Edit tour

Windows Analysis Report
https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?usp=sharing_eip&ts=6788139f

Overview

General Information

Sample URL:	https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?usp=sharing_eip&ts=6788139f
Analysis ID:	1592533
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2964 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5740 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?usp=sharing_eip&ts=6788139f" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-11641774&timestamp=1737014938780
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-11641774&timestamp=1737014938780
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-11641774&timestamp=1737014938780
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-11641774&timestamp=1737014938780
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-11641774&timestamp=1737014938780
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: Iframe src: /_/bscframe

Source: https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?tab=t.0	HTTP Parser: No favicon
Source: https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?tab=t.0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ec=GAZAGQ&followup=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I%2Fedit%3Fusp%3Dsharing_eip%26ts%3D6788139f&ifkv=AVdkyDlQ1r5COtVO24uFNlePuLSAls7miCceRknJ4PbVf5_CIiNq6hIMPn6109tS0tFto4mdw9ZpDg&ltmpl=docs&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1911104924%3A1737014933967530&ddm=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49956 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:53880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:65390 version: TLS 1.2

Source:	Binary string: E.Odb=function(a){var c=this.D.Dva(),e=this.H.r6();a=this.J.Pb(a,13);this.F.push(a,13,c,e)};E.Pdb=function(a){var c=this.D.Eva(),e=this.H.s6();a=this.J.Pb(a,8);this.F.push(a,8,c,e)};E.WJb=function(a){var c=this.D.Fva(),e=this.H.Aba();a=this.J.Pb(a,10);this.F.push(a,10,c,e)};E.XJb=function(a){var c=this.D.Ova(),e=this.H.Pba();a=this.J.Pb(a,9);this.F.push(a,9,c,e)};var y9k=new uX(7),z9k=new uX(vX.nj);function A9k(a,c){switch(Jp(a,1)){case 1:return"Active";case 2:return"Idle";case 3:var e=e===void 0?Date.now:e;if(Number(aWg(Q(c,t7j,1),3))<0)e="";else{c=Number(aWg(Q(c,t7j,1),2));e=new Date(e());a=new Date(c/1E3);c=new Date(Number(Math.round(c/1E6)*1E3));var f=y9k.format(c),g=f.indexOf("01:")>=0\|\|f.indexOf("1:")>=0\|\|f.indexOf("01.")>=0\|\|f.indexOf("01.")>=0?1:2;a.valueOf()-e.valueOf()>864E5?(f=z9k.format(c),e=(new LR("Until {localizedDate}")).format({localizedDate:f})):e=(new LR("{hourOfTheDay, plural, =1 {Until {localizedHour}} other {Until {localizedHour}}}")).format({localizedHour:f, source: chromecache_136.3.dr
Source:	Binary string: ++f;e(k)}}};function I9k(a){var c=new Set;return function(e){if(e.values.length){var f=e.values.filter(function(g){g=String(g.Xt());return c.has(g)?!1:(c.add(g),!0)});e.values=f}(e.values.length\|\|e.Yxa)&&a(e)}};function J9k(a,c,e){this.dj=a;this.keys=c;this.sE=e}J9k.prototype.Pb=function(a,c){a=E9k(this.dj,c,this.sE,a);a=H9k(this.keys,this.sE,a);return a=I9k(a)};function K9k(a,c,e){this.dj=a;this.keys=c;this.sE=e}K9k.prototype.Pb=function(a,c){a=E9k(this.dj,c,this.sE,a);return a=H9k(this.keys,this.sE,a)};function L9k(a){return function(c){c.metadata=null;a(c)}};function M9k(a,c){this.dj=a;this.D=c}M9k.prototype.Pb=function(a,c){return Kp(this.dj.Yq(),3,!1)?this.D.Pb(a,c):L9k(this.D.Pb(a,c))};M9k.prototype.execute=function(){this.D.execute()};function N9k(a){return function(c){Zp(c.metadata,10,!0);a(c)}};function O9k(a){this.ge=a}O9k.prototype.Pb=function(a,c){return N9k(this.ge.Pb(a,c))};function P9k(a){this.D=a}P9k.prototype.validate=function(a){if(!this.D.a7a(a))throw Error("kY");};function Q9k(){}Q9k.prototype.a7a=C(!0);function R9k(a){this.D=new Map;a=a.Yq().Vw();this.D.set(1,Kp(a.ZLa(),4,!1));this.D.set(4,Kp(a.zca(),4,!1));this.D.set(5,Kp(a.Aca(),4,!1));this.D.set(13,Kp(a.Dva(),3,!1));this.D.set(8,Kp(a.Eva(),6,!1));this.D.set(10,Kp(a.Fva(),4,!1));this.D.set(9,Kp(a.Ova(),4,!1))}R9k.prototype.a7a=function(a){return this.D.has(a)?this.D.get(a):!1};function S9k(a,c,e,f,g){this.H=a;this.Iob=c;this.D=e;this.F=f;this.J=g}E=S9k.prototype;E.pqa=function(a){this.F.validate(1);this.H.pqa(this.D.Pb(1,a));return this};E.YJb=function(a){this.F.validate(3);this.H.YJb(this.D.Pb(3,a))};E.Qdb=function(a){this.F.validate(4);this.H.Qdb(this.D.Pb(4,a))};E.Rdb=function(a){this.F.validate(5);this.H.Rdb(this.D.Pb(5,a))};E.Odb=function(a){this.F.validate(13);this.H.Odb(this.D.Pb(13,a))};E.Pdb=function(a){this.F.validate(8);this.H.Pdb(this.D.Pb(8,a))}; source: chromecache_136.3.dr
Source:	Binary string: g.J1)}}(f));break;case 8:this.D.Pdb(function(g){return function(h){q9k(a.F,h,g.J1)}}(f));break;case 10:this.D.WJb(function(g){return function(h){q9k(a.F,h,g.J1)}}(f));break;case 9:this.D.XJb(function(g){return function(h){q9k(a.F,h,g.J1)}}(f));break;default:throw Error("xn");}}; source: chromecache_136.3.dr
Source:	Binary string: E.s6=function(){var a=new V9k;this.query.Pdb(function(c){W9k(a,c)});this.query.execute();return a.promise()};function Y9k(a){this.cache=n7k(a).IKa();this.F=new g8k(a);this.H=a.Yq().Vw();this.D=[];a.D.Xs()&&this.D.push(fW(a.D.getEmail()));nq(a.D,4)&&this.D.push(gW(Pp(a.D,4)))}Y9k.prototype.chatStatus=function(a){var c=this,e=yIk(),f=this.D.map(function(h,k){var m=new D7j;m=Ap(m,C7j,2,a);k=c.F.create(4,"self-update:"+e,String(k));return L8k(c.H.Aca(),h,m,k)});f=Ml(f);for(var g=f.next();!g.done;g=f.next())g=g.value,this.cache.Aca().set(g);return this}; source: chromecache_136.3.dr
Source:	Binary string: Dos.prototype.Gf=function(){return SRn(RRn(new k2,kR(this.getData(wam))),Ar(this.getData(ovm)))};Z(Dos.prototype,"MLYMZ",A("F"));yW(Bos,Dos);zK("c6wtHd",CP);var Eos=AK("c6wtHd",[MK,esp,Xrp,hns]);function Fos(a){gns.call(this,a.Zc);this.F=this.D=null;this.qd=a.service.qd;this.eG=a.service.eG;this.yY=a.soy.yY;this.w1=a.service.RB.PDb();this.V=a.service.RB.kfa();this.H=a.service.RB.wd()}J(Fos,gns);Fos.Sb=function(){return{service:{qd:WL,RB:qsp,eG:lsp},soy:{yY:pmp}}};E=Fos.prototype;E.sA=function(){Gos(this)};E.Uaa=function(){return this.yY.F};E.bFa=function(a){var c=this;this.yY.F=a?1:2;ZR(this.qd,this.yY).execute().then(function(){return void c.trigger($up)})}; source: chromecache_180.3.dr, chromecache_151.3.dr
