 3a 22 45 73 70 2e 20 28 50 65 72 5c 75 30 30 66 61 29 22 2c 65 73 5f 50 52 3a 22 45 73 70 2e 20 28 50 75 65 72 74 6f 20 52 69 63 6f 29 22 2c 65 73 5f 50 59 3a 22 45 73 70 2e 20 28 50 Data Ascii: minicana)",es_EC:"Esp. (Ecuador)",es_ES:"Esp. (Espa\u00f1a)",es_GT:"Esp. (Guatemala)",es_HN:"Esp. (Honduras)",es_MX:"Esp. (M\u00e9xico)",es_NI:"Esp. (Nicaragua)",es_PA:"Esp. (Panam\u00e1)",es_PE:"Esp. (Per\u00fa)",es_PR:"Esp. (Puerto Rico)",es_PY:"Esp. (P
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 31 2c 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 32 76 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 61 32 76 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 62 32 76 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 58 50 28 61 2c 24 31 76 2c 31 2c 63 32 76 2c 63 29 7d 76 61 72 20 63 32 76 3d 5b 31 2c 32 5d 3b 66 75 6e 63 74 69 6f 6e 20 64 32 76 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 64 32 76 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 65 32 76 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 65 32 76 2c 53 29 3b 66 75 6e 63 74 69 6f 6e 20 66 32 76 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 2c 35 30 30 29 7d 4a 28 66 32 76 2c 53 29 3b 66 32 76 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: 1,a)};function a2v(a){this.Da=O(a)}J(a2v,S);function b2v(a,c){return XP(a,$1v,1,c2v,c)}var c2v=[1,2];function d2v(a){this.Da=O(a)}J(d2v,S);function e2v(a){this.Da=O(a)}J(e2v,S);function f2v(a){this.Da=O(a,500)}J(f2v,S);f2v.prototype.getError=function(){re
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 31 70 78 22 20 77 69 64 74 68 3d 22 32 31 70 78 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 79 3d 22 30 70 78 22 20 78 3d 22 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 32 31 20 32 31 22 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 70 61 6c 65 74 74 65 2d 63 6c 6f 73 65 2d 69 63 6f 6e 22 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 35 20 36 2e 34 31 34 20 31 33 2e 35 38 35 20 35 20 31 30 20 38 2e 35 38 36 20 36 2e 34 31 34 20 35 20 35 20 36 2e 34 31 34 20 38 2e 35 38 35 20 31 30 20 35 20 31 33 2e 35 38 36 20 36 2e 34 31 34 20 31 35 20 31 30 20 31 31 2e 34 31 34 Data Ascii: org/1999/xlink" height="21px" width="21px" version="1.1" y="0px" x="0px" viewBox="0 0 21 21" enable-background="new 0 0 21 21" class="docs-palette-close-icon"><polygon points="15 6.414 13.585 5 10 8.586 6.414 5 5 6.414 8.585 10 5 13.586 6.414 15 10 11.414
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 63 73 2d 70 61 6c 65 74 74 65 2d 67 72 69 70 70 79 22 2c 63 2e 42 61 28 29 29 3b 61 3d 74 68 69 73 2e 41 67 3d 6e 65 77 20 79 4a 28 61 2c 63 29 3b 63 3d 74 68 69 73 2e 42 68 28 29 3b 61 2e 4f 3d 63 3b 74 68 69 73 2e 58 61 28 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 41 67 2c 46 6b 2c 74 68 69 73 2e 51 43 63 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 41 67 2c 24 66 2c 6a 6d 28 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 2c 74 68 69 73 2c 22 76 22 29 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 76 61 2c 22 66 22 2c 74 68 69 73 2e 52 43 63 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 42 61 28 29 2c 4e 67 2c 74 68 69 73 2e 4e 4e 62 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 4a 51 28 29 2e 42 61 28 29 2c 4e 67 2c 74 68 69 73 2e 4e 4e 62 29 7d 3b 44 2e 4e 4e Data Ascii: cs-palette-grippy",c.Ba());a=this.Ag=new yJ(a,c);c=this.Bh();a.O=c;this.Xa().listen(this.Ag,Fk,this.QCc).listen(this.Ag,$f,jm(this.dispatchEvent,this,"v")).listen(this.va,"f",this.RCc).listen(this.Ba(),Ng,this.NNb).listen(this.JQ().Ba(),Ng,this.NNb)};D.NN
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 20 65 3d 64 2e 4c 62 28 29 3b 65 2e 75 62 28 64 2e 6c 65 61 28 29 2c 61 2e 57 29 3b 69 66 28 65 3d 3d 61 2e 4a 2e 71 61 28 43 50 61 29 29 7b 65 3d 64 2e 6c 65 61 28 29 3b 66 6f 72 28 76 61 72 20 66 3d 31 3b 66 3c 65 3b 66 2b 2b 29 61 2e 4a 2e 71 61 28 43 50 61 29 2e 75 62 28 29 7d 7d 65 6c 73 65 20 78 32 76 28 61 29 3b 61 2e 44 3d 6e 75 6c 6c 3b 74 32 76 28 61 29 3b 72 65 74 75 72 6e 21 21 64 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 77 32 76 28 61 2c 63 29 7b 69 66 28 70 6f 28 63 29 29 69 66 28 72 6f 28 63 2c 22 5c 6e 22 29 29 63 3d 54 33 67 28 63 2c 22 5c 6e 22 29 2c 63 3d 5b 6e 65 77 20 65 67 68 28 61 2e 4a 2e 71 61 28 43 50 61 29 2c 7b 70 61 72 61 6d 65 74 65 72 3a 63 7d 29 5d 2c 63 3d 59 76 28 63 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 59 76 28 6e 75 Data Ascii: e=d.Lb();e.ub(d.lea(),a.W);if(e==a.J.qa(CPa)){e=d.lea();for(var f=1;f<e;f++)a.J.qa(CPa).ub()}}else x2v(a);a.D=null;t2v(a);return!!d})}function w2v(a,c){if(po(c))if(ro(c,"\n"))c=T3g(c,"\n"),c=[new egh(a.J.qa(CPa),{parameter:c})],c=Yv(c);else return Yv(nu
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 5d 7d 4a 28 44 32 76 2c 41 32 76 29 3b 66 75 6e 63 74 69 6f 6e 20 42 32 76 28 61 29 7b 4d 69 62 28 29 2e 6d 65 64 69 61 44 65 76 69 63 65 73 2e 67 65 74 55 73 65 72 4d 65 64 69 61 28 7b 61 75 64 69 6f 3a 21 30 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 4a 2e 70 75 73 68 28 63 29 3b 61 2e 69 73 41 63 74 69 76 65 28 29 26 26 63 2e 67 65 74 41 75 64 69 6f 54 72 61 63 6b 73 28 29 2e 6c 65 6e 67 74 68 21 3d 30 3f 61 2e 4f 2e 73 74 61 72 74 28 61 2e 44 2e 63 72 65 61 74 65 4d 65 64 69 61 53 74 72 65 61 6d 53 6f 75 72 63 65 28 63 29 29 3a 43 32 76 28 61 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 73 74 6f 70 28 29 3b 76 61 72 20 64 3d 61 2e 48 3b 73 77 69 74 63 68 28 63 2e 6e 61 6d 65 29 7b 63 61 73 65 20 71 7a 6c 3a 63 61 73 65 20 Data Ascii: ]}J(D2v,A2v);function B2v(a){Mib().mediaDevices.getUserMedia({audio:!0}).then(function(c){a.J.push(c);a.isActive()&&c.getAudioTracks().length!=0?a.O.start(a.D.createMediaStreamSource(c)):C2v(a)},function(c){a.stop();var d=a.H;switch(c.name){case qzl:case
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 2e 44 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 64 29 29 7d 29 7d 76 61 72 20 4b 32 76 3d 7b 7d 2c 48 32 76 3d 28 4b 32 76 5b 32 5d 3d 22 61 75 64 69 6f 2f 66 6c 61 63 22 2c 4b 32 76 5b 39 5d 3d 22 61 75 64 69 6f 2f 77 65 62 6d 3b 63 6f 64 65 63 73 3d 6f 70 75 73 22 2c 4b 32 76 29 2c 4c 32 76 3d 7b 7d 2c 49 32 76 3d 28 4c 32 76 5b 39 5d 3d 32 34 45 33 2c 4c 32 76 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 32 76 28 61 2c 63 2c 64 2c 65 2c 66 29 7b 45 32 76 2e 63 61 6c 6c 28 74 68 69 73 29 3b 76 61 72 20 67 3d 74 68 69 73 3b 74 68 69 73 2e 52 3d 64 3b 74 68 69 73 2e 4a 3d 65 3b 74 68 69 73 2e 4f 3d 66 3b 76 61 72 20 68 3d 74 68 69 73 2e 4f 2e 5a 68 28 22 76 77 6d 6c 22 29 3b 74 68 69 73 2e 46 3d 61 2e 61 75 64 69 6f Data Ascii: .D.dispatchEvent(new Uint8Array(d))})}var K2v={},H2v=(K2v[2]="audio/flac",K2v[9]="audio/webm;codecs=opus",K2v),L2v={},I2v=(L2v[9]=24E3,L2v);function M2v(a,c,d,e,f){E2v.call(this);var g=this;this.R=d;this.J=e;this.O=f;var h=this.O.Zh("vwml");this.F=a.audio
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 73 2d 76 6f 69 63 65 2d 6c 69 6e 65 61 72 31 36 22 2c 64 2c 65 29 7d 2c 66 29 3b 5b 39 2c 32 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 4d 65 64 69 61 52 65 63 6f 72 64 65 72 2e 69 73 54 79 70 65 53 75 70 70 6f 72 74 65 64 28 48 32 76 5b 68 5d 29 26 26 28 67 5b 68 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 47 32 76 28 61 2c 68 29 7d 29 7d 29 3b 72 65 74 75 72 6e 20 67 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 32 76 28 29 7b 74 68 69 73 2e 4a 3d 74 68 69 73 2e 48 3d 74 68 69 73 2e 44 3d 6e 75 6c 6c 7d 51 32 76 2e 70 72 6f 74 6f 74 79 70 65 2e 44 6d 3d 55 6c 28 22 44 22 29 3b 51 32 76 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 28 6e 65 77 20 24 31 76 29 2e 73 65 Data Ascii: s-voice-linear16",d,e)},f);[9,2].forEach(function(h){MediaRecorder.isTypeSupported(H2v[h])&&(g[h]=function(){return new G2v(a,h)})});return g};function Q2v(){this.J=this.H=this.D=null}Q2v.prototype.Dm=Ul("D");Q2v.prototype.ib=function(){var a=(new $1v).se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49946	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:07 UTC	717	OUT	GET /static/document/client/js/3278450690-client_js_prod_kix_approvals.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:07 UTC	794	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 7875 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 19:40:06 GMT Expires: Thu, 30 Oct 2025 19:40:06 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:07 UTC	584	IN	Data Raw: 46 4a 28 74 5f 61 29 3b 0a 76 61 72 20 4d 67 74 3d 22 64 6f 63 73 2d 61 70 70 72 6f 76 61 6c 73 2d 74 6f 61 73 74 2d 72 65 6c 6f 61 64 22 2c 4e 67 74 3d 22 64 6f 63 73 2d 61 70 70 72 6f 76 61 6c 73 2d 74 6f 61 73 74 2d 75 6e 6c 6f 63 6b 22 2c 4f 67 74 3d 22 65 64 69 74 6f 72 41 70 70 72 6f 76 61 6c 73 4f 6e 62 6f 61 72 64 22 2c 50 67 74 3d 22 75 6e 6c 6f 63 6b 65 64 22 3b 66 75 6e 63 74 69 6f 6e 20 51 67 74 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 51 67 74 2c 53 29 3b 44 3d 51 67 74 2e 70 72 6f 74 6f 74 79 70 65 3b 44 2e 67 65 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 70 28 74 68 69 73 2c 31 29 7d 3b 44 2e 58 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 71 28 74 68 69 73 2c 31 2c 61 29 7d 3b Data Ascii: FJ(t_a);var Mgt="docs-approvals-toast-reload",Ngt="docs-approvals-toast-unlock",Ogt="editorApprovalsOnboard",Pgt="unlocked";function Qgt(a){this.Da=O(a)}J(Qgt,S);D=Qgt.prototype;D.getId=function(){return Mp(this,1)};D.Xc=function(a){return kq(this,1,a)};
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 6e 50 72 6f 67 72 65 73 73 3a 31 2c 61 70 70 72 6f 76 65 64 3a 32 2c 64 65 63 6c 69 6e 65 64 3a 34 2c 63 61 6e 63 65 6c 6c 65 64 3a 33 2c 73 74 61 74 75 73 55 6e 73 70 65 63 69 66 69 65 64 3a 30 2c 61 72 74 69 66 61 63 74 73 50 65 6e 64 69 6e 67 3a 35 2c 66 61 69 6c 65 64 3a 36 7d 2c 56 67 74 3d 7b 64 65 63 69 73 69 6f 6e 55 6e 73 70 65 63 69 66 69 65 64 3a 30 2c 6e 6f 44 65 63 69 73 69 6f 6e 3a 31 2c 61 70 70 72 6f 76 65 64 3a 32 2c 64 65 63 6c 69 6e 65 64 3a 33 7d 2c 57 67 74 3d 7b 74 79 70 65 55 6e 73 70 65 63 69 66 69 65 64 3a 30 2c 63 6f 6e 74 65 6e 74 52 65 76 69 65 77 3a 31 2c 65 53 69 67 6e 61 74 75 72 65 3a 32 2c 61 6c 69 67 6e 6d 65 6e 74 3a 33 7d 2c 58 67 74 3d 7b 66 61 69 6c 75 72 65 52 65 61 73 6f 6e 55 6e 73 70 65 63 69 66 69 65 64 3a 30 2c Data Ascii: nProgress:1,approved:2,declined:4,cancelled:3,statusUnspecified:0,artifactsPending:5,failed:6},Vgt={decisionUnspecified:0,noDecision:1,approved:2,declined:3},Wgt={typeUnspecified:0,contentReview:1,eSignature:2,alignment:3},Xgt={failureReasonUnspecified:0,
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 74 65 2c 69 74 65 6d 73 2f 6c 61 74 65 73 74 2c 69 74 65 6d 73 2f 69 6e 69 74 69 61 74 6f 72 2c 69 74 65 6d 73 2f 74 79 70 65 2c 69 74 65 6d 73 2f 66 61 69 6c 75 72 65 52 65 61 73 6f 6e 22 7d 29 2c 54 67 74 28 63 52 28 28 6e 65 77 20 62 52 29 2e 58 63 28 61 2e 44 2e 55 63 28 29 29 2c 61 2e 44 2e 4f 29 29 29 2c 33 29 2e 73 74 61 72 74 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5a 67 74 28 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 31 22 29 3b 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 31 22 29 3b 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 68 74 28 61 29 7b 72 65 74 75 72 6e 28 62 61 68 28 29 2c 24 24 67 29 2e 67 65 74 28 61 2c 33 32 Data Ascii: te,items/latest,items/initiator,items/type,items/failureReason"}),Tgt(cR((new bR).Xc(a.D.Uc()),a.D.O))),3).start().then(function(e){return Zgt(e)},function(){throw Error("d1");})},function(){throw Error("d1");})}function aht(a){return(bah(),$$g).get(a,32