Source:	Binary string: lup.prototype.wd=A("F");lup.prototype.kfa=A("D");lup.prototype.PDb=A("w1");UL(jup,lup);function mup(a){this.D=a}J(mup,K);mup.prototype.AF=function(a){var c;return B7o((c=this.D,c(a)))};mup.prototype.Va=function(a){return L(this,a)?!0:a instanceof mup?Wm(this.D,a.D):!1};mup.prototype.jc=function(){return Ym(this.D)};mup.prototype.F=function(a){return this.AF(a)};function nup(a){this.D=a}J(nup,K);nup.prototype.F=function(a){var c;return c=this.D,c(a)};function oup(){this.D=0}J(oup,dm);oup.prototype.F=function(a){Ql.queueMicrotask(function(){a.F()})};var pup=new oup;pup.H="INSTANCE";pup.D=0;function qup(){this.D=0}J(qup,dm);function rup(a,c){var e=new qup;e.H=a;e.D=c;return e}var sup=rup("NO_MEMORY",0),tup=rup("REMEMBER_LAST_VALUE",1);function uup(){}J(uup,K);function vup(a,c,e){Ls(c);Ls(e);Hs(!a.D.Wy(c),"observer %s was already added",c);Is(!a.D.put(c,e));return c}uup.prototype.F=function(a){if(this.D.tb())return Uxn();var c=Afn(this.D.Dp()),e=yWm(c.size()),f={};for(c=c.kD();c.Pc();f={Ccc:void 0}){var g=c.Yc();f.Ccc=g.getKey();g=g.getValue();f=ULo(new uxn(function(h){return function(){return h.Ccc.F(a)}}(f)),g);e.add(f)}return zLo(TLo(e))};function wup(){}J(wup,K);function xup(a){var c=new wup;c.D=a;return c};function yup(){}J(yup,K);function zup(a){var c=new yup,e=new uup;e.D=QWm();c.mca=e;c.F=a;c.D=null;return c}function Aup(a,c,e){switch(a.F.ordinal()){case 0:return vup(a.mca,c,e);case 1:case 2:var f=vup(a.mca,c,e);if(a.D){var g=a.D.D;e.F(sn(function(){c.F(g)}))}return f;default:throw tm("R1`"+M(a.F)).Ea;}} source: chromecache_180.3.dr, chromecache_151.3.dr
Source:	Binary string: function sns(a){return ZQ(a.sV.data.dP,5,qp()).map(function(c){var e=WRn(new VRn,LJn(Ir(c)));var f=Pp(a.sV.data.dP,7);e=eq(e,3,f);f=PRn(a.sV.data.dP);e=Ap(e,a1,8,f);c=gp(Z_(new a0,c));return Ap(e,a0,9,c)})}Z(rns.prototype,"tvIEib",A("F"));Z(rns.prototype,YO,A(wQ));yW(qns,rns);var tns=AK("Brk6he",[esp,Xrp,Jis]);function uns(a){B5.call(this,a.Zc,a.soy.hz);this.eG=a.service.eG;this.ea=a.service.RB.kfa();this.F=a.service.RB.wd();this.w1=a.service.RB.PDb()}J(uns,B5);uns.Sb=function(){return{service:{RB:qsp,eG:lsp},soy:{hz:hpp}}};E=uns.prototype;E.yp=function(){B5.prototype.yp.call(this);this.hbb(this.eG.create(ewn(wvb(this.getData(wam),0),null),this.ea,this.w1))};E.tcb=function(){return Qp(this.userFeedback,1,0)===0}; source: chromecache_180.3.dr, chromecache_151.3.dr
Source:	Binary string: Z(vos.prototype,"UeGXjb",A("F"));yW(uos,vos);function wos(){JK.call(this)}J(wos,NK);wos.Sb=NK.Sb;wos.prototype.wT=function(){return Epo(ypo(Gpo(),!0),[upo(8,C(!0),C("Hello I am a stubbed sidekick"),C(null),C(!0))]).ma()};UL(bsp,wos);function xos(a){JK.call(this);var c=a.service.j$,e=this.D=yEo(a.service.OQ.get());c=c.wT();a=a.service.OQ.get();this.F=YQo(e,c,a);this.w1=new kup}J(xos,NK);xos.Sb=function(){return{service:{j$:iup,OQ:tcp}}};xos.prototype.wd=A("F");xos.prototype.kfa=A("D");xos.prototype.PDb=A("w1");UL(dsp,xos);zK("hMxPK","TKgHDc");var yos=AK("hMxPK",[btp,rW]);function zos(a){JK.call(this);this.vA=a.service.vA;this.zm=a.service.window}J(zos,NK);zos.Sb=function(){return{service:{vA:hup,window:NW}}};UL(yos,zos);var Aos=DK("TKgHDc","E1tgbf",void 0,yos);var Bos=AK("ewAevb",[Aos,esp]);var Cos=new yK(Aos);function Dos(a){uW.call(this,a.Zc);this.nIb=a.service.nIb;this.D=a.service.RB.wd()}J(Dos,uW);Dos.Sb=function(){return{service:{nIb:Cos,RB:qsp}}};Dos.prototype.F=function(){var a=this.wr(),c=this.nIb,e=c.vA.GW();c=c.zm.get();a.getId()===""?a="":(e=new jF(Alg+(e!=null?e:0)+"/r/tasks"),e.Ge("taskId",a.getId()),a=e.toString());nr(c,wub(a),$b)};Dos.prototype.wr=function(){var a=gp(this.Gf());return Ls(Z2(e3(this.D),HJo(a)).jn().Ha)[kR(this.getData("taskIndex"))]}; source: chromecache_180.3.dr, chromecache_151.3.dr

Source: global traffic	TCP traffic: 192.168.2.6:65388 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:53813 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_123.3.dr, chromecache_147.3.dr	String found in binary or memory: Ilg="https://support.google.com/a?p=advanced-settings-data-regions",Jlg="https://support.google.com/docs/?p=editors_encryption",Klg="https://support.google.com/docs/answer/10519333",Llg="https://support.google.com/docs/answer/6055139",Mlg="https://support.google.com/drive?p=saving_errors",Nlg="https://www.gstatic.com/uservoice/feedback/client/web/",Olg="https://youtube.googleapis.com/iframe_api",Plg="hubCloseDoc",Qlg="i8oNZb",Rlg="iFFCZc",Slg="iJ4yB",Tlg="iWO5td",Ulg='id="',Vlg="idomKey",Wlg="iframe-command", equals www.youtube.com (Youtube)
Source: chromecache_180.3.dr, chromecache_151.3.dr	String found in binary or memory: QMr.prototype.HDb=function(){this.H.hq(this.F,this.D\|\|void 0)};function RMr(){KMr.call(this,wg,"Facebook","Share via Facebook","ess-facebook-icon")}am(RMr,KMr);RMr.prototype.getUrl=function(a){var c=wo(a,function(e){return e.Wb()});a=wo(a,function(e){return e.getUrl()});return"http://www.facebook.com/share.php?u="+rr(a.join(","))+"&t="+rr(c.join(","))};function SMr(){KMr.call(this,"gm","Gmail","Share via Gmail","ess-gmail-icon")}J(SMr,KMr);SMr.prototype.getUrl=function(a){a=wo(a,function(c){return c.Wb()+rN+c.getUrl()});return"https://mail.google.com/mail/?view=cm&ui=2&cmid=0&fs=1&tf=1&body="+rr(a.join("\n"))};function TMr(){KMr.call(this,"tw","Twitter","Share via Twitter","ess-twitter-icon")}J(TMr,KMr);TMr.prototype.getUrl=function(a){for(var c=[],e=0,f=0;f<a.length;f++){var g=a[f].getUrl(),h=e+g.length+(e?1:0);if(h>140)break;else c.push(g),e=h}for(f=0;f<a.length;f++){g=a[f].Wb();h=c[f]?rN:"";var k=140-e-h.length;if(k<g.length)if(k>=4)g=g.substring(0,k-3)+"\u2026";else break;e+=g.length+h.length;c[f]=g+h+(c[f]?c[f]:"")}a=c.join(" ");return"https://twitter.com/intent/tweet?text="+rr(a)};function UMr(a,c,e,f,g,h,k,m,n,p,r,u,x){n=n===void 0?new BMr:n;p=p===void 0?new BMr:p;r=r===void 0?new CMr:r;u=u===void 0?awl:u;x=x===void 0?new hJ:x;lU.call(this);this.Oa=a\|\|"";this.zc=c;this.Vb=e;this.ac=f;this.Dc=g;this.Rc=h;this.jd=k;this.Nb=u;this.D=new LBn(m);this.Ua=new NMr([new SMr,new RMr,new TMr]);this.Wa(this.Ua);this.W=new HV(null,this.Ma());this.Wa(this.W);this.V=new HV(null,this.Ma());this.Wa(this.V);this.J=new wX(this.Ma());this.Wa(this.J);this.F=new Emi(null,void 0,this.Ma());this.Wa(this.F); equals www.facebook.com (Facebook)
Source: chromecache_180.3.dr, chromecache_151.3.dr	String found in binary or memory: QMr.prototype.HDb=function(){this.H.hq(this.F,this.D\|\|void 0)};function RMr(){KMr.call(this,wg,"Facebook","Share via Facebook","ess-facebook-icon")}am(RMr,KMr);RMr.prototype.getUrl=function(a){var c=wo(a,function(e){return e.Wb()});a=wo(a,function(e){return e.getUrl()});return"http://www.facebook.com/share.php?u="+rr(a.join(","))+"&t="+rr(c.join(","))};function SMr(){KMr.call(this,"gm","Gmail","Share via Gmail","ess-gmail-icon")}J(SMr,KMr);SMr.prototype.getUrl=function(a){a=wo(a,function(c){return c.Wb()+rN+c.getUrl()});return"https://mail.google.com/mail/?view=cm&ui=2&cmid=0&fs=1&tf=1&body="+rr(a.join("\n"))};function TMr(){KMr.call(this,"tw","Twitter","Share via Twitter","ess-twitter-icon")}J(TMr,KMr);TMr.prototype.getUrl=function(a){for(var c=[],e=0,f=0;f<a.length;f++){var g=a[f].getUrl(),h=e+g.length+(e?1:0);if(h>140)break;else c.push(g),e=h}for(f=0;f<a.length;f++){g=a[f].Wb();h=c[f]?rN:"";var k=140-e-h.length;if(k<g.length)if(k>=4)g=g.substring(0,k-3)+"\u2026";else break;e+=g.length+h.length;c[f]=g+h+(c[f]?c[f]:"")}a=c.join(" ");return"https://twitter.com/intent/tweet?text="+rr(a)};function UMr(a,c,e,f,g,h,k,m,n,p,r,u,x){n=n===void 0?new BMr:n;p=p===void 0?new BMr:p;r=r===void 0?new CMr:r;u=u===void 0?awl:u;x=x===void 0?new hJ:x;lU.call(this);this.Oa=a\|\|"";this.zc=c;this.Vb=e;this.ac=f;this.Dc=g;this.Rc=h;this.jd=k;this.Nb=u;this.D=new LBn(m);this.Ua=new NMr([new SMr,new RMr,new TMr]);this.Wa(this.Ua);this.W=new HV(null,this.Ma());this.Wa(this.W);this.V=new HV(null,this.Ma());this.Wa(this.V);this.J=new wX(this.Ma());this.Wa(this.J);this.F=new Emi(null,void 0,this.Ma());this.Wa(this.F); equals www.twitter.com (Twitter)
Source: chromecache_200.3.dr	String found in binary or memory: _.mq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.mq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.mq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.mq(_.vq(c))+"&hl="+_.mq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.mq(m)+"/chromebook/termsofservice.html?languageCode="+_.mq(d)+"&regionCode="+_.mq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)
Source: chromecache_123.3.dr, chromecache_147.3.dr	String found in binary or memory: function Bgh(a,c,e,f,g,h,k,m,n){h=Bn(h,Agh)?h:0;n=n?n:new ox;var p=kp(n,mx,18)?Q(n,mx,18):new mx;EHb(p,xgh[a]);fq(p,6,ygh[h]);Zp(p,16,f);Zp(p,17,g);!c\|\|oYg(n,c);e&&($p(p,8,e.F),a=e.D,a!=null&&$p(p,7,Ct(a)));k&&(fq(p,18,zgh[k.F]),!k.H\|\|eq(p,19,k.H));m!=null&&m!==1&&fq(p,20,m);QHb(n,p);return QC((new iC).Rb(9),n).ma()}function Cgh(a,c,e){this.F=a;this.D=c;this.H=e}J(Cgh,K);function Dgh(a,c){this.F=a;this.D=c}J(Dgh,K);function Egh(){$3c();return"https://www.youtube.com/watch?v="}var Fgh,Ggh; equals www.youtube.com (Youtube)
Source: chromecache_123.3.dr, chromecache_147.3.dr	String found in binary or memory: function wEi(a,c){xEi(a);var e=new sEi(c);c==5?a.ZA.callback(e):(a.D.onload=w(),a.D.onerror=w(),cs(a.D),a.J>=3?a.ZA.callback(e):vEi(a))}function xEi(a){clearTimeout(a.F);a.F=null;clearTimeout(a.H);a.H=null}tEi.prototype.getStatus=function(){return this.ZA&&this.ZA.Li()?this.ZA.getValue():new sEi(1)};var yEi=Ol(["https://www.youtube.com/iframe_api"]),zEi=Ol([Olg]);function AEi(a){this.J=a=a===void 0?this.R:a;this.O=BEi;this.F=this.J(this.O);this.D=0;this.H=[]}function CEi(a){for(var c=0;c<a.H.length;c++)a.H[c].callback(a.F.getStatus());a.H=[]}function DEi(a){var c=AEi.Ab();c.D===2&&a.callback(c.F.getStatus());c.H.push(a);c.D!==1&&(c.F=c.J(c.O),c.D=1,uEi(c.F).addCallback(function(e){e.jF()!==2&&(c.D=3,CEi(c))}))}AEi.prototype.R=function(a){return new tEi(a)};AEi.Ab=function(){return iF(AEi)}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: 0.docs.google.com
Source: global traffic	DNS traffic detected: DNS query: peoplestack-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: appsgenaiserver-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com

Source: global traffic	HTTP traffic detected: GET /static/document/client/js/375774625-client_js_prod_kix_core.js HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=XJNI6utPlXpX5JYfHunvcanE65nfux_Vc52igbTv64KfnMATJNfKXdXiOd_NHmzDlW5ipE-gapYxHj7-OT5br68GFJ2dvjwO1tve5jRgu-6HOATlOdLqT5kWRfL1LlD8DCmITDtb8fLUZAex95sXnsAiU1nw9pQ99dhXhFrLgK7BDFoiJNBZ-KxsUTasKwz0; GFE_RTT=321
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=XJNI6utPlXpX5JYfHunvcanE65nfux_Vc52igbTv64KfnMATJNfKXdXiOd_NHmzDlW5ipE-gapYxHj7-OT5br68GFJ2dvjwO1tve5jRgu-6HOATlOdLqT5kWRfL1LlD8DCmITDtb8fLUZAex95sXnsAiU1nw9pQ99dhXhFrLgK7BDFoiJNBZ-KxsUTasKwz0
Source: global traffic	HTTP traffic detected: GET /static/document/client/js/904133340-client_js_prod_kix_nestedsketchycore.js HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=XJNI6utPlXpX5JYfHunvcanE65nfux_Vc52igbTv64KfnMATJNfKXdXiOd_NHmzDlW5ipE-gapYxHj7-OT5br68GFJ2dvjwO1tve5jRgu-6HOATlOdLqT5kWRfL1LlD8DCmITDtb8fLUZAex95sXnsAiU1nw9pQ99dhXhFrLgK7BDFoiJNBZ-KxsUTasKwz0; GFE_RTT=321
Source: global traffic	HTTP traffic detected: GET /static/document/client/js/1931159430-client_js_prod_kix_app.js HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=XJNI6utPlXpX5JYfHunvcanE65nfux_Vc52igbTv64KfnMATJNfKXdXiOd_NHmzDlW5ipE-gapYxHj7-OT5br68GFJ2dvjwO1tve5jRgu-6HOATlOdLqT5kWRfL1LlD8DCmITDtb8fLUZAex95sXnsAiU1nw9pQ99dhXhFrLgK7BDFoiJNBZ-KxsUTasKwz0; GFE_RTT=321; lbcs=0