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 42 53 2e 70 72 6f 74 6f 74 79 70 65 2e 52 61 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 58 61 28 29 2e 6c 69 73 74 65 6e 28 74 68 69 73 2c 72 4f 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 6b 65 79 3d 3d 3d 51 63 3f 28 61 2e 63 6c 6f 73 65 28 29 2c 61 2e 44 26 26 61 2e 44 28 29 29 3a 63 2e 6b 65 79 3d 3d 3d 6c 6a 26 26 28 61 2e 4c 61 28 21 31 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 41 69 22 29 2c 61 2e 44 73 26 26 61 2e 44 73 2e 63 61 6c 6c 62 61 63 6b 28 29 2c 61 2e 44 26 26 61 2e 44 28 29 29 7d 29 7d 3b 0a 65 68 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 4c 61 28 21 31 29 3b 74 68 69 73 2e 44 73 26 26 74 68 69 73 2e 44 73 Data Ascii: on(){var a=this;BS.prototype.Ra.call(this);this.Xa().listen(this,rO,function(c){c.key===Qc?(a.close(),a.D&&a.D()):c.key===lj&&(a.La(!1),a.dispatchEvent("Ai"),a.Ds&&a.Ds.callback(),a.D&&a.D())})};eht.prototype.close=function(){this.La(!1);this.Ds&&this.Ds
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 67 44 69 61 6c 6f 67 62 61 73 65 69 74 65 6d 2d 63 68 69 70 2d 63 6f 6e 74 65 6e 74 22 29 2b 51 4d 2b 56 28 22 64 72 69 76 65 4c 6f 63 6b 69 6e 67 44 69 61 6c 6f 67 62 61 73 65 69 74 65 6d 2d 63 68 69 70 2d 69 63 6f 6e 22 29 2b 49 4d 2b 56 28 70 53 28 64 29 29 2b 52 4d 2b 56 28 22 64 72 69 76 65 4c 6f 63 6b 69 6e 67 44 69 61 6c 6f 67 62 61 73 65 69 74 65 6d 2d 63 68 69 70 2d 74 69 74 6c 65 22 29 2b 0a 6b 2b 6c 53 28 63 29 2b 64 49 66 29 2b 64 4e 29 3b 72 65 74 75 72 6e 20 55 28 66 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 68 74 28 61 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 65 68 74 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 63 2c 67 3d 3d 3d 76 6f 69 64 20 30 3f 72 28 29 3a 67 2c 64 29 3b 74 68 69 73 2e 50 43 61 3d 66 7c 7c 6e 75 6c 6c 3b 74 68 69 73 2e 6f 69 62 3d Data Ascii: gDialogbaseitem-chip-content")+QM+V("driveLockingDialogbaseitem-chip-icon")+IM+V(pS(d))+RM+V("driveLockingDialogbaseitem-chip-title")+k+lS(c)+dIf)+dN);return U(f)};function hht(a,c,d,e,f,g){eht.call(this,a,c,g===void 0?r():g,d);this.PCa=f\|\|null;this.oib=
2024-10-30 19:40:07 UTC	1378	IN	Data Raw: 28 74 68 69 73 2e 44 2e 55 62 28 29 2c 74 68 69 73 2e 44 2e 67 65 74 4d 69 6d 65 54 79 70 65 28 29 2c 76 6f 69 64 20 30 2c 74 68 69 73 2e 44 2e 52 21 3d 6e 75 6c 6c 26 26 77 71 28 74 68 69 73 2e 44 2e 52 2c 31 33 29 3f 74 68 69 73 2e 44 2e 52 2e 67 65 74 54 79 70 65 28 29 3a 6e 75 6c 6c 2c 74 68 69 73 2e 44 2e 52 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 44 2e 52 2e 42 6d 28 29 3f 74 68 69 73 2e 44 2e 52 2e 67 65 74 53 74 61 74 75 73 28 29 3a 6e 75 6c 6c 29 3b 74 68 69 73 2e 78 61 28 74 68 69 73 2e 46 29 3b 74 68 69 73 2e 76 61 2e 6a 6b 28 74 68 69 73 2e 46 29 3b 74 68 69 73 2e 77 61 2e 6c 69 73 74 65 6e 28 74 68 69 73 2e 46 2c 22 41 69 22 2c 74 68 69 73 2e 4d 61 29 3b 74 68 69 73 2e 46 2e 4c 61 28 21 30 29 7d 3b 0a 69 68 74 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: (this.D.Ub(),this.D.getMimeType(),void 0,this.D.R!=null&&wq(this.D.R,13)?this.D.R.getType():null,this.D.R!=null&&this.D.R.Bm()?this.D.R.getStatus():null);this.xa(this.F);this.va.jk(this.F);this.wa.listen(this.F,"Ai",this.Ma);this.F.La(!0)};iht.prototype.
2024-10-30 19:40:07 UTC	401	IN	Data Raw: 2c 67 75 61 29 7c 7c 48 45 28 61 2e 57 2c 6e 65 77 20 77 4b 28 67 75 61 2c 30 29 2c 67 75 61 29 3b 76 61 72 20 63 3d 47 45 28 61 2e 57 2c 67 75 61 29 3b 61 2e 41 61 2e 62 64 28 61 2e 48 2e 71 61 28 59 74 61 29 2c 78 78 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 2e 48 3b 64 2e 71 61 28 59 74 61 29 2e 78 5f 28 29 26 26 63 2e 73 65 74 56 61 6c 75 65 28 4d 61 74 68 2e 6d 69 6e 28 63 2e 67 65 74 56 61 6c 75 65 28 29 2b 31 2c 33 29 29 3b 62 68 74 28 63 2c 64 29 7d 29 3b 62 68 74 28 63 2c 61 2e 48 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 68 74 28 29 7b 44 4a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 4a 28 6f 68 74 2c 44 4a 29 3b 6f 68 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 72 28 29 3b 6f 68 74 Data Ascii: ,gua)\|\|HE(a.W,new wK(gua,0),gua);var c=GE(a.W,gua);a.Aa.bd(a.H.qa(Yta),xx,function(){var d=a.H;d.qa(Yta).x_()&&c.setValue(Math.min(c.getValue()+1,3));bht(c,d)});bht(c,a.H)};function oht(){DJ.apply(this,arguments)}J(oht,DJ);oht.prototype.initialize=r();oht

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49948	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:07 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194007Z-15b8d89586flzzksdx5d6q7g1000000003ng00000000955e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49952	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:08 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cb951b4e-f01e-0020-727f-28956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194008Z-17c5cb586f67hfgj2durhqcxk800000007ag00000000hg6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:08 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: c7261251-b01e-0070-6593-291cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194008Z-17c5cb586f62bgw58esgbu9hgw000000014g00000000fush x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49951	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:08 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194008Z-16849878b785dznd7xpawq9gcn00000009tg00000000r24h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49950	142.250.186.36	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:08 UTC	699	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:08 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Wed, 30 Oct 2024 19:40:08 GMT Expires: Wed, 30 Oct 2024 19:40:08 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:08 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 Data Ascii: /E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC
2024-10-30 19:40:08 UTC	1085	IN	Data Raw: d1 32 23 1c 00 ad 4b 7d 21 37 c0 72 a7 aa c3 51 27 9d 0b b8 a7 68 d0 ee ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa Data Ascii: 2#K}!7rQ'hP7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49955	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:08 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:08 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 98e85290-a01e-0021-7dec-2a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194008Z-16849878b78fkwcjkpn19c5dsn00000007eg00000000nnmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:40:08 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49957	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:08 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:08 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194008Z-15b8d89586f8l5961kfst8fpb00000000m7g00000000azum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:08 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49960	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:08 UTC	718	OUT	GET /static/document/client/js/358792001-client_js_prod_peoplehovercard.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:08 UTC	795	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 23351 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 19:40:07 GMT Expires: Thu, 30 Oct 2025 19:40:07 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:08 UTC	583	IN	Data Raw: 46 4a 28 77 33 61 29 3b 0a 76 61 72 20 78 55 75 3d 22 43 5f 5f 48 43 5f 39 34 32 35 33 32 32 39 22 2c 79 55 75 3d 22 49 5f 5f 48 43 5f 39 34 32 35 33 32 32 39 22 2c 7a 55 75 3d 22 4e 6f 20 65 6d 61 69 6c 20 64 61 74 61 20 66 6f 75 6e 64 20 69 6e 20 68 61 6e 64 6c 65 72 49 6e 70 75 74 20 66 6f 72 20 45 76 65 6e 74 73 2e 43 61 6c 65 6e 64 61 72 3a 20 22 2c 41 55 75 3d 22 5f 5f 48 4d 5f 31 37 33 35 38 34 30 31 39 22 2c 42 55 75 3d 22 62 6f 71 53 6f 63 69 61 6c 70 65 6f 70 6c 65 68 6f 76 65 72 63 61 72 64 56 32 48 6f 76 65 72 63 61 72 64 41 6e 69 6d 61 74 69 6e 67 22 2c 43 55 75 3d 22 62 75 67 61 6e 69 7a 65 72 2d 73 79 73 74 65 6d 2b 22 2c 44 55 75 3d 22 64 6f 63 73 48 65 61 64 65 72 43 6f 6e 66 69 67 22 2c 45 55 75 3d 22 66 6f 72 63 65 48 69 64 65 22 2c 46 Data Ascii: FJ(w3a);var xUu="C__HC_94253229",yUu="I__HC_94253229",zUu="No email data found in handlerInput for Events.Calendar: ",AUu="__HM_173584019",BUu="boqSocialpeoplehovercardV2HovercardAnimating",CUu="buganizer-system+",DUu="docsHeaderConfig",EUu="forceHide",F
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: 4e 55 75 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 4e 55 75 2c 53 29 3b 44 3d 4e 55 75 2e 70 72 6f 74 6f 74 79 70 65 3b 44 2e 67 65 74 4d 65 74 61 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 28 74 68 69 73 2c 4d 55 75 2c 31 29 7d 3b 44 2e 67 65 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 70 28 74 68 69 73 2c 32 29 7d 3b 44 2e 73 65 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 71 28 74 68 69 73 2c 32 2c 61 29 7d 3b 44 2e 67 65 74 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 70 28 74 68 69 73 2c 33 29 7d 3b 44 2e 79 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 71 28 74 68 69 73 2c 33 2c 61 29 7d 3b Data Ascii: NUu(a){this.Da=O(a)}J(NUu,S);D=NUu.prototype;D.getMetadata=function(){return Q(this,MUu,1)};D.getValue=function(){return Mp(this,2)};D.setValue=function(a){return kq(this,2,a)};D.getType=function(){return Mp(this,3)};D.yc=function(a){return kq(this,3,a)};
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: 2c 75 73 28 61 2e 44 2c 21 30 29 2c 74 73 28 61 2e 44 2c 31 29 2c 61 2e 48 2e 6e 65 78 74 28 7b 74 79 70 65 3a 30 7d 29 29 3a 53 38 28 4b 55 75 29 7d 7d 65 6c 73 65 20 61 2e 44 3f 28 61 2e 44 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 42 55 75 29 2c 75 73 28 61 2e 44 2c 21 30 29 2c 61 2e 48 2e 6e 65 78 74 28 7b 74 79 70 65 3a 30 7d 29 29 3a 53 38 28 4b 55 75 29 7d 66 75 6e 63 74 69 6f 6e 20 56 55 75 28 61 29 7b 76 61 72 20 63 3d 4e 74 62 28 61 29 3b 61 3d 61 2e 43 6e 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 66 73 28 63 2e 79 2b 31 32 2c 63 2e 78 2b 61 2e 77 69 64 74 68 2d 31 32 2c 63 2e 79 2b 61 2e 68 65 69 67 68 74 2d 31 32 2c 63 2e 78 2b 31 32 29 7d 66 75 6e 63 74 69 6f 6e 20 55 55 75 28 61 2c 63 2c 64 2c 65 2c 66 29 7b 66 3d 66 3d 3d 3d 76 Data Ascii: ,us(a.D,!0),ts(a.D,1),a.H.next({type:0})):S8(KUu)}}else a.D?(a.D.classList.remove(BUu),us(a.D,!0),a.H.next({type:0})):S8(KUu)}function VUu(a){var c=Ntb(a);a=a.Cn();return new fs(c.y+12,c.x+a.width-12,c.y+a.height-12,c.x+12)}function UUu(a,c,d,e,f){f=f===v
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: 28 29 3b 61 2e 48 3d 63 3b 61 3d 74 68 69 73 2e 46 3b 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 2e 44 2c 7b 43 5a 3a 21 30 2c 62 31 3a 21 31 7d 29 3b 24 55 75 28 61 2c 63 29 7d 3b 0a 61 56 75 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 44 2c 63 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 61 2e 48 3d 63 3b 61 3d 74 68 69 73 2e 46 3b 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 2e 44 2c 7b 43 5a 3a 21 31 7d 29 3b 24 55 75 28 61 2c 63 29 7d 3b 61 56 75 2e 70 72 6f 74 6f 74 79 70 65 2e 56 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 74 68 69 73 2e 44 2e 48 3d 63 3b 63 3d 74 68 69 73 2e 46 3b 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2e 44 2c 7b 43 5a 3a 21 Data Ascii: ();a.H=c;a=this.F;c=Object.assign({},a.D,{CZ:!0,b1:!1});$Uu(a,c)};aVu.prototype.O=function(){var a=this.D,c=Date.now();a.H=c;a=this.F;c=Object.assign({},a.D,{CZ:!1});$Uu(a,c)};aVu.prototype.V=function(a,c){this.D.H=c;c=this.F;a=Object.assign({},c.D,{CZ:!