Source: global traffic	HTTP traffic detected: GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/test?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&sid=4aed4b531914cc9f&includes_info_params=true&usp=sharing_eip&cros_files=false&VER=8&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=0&smv=68&smb=%5B2147483647%2C%204A%3D%3D%5D&cimpl=0&MODE=init&zx=m3lgi0gp05do&t=1 HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/trash/read?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&includes_info_params=true&usp=sharing_eip&cros_files=false HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/peruserchrome?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&includes_info_params=true&usp=sharing_eip&cros_files=false HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /static/document/client/js/1153489568-client_js_prod_kix_docos.js HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /document/font/getmetadata?includes_info_params=true&usp=sharing_eip&cros_files=false HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/test?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&sid=4aed4b531914cc9f&includes_info_params=true&usp=sharing_eip&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=1&ar=5&arat=nGJ_d1cN2clYRA&smv=68&smb=%5B2147483647%2C%204A%3D%3D%5D&cimpl=0&TYPE=xmlhttp&zx=ke4sdl4igqxp&t=1 HTTP/1.1Host: 0.docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://docs.google.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /static/document/client/js/865541288-client_js_prod_kix_pre_tertiary_deps.js HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/bind?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&sid=4aed4b531914cc9f&includes_info_params=true&usp=sharing_eip&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=3&ar=5&arat=nGJ_d1cN2clYRA&smv=68&smb=%5B2147483647%2C%204A%3D%3D%5D&cimpl=0&RID=47981&CVER=1&zx=ej2iau51fch5&t=1 HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/bind?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&sid=4aed4b531914cc9f&includes_info_params=true&usp=sharing_eip&cros_files=false&VER=8&tab=t.0&lsq=1737014915966&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=4&smv=68&smb=%5B2147483647%2C%204A%3D%3D%5D&cimpl=0&RID=rpc&SID=5FAE023710E94F10&CI=0&AID=1&TYPE=xmlhttp&zx=s6l9azxnbixs&t=1 HTTP/1.1Host: 0.docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://docs.google.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /static/document/client/js/2521666038-client_js_prod_kix_tertiary.js HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/getinsertabletemplatespreviewdata?forcehl=1&hl=en HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /static/document/client/js/1293508368-client_js_prod_datetimeresources.js HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /static/document/client/js/3708823228-client_js_prod_voice.js HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-11641774&timestamp=1737014938780 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?usp=sharing_eip&ts=6788139f"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2964 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5740 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2964 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5740 --field-trial-handle=2180,i,15148148349083651186,18154557139986704408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://today.meet.google.com	0%	Avira URL Cloud	safe
https://daily-5.meet.google.com	0%	Avira URL Cloud	safe
https://daily-2.meet.google.com	0%	Avira URL Cloud	safe

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65390
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53895
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53880
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Name	IP	Active	Malicious	Reputation
docs.google.com	142.250.181.238	true	false	high
plus.l.google.com	172.217.18.14	true	false	high
play.google.com	142.250.184.238	true	false	high
browserchannel-sites.l.google.com	66.102.1.189	true	false	high
www3.l.google.com	142.250.185.110	true	false	high
appsgenaiserver-pa.clients6.google.com	142.250.181.234	true	false	high
www.google.com	216.58.212.164	true	false	high
peoplestack-pa.clients6.google.com	142.250.186.74	true	false	high
accounts.youtube.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high
0.docs.google.com	unknown	unknown	false	high

Name	Malicious	Reputation
https://docs.google.com/static/document/client/js/3708823228-client_js_prod_voice.js	false	high
https://docs.google.com/static/document/client/js/904133340-client_js_prod_kix_nestedsketchycore.js	false	high
https://docs.google.com/static/document/client/js/1931159430-client_js_prod_kix_app.js	false	high
https://www.google.com/favicon.ico	false	high
https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/peruserchrome?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&includes_info_params=true&usp=sharing_eip&cros_files=false	false	high
https://docs.google.com/static/document/client/js/2521666038-client_js_prod_kix_tertiary.js	false	high
https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/bind?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&sid=4aed4b531914cc9f&includes_info_params=true&usp=sharing_eip&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=3&ar=5&arat=nGJ_d1cN2clYRA&smv=68&smb=%5B2147483647%2C%204A%3D%3D%5D&cimpl=0&RID=47981&CVER=1&zx=ej2iau51fch5&t=1	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs/?p=voice_typing	chromecache_203.3.dr, chromecache_139.3.dr	false		high
https://apis.google.com/js/client.js	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/docs?p=gemini_docs_summaryblock	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/a/?p=disable_docs#topic=4388346	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://today.meet.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://drive.sandbox.google.com	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/docs/answer/7505592	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/docs/answer/14925782	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://mail.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.mozilla.org/en-US/kb/disable-or-remove-add-ons	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/drive/?hl=en	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://calendar.google.com/calendar/r/day/	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/chat/#topic=7649317	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://drive-thirdparty.googleusercontent.com/	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://chat.google.com/room/	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://content-googleapis-test.sandbox.google.com	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://www.google.com/drive/	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://developers.google.com/	chromecache_128.3.dr	false		high
https://support.google.com/docs?p=add_encryption	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/maps	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_128.3.dr	false		high
https://policies.google.com/terms?hl=en	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://www.google.com/tools/feedback	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/help_center?p=gemini_cover_image	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/contacts	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://tasks.google.com/	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://play.google.com/store/apps/details?id=com.google.android.apps.docs.editors.docs&referrer=utm	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://apis.google.com/js/api.js	chromecache_154.3.dr	false		high
https://docs.google.com/picker	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/chrome/answer/187443	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://punctual-dev.corp.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
http://support.google.com/docs?p=labs-privacy	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs?p=labs-privacy	chromecache_151.3.dr	false		high
https://docs.google.com/document/d/1SzAxs6HDSH1zNGEVCmGwZQR1cxdQI8-33mpYgl6Q1jE/r/0-5tmxJv1j5g5hY7dg	chromecache_151.3.dr	false		high
https://support.google.com/a/users/answer/10992111	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://workspaceui-pa.clients6.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://gsuite.google.com/products/chat/	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://content-googleapis-staging.sandbox.google.com	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://policies.google.com/privacy	chromecache_180.3.dr, chromecache_151.3.dr, chromecache_200.3.dr	false		high
https://support.google.com/docs/answer/190843#compare_documents	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs?p=help-me-visualize	chromecache_151.3.dr	false		high
https://support.google.com/docs?p=labs_docs_summaryblock	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/drive/?p=drive_only	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/hangoutschat/#topic=7649316	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://drive.google.com/drive/my-drive	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/a/answer/9275380	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs/answer/13447609	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://www.google.com/maps/about	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs?p=vids_image_generation_labs	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/drive/answer/37603	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://www.google.com/calendar/event?eid=YmxuY2w5M2JlcG1obmpqOWNxbHFsMjBxZ2lfMjAyMTA1MjVUMTcwMDAwWi	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://play.google.com	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/docs/answer/10519333#zippy=	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://signaler-pa.youtube.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
http://support.google.com/drive/?hl=en&p=anonymous_users	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://calendar.google.com/calendar/:authuser/companion	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs?p=GSM_migration	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://angular.dev/license	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/help_center?p=insert_cover_image	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://www.google.com/keep/	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs?p=gemini-help-me-visualize	chromecache_151.3.dr	false		high
https://support.google.com/tasks	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://meet.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs/?p=	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs/answer/190843	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://one.google.com/plans	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://daily-2.meet.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://inputtools.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://daily-5.meet.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/sheets/about	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/help_center?p=labs_cover_image	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://oauth-redirect-test.googleusercontent.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://apps-drive-picker-dev.corp.google.com/picker/minpick/main	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://support.google.com/docs	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://signaler-pa.clients6.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://www.salesforce.com/oauth/v2/token	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs?p=custom-building-blocks	chromecache_151.3.dr	false		high
https://support.google.com/docs?p=vids_image_generation_gemini	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://calendar.google.com/calendar/r?eid=	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://apis.google.com/js/client.js?jsmode=DU	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://slides.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://calendar.google.com/calendar/r/eventedit	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://workspace.google.com/labs-sign-up/u/	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://myaccount.google.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://www.google.com/docs/about	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://one.google.com/storage	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://drive.google.com/open?id=	chromecache_123.3.dr, chromecache_147.3.dr	false		high
https://forms.gle/UPhmo8AHDibn457p8	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://mygoogle.corp.google.com/help/answer/9011840	chromecache_180.3.dr, chromecache_151.3.dr	false		high
https://support.google.com/docs?p=pageless_docs	chromecache_151.3.dr	false		high
https://oauth-redirect.googleusercontent.com	chromecache_180.3.dr, chromecache_151.3.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
216.58.212.164	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.14	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.110	www3.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
66.102.1.189	browserchannel-sites.l.google.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1592533