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: 59 7d 66 75 6e 63 74 69 6f 6e 20 42 56 75 28 61 2c 63 29 7b 76 61 72 20 64 3d 53 74 72 69 6e 67 28 68 6d 28 63 29 29 2c 65 3d 43 56 75 28 61 2c 63 29 3b 61 2e 56 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 44 56 75 28 66 29 26 26 61 2e 44 2e 6e 65 78 74 28 6e 65 77 20 78 56 75 28 66 2c 64 29 29 7d 3b 65 2e 6c 69 73 74 65 6e 28 63 2c 55 68 2c 61 2e 56 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 45 56 75 28 61 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 4d 72 28 63 29 2e 6a 64 28 29 2e 62 6f 64 79 3b 43 56 75 28 61 2c 63 29 2e 6c 69 73 74 65 6e 28 63 2c 52 69 2c 46 56 75 28 61 2c 63 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 44 56 75 28 68 29 26 26 61 2e 44 2e 6e 65 78 74 28 6e 65 77 20 73 56 75 28 68 2c 64 2c 65 2c 66 29 29 7d 29 29 2e 6c 69 73 74 65 6e 28 63 2c 51 69 Data Ascii: Y}function BVu(a,c){var d=String(hm(c)),e=CVu(a,c);a.V=function(f){DVu(f)&&a.D.next(new xVu(f,d))};e.listen(c,Uh,a.V)}function EVu(a,c,d,e,f){var g=Mr(c).jd().body;CVu(a,c).listen(c,Ri,FVu(a,c,function(h){DVu(h)&&a.D.next(new sVu(h,d,e,f))})).listen(c,Qi
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: 69 6f 6e 20 4c 56 75 28 61 2c 63 29 7b 63 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 63 3b 69 66 28 21 24 72 28 61 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 21 31 3b 65 75 65 28 61 2c 49 55 75 29 26 26 28 64 3d 52 4a 28 61 2c 49 55 75 29 3d 3d 3d 70 6c 29 3b 72 65 74 75 72 6e 20 65 75 65 28 61 2c 55 34 6c 29 26 26 28 21 63 7c 7c 21 64 29 7d 66 75 6e 63 74 69 6f 6e 20 43 56 75 28 61 2c 63 29 7b 63 3d 70 61 72 73 65 49 6e 74 28 52 4a 28 63 2c 4a 55 75 29 7c 7c 57 4d 2c 31 30 29 3b 72 65 74 75 72 6e 20 61 2e 52 5b 63 5d 3d 61 2e 52 5b 63 5d 7c 7c 6e 65 77 20 78 49 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 56 75 28 61 2c 63 29 7b 63 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 63 3b 72 65 74 75 72 6e 20 65 73 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: ion LVu(a,c){c=c===void 0?!1:c;if(!$r(a))return!1;var d=!1;eue(a,IUu)&&(d=RJ(a,IUu)===pl);return eue(a,U4l)&&(!c\|\|!d)}function CVu(a,c){c=parseInt(RJ(c,JUu)\|\|WM,10);return a.R[c]=a.R[c]\|\|new xI(a)}function MVu(a,c){c=c===void 0?!1:c;return es(a,function(d
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: 65 2e 67 65 74 4d 65 74 61 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 28 74 68 69 73 2c 73 33 71 2c 32 29 7d 3b 76 61 72 20 53 56 75 3d 7b 45 51 61 3a 30 2c 50 67 62 3a 31 2c 6f 43 61 3a 32 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 54 56 75 28 61 2c 63 2c 64 2c 65 29 7b 4b 48 2e 63 61 6c 6c 28 74 68 69 73 29 3b 76 61 72 20 66 3d 74 68 69 73 3b 74 68 69 73 2e 4f 3d 65 3b 74 68 69 73 2e 65 61 3d 74 68 69 73 2e 45 61 3d 74 68 69 73 2e 76 61 3d 74 68 69 73 2e 4d 61 3d 74 68 69 73 2e 77 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 4e 76 61 3d 7b 78 3a 30 2c 79 3a 30 7d 3b 74 68 69 73 2e 54 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6f 61 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 74 68 69 73 2e 5a 66 3d 7b 7d 3b 74 68 69 73 2e 48 61 3d 6e 65 77 20 57 Data Ascii: e.getMetadata=function(){return Q(this,s3q,2)};var SVu={EQa:0,Pgb:1,oCa:2};function TVu(a,c,d,e){KH.call(this);var f=this;this.O=e;this.ea=this.Ea=this.va=this.Ma=this.wa=null;this.Nva={x:0,y:0};this.Ta=null;this.oa=document.body;this.Zf={};this.Ha=new W
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: 28 29 3b 62 72 65 61 6b 7d 7d 7d 63 61 74 63 68 28 71 29 7b 53 38 28 22 45 72 72 6f 72 20 69 6e 20 63 6c 69 65 6e 74 20 66 6f 6f 74 65 72 20 63 61 6c 6c 62 61 63 6b 2e 22 29 7d 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 53 38 28 22 55 6e 6b 6e 6f 77 6e 20 63 6c 69 65 6e 74 20 63 6f 6e 74 65 6e 74 20 6d 65 73 73 61 67 65 20 49 44 3a 20 22 2b 67 2e 69 64 29 7d 7d 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 56 75 26 26 28 67 3d 67 2e 44 2c 21 28 67 2e 74 69 6d 65 73 74 61 6d 70 3c 66 2e 48 29 26 26 66 2e 44 29 29 7b 6c 3d 66 2e 44 2e 63 6f 6e 66 69 67 3b 68 3d 67 2e 64 61 74 61 7c 7c 6c 5b 47 55 75 5d 7c 7c 6c 2e 75 73 65 72 69 64 7c 7c 6c 2e 65 6d 61 69 6c 3b 73 77 69 74 63 68 28 67 2e 65 76 65 6e 74 54 79 70 65 29 7b 63 61 73 65 20 6d Data Ascii: ();break}}}catch(q){S8("Error in client footer callback.")}break;default:S8("Unknown client content message ID: "+g.id)}}else if(g instanceof mVu&&(g=g.D,!(g.timestamp<f.H)&&f.D)){l=f.D.config;h=g.data\|\|l[GUu]\|\|l.userid\|\|l.email;switch(g.eventType){case m
2024-10-30 19:40:08 UTC	1378	IN	Data Raw: 62 3d 74 68 69 73 2e 4a 2e 52 2e 62 69 6e 64 28 74 68 69 73 2e 4a 29 3b 74 68 69 73 2e 4f 62 3d 74 68 69 73 2e 4a 2e 4f 2e 62 69 6e 64 28 74 68 69 73 2e 4a 29 3b 74 68 69 73 2e 57 62 3d 74 68 69 73 2e 4a 2e 56 2e 62 69 6e 64 28 74 68 69 73 2e 4a 29 3b 74 68 69 73 2e 4a 2e 48 2e 62 69 6e 64 28 74 68 69 73 2e 4a 29 3b 74 68 69 73 2e 5a 61 3d 21 31 3b 74 68 69 73 2e 43 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6c 75 3d 61 3b 74 68 69 73 2e 52 3d 64 7c 7c 6e 65 77 20 41 56 75 3b 74 68 69 73 2e 48 61 2e 61 64 64 28 47 4d 6d 28 74 68 69 73 2e 52 2e 44 29 2e 73 75 62 73 63 72 69 62 65 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 72 79 7b 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 56 75 29 66 2e 4d 75 28 4e 75 6d 62 65 72 28 67 2e 44 29 2c 67 2e 50 73 2c 21 31 29 Data Ascii: b=this.J.R.bind(this.J);this.Ob=this.J.O.bind(this.J);this.Wb=this.J.V.bind(this.J);this.J.H.bind(this.J);this.Za=!1;this.Ca=null;this.lu=a;this.R=d\|\|new AVu;this.Ha.add(GMm(this.R.D).subscribe(function(g){try{if(g instanceof sVu)f.Mu(Number(g.D),g.Ps,!1)
2024-10-30 19:40:09 UTC	1378	IN	Data Raw: 72 20 69 6e 73 74 61 6e 63 65 20 77 68 65 6e 20 74 72 79 69 6e 67 20 74 6f 20 66 65 74 63 68 20 6c 6f 6f 6b 75 70 49 64 22 29 3b 72 65 74 75 72 6e 22 22 7d 29 3b 63 26 26 28 61 2e 66 62 3d 63 2c 61 2e 57 2e 44 3d 61 2e 66 62 2c 58 55 75 28 61 2e 57 29 29 7d 66 75 6e 63 74 69 6f 6e 20 59 56 75 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 6c 75 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 63 2e 6b 65 79 43 6f 64 65 3d 3d 3d 64 2e 6b 65 79 43 6f 64 65 26 26 21 21 63 2e 63 74 72 6c 4b 65 79 3d 3d 3d 21 21 64 2e 63 74 72 6c 4b 65 79 26 26 21 21 63 2e 61 6c 74 4b 65 79 3d 3d 3d 21 21 64 2e 61 6c 74 4b 65 79 26 26 21 21 63 2e 73 68 69 66 74 4b 65 79 3d 3d 3d 21 21 64 2e 73 68 69 66 74 4b 65 79 26 26 21 21 63 2e 6d 65 74 61 4b 65 79 Data Ascii: r instance when trying to fetch lookupId");return""});c&&(a.fb=c,a.W.D=a.fb,XUu(a.W))}function YVu(a,c){return a.lu.some(function(d){return c.keyCode===d.keyCode&&!!c.ctrlKey===!!d.ctrlKey&&!!c.altKey===!!d.altKey&&!!c.shiftKey===!!d.shiftKey&&!!c.metaKey

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49963	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:09 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194009Z-16849878b78z2wx67pvzz63kdg0000000750000000005cwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49962	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:09 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:09 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194009Z-16849878b78fssff8btnns3b1400000008sg00000000d5tr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:09 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49964	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:09 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:09 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194009Z-16849878b78tg5n42kspfr0x4800000008gg00000000b2h5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:40:09 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49965	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:09 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: a0c84568-901e-0016-0da6-2aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194009Z-r197bdfb6b4cxj4bmw6ag8gees000000013g00000000hh2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49966	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:09 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 055e5760-501e-00a0-45eb-289d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194009Z-r197bdfb6b4xfp4mncra29rqkc00000001u000000000xzeq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49972	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:10 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:10 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194010Z-16849878b785jrf8dn0d2rczaw00000009k000000000rx9p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:10 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49974	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:10 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:10 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194010Z-16849878b782d4lwcu6h6gmxnw000000084000000000mrrh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:10 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49973	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:10 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 78dfd7f1-001e-0034-02ca-2add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194010Z-16849878b78z2wx67pvzz63kdg0000000760000000001p7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49975	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:10 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194010Z-16849878b78fhxrnedubv5byks00000006w0000000005dnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49976	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:10 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:10 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194010Z-16849878b78q9m8bqvwuva4svc00000006z000000000mpke x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:10 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49977	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:10 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:10 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 53c53d4f-801e-008c-1772-287130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194010Z-15b8d89586ff5l62aha9080wv000000009y00000000006ta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:12 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49978	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:10 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: fe6c1954-001e-0082-5f6d-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194011Z-r197bdfb6b46kmj4701qkq602400000007pg00000000ah7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49979	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:10 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194011Z-15b8d89586fmhjx6a8nf3qm53c00000002ag00000000c1xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49980	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:11 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:12 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 951c16f0-d01e-002b-20ad-2a25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194011Z-17c5cb586f6wnfhvhw6gvetfh400000007z000000000at0w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49982	216.58.206.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:12 UTC	983	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1602 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://docs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:12 UTC	1602	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 37 34 2c 5b 5b 22 31 37 33 30 33 31 37 31 39 39 35 31 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],574,[["1730317199517",null,null,null,
2024-10-30 19:40:12 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 19:40:12 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 19:40:12 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 19:40:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49984	172.217.16.142	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:12 UTC	1037	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=card/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:12 UTC	902	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 96962 Date: Wed, 30 Oct 2024 19:40:12 GMT Expires: Thu, 30 Oct 2025 19:40:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:12 UTC	476	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 54 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 74 79 70 65 6f 66 20 61 2e 64 69 73 70 6f 73 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 64 69 73 70 6f 73 65 28 29 7d 3b 5f 2e 55 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 54 67 3d 74 68 69 73 2e 54 67 3b 74 68 69 73 2e 58 6f 3d 74 68 69 73 2e 58 6f 7d 3b 5f 2e 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 54 67 3d 21 31 3b 5f 2e 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 44 69 73 70 6f 73 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 67 7d 3b 5f 2e 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 70 6f 73 65 3d 66 75 6e Data Ascii: gapi.loaded_1(function(_){var window=this;_.Ti=function(a){a&&typeof a.dispose=="function"&&a.dispose()};_.Ui=function(){this.Tg=this.Tg;this.Xo=this.Xo};_.Ui.prototype.Tg=!1;_.Ui.prototype.isDisposed=function(){return this.Tg};_.Ui.prototype.dispose=fun
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 58 6f 29 66 6f 72 28 3b 74 68 69 73 2e 58 6f 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 58 6f 2e 73 68 69 66 74 28 29 28 29 7d 3b 0a 76 61 72 20 62 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 5f 2e 64 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 74 79 70 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 2e 63 6a 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 63 6a 3f 53 74 72 69 6e 67 28 61 29 3a 61 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 Data Ascii: ction(){if(this.Xo)for(;this.Xo.length;)this.Xo.shift()()};var bj=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return!0;return!1};_.dj=function(a,b){this.type="function"==typeof _.cj&&a instanceof _.cj?String(a):a;this.currentTarget=this.targe
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 74 59 3a 61 2e 6c 61 79 65 72 59 2c 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 61 2e 63 6c 69 65 6e 74 58 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 63 6c 69 65 6e 74 58 3a 61 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 61 2e 63 6c 69 65 6e 74 59 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 63 6c 69 65 6e 74 59 3a 61 2e 70 61 67 65 59 2c 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 61 2e 73 63 72 65 65 6e 58 7c 7c 30 2c 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 61 2e 73 63 72 65 65 6e 59 7c 7c 30 29 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 61 2e 62 75 74 74 6f 6e 3b 74 68 69 73 2e 6b 65 79 43 6f 64 65 3d 61 2e 6b 65 79 43 6f 64 65 7c 7c 30 3b 74 68 69 73 2e 6b 65 79 3d 61 2e 6b 65 79 7c 7c 22 22 3b 74 68 69 73 2e 63 68 61 72 43 6f 64 65 3d 61 2e 63 68 61 72 43 6f 64 65 Data Ascii: tY:a.layerY,this.clientX=a.clientX!==void 0?a.clientX:a.pageX,this.clientY=a.clientY!==void 0?a.clientY:a.pageY,this.screenX=a.screenX\|\|0,this.screenY=a.screenY\|\|0);this.button=a.button;this.keyCode=a.keyCode\|\|0;this.key=a.key\|\|"";this.charCode=a.charCode
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 2e 68 79 3d 21 31 29 29 3a 28 62 3d 6e 65 77 20 69 6a 28 62 2c 74 68 69 73 2e 73 72 63 2c 66 2c 21 21 64 2c 65 29 2c 62 2e 68 79 3d 63 2c 61 2e 70 75 73 68 28 62 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6b 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 21 28 61 20 69 6e 20 74 68 69 73 2e 75 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 74 68 69 73 2e 75 65 5b 61 5d 3b 62 3d 6c 6a 28 65 2c 62 2c 63 2c 64 29 3b 72 65 74 75 72 6e 20 62 3e 2d 31 3f 28 6a 6a 28 65 5b 62 5d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 65 2c 62 2c 31 29 2c 65 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 28 64 65 6c Data Ascii: .hy=!1)):(b=new ij(b,this.src,f,!!d,e),b.hy=c,a.push(b));return b};_.kj.prototype.remove=function(a,b,c,d){a=a.toString();if(!(a in this.ue))return!1;var e=this.ue[a];b=lj(e,b,c,d);return b>-1?(jj(e[b]),Array.prototype.splice.call(e,b,1),e.length==0&&(del
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 22 29 3b 76 61 72 20 68 3d 5f 2e 77 62 28 65 29 3f 21 21 65 2e 63 61 70 74 75 72 65 3a 21 21 65 2c 6b 3d 5f 2e 75 6a 28 61 29 3b 6b 7c 7c 28 61 5b 6e 6a 5d 3d 6b 3d 6e 65 77 20 5f 2e 6b 6a 28 61 29 29 3b 63 3d 6b 2e 61 64 64 28 62 2c 63 2c 64 2c 68 2c 66 29 3b 69 66 28 63 2e 70 72 6f 78 79 29 72 65 74 75 72 6e 20 63 3b 64 3d 76 6a 28 29 3b 63 2e 70 72 6f 78 79 3d 64 3b 64 2e 73 72 63 3d 61 3b 64 2e 6c 69 73 74 65 6e 65 72 3d 63 3b 69 66 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 5f 2e 73 69 7c 7c 28 65 3d 68 29 2c 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 65 3d 21 31 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: ction(a,b,c,d,e,f){if(!b)throw Error("E");var h=_.wb(e)?!!e.capture:!!e,k=_.uj(a);k\|\|(a[nj]=k=new _.kj(a));c=k.add(b,c,d,h,f);if(c.proxy)return c;d=vj();c.proxy=d;d.src=a;d.listener=c;if(a.addEventListener)_.si\|\|(e=h),e===void 0&&(e=!1),a.addEventListener
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 28 61 5b 7a 6a 5d 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 68 61 6e 64 6c 65 45 76 65 6e 74 28 62 29 7d 29 3b 72 65 74 75 72 6e 20 61 5b 7a 6a 5d 7d 3b 5f 2e 61 6a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 78 6a 3d 61 28 78 6a 29 7d 29 3b 0a 5f 2e 57 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 5f 2e 55 62 28 31 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 72 69 28 74 68 69 73 2e 4f 62 2c 61 29 7d 29 3b 5f 2e 41 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2d 62 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 63 3e 3d 30 26 26 61 2e 69 6e 64 65 78 4f 66 28 62 2c 63 29 3d 3d 63 7d 3b 5f 2e 42 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 41 72 72 Data Ascii: (a[zj]=function(b){return a.handleEvent(b)});return a[zj]};_.aj(function(a){xj=a(xj)});_.Wd.prototype.O=_.Ub(1,function(a){return _.ri(this.Ob,a)});_.Aj=function(a,b){var c=a.length-b.length;return c>=0&&a.indexOf(b,c)==c};_.Bj=function(a,b,c,d,e){if(Arr
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 6b 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 30 2c 63 2c 64 29 7d 3b 5f 2e 67 2e 43 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 6b 2e 72 65 6d 6f 76 65 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 63 2c 64 29 7d 3b 5f 2e 67 2e 62 4e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 6a 28 74 68 69 73 2e 75 6b 2c 61 29 7d 3b 5f 2e 67 2e 57 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 75 6b 26 26 74 68 69 73 2e 75 6b 2e 72 65 6d 6f 76 65 41 6c 6c 28 76 6f 69 64 20 30 29 7d 3b 0a 5f 2e 67 2e 64 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 74 68 69 73 2e 75 6b 2e 75 65 5b 53 74 72 69 6e Data Ascii: n(a,b,c,d){return this.uk.add(String(a),b,!0,c,d)};_.g.Cc=function(a,b,c,d){return this.uk.remove(String(a),b,c,d)};_.g.bN=function(a){return _.mj(this.uk,a)};_.g.WJ=function(){this.uk&&this.uk.removeAll(void 0)};_.g.du=function(a,b,c){a=this.uk.ue[Strin
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 3b 5f 2e 67 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 44 72 28 74 68 69 73 2e 78 2c 74 68 69 73 2e 79 29 7d 3b 5f 2e 67 2e 65 71 75 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 44 72 26 26 5f 2e 43 72 28 74 68 69 73 2c 61 29 7d 3b 5f 2e 67 2e 63 65 69 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 78 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 78 29 3b 74 68 69 73 2e 79 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 79 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 5f 2e 67 2e 66 6c 6f 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 78 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 78 29 3b 74 68 Data Ascii: totype;_.g.clone=function(){return new _.Dr(this.x,this.y)};_.g.equals=function(a){return a instanceof _.Dr&&_.Cr(this,a)};_.g.ceil=function(){this.x=Math.ceil(this.x);this.y=Math.ceil(this.y);return this};_.g.floor=function(){this.x=Math.floor(this.x);th
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 26 26 61 3f 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4a 72 3f 61 2e 6c 65 66 74 3e 3d 74 68 69 73 2e 6c 65 66 74 26 26 61 2e 72 69 67 68 74 3c 3d 74 68 69 73 2e 72 69 67 68 74 26 26 61 2e 74 6f 70 3e 3d 74 68 69 73 2e 74 6f 70 26 26 61 2e 62 6f 74 74 6f 6d 3c 3d 74 68 69 73 2e 62 6f 74 74 6f 6d 3a 61 2e 78 3e 3d 74 68 69 73 2e 6c 65 66 74 26 26 61 2e 78 3c 3d 74 68 69 73 2e 72 69 67 68 74 26 26 61 2e 79 3e 3d 74 68 69 73 2e 74 6f 70 26 26 61 2e 79 3c 3d 74 68 69 73 2e 62 6f 74 74 6f 6d 3a 21 31 7d 3b 0a 5f 2e 67 2e 65 78 70 61 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 5f 2e 77 62 28 61 29 3f 28 74 68 69 73 2e 74 6f 70 2d 3d 61 2e 74 6f 70 2c 74 68 69 73 2e 72 69 67 68 74 2b 3d 61 2e 72 69 Data Ascii: a){return this&&a?a instanceof _.Jr?a.left>=this.left&&a.right<=this.right&&a.top>=this.top&&a.bottom<=this.bottom:a.x>=this.left&&a.x<=this.right&&a.y>=this.top&&a.y<=this.bottom:!1};_.g.expand=function(a,b,c,d){_.wb(a)?(this.top-=a.top,this.right+=a.ri