Start date and time:	2025-01-16 09:07:32 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?usp=sharing_eip&ts=6788139f
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@22/185@24/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9200
Entropy (8bit):	5.397292185201819
Encrypted:	false
SSDEEP:	192:zNYuSQwT4vDKg9SvcNmKF+OhCLfDa2iD0:zNpU0vP3Nmq+8Ca2iD0
MD5:	9376CA1F6FFF9B925B2354E0932D4B2F
SHA1:	657C5CAD475873A412091B89E645EAA9AD58257E
SHA-256:	5E9465F7119B8C4207E6D8513007BCC63D5FE7E18FC832DFFBBA5607E0BB09AE
SHA-512:	5941BE093F41E5AC1B91D324F56C201784ABA7F262B90E7EBB065EC212EEE150CF6036A92840BB14A1ADCB44FD543095C52DA068CB1527E448B3FD3EE2075AFA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.X8AhVDrQyHA.es5.O/ck=boq-identity.AccountsSignInUi.C_HoRm81soI.L.B1.O/am=yQ2mZLgGABD_cGlAN6CRQMgAAAAAAAAAAIgNAABghwE/d=1/exm=CMcBD,EFQ78c,EN3i8d,Fndnac,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MpJwZc,PrPYRd,Rkm0ef,SCuOPb,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,b3kMqb,byfTOb,cYShmd,cciGGe,hc6Ubd,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,qmdT9,siKnQd,t2srLd,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlGn0SYqP5uWtfAKyaFiIrf8wZzdMQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,oqkvIf,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.oPa=_.z("SD8Jgb",[]);._.nV=function(a,b){if(typeof b==="string")a.zc(b);else if(b instanceof _.Op&&b.ia&&b.ia===_.B)b=_.Za(b.Aw()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("ng");};_.oV=function(a){var b=_.tp(a,"[jsslot]");if(b.size()>0)return b;b=new _.rp([_.xl("span")]);_.up(b,"jsslot","");a.empty().append(b);return b};_.OTb=function(a){return a===null\|\|typeof a==="string"&&_.Ob(a)};._.k("SD8Jgb");._.tV=function(a){_.W.call(this,a.La);this.Xa=a.controller.Xa;this.ld=a.controllers.ld[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.Aa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.J(_.tV,_.W);_.tV.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.Nv},header:{jsname:"tJHJj",ctor:_.Nv},nav:{jsname:"DH6Rkf",ct

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 16, 2025 09:08:29.914659977 CET	53	61859	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:30.035428047 CET	53	57464	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:31.202896118 CET	53	52992	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:33.890425920 CET	52525	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:33.890908003 CET	55342	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:33.922635078 CET	53	55342	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:33.922667027 CET	53	52525	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:34.944665909 CET	55682	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:34.944999933 CET	57946	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:34.951654911 CET	53	55682	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:34.951953888 CET	53	57946	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:38.846334934 CET	53	51275	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:39.307795048 CET	65327	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:39.308043003 CET	56024	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:39.314455986 CET	53	65327	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:39.314735889 CET	53	56024	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:39.677037954 CET	53	59617	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:39.753992081 CET	53	64065	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:39.876194000 CET	53	49616	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:40.964129925 CET	53	58646	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:40.991853952 CET	64641	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:40.992270947 CET	62553	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:40.999171972 CET	53	64641	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:40.999492884 CET	53	62553	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:41.254853964 CET	53	50262	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:41.956619024 CET	59561	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:41.956887007 CET	52465	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:41.963643074 CET	53	59561	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:41.963655949 CET	53	52465	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:42.228701115 CET	54989	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:42.228842974 CET	52477	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:42.235611916 CET	53	52477	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:42.235624075 CET	53	54989	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:43.136148930 CET	65102	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:43.136657953 CET	54829	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:43.143054962 CET	53	65102	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:43.143594980 CET	53	54829	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:43.159842968 CET	53	51660	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:43.928734064 CET	53187	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:43.928889036 CET	57450	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:43.937467098 CET	53	57450	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:43.939928055 CET	53	53187	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:48.229604959 CET	53	55752	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:49.322175026 CET	51770	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:49.322612047 CET	61631	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:49.328820944 CET	53	51770	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:49.329858065 CET	53	61631	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:52.051736116 CET	64231	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:52.052037001 CET	57637	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:52.058990002 CET	53	57637	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:52.059001923 CET	53	64231	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:54.560472965 CET	58715	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:54.561022043 CET	56243	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:54.567259073 CET	53	58715	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:54.568326950 CET	53	56243	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:59.822674990 CET	56503	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:59.822865009 CET	57193	53	192.168.2.6	1.1.1.1