2024-10-30 19:40:12 UTC	1378	IN	Data Raw: 28 61 2c 62 29 7b 76 61 72 20 63 3d 4e 72 5b 62 5d 3b 69 66 28 21 63 29 7b 76 61 72 20 64 3d 48 72 28 62 29 3b 63 3d 64 3b 61 2e 73 74 79 6c 65 5b 64 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 64 3d 28 5f 2e 7a 64 3f 22 57 65 62 6b 69 74 22 3a 5f 2e 79 64 3f 22 4d 6f 7a 22 3a 5f 2e 76 64 3f 22 6d 73 22 3a 6e 75 6c 6c 29 2b 49 72 28 64 29 2c 61 2e 73 74 79 6c 65 5b 64 5d 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 29 29 3b 4e 72 5b 62 5d 3d 63 7d 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 4f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 73 74 79 6c 65 5b 48 72 28 62 29 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 63 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 63 3a 61 2e 73 74 79 6c 65 5b 4b 72 28 61 2c 62 29 5d 7c 7c 22 22 7d 3b 0a 5f Data Ascii: (a,b){var c=Nr[b];if(!c){var d=Hr(b);c=d;a.style[d]===void 0&&(d=(_.zd?"Webkit":_.yd?"Moz":_.vd?"ms":null)+Ir(d),a.style[d]!==void 0&&(c=d));Nr[b]=c}return c};_.Or=function(a,b){var c=a.style[Hr(b)];return typeof c!=="undefined"?c:a.style[Kr(a,b)]\|\|""};_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49983	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:12 UTC	962	OUT	GET /document/manifest.json HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:12 UTC	4019	IN	HTTP/1.1 200 OK Content-Type: application/manifest+json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:40:12 GMT Cross-Origin-Resource-Policy: same-origin Transfer-Encoding: chunked Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-MiA5VRn02pmCPmP9DI-qAA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Reporting-Endpoints: default="/document/web-reports?bl=editors.documents-frontend_20241022.02_p3&context=eJwV0HdUlUcaBvDxu_N-KlyKKBpRigIqKIZmLDThcu8CESQW5pNYAoIcowsRUdcaMcazoq4HjGIBufRyvdbl2EUj2IKFqBjRJcpaKbqiFwET2Cd__M7MmZkzz_u-Zr_Z2nTHsGLYJgsW2U-wPFhnLpgRTqgFuw7B1oIVgoONYKNtBdNANcQNFqxqiGDjPhPMAJF2gjkNEyxmuGBFDoItdhTs00jBEpwFU48SzB4uwCd3wSzGCTYAxnoItsVLMN0EwTJgN_R-Idj0iYLdnSTYMwgKRNaXgi2Dr2ajBkWwiXAnVrAnkDdfsAdxgr2E_gmCDYX7iYL5LhEsFFpWIBN-2yjYKyhLF-wU3NokWCOE_iDYLJi0Q7AwyNgj2H5wzRZsAvTsFcxyn2CbcgTLgk15WGGcXjB_OFCE_qEG7sMNo2ANMOioYC5wuhJzhMbzgr2BEVcE84L1sAPCrwk2B4J_QX-gq8UMYR-Ug_sdwaZAZT0y4D2oHgj2r4eCHYTiBtzBabgOPzcK9is4PBVsPGQ_E6wUrJ4L5gjH4We4AvXw8pVgHyG-XbBUeAEdEG-lsItwB9TWChsOL4coLMJOYbFg7aswJ1jwhcJWwFn4BfZPVlgF1MML6B-psMBohUXBT7BlpsL2wElFYU9jFZY-T2GZEBynsK_gUrzC6sB6Of6HWWnI2KCwJNgAW2ArZEIZHIXH8AyGfa8wZzgFF-Em3IcmaIbfbetYrHuLFA_b576TfoKGpHdSE_x4-Z20A5Ka2qUUGPr5e2kERMe8lxQ4Mt4knYRLnibJIcwkjYLZ603SPBi-0SS5wJBNJskROs6YpB7IqTFJRXB9yUepDlb7d0rpoAR0St9A7KJOKR7OZnRKl6F2dpd0Dyau7ZKCwOZGl2QH_e90SQPAz6Zb0sDQH7qlEZC [TRUNCATED] X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 x-l2-request-path: l2-managed-5 Connection: close
2024-10-30 19:40:12 UTC	489	IN	Data Raw: 31 44 44 0d 0a 7b 22 73 63 6f 70 65 22 3a 22 2f 64 6f 63 75 6d 65 6e 74 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 6e 61 6d 65 22 3a 22 44 6f 63 73 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 64 6f 63 75 6d 65 6e 74 2f 3f 75 73 70 5c 75 30 30 33 64 69 6e 73 74 61 6c 6c 65 64 5f 77 65 62 61 70 70 22 2c 22 69 64 22 3a 22 2f 64 6f 63 75 6d 65 6e 74 2f 3f 75 73 70 5c 75 30 30 33 64 69 6e 73 74 61 6c 6c 65 64 5f 77 65 62 61 70 70 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 22 31 36 78 31 36 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 64 6f 63 75 6d 65 6e 74 73 2f 69 6d 61 67 65 73 2f 6b 69 78 2d 66 61 76 69 63 6f 6e 2d 32 30 32 33 71 34 2e 69 Data Ascii: 1DD{"scope":"/document/","display":"browser","name":"Docs","start_url":"/document/?usp\u003dinstalled_webapp","id":"/document/?usp\u003dinstalled_webapp","icons":[{"sizes":"16x16","src":"https://ssl.gstatic.com/docs/documents/images/kix-favicon-2023q4.i

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49981	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:12 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dbd91de3-001e-002b-2827-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194012Z-17c5cb586f672xmrz843mf85fn000000079g00000000knum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49989	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:12 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-16849878b78z2wx67pvzz63kdg00000006z0000000010hqf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:13 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49986	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-16849878b78q9m8bqvwuva4svc00000006wg00000000ythr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:40:13 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49988	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 8a3f5c5e-301e-000c-55dc-26323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-17c5cb586f6wnfhvhw6gvetfh4000000080g000000007au3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:40:13 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49987	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 09711dcd-d01e-0066-4b94-2aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-17c5cb586f6z6tq2xr35mhd5x00000000130000000008y0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:13 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49985	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: d871491f-101e-0046-2593-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-r197bdfb6b4zbthzeykwgnvx8s000000019g000000008rfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49991	142.250.185.78	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	1005	OUT	GET /static/document/client/js/3832832616-client_js_prod_emojidata.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:13 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 302227 Date: Wed, 30 Oct 2024 19:40:13 GMT Expires: Thu, 30 Oct 2025 19:40:13 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 29 Oct 2024 04:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:13 UTC	590	IN	Data Raw: 46 4a 28 4e 53 61 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 51 62 75 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 70 28 61 29 26 31 3f 6f 6b 62 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 52 62 75 28 61 29 7b 59 24 6b 28 61 29 3b 76 61 72 20 63 3d 61 2e 44 61 2c 64 3d 62 70 28 63 29 26 32 35 36 2c 65 3d 63 2e 6c 65 6e 67 74 68 2b 28 64 3f 2d 31 3a 30 29 3b 66 6f 72 28 61 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6d 65 73 73 61 67 65 49 64 21 3d 6e 75 6c 6c 3f 31 3a 30 3b 61 3c 65 3b 61 2b 2b 29 63 5b 61 5d 3d 51 62 75 28 63 5b 61 5d 29 3b 69 66 28 64 29 7b 64 3d 63 5b 63 2e 6c 65 6e 67 74 68 2d 31 5d 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 64 29 64 5b 66 5d 3d 51 62 75 28 64 5b 66 5d 29 7d 75 6b 62 26 26 Data Ascii: FJ(NSa);function Qbu(a){return Array.isArray(a)&&ap(a)&1?okb:void 0}function Rbu(a){Y$k(a);var c=a.Da,d=bp(c)&256,e=c.length+(d?-1:0);for(a=a.constructor.messageId!=null?1:0;a<e;a++)c[a]=Qbu(c[a]);if(d){d=c[c.length-1];for(var f in d)d[f]=Qbu(d[f])}ukb&&
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 29 7d 4a 28 24 62 75 2c 53 29 3b 76 61 72 20 61 63 75 3d 4a 71 28 24 62 75 29 3b 66 75 6e 63 74 69 6f 6e 20 62 63 75 28 61 29 7b 74 68 69 73 2e 44 61 3d 4f 28 61 29 7d 4a 28 62 63 75 2c 53 29 3b 76 61 72 20 63 63 75 3d 4a 71 28 62 63 75 29 3b 66 75 6e 63 74 69 6f 6e 20 64 63 75 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 66 69 6c 74 65 72 28 63 3f 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 55 70 28 64 2c 32 2c 30 29 3d 3d 3d 63 7d 3a 42 28 21 30 29 29 2e 66 6c 61 74 4d 61 70 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 43 70 28 64 2c 53 62 75 2c 31 2c 76 70 28 29 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 49 5f 28 29 7d 29 7d 29 7d 76 61 72 20 65 63 75 3d 2f 5b 23 2a 30 2d 39 5d 5c 75 46 Data Ascii: )}J($bu,S);var acu=Jq($bu);function bcu(a){this.Da=O(a)}J(bcu,S);var ccu=Jq(bcu);function dcu(a,c){return a.filter(c?function(d){return Up(d,2,0)===c}:B(!0)).flatMap(function(d){return Cp(d,Sbu,1,vp()).map(function(e){return e.I_()})})}var ecu=/[#*0-9]\uF
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 75 44 46 37 44 5c 75 44 46 39 36 5c 75 44 46 39 37 5c 75 44 46 39 39 2d 5c 75 44 46 39 42 5c 75 44 46 39 45 5c 75 44 46 39 46 5c 75 44 46 43 44 5c 75 44 46 43 45 5c 75 44 46 44 34 2d 5c 75 44 46 44 46 5c 75 44 46 46 35 5c 75 44 46 46 37 5d 5c 75 46 45 30 46 3f 7c 5b 5c 75 44 46 38 35 5c 75 44 46 43 32 5c 75 44 46 43 37 5d 28 3f 3a 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 46 5d 29 3f 7c 5b 5c 75 44 46 43 33 5c 75 44 46 43 34 5c 75 44 46 43 41 5d 28 3f 3a 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 46 5d 29 3f 28 3f 3a 5c 75 32 30 30 44 5b 5c 75 32 36 34 30 5c 75 32 36 34 32 5d 5c 75 46 45 30 46 3f 29 3f 7c 5b 5c 75 44 46 43 42 5c 75 44 46 43 43 5d 28 3f 3a 5c 75 46 45 30 46 7c 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 Data Ascii: uDF7D\uDF96\uDF97\uDF99-\uDF9B\uDF9E\uDF9F\uDFCD\uDFCE\uDFD4-\uDFDF\uDFF5\uDFF7]\uFE0F?\|[\uDF85\uDFC2\uDFC7](?:\uD83C[\uDFFB-\uDFFF])?\|[\uDFC3\uDFC4\uDFCA](?:\uD83C[\uDFFB-\uDFFF])?(?:\u200D[\u2640\u2642]\uFE0F?)?\|[\uDFCB\uDFCC](?:\uFE0F\|\uD83C[\uDFFB-\uD
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 45 5c 75 44 44 46 31 5c 75 44 44 46 34 5c 75 44 44 46 35 5c 75 44 44 46 37 5c 75 44 44 46 41 5c 75 44 44 46 46 5d 7c 5c 75 44 44 46 34 5c 75 44 38 33 43 5c 75 44 44 46 32 7c 5c 75 44 44 46 35 5c 75 44 38 33 43 5b 5c 75 44 44 45 36 5c 75 44 44 45 41 2d 5c 75 44 44 45 44 5c 75 44 44 46 30 2d 5c 75 44 44 46 33 5c 75 44 44 46 37 2d 5c 75 44 44 46 39 5c 75 44 44 46 43 5c 75 44 44 46 45 5d 7c 5c 75 44 44 46 36 5c 75 44 38 33 43 5c 75 44 44 45 36 7c 5c 75 44 44 46 37 5c 75 44 38 33 43 5b 5c 75 44 44 45 41 5c 75 44 44 46 34 5c 75 44 44 46 38 5c 75 44 44 46 41 5c 75 44 44 46 43 5d 7c 5c 75 44 44 46 38 5c 75 44 38 33 43 5b 5c 75 44 44 45 36 2d 5c 75 44 44 45 41 5c 75 44 44 45 43 2d 5c 75 44 44 46 34 5c 75 44 44 46 37 2d 5c 75 44 44 46 39 5c 75 44 44 46 42 5c 75 44 Data Ascii: E\uDDF1\uDDF4\uDDF5\uDDF7\uDDFA\uDDFF]\|\uDDF4\uD83C\uDDF2\|\uDDF5\uD83C[\uDDE6\uDDEA-\uDDED\uDDF0-\uDDF3\uDDF7-\uDDF9\uDDFC\uDDFE]\|\uDDF6\uD83C\uDDE6\|\uDDF7\uD83C[\uDDEA\uDDF4\uDDF8\uDDFA\uDDFC]\|\uDDF8\uD83C[\uDDE6-\uDDEA\uDDEC-\uDDF4\uDDF7-\uDDF9\uDDFB\uD
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 46 5d 29 3f 28 3f 3a 5c 75 32 30 30 44 5b 5c 75 32 36 34 30 5c 75 32 36 34 32 5d 5c 75 46 45 30 46 3f 29 3f 7c 5b 5c 75 44 44 37 34 5c 75 44 44 39 30 5d 28 3f 3a 5c 75 46 45 30 46 7c 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 46 5d 29 3f 7c 5b 5c 75 44 43 30 30 2d 5c 75 44 43 30 37 5c 75 44 43 30 39 2d 5c 75 44 43 31 34 5c 75 44 43 31 36 2d 5c 75 44 43 32 35 5c 75 44 43 32 37 2d 5c 75 44 43 33 41 5c 75 44 43 33 43 2d 5c 75 44 43 33 45 5c 75 44 43 34 30 5c 75 44 43 34 34 5c 75 44 43 34 35 5c 75 44 43 35 31 2d 5c 75 44 43 36 35 5c 75 44 43 36 41 5c 75 44 43 37 39 2d 5c 75 44 43 37 42 5c 75 44 43 37 44 2d 5c 75 44 43 38 30 5c 75 44 43 38 34 5c 75 44 43 38 38 2d 5c 75 44 43 38 45 5c 75 44 43 39 30 5c 75 Data Ascii: C[\uDFFB-\uDFFF])?(?:\u200D[\u2640\u2642]\uFE0F?)?\|[\uDD74\uDD90](?:\uFE0F\|\uD83C[\uDFFB-\uDFFF])?\|[\uDC00-\uDC07\uDC09-\uDC14\uDC16-\uDC25\uDC27-\uDC3A\uDC3C-\uDC3E\uDC40\uDC44\uDC45\uDC51-\uDC65\uDC6A\uDC79-\uDC7B\uDC7D-\uDC80\uDC84\uDC88-\uDC8E\uDC90\u
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 75 32 37 30 38 5d 5c 75 46 45 30 46 3f 7c 5c 75 32 37 36 34 5c 75 46 45 30 46 3f 5c 75 32 30 30 44 5c 75 44 38 33 44 28 3f 3a 5c 75 44 43 38 42 5c 75 32 30 30 44 5c 75 44 38 33 44 29 3f 5c 75 44 43 36 38 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 46 5d 7c 5c 75 44 38 33 43 5b 5c 75 44 46 33 45 5c 75 44 46 37 33 5c 75 44 46 37 43 5c 75 44 46 39 33 5c 75 44 46 41 34 5c 75 44 46 41 38 5c 75 44 46 45 42 5c 75 44 46 45 44 5d 7c 5c 75 44 38 33 44 5b 5c 75 44 43 42 42 5c 75 44 43 42 43 5c 75 44 44 32 37 5c 75 44 44 32 43 5c 75 44 45 38 30 5c 75 44 45 39 32 5d 7c 5c 75 44 38 33 45 28 3f 3a 5b 5c 75 44 44 41 46 2d 5c 75 44 44 42 33 5c 75 44 44 42 43 5c 75 44 44 42 44 5d 7c 5c 75 44 44 31 44 5c 75 32 30 30 44 5c 75 44 38 33 44 5c 75 44 43 36 38 5c 75 Data Ascii: u2708]\uFE0F?\|\u2764\uFE0F?\u200D\uD83D(?:\uDC8B\u200D\uD83D)?\uDC68\uD83C[\uDFFB-\uDFFF]\|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]\|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]\|\uD83E(?:[\uDDAF-\uDDB3\uDDBC\uDDBD]\|\uDD1D\u200D\uD83D\uDC68\u
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 5c 75 44 46 41 34 5c 75 44 46 41 38 5c 75 44 46 45 42 5c 75 44 46 45 44 5d 7c 5c 75 44 38 33 44 28 3f 3a 5b 5c 75 44 43 42 42 5c 75 44 43 42 43 5c 75 44 44 32 37 5c 75 44 44 32 43 5c 75 44 45 38 30 5c 75 44 45 39 32 5d 7c 5c 75 44 43 36 36 28 3f 3a 5c 75 32 30 30 44 5c 75 44 38 33 44 5c 75 44 43 36 36 29 3f 7c 5c 75 44 43 36 37 28 3f 3a 5c 75 32 30 30 44 5c 75 44 38 33 44 5b 5c 75 44 43 36 36 5c 75 44 43 36 37 5d 29 3f 7c 5c 75 44 43 36 39 5c 75 32 30 30 44 5c 75 44 38 33 44 28 3f 3a 5c 75 44 43 36 36 28 3f 3a 5c 75 32 30 30 44 5c 75 44 38 33 44 5c 75 44 43 36 36 29 3f 7c 5c 75 44 43 36 37 28 3f 3a 5c 75 32 30 30 44 5c 75 44 38 33 44 5b 5c 75 44 43 36 36 5c 75 44 43 36 37 5d 29 3f 29 29 7c 5c 75 44 38 33 45 5b 5c 75 44 44 41 46 2d 5c 75 44 44 42 33 5c 75 Data Ascii: \uDFA4\uDFA8\uDFEB\uDFED]\|\uD83D(?:[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]\|\uDC66(?:\u200D\uD83D\uDC66)?\|\uDC67(?:\u200D\uD83D[\uDC66\uDC67])?\|\uDC69\u200D\uD83D(?:\uDC66(?:\u200D\uD83D\uDC66)?\|\uDC67(?:\u200D\uD83D[\uDC66\uDC67])?))\|\uD83E[\uDDAF-\uDDB3\u
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 32 30 30 44 5c 75 44 38 33 44 28 3f 3a 5b 5c 75 44 43 36 38 5c 75 44 43 36 39 5d 7c 5c 75 44 43 38 42 5c 75 32 30 30 44 5c 75 44 38 33 44 5b 5c 75 44 43 36 38 5c 75 44 43 36 39 5d 29 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 46 5d 7c 5c 75 44 38 33 43 5b 5c 75 44 46 33 45 5c 75 44 46 37 33 5c 75 44 46 37 43 5c 75 44 46 39 33 5c 75 44 46 41 34 5c 75 44 46 41 38 5c 75 44 46 45 42 5c 75 44 46 45 44 5d 7c 5c 75 44 38 33 44 5b 5c 75 44 43 42 42 5c 75 44 43 42 43 5c 75 44 44 32 37 5c 75 44 44 32 43 5c 75 44 45 38 30 5c 75 44 45 39 32 5d 7c 5c 75 44 38 33 45 28 3f 3a 5b 5c 75 44 44 41 46 2d 5c 75 44 44 42 33 5c 75 44 44 42 43 5c 75 44 44 42 44 5d 7c 5c 75 44 44 31 44 5c 75 32 30 30 44 5c 75 44 38 33 44 5b 5c 75 44 43 36 38 5c 75 44 43 36 39 5d 5c Data Ascii: 200D\uD83D(?:[\uDC68\uDC69]\|\uDC8B\u200D\uD83D[\uDC68\uDC69])\uD83C[\uDFFB-\uDFFF]\|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]\|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]\|\uD83E(?:[\uDDAF-\uDDB3\uDDBC\uDDBD]\|\uDD1D\u200D\uD83D[\uDC68\uDC69]\
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 75 44 45 43 45 2d 5c 75 44 45 44 42 5c 75 44 45 45 30 2d 5c 75 44 45 45 38 5d 7c 5c 75 44 44 33 43 28 3f 3a 5c 75 32 30 30 44 5b 5c 75 32 36 34 30 5c 75 32 36 34 32 5d 5c 75 46 45 30 46 3f 7c 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 46 5d 29 3f 7c 5c 75 44 44 44 31 28 3f 3a 5c 75 32 30 30 44 28 3f 3a 5b 5c 75 32 36 39 35 5c 75 32 36 39 36 5c 75 32 37 30 38 5d 5c 75 46 45 30 46 3f 7c 5c 75 44 38 33 43 5b 5c 75 44 46 33 45 5c 75 44 46 37 33 5c 75 44 46 37 43 5c 75 44 46 38 34 5c 75 44 46 39 33 5c 75 44 46 41 34 5c 75 44 46 41 38 5c 75 44 46 45 42 5c 75 44 46 45 44 5d 7c 5c 75 44 38 33 44 5b 5c 75 44 43 42 42 5c 75 44 43 42 43 5c 75 44 44 32 37 5c 75 44 44 32 43 5c 75 44 45 38 30 5c 75 44 45 39 32 5d 7c 5c 75 44 38 33 45 28 3f 3a 5b 5c 75 44 Data Ascii: uDECE-\uDEDB\uDEE0-\uDEE8]\|\uDD3C(?:\u200D[\u2640\u2642]\uFE0F?\|\uD83C[\uDFFB-\uDFFF])?\|\uDDD1(?:\u200D(?:[\u2695\u2696\u2708]\uFE0F?\|\uD83C[\uDF3E\uDF73\uDF7C\uDF84\uDF93\uDFA4\uDFA8\uDFEB\uDFED]\|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]\|\uD83E(?:[\uD
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 75 44 44 44 31 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 44 5c 75 44 46 46 46 5d 7c 5c 75 44 38 33 43 5b 5c 75 44 46 33 45 5c 75 44 46 37 33 5c 75 44 46 37 43 5c 75 44 46 38 34 5c 75 44 46 39 33 5c 75 44 46 41 34 5c 75 44 46 41 38 5c 75 44 46 45 42 5c 75 44 46 45 44 5d 7c 5c 75 44 38 33 44 5b 5c 75 44 43 42 42 5c 75 44 43 42 43 5c 75 44 44 32 37 5c 75 44 44 32 43 5c 75 44 45 38 30 5c 75 44 45 39 32 5d 7c 5c 75 44 38 33 45 28 3f 3a 5b 5c 75 44 44 41 46 2d 5c 75 44 44 42 33 5c 75 44 44 42 43 5c 75 44 44 42 44 5d 7c 5c 75 44 44 31 44 5c 75 32 30 30 44 5c 75 44 38 33 45 5c 75 44 44 44 31 5c 75 44 38 33 43 5b 5c 75 44 46 46 42 2d 5c 75 44 46 46 46 5d 29 29 29 3f 7c 5c 75 44 46 46 46 28 3f 3a 5c 75 32 30 30 44 28 3f 3a 5b 5c 75 32 36 39 35 5c 75 Data Ascii: uDDD1\uD83C[\uDFFB-\uDFFD\uDFFF]\|\uD83C[\uDF3E\uDF73\uDF7C\uDF84\uDF93\uDFA4\uDFA8\uDFEB\uDFED]\|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]\|\uD83E(?:[\uDDAF-\uDDB3\uDDBC\uDDBD]\|\uDD1D\u200D\uD83E\uDDD1\uD83C[\uDFFB-\uDFFF])))?\|\uDFFF(?:\u200D(?:[\u2695\u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49993	142.250.184.206	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	669	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:13 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:13 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 19:40:13 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49990	172.217.16.142	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	1044	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=config/exm=card,gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_2 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:13 UTC	888	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 62 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 15:27:54 GMT Expires: Thu, 30 Oct 2025 15:27:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Age: 15139 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:13 UTC	62	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 32 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 7d 29 3b 0a 2f 2f 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a Data Ascii: gapi.loaded_2(function(_){var window=this;});// Google Inc.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49995	142.250.185.238	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	815	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=card/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:13 UTC	914	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 96962 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 15:57:32 GMT Expires: Thu, 30 Oct 2025 15:57:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 13361 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:13 UTC	464	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 54 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 74 79 70 65 6f 66 20 61 2e 64 69 73 70 6f 73 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 64 69 73 70 6f 73 65 28 29 7d 3b 5f 2e 55 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 54 67 3d 74 68 69 73 2e 54 67 3b 74 68 69 73 2e 58 6f 3d 74 68 69 73 2e 58 6f 7d 3b 5f 2e 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 54 67 3d 21 31 3b 5f 2e 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 44 69 73 70 6f 73 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 67 7d 3b 5f 2e 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 70 6f 73 65 3d 66 75 6e Data Ascii: gapi.loaded_1(function(_){var window=this;_.Ti=function(a){a&&typeof a.dispose=="function"&&a.dispose()};_.Ui=function(){this.Tg=this.Tg;this.Xo=this.Xo};_.Ui.prototype.Tg=!1;_.Ui.prototype.isDisposed=function(){return this.Tg};_.Ui.prototype.dispose=fun
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 6f 74 79 70 65 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 58 6f 29 66 6f 72 28 3b 74 68 69 73 2e 58 6f 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 58 6f 2e 73 68 69 66 74 28 29 28 29 7d 3b 0a 76 61 72 20 62 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 5f 2e 64 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 74 79 70 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 2e 63 6a 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 63 6a 3f 53 74 72 69 6e 67 28 61 29 3a 61 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 Data Ascii: otype.va=function(){if(this.Xo)for(;this.Xo.length;)this.Xo.shift()()};var bj=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return!0;return!1};_.dj=function(a,b){this.type="function"==typeof _.cj&&a instanceof _.cj?String(a):a;this.currentTarge
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 69 64 20 30 3f 61 2e 6f 66 66 73 65 74 59 3a 61 2e 6c 61 79 65 72 59 2c 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 61 2e 63 6c 69 65 6e 74 58 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 63 6c 69 65 6e 74 58 3a 61 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 61 2e 63 6c 69 65 6e 74 59 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 63 6c 69 65 6e 74 59 3a 61 2e 70 61 67 65 59 2c 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 61 2e 73 63 72 65 65 6e 58 7c 7c 30 2c 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 61 2e 73 63 72 65 65 6e 59 7c 7c 30 29 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 61 2e 62 75 74 74 6f 6e 3b 74 68 69 73 2e 6b 65 79 43 6f 64 65 3d 61 2e 6b 65 79 43 6f 64 65 7c 7c 30 3b 74 68 69 73 2e 6b 65 79 3d 61 2e 6b 65 79 7c 7c 22 22 3b 74 68 69 73 2e 63 68 61 72 43 6f 64 Data Ascii: id 0?a.offsetY:a.layerY,this.clientX=a.clientX!==void 0?a.clientX:a.pageX,this.clientY=a.clientY!==void 0?a.clientY:a.pageY,this.screenX=a.screenX\|\|0,this.screenY=a.screenY\|\|0);this.button=a.button;this.keyCode=a.keyCode\|\|0;this.key=a.key\|\|"";this.charCod
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 62 3d 61 5b 68 5d 2c 63 7c 7c 28 62 2e 68 79 3d 21 31 29 29 3a 28 62 3d 6e 65 77 20 69 6a 28 62 2c 74 68 69 73 2e 73 72 63 2c 66 2c 21 21 64 2c 65 29 2c 62 2e 68 79 3d 63 2c 61 2e 70 75 73 68 28 62 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6b 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 21 28 61 20 69 6e 20 74 68 69 73 2e 75 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 74 68 69 73 2e 75 65 5b 61 5d 3b 62 3d 6c 6a 28 65 2c 62 2c 63 2c 64 29 3b 72 65 74 75 72 6e 20 62 3e 2d 31 3f 28 6a 6a 28 65 5b 62 5d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 65 2c 62 2c 31 29 2c 65 2e 6c 65 6e Data Ascii: b=a[h],c\|\|(b.hy=!1)):(b=new ij(b,this.src,f,!!d,e),b.hy=c,a.push(b));return b};_.kj.prototype.remove=function(a,b,c,d){a=a.toString();if(!(a in this.ue))return!1;var e=this.ue[a];b=lj(e,b,c,d);return b>-1?(jj(e[b]),Array.prototype.splice.call(e,b,1),e.len
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 2c 65 29 7d 3b 0a 74 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 22 29 3b 76 61 72 20 68 3d 5f 2e 77 62 28 65 29 3f 21 21 65 2e 63 61 70 74 75 72 65 3a 21 21 65 2c 6b 3d 5f 2e 75 6a 28 61 29 3b 6b 7c 7c 28 61 5b 6e 6a 5d 3d 6b 3d 6e 65 77 20 5f 2e 6b 6a 28 61 29 29 3b 63 3d 6b 2e 61 64 64 28 62 2c 63 2c 64 2c 68 2c 66 29 3b 69 66 28 63 2e 70 72 6f 78 79 29 72 65 74 75 72 6e 20 63 3b 64 3d 76 6a 28 29 3b 63 2e 70 72 6f 78 79 3d 64 3b 64 2e 73 72 63 3d 61 3b 64 2e 6c 69 73 74 65 6e 65 72 3d 63 3b 69 66 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 5f 2e 73 69 7c 7c 28 65 3d 68 29 2c 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 65 3d 21 31 29 2c 61 2e 61 64 64 45 Data Ascii: ,e)};tj=function(a,b,c,d,e,f){if(!b)throw Error("E");var h=_.wb(e)?!!e.capture:!!e,k=_.uj(a);k\|\|(a[nj]=k=new _.kj(a));c=k.add(b,c,d,h,f);if(c.proxy)return c;d=vj();c.proxy=d;d.src=a;d.listener=c;if(a.addEventListener)_.si\|\|(e=h),e===void 0&&(e=!1),a.addE