Jan 16, 2025 09:08:59.830400944 CET	53	57193	1.1.1.1	192.168.2.6
Jan 16, 2025 09:08:59.830554962 CET	53	56503	1.1.1.1	192.168.2.6
Jan 16, 2025 09:09:01.704895020 CET	53	51701	1.1.1.1	192.168.2.6
Jan 16, 2025 09:09:06.646189928 CET	53	59152	162.159.36.2	192.168.2.6
Jan 16, 2025 09:09:07.126610041 CET	53	63046	1.1.1.1	192.168.2.6
Jan 16, 2025 09:09:07.168081045 CET	53	58157	1.1.1.1	192.168.2.6
Jan 16, 2025 09:09:29.570156097 CET	53	56271	1.1.1.1	192.168.2.6
Jan 16, 2025 09:09:29.817785025 CET	53	57582	1.1.1.1	192.168.2.6
Jan 16, 2025 09:09:32.196719885 CET	53	59968	1.1.1.1	192.168.2.6
Jan 16, 2025 09:09:34.937438011 CET	53	53665	1.1.1.1	192.168.2.6

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 62 56 30 57 59 69 79 42 30 69 70 5a 77 58 4b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 30 63 62 61 31 39 31 31 64 66 64 61 35 64 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BbV0WYiyB0ipZwXK.1Context: 70cba1911dfda5db
2025-01-16 08:08:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-16 08:08:30 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 42 62 56 30 57 59 69 79 42 30 69 70 5a 77 58 4b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 30 63 62 61 31 39 31 31 64 66 64 61 35 64 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 51 4e 6c 39 68 4c 33 30 52 4e 46 79 35 32 50 6e 6a 4c 72 4a 6b 61 31 38 30 4c 74 43 61 41 58 32 54 62 42 4f 54 77 70 65 67 70 63 71 67 38 55 51 52 61 2b 44 59 38 6b 43 6f 44 76 43 39 30 68 75 66 32 52 6a 44 63 70 52 4e 6f 35 6e 52 4f 36 51 4e 44 46 35 55 6f 62 51 6a 46 57 45 64 6a 51 66 4b 4f 76 59 4f 79 6c 52 56 63 39 43 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: BbV0WYiyB0ipZwXK.2Context: 70cba1911dfda5db<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaQNl9hL30RNFy52PnjLrJka180LtCaAX2TbBOTwpegpcqg8UQRa+DY8kCoDvC90huf2RjDcpRNo5nRO6QNDF5UobQjFWEdjQfKOvYOylRVc9C
2025-01-16 08:08:30 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 62 56 30 57 59 69 79 42 30 69 70 5a 77 58 4b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 30 63 62 61 31 39 31 31 64 66 64 61 35 64 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: BbV0WYiyB0ipZwXK.3Context: 70cba1911dfda5db<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-16 08:08:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-16 08:08:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 55 6c 56 72 71 6f 71 76 6b 30 4f 4a 4f 43 7a 51 48 54 54 4b 65 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: UlVrqoqvk0OJOCzQHTTKeA.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:39 UTC	701	OUT	GET /static/document/client/js/375774625-client_js_prod_kix_core.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=XJNI6utPlXpX5JYfHunvcanE65nfux_Vc52igbTv64KfnMATJNfKXdXiOd_NHmzDlW5ipE-gapYxHj7-OT5br68GFJ2dvjwO1tve5jRgu-6HOATlOdLqT5kWRfL1LlD8DCmITDtb8fLUZAex95sXnsAiU1nw9pQ99dhXhFrLgK7BDFoiJNBZ-KxsUTasKwz0; GFE_RTT=321
2025-01-16 08:08:40 UTC	802	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 3013771 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 13 Jan 2025 15:01:04 GMT Expires: Tue, 13 Jan 2026 15:01:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 09 Jan 2025 05:01:50 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 234456 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-16 08:08:40 UTC	588	IN	Data Raw: 2f 2f 23 20 65 61 67 65 72 43 6f 6d 70 69 6c 61 74 69 6f 6e 3d 61 6c 6c 0a 66 75 6e 63 74 69 6f 6e 20 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 5b 5d 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 Data Ascii: //# eagerCompilation=allfunction _F_toggles_initialize(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);/* Copyright The Closure Library Authors. SPDX-License-Identifier: A
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 5c 72 5c 6e 22 2c 63 61 3d 22 20 20 22 2c 64 61 3d 22 20 28 22 2c 61 61 61 3d 22 20 61 6e 64 20 74 68 65 20 62 6c 6f 62 20 75 72 6c 20 69 73 20 72 65 76 6f 6b 65 64 20 62 79 20 22 2c 62 61 61 3d 22 20 69 73 20 6f 75 74 20 6f 66 20 62 6f 75 6e 64 73 20 5b 30 2c 20 22 2c 63 61 61 3d 27 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 27 2c 6c 3d 27 22 3e 27 2c 65 61 3d 27 22 3e 3c 2f 64 69 76 3e 27 2c 66 61 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 2c 68 61 3d 27 22 3e 3c 2f 64 Data Ascii: t The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="\r\n",ca=" ",da=" (",aaa=" and the blob url is revoked by ",baa=" is out of bounds [0, ",caa=' style="display: none;"',l='">',ea='"></div>',fa='"></div></div></div>',ha='"></d
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 2c 70 62 61 3d 22 26 71 75 6f 74 3b 22 2c 71 62 61 3d 22 27 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 27 2c 73 65 72 69 66 22 2c 72 62 61 3d 22 28 5b 2d 28 29 5c 5c 5b 5c 5c 5d 7b 7d 2b 3f 2a 2e 24 5c 5c 5e 7c 2c 3a 23 3c 21 5c 5c 5c 5c 5d 29 22 2c 73 62 61 3d 22 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 20 61 63 74 69 76 65 29 22 2c 74 62 61 3d 22 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 22 2c 77 61 3d 22 2c 20 22 2c 78 61 3d 22 2d 2d 22 2c 75 62 61 3d 22 2d 64 65 66 61 75 6c 74 22 2c 76 62 61 3d 22 2d 72 74 6c 22 2c 0a 79 61 3d 22 2e 2e 2e 22 2c 77 62 61 3d 22 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 7a 61 3d 22 2f 2f 22 2c 78 62 61 3d 22 2f 61 2f 24 31 2f 64 72 61 77 69 6e 67 73 2f 22 2c 79 62 61 3d 22 2f Data Ascii: ,pba=""",qba="'Times New Roman',serif",rba="([-()\\[\\]{}+?*.$\\^\|,:#<!\\\\])",sba="(forced-colors: active)",tba="(prefers-color-scheme: dark)",wa=", ",xa="--",uba="-default",vba="-rtl",ya="...",wba=".google.com",za="//",xba="/a/$1/drawings/",yba="/