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 72 6e 20 61 3b 61 5b 7a 6a 5d 7c 7c 28 61 5b 7a 6a 5d 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 68 61 6e 64 6c 65 45 76 65 6e 74 28 62 29 7d 29 3b 72 65 74 75 72 6e 20 61 5b 7a 6a 5d 7d 3b 5f 2e 61 6a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 78 6a 3d 61 28 78 6a 29 7d 29 3b 0a 5f 2e 57 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 5f 2e 55 62 28 31 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 72 69 28 74 68 69 73 2e 4f 62 2c 61 29 7d 29 3b 5f 2e 41 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2d 62 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 63 3e 3d 30 26 26 61 2e 69 6e 64 65 78 4f 66 28 62 2c 63 29 3d 3d 63 7d 3b 5f 2e 42 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 Data Ascii: rn a;a[zj]\|\|(a[zj]=function(b){return a.handleEvent(b)});return a[zj]};_.aj(function(a){xj=a(xj)});_.Wd.prototype.O=_.Ub(1,function(a){return _.ri(this.Ob,a)});_.Aj=function(a,b){var c=a.length-b.length;return c>=0&&a.indexOf(b,c)==c};_.Bj=function(a,b,c
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 67 2e 41 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 6b 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 30 2c 63 2c 64 29 7d 3b 5f 2e 67 2e 43 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 6b 2e 72 65 6d 6f 76 65 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 63 2c 64 29 7d 3b 5f 2e 67 2e 62 4e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 6a 28 74 68 69 73 2e 75 6b 2c 61 29 7d 3b 5f 2e 67 2e 57 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 75 6b 26 26 74 68 69 73 2e 75 6b 2e 72 65 6d 6f 76 65 41 6c 6c 28 76 6f 69 64 20 30 29 7d 3b 0a 5f 2e 67 2e 64 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 74 68 69 73 Data Ascii: g.Ar=function(a,b,c,d){return this.uk.add(String(a),b,!0,c,d)};_.g.Cc=function(a,b,c,d){return this.uk.remove(String(a),b,c,d)};_.g.bN=function(a){return _.mj(this.uk,a)};_.g.WJ=function(){this.uk&&this.uk.removeAll(void 0)};_.g.du=function(a,b,c){a=this
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 5f 2e 67 3d 5f 2e 44 72 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 67 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 44 72 28 74 68 69 73 2e 78 2c 74 68 69 73 2e 79 29 7d 3b 5f 2e 67 2e 65 71 75 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 44 72 26 26 5f 2e 43 72 28 74 68 69 73 2c 61 29 7d 3b 5f 2e 67 2e 63 65 69 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 78 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 78 29 3b 74 68 69 73 2e 79 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 79 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 5f 2e 67 2e 66 6c 6f 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 78 3d 4d 61 74 68 2e 66 6c 6f 6f Data Ascii: _.g=_.Dr.prototype;_.g.clone=function(){return new _.Dr(this.x,this.y)};_.g.equals=function(a){return a instanceof _.Dr&&_.Cr(this,a)};_.g.ceil=function(){this.x=Math.ceil(this.x);this.y=Math.ceil(this.y);return this};_.g.floor=function(){this.x=Math.floo
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 26 26 61 3f 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4a 72 3f 61 2e 6c 65 66 74 3e 3d 74 68 69 73 2e 6c 65 66 74 26 26 61 2e 72 69 67 68 74 3c 3d 74 68 69 73 2e 72 69 67 68 74 26 26 61 2e 74 6f 70 3e 3d 74 68 69 73 2e 74 6f 70 26 26 61 2e 62 6f 74 74 6f 6d 3c 3d 74 68 69 73 2e 62 6f 74 74 6f 6d 3a 61 2e 78 3e 3d 74 68 69 73 2e 6c 65 66 74 26 26 61 2e 78 3c 3d 74 68 69 73 2e 72 69 67 68 74 26 26 61 2e 79 3e 3d 74 68 69 73 2e 74 6f 70 26 26 61 2e 79 3c 3d 74 68 69 73 2e 62 6f 74 74 6f 6d 3a 21 31 7d 3b 0a 5f 2e 67 2e 65 78 70 61 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 5f 2e 77 62 28 61 29 3f 28 74 68 69 73 2e 74 6f 70 2d 3d 61 2e 74 6f 70 2c 74 68 69 73 Data Ascii: ns=function(a){return this&&a?a instanceof _.Jr?a.left>=this.left&&a.right<=this.right&&a.top>=this.top&&a.bottom<=this.bottom:a.x>=this.left&&a.x<=this.right&&a.y>=this.top&&a.y<=this.bottom:!1};_.g.expand=function(a,b,c,d){_.wb(a)?(this.top-=a.top,this
2024-10-30 19:40:13 UTC	1378	IN	Data Raw: 3b 4b 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 4e 72 5b 62 5d 3b 69 66 28 21 63 29 7b 76 61 72 20 64 3d 48 72 28 62 29 3b 63 3d 64 3b 61 2e 73 74 79 6c 65 5b 64 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 64 3d 28 5f 2e 7a 64 3f 22 57 65 62 6b 69 74 22 3a 5f 2e 79 64 3f 22 4d 6f 7a 22 3a 5f 2e 76 64 3f 22 6d 73 22 3a 6e 75 6c 6c 29 2b 49 72 28 64 29 2c 61 2e 73 74 79 6c 65 5b 64 5d 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 29 29 3b 4e 72 5b 62 5d 3d 63 7d 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 4f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 73 74 79 6c 65 5b 48 72 28 62 29 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 63 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 63 3a 61 2e 73 74 79 6c 65 5b 4b 72 28 61 Data Ascii: ;Kr=function(a,b){var c=Nr[b];if(!c){var d=Hr(b);c=d;a.style[d]===void 0&&(d=(_.zd?"Webkit":_.yd?"Moz":_.vd?"ms":null)+Ir(d),a.style[d]!==void 0&&(c=d));Nr[b]=c}return c};_.Or=function(a,b){var c=a.style[Hr(b)];return typeof c!=="undefined"?c:a.style[Kr(a

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49996	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-16849878b78z2wx67pvzz63kdg000000071g00000000nxub x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:13 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49999	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:14 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 69a14025-c01e-000b-6685-2ae255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-r197bdfb6b4wmcgqdschtyp7yg00000008q0000000000kqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:14 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49997	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 335320d3-001e-000b-4596-2a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-16849878b787bfsh7zgp804my4000000078000000000g921 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:14 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	50000	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 97090380-701e-0032-52b4-2aa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-16849878b78km6fmmkbenhx76n00000007qg0000000103x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 19:40:14 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49998	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:13 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 19:40:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 19:40:13 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T194013Z-16849878b78g2m84h2v9sta29000000007e00000000089me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 19:40:14 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	50001	142.250.185.238	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:14 UTC	822	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=config/exm=card,gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_2 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:14 UTC	888	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 62 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 15:23:22 GMT Expires: Thu, 30 Oct 2025 15:23:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Age: 15412 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 19:40:14 UTC	62	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 32 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 7d 29 3b 0a 2f 2f 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a Data Ascii: gapi.loaded_2(function(_){var window=this;});// Google Inc.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	50002	142.250.185.238	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 19:40:14 UTC	1252	OUT	GET /widget/hovercard/v/2?origin=https%3A%2F%2Fdocs.google.com&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SGzW6IeCawI.O%2Fam%3DAACA%2Fd%3D1%2Frs%3DAHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw%2Fm%3D__features__ HTTP/1.1 Host: contacts.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=gtOBEhsFhsKMoWLEwKCzWSTZ0xS2IyLhYHkK5y--hjoHWH8Rjc7F2RDMIlPMKc5F71qC_ILfyl2EAeuu1UY4u5nAIo1lvZDRKA25ONwiIq-yR4BhWsz42I1q8QLVtPAxtuAzw6v5xr0ifHOba08TGnnEtfLrs6MBd28Ub1INeNou14oGDND4vyKYCLQ
2024-10-30 19:40:14 UTC	2353	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://docs.google.com Content-Security-Policy: frame-ancestors https://docs.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/SocialPeopleHovercardUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-iKznwirDguYmTVWqwdSy-g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/SocialPeopleHovercardUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://firebasestorage.googleapis.com https://ajax.googleapis.com;report-uri /_/SocialPeopleHovercardUi/cspreport/allowlist x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 19:40:14 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/SocialPeopleHovercardUi/web-reports?context=eJzjusCoxSXF4KAhxfDQRYrhzmYphg3q0gxJD3YwWf7YwcTPtpPpjsYupldAHFm6iykdiC9P3cX0EIi3H7_JdBSIEwtuMeUDMcPzW0weps-YwoD4efszpm9A7DfpGVMMELPZvWASAeK6jS-YJL6-ZNIAYqf0GaxBQNx68xzrVCBunnqedSIQJ_07z1oExPGFF1hzgfiHx0VWNs-LrIYKl1gdgVi15xKrKRAnhl1mzQfi0LTLrMlAXCRxhbUJiIV4OOZN79rJJvBjVs8hJiXlpPzC-OT8vJLE5JLi0szi1KKy1KJ4IwMjE0MDI3M9A4v4AgMA7htpbQ" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 61 63 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 61 63 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 68 6f 76 65 72 63 61 Data Ascii: 8000<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://contacts.google.com/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://contacts.google.com/widget/hoverca
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 22 5d 2c 5b 34 35 34 35 33 36 32 32 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 5a 36 6d 45 44 65 5c 22 5d 2c 5b 34 35 36 32 30 35 30 35 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 4f 6d 49 71 65 5c 22 5d 2c 5b 34 35 36 36 30 37 32 33 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 45 79 70 72 31 63 5c 22 5d 2c 5b 34 35 34 35 33 38 30 39 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 44 31 62 6e 31 62 5c 22 5d 2c 5b 34 35 34 35 33 37 35 36 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 70 69 48 67 72 66 5c 22 5d 2c 5b 34 35 34 35 33 36 31 33 2c 33 30 Data Ascii: "],[45453622,null,false,null,null,null,\"Z6mEDe\"],[45620505,null,false,null,null,null,\"eOmIqe\"],[45660723,null,false,null,null,null,\"Eypr1c\"],[45453809,null,false,null,null,null,\"D1bn1b\"],[45453756,null,false,null,null,null,\"piHgrf\"],[45453613,30
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 5f 2f 73 63 73 2f 73 6f 63 69 61 6c 2d 73 74 61 74 69 63 2f 5f 2f 72 2f 22 2c 22 71 77 41 51 6b 65 22 3a 22 53 6f 63 69 61 6c 50 65 6f 70 6c 65 48 6f 76 65 72 63 61 72 64 55 69 22 2c 22 71 79 6d 56 65 22 3a 22 49 63 48 34 6e 58 6a 48 51 58 76 63 6a 4e 64 4e 36 6e 67 4d 7a 64 44 69 6e 74 38 22 2c 22 72 56 48 30 6c 64 22 3a 34 2c 22 72 74 51 43 78 63 22 3a 32 34 30 2c 22 75 34 67 37 72 22 3a 22 25 2e 40 2e 6e 75 6c 6c 2c 31 30 30 30 2c 32 5d 22 2c 22 76 32 59 35 4d 65 22 3a 74 72 75 65 2c 22 77 32 62 74 41 65 22 3a 22 25 2e 40 2e 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 5c 22 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 72 75 65 2c 66 61 6c 73 65 5d 22 2c 22 78 6e 35 4f 49 64 22 3a 66 61 6c 73 65 2c 22 78 6e 49 39 50 22 3a 74 72 75 65 2c 22 78 77 41 66 45 Data Ascii: _/scs/social-static/_/r/","qwAQke":"SocialPeopleHovercardUi","qymVe":"IcH4nXjHQXvcjNdN6ngMzdDint8","rVH0ld":4,"rtQCxc":240,"u4g7r":"%.@.null,1000,2]","v2Y5Me":true,"w2btAe":"%.@.null,null,\"\",true,null,null,true,false]","xn5OId":false,"xnI9P":true,"xwAfE
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 2f 6b 3d 62 6f 71 2e 53 6f 63 69 61 6c 50 65 6f 70 6c 65 48 6f 76 65 72 63 61 72 64 55 69 2e 59 41 50 77 4a 33 51 49 44 6a 55 2e 4c 2e 42 31 2e 4f 2f 61 6d 3d 4f 42 68 67 44 51 2f 64 3d 31 2f 65 64 3d 31 2f 72 73 3d 41 47 4c 54 63 43 4f 59 72 63 4a 4d 54 6a 36 38 5a 71 6e 78 76 4b 6b 33 36 4d 4c 59 6c 31 4a 62 52 77 2f 6d 3d 68 6f 76 65 72 63 61 72 64 77 69 64 67 65 74 2c 5f 62 2c 5f 74 70 22 20 6e 6f 6e 63 65 3d 22 52 4c 54 69 63 2d 6d 67 41 73 78 37 5a 68 42 74 53 6e 2d 79 59 51 22 3e 68 74 6d 6c 2c 62 6f 64 79 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 Data Ascii: /k=boq.SocialPeopleHovercardUi.YAPwJ3QIDjU.L.B1.O/am=OBhgDQ/d=1/ed=1/rs=AGLTcCOYrcJMTj68ZqnxvKk36MLYl1JbRw/m=hovercardwidget,_b,_tp" nonce="RLTic-mgAsx7ZhBtSn-yYQ">html,body{height:100%;overflow:hidden}body{-webkit-font-smoothing:antialiased;-moz-osx-font
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 53 55 35 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 53 55 35 66 41 Data Ascii: nqEu92Fr1MmSU5fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fA
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d Data Ascii: t('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 Data Ascii: 1A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)format('woff2');unicode
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 42 42 63 34 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 Data Ascii: e:normal;font-weight:700;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 35 38 2f 34 55 61 73 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4a 66 43 36 6c 5f 32 34 72 6c 43 4b 31 59 6f 5f 49 71 63 73 69 68 33 53 41 79 48 36 63 41 77 68 58 39 52 50 69 41 55 76 61 59 72 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 39 35 31 2d 30 39 35 32 2c 55 2b 30 39 36 34 2d 30 39 36 35 2c 55 2b 30 39 38 30 2d 30 39 46 45 2c 55 2b 31 43 44 30 2c 55 2b 31 43 44 32 2c 55 2b 31 43 44 35 2d 31 43 44 36 2c 55 2b 31 43 44 38 2c 55 2b 31 43 45 31 2c 55 2b 31 43 45 41 2c 55 2b 31 43 45 44 2c 55 2b 31 43 46 32 2c 55 2b 31 43 46 35 2d 31 43 46 37 2c 55 2b Data Ascii: c:url(//fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2)format('woff2');unicode-range:U+0951-0952,U+0964-0965,U+0980-09FE,U+1CD0,U+1CD2,U+1CD5-1CD6,U+1CD8,U+1CE1,U+1CEA,U+1CED,U+1CF2,U+1CF5-1CF7,U+
2024-10-30 19:40:14 UTC	2353	IN	Data Raw: 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 35 38 2f 34 55 61 73 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4a 66 43 36 6c 5f 32 34 72 6c 43 4b 31 59 6f 5f 49 71 63 73 69 68 33 53 41 79 48 36 63 41 77 68 58 39 52 50 68 45 55 76 61 59 72 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 39 35 31 2d 30 39 35 32 2c 55 2b 30 39 36 34 2d 30 39 36 35 2c 55 2b 30 41 30 31 2d 30 41 37 36 2c 55 2b 32 30 30 43 2d 32 30 30 44 2c 55 2b Data Ascii: ont-family:'Google Sans';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPhEUvaYr.woff2)format('woff2');unicode-range:U+0951-0952,U+0964-0965,U+0A01-0A76,U+200C-200D,U+

Target ID:	0
Start time:	15:39:31
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:39:34
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2000,i,12394513158791230368,16446170916052114903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:39:36
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bit.ly/va-voter-purge-c3"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0	HTTP Parser: No favicon
Source: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0	HTTP Parser: No favicon
Source: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0	HTTP Parser: No favicon
Source: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0	HTTP Parser: No favicon
Source: https://docs.google.com/document/d/1R_iRaawi1gZEr0yppQwvotMZIEBlfp_RBuP6H3eOHvo/edit?tab=t.0	HTTP Parser: No favicon

Source: chromecache_288.2.dr	String found in binary or memory: Bvr.prototype.Dyb=function(){this.H.xp(this.F,this.D\|\|void 0)};function Cvr(){vvr.call(this,Gg,"Facebook","Share via Facebook","ess-facebook-icon")}mm(Cvr,vvr);Cvr.prototype.getUrl=function(a){var c=Bo(a,function(d){return d.Ub()});a=Bo(a,function(d){return d.getUrl()});return"http://www.facebook.com/share.php?u="+qr(a.join(","))+"&t="+qr(c.join(","))};function Dvr(){vvr.call(this,"gm","Gmail","Share via Gmail","ess-gmail-icon")}J(Dvr,vvr);Dvr.prototype.getUrl=function(a){a=Bo(a,function(c){return c.Ub()+pM+c.getUrl()});return"https://mail.google.com/mail/?view=cm&ui=2&cmid=0&fs=1&tf=1&body="+qr(a.join("\n"))};function Evr(){vvr.call(this,"tw","Twitter","Share via Twitter","ess-twitter-icon")}J(Evr,vvr);Evr.prototype.getUrl=function(a){for(var c=[],d=0,e=0;e<a.length;e++){var f=a[e].getUrl(),g=d+f.length+(d?1:0);if(g>140)break;else c.push(f),d=g}for(e=0;e<a.length;e++){f=a[e].Ub();g=c[e]?pM:"";var h=140-d-g.length;if(h<f.length)if(h>=4)f=f.substring(0,h-3)+"\u2026";else break;d+=f.length+g.length;c[e]=f+g+(c[e]?c[e]:"")}a=c.join(" ");return"https://twitter.com/intent/tweet?text="+qr(a)};function Fvr(a,c,d,e,f,g,h,l,m,n,q,u,w){m=m===void 0?new mvr:m;n=n===void 0?new mvr:n;q=q===void 0?new nvr:q;u=u===void 0?upl:u;w=w===void 0?new AI:w;nT.call(this);this.Ca=a\|\|"";this.wc=c;this.Wb=d;this.Yb=e;this.Cc=f;this.Ic=g;this.Pc=h;this.Ob=u;this.D=new Gvr(l);this.Ua=new yvr([new Dvr,new Cvr,new Evr]);this.Va(this.Ua);this.W=new NU(null,this.Ka());this.Va(this.W);this.V=new NU(null,this.Ka());this.Va(this.V);this.J=new xW(this.Ka());this.Va(this.J);this.F=new bhi(null,void 0,this.Ka());this.Va(this.F); equals www.facebook.com (Facebook)
Source: chromecache_288.2.dr	String found in binary or memory: Bvr.prototype.Dyb=function(){this.H.xp(this.F,this.D\|\|void 0)};function Cvr(){vvr.call(this,Gg,"Facebook","Share via Facebook","ess-facebook-icon")}mm(Cvr,vvr);Cvr.prototype.getUrl=function(a){var c=Bo(a,function(d){return d.Ub()});a=Bo(a,function(d){return d.getUrl()});return"http://www.facebook.com/share.php?u="+qr(a.join(","))+"&t="+qr(c.join(","))};function Dvr(){vvr.call(this,"gm","Gmail","Share via Gmail","ess-gmail-icon")}J(Dvr,vvr);Dvr.prototype.getUrl=function(a){a=Bo(a,function(c){return c.Ub()+pM+c.getUrl()});return"https://mail.google.com/mail/?view=cm&ui=2&cmid=0&fs=1&tf=1&body="+qr(a.join("\n"))};function Evr(){vvr.call(this,"tw","Twitter","Share via Twitter","ess-twitter-icon")}J(Evr,vvr);Evr.prototype.getUrl=function(a){for(var c=[],d=0,e=0;e<a.length;e++){var f=a[e].getUrl(),g=d+f.length+(d?1:0);if(g>140)break;else c.push(f),d=g}for(e=0;e<a.length;e++){f=a[e].Ub();g=c[e]?pM:"";var h=140-d-g.length;if(h<f.length)if(h>=4)f=f.substring(0,h-3)+"\u2026";else break;d+=f.length+g.length;c[e]=f+g+(c[e]?c[e]:"")}a=c.join(" ");return"https://twitter.com/intent/tweet?text="+qr(a)};function Fvr(a,c,d,e,f,g,h,l,m,n,q,u,w){m=m===void 0?new mvr:m;n=n===void 0?new mvr:n;q=q===void 0?new nvr:q;u=u===void 0?upl:u;w=w===void 0?new AI:w;nT.call(this);this.Ca=a\|\|"";this.wc=c;this.Wb=d;this.Yb=e;this.Cc=f;this.Ic=g;this.Pc=h;this.Ob=u;this.D=new Gvr(l);this.Ua=new yvr([new Dvr,new Cvr,new Evr]);this.Va(this.Ua);this.W=new NU(null,this.Ka());this.Va(this.W);this.V=new NU(null,this.Ka());this.Va(this.V);this.J=new xW(this.Ka());this.Va(this.J);this.F=new bhi(null,void 0,this.Ka());this.Va(this.F); equals www.twitter.com (Twitter)
Source: chromecache_280.2.dr	String found in binary or memory: Pf=w(["https://sandbox.google.com/tools/feedback/"]),Qf=w(["https://www.google.cn/tools/feedback/"]),Rf=w(["https://help.youtube.com/tools/feedback/"]),Sf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Tf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Uf=w(["https://localhost.corp.google.com/inapp/"]),Vf=w(["https://localhost.proxy.googlers.com/inapp/"]),Wf=U(yf),Xf=[U(zf),U(Af)],Yf=[U(Bf),U(Cf),U(Df),U(Ef),U(Ff),U(Gf),U(Hf),U(If),U(Jf),U(Kf)],Zf=[U(Lf),U(Mf)],$f= equals www.youtube.com (Youtube)
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: function K9g(a,c,d,e,f,g,h,l,m){g=Dn(g,J9g)?g:0;m=m?m:new ax;var n=sp(m,Zw,18)?Q(m,Zw,18):new Zw;QDb(n,G9g[a]);lq(n,6,H9g[g]);eq(n,16,e);eq(n,17,f);!c\|\|fQg(m,c);d&&(fq(n,8,d.F),a=d.D,a!=null&&fq(n,7,pt(a)));h&&(lq(n,18,I9g[h.F]),!h.H\|\|kq(n,19,h.H));l!=null&&l!==1&&lq(n,20,l);bEb(m,n);return zC((new QB).Sb(9),m).ma()}function L9g(a,c,d){this.F=a;this.D=c;this.H=d}J(L9g,K);function M9g(a,c){this.F=a;this.D=c}J(M9g,K);function N9g(){m_c();return"https://www.youtube.com/watch?v="}var O9g,P9g; equals www.youtube.com (Youtube)
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: function rzi(a,c){szi(a);var d=new nzi(c);c==5?a.Vz.callback(d):(a.D.onload=r(),a.D.onerror=r(),Zr(a.D),a.J>=3?a.Vz.callback(d):qzi(a))}function szi(a){clearTimeout(a.F);a.F=null;clearTimeout(a.H);a.H=null}ozi.prototype.getStatus=function(){return this.Vz&&this.Vz.Ai()?this.Vz.getValue():new nzi(1)};var tzi=Zl(["https://www.youtube.com/iframe_api"]),uzi=Zl([seg]);function vzi(a){this.J=a=a===void 0?this.R:a;this.O=wzi;this.F=this.J(this.O);this.D=0;this.H=[]}function xzi(a){for(var c=0;c<a.H.length;c++)a.H[c].callback(a.F.getStatus());a.H=[]}function yzi(a){var c=vzi.tb();c.D===2&&a.callback(c.F.getStatus());c.H.push(a);c.D!==1&&(c.F=c.J(c.O),c.D=1,pzi(c.F).addCallback(function(d){d.bE()!==2&&(c.D=3,xzi(c))}))}vzi.prototype.R=function(a){return new ozi(a)};vzi.tb=function(){return NE(vzi)}; equals www.youtube.com (Youtube)
Source: chromecache_251.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_264.2.dr, chromecache_309.2.dr	String found in binary or memory: neg="https://support.google.com/docs/?p=editors_encryption",oeg="https://support.google.com/docs/answer/10519333",peg="https://support.google.com/docs/answer/6055139",qeg="https://support.google.com/drive?p=saving_errors",reg="https://www.gstatic.com/uservoice/feedback/client/web/",seg="https://youtube.googleapis.com/iframe_api",teg="hubCloseDoc",ueg="i8oNZb",veg="iFFCZc",weg="iJ4yB",xeg="iWO5td",yeg='id="',zeg="idomKey",Aeg="iframe-command",Beg="image-search",JO="impression",Ceg="in-checklist-and-has-anchored-task", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: bit.ly
Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: 0.docs.google.com
Source: global traffic	DNS traffic detected: DNS query: peoplestack-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: contacts.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://bit.ly/va-voter-purge-c3

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Windows Analysis Report
https://bit.ly/va-voter-purge-c3