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 2b 53 68 69 66 74 2b 52 69 67 68 74 22 2c 4b 61 3d 22 41 6e 22 2c 73 63 61 3d 22 41 6e 64 72 6f 69 64 22 2c 74 63 61 3d 22 41 70 70 6c 69 63 61 74 69 6f 6e 4d 65 74 61 64 61 74 61 22 2c 75 63 61 3d 22 41 70 70 6c 79 20 61 72 62 69 74 72 61 72 79 20 66 6f 6e 74 20 66 61 6d 69 6c 79 22 2c 76 63 61 3d 22 41 70 70 72 6f 76 61 6c 73 22 2c 77 63 61 3d 22 41 70 70 72 6f 76 65 22 2c 78 63 61 3d 22 41 70 72 22 2c 4c 61 3d 22 41 72 69 61 6c 22 2c 79 63 61 3d 22 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 22 2c 7a 63 61 3d 22 41 73 6b 20 47 65 6d 69 6e 69 22 2c 41 63 61 3d 22 41 73 73 69 67 6e 20 6e 65 77 20 74 61 73 6b 73 20 66 72 6f 6d 20 74 61 62 6c 65 22 2c 42 63 61 3d 22 41 75 64 69 6f 22 2c 43 63 61 3d 22 41 75 67 22 2c 44 63 61 3d 22 42 4c 4f 43 4b 51 55 Data Ascii: +Shift+Right",Ka="An",sca="Android",tca="ApplicationMetadata",uca="Apply arbitrary font family",vca="Approvals",wca="Approve",xca="Apr",La="Arial",yca="Arial,sans-serif",zca="Ask Gemini",Aca="Assign new tasks from table",Bca="Audio",Cca="Aug",Dca="BLOCKQU
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 22 2c 55 61 3d 22 43 6c 6f 73 65 22 2c 75 64 61 3d 22 43 6c 6f 73 65 20 70 72 65 76 69 65 77 22 2c 76 64 61 3d 22 43 6f 64 65 20 62 6c 6f 63 6b 22 2c 77 64 61 3d 22 43 6f 6c 6f 72 22 2c 78 64 61 3d 22 43 6f 6c 75 6d 6e 22 2c 79 64 61 3d 22 43 6f 6c 75 6d 6e 20 62 72 65 61 6b 22 2c 7a 64 61 3d 22 43 6f 6d 69 63 20 53 61 6e 73 20 4d 53 22 2c 41 64 61 3d 22 43 6f 6d 6d 65 6e 74 22 2c 56 61 3d 22 43 6f 6d 6d 65 6e 74 73 22 2c 42 64 61 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 43 64 61 3d 22 43 6f 6e 74 69 6e 75 65 22 2c 44 64 61 3d 22 43 6f 6e 74 72 6f 6c 22 2c 45 64 61 3d 22 43 6f 70 79 22 2c 46 64 61 3d 22 43 6f 70 79 20 6c 69 6e 6b 22 2c 47 64 61 3d 22 43 6f 70 79 20 6c 69 6e 6b 20 55 52 4c 22 2c 48 64 61 3d 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c Data Ascii: ",Ua="Close",uda="Close preview",vda="Code block",wda="Color",xda="Column",yda="Column break",zda="Comic Sans MS",Ada="Comment",Va="Comments",Bda="Content-Type",Cda="Continue",Dda="Control",Eda="Copy",Fda="Copy link",Gda="Copy link URL",Hda="Courier New",
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 55 4e 44 45 43 4f 44 41 42 4c 45 5f 50 41 52 45 4e 54 22 2c 46 65 61 3d 22 45 4d 42 45 44 44 45 44 5f 56 49 44 45 4f 5f 57 49 54 48 5f 55 4e 44 45 43 4f 44 41 42 4c 45 5f 50 41 52 45 4e 54 22 2c 47 65 61 3d 22 45 52 52 4f 52 22 2c 48 65 61 3d 22 45 58 49 53 54 49 4e 47 5f 41 55 44 49 4f 5f 45 4d 42 45 44 44 45 44 22 2c 0a 49 65 61 3d 22 45 58 49 53 54 49 4e 47 5f 41 55 44 49 4f 5f 53 54 41 4e 44 41 4c 4f 4e 45 22 2c 4a 65 61 3d 22 45 58 49 53 54 49 4e 47 5f 49 4d 41 47 45 5f 45 4d 42 45 44 44 45 44 22 2c 4b 65 61 3d 22 45 58 49 53 54 49 4e 47 5f 49 4d 41 47 45 5f 53 54 41 4e 44 41 4c 4f 4e 45 22 2c 4c 65 61 3d 22 45 58 49 53 54 49 4e 47 5f 56 49 44 45 4f 5f 45 4d 42 45 44 44 45 44 22 2c 4d 65 61 3d 22 45 58 49 53 54 49 4e 47 5f 56 49 44 45 4f 5f 53 54 41 Data Ascii: UNDECODABLE_PARENT",Fea="EMBEDDED_VIDEO_WITH_UNDECODABLE_PARENT",Gea="ERROR",Hea="EXISTING_AUDIO_EMBEDDED",Iea="EXISTING_AUDIO_STANDALONE",Jea="EXISTING_IMAGE_EMBEDDED",Kea="EXISTING_IMAGE_STANDALONE",Lea="EXISTING_VIDEO_EMBEDDED",Mea="EXISTING_VIDEO_STA
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 2c 4c 66 61 3d 22 48 65 61 64 69 6e 67 20 32 22 2c 4d 66 61 3d 22 48 65 61 64 69 6e 67 20 33 22 2c 4e 66 61 3d 22 48 65 61 64 69 6e 67 20 34 22 2c 4f 66 61 3d 22 48 65 61 64 69 6e 67 20 35 22 2c 50 66 61 3d 22 48 65 61 64 69 6e 67 20 36 22 2c 51 66 61 3d 22 48 65 61 64 6c 65 73 73 43 68 72 6f 6d 65 22 2c 52 66 61 3d 22 48 65 6c 70 22 2c 53 66 61 3d 22 48 65 6c 70 20 6d 65 20 63 72 65 61 74 65 22 2c 54 66 61 3d 22 48 65 6c 70 20 6d 65 20 63 72 65 61 74 65 20 61 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 55 66 61 3d 22 48 65 6c 70 20 6d 65 20 63 72 65 61 74 65 20 61 6e 20 69 6d 61 67 65 22 2c 56 66 61 3d 22 48 65 6c 70 20 6d 65 20 77 72 69 74 65 22 2c 57 66 61 3d 22 48 69 67 68 6c 69 67 68 74 20 63 6f 6c 6f 72 22 2c 0a 58 66 61 3d 22 49 44 4c 45 22 2c 59 Data Ascii: ,Lfa="Heading 2",Mfa="Heading 3",Nfa="Heading 4",Ofa="Heading 5",Pfa="Heading 6",Qfa="HeadlessChrome",Rfa="Help",Sfa="Help me create",Tfa="Help me create a presentation",Ufa="Help me create an image",Vfa="Help me write",Wfa="Highlight color",Xfa="IDLE",Y
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 4e 67 61 3d 22 4c 49 4e 4b 22 2c 4f 67 61 3d 22 4c 4f 41 44 5f 57 49 54 48 4f 55 54 5f 53 54 4f 52 41 47 45 22 2c 50 67 61 3d 22 4c 4f 43 41 4c 5f 53 54 4f 52 45 5f 45 52 52 4f 52 22 2c 51 67 61 3d 22 4c 4f 43 4b 5f 54 49 4d 45 4f 55 54 22 2c 52 67 61 3d 22 4c 4f 43 4b 5f 55 4e 41 56 41 49 4c 41 42 4c 45 22 2c 78 62 3d 22 4c 65 61 72 6e 20 6d 6f 72 65 22 2c 53 67 61 3d 22 4c 65 66 74 22 2c 54 67 61 3d 22 4c 69 6e 6b 22 2c 55 67 61 3d 22 4c 69 6e 6b 65 64 20 6f 62 6a 65 63 74 73 22 2c 56 67 61 3d 22 4c 6b 22 2c 57 67 61 3d 22 4c 6f 61 64 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 73 74 6f 72 65 20 65 72 72 6f 72 22 2c 58 67 61 3d 22 4c 6f 61 64 69 6e 67 5c 75 32 30 32 36 22 2c 59 67 61 3d 22 4d 45 4e 55 22 2c 5a 67 61 3d 22 4d 49 53 53 49 4e 47 5f 45 58 54 Data Ascii: Nga="LINK",Oga="LOAD_WITHOUT_STORAGE",Pga="LOCAL_STORE_ERROR",Qga="LOCK_TIMEOUT",Rga="LOCK_UNAVAILABLE",xb="Learn more",Sga="Left",Tga="Link",Uga="Linked objects",Vga="Lk",Wga="Loaded with local store error",Xga="Loading\u2026",Yga="MENU",Zga="MISSING_EXT
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 6e 20 6c 69 6e 6b 22 2c 0a 59 68 61 3d 22 4f 70 65 6e 20 74 61 73 6b 20 64 65 74 61 69 6c 73 22 2c 5a 68 61 3d 22 4f 70 65 72 61 22 2c 24 68 61 3d 22 4f 70 74 69 6f 6e 73 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 2c 20 70 72 69 6e 74 2c 20 61 6e 64 20 63 6f 70 79 20 68 61 76 65 20 62 65 65 6e 20 64 69 73 61 62 6c 65 64 20 6f 6e 20 74 68 69 73 20 66 69 6c 65 22 2c 61 69 61 3d 22 4f 72 22 2c 62 69 61 3d 22 4f 74 68 65 72 22 2c 63 69 61 3d 22 50 4c 41 43 45 48 4f 4c 44 45 52 5f 22 2c 64 69 61 3d 22 50 4d 69 6e 67 4c 69 75 22 2c 65 69 61 3d 22 50 4f 4c 49 43 59 5f 44 49 53 41 4c 4c 4f 57 53 22 2c 47 62 3d 22 50 4f 53 54 22 2c 66 69 61 3d 22 50 52 45 22 2c 67 69 61 3d 22 50 53 45 55 44 4f 5f 53 49 4e 47 4c 45 54 4f 4e 22 2c 48 62 3d 22 50 55 54 22 2c 68 69 61 3d 22 Data Ascii: n link",Yha="Open task details",Zha="Opera",$ha="Options to download, print, and copy have been disabled on this file",aia="Or",bia="Other",cia="PLACEHOLDER_",dia="PMingLiu",eia="POLICY_DISALLOWS",Gb="POST",fia="PRE",gia="PSEUDO_SINGLETON",Hb="PUT",hia="
2025-01-16 08:08:40 UTC	1390	IN	Data Raw: 70 20 76 61 6c 75 65 2e 22 2c 72 6a 61 3d 22 53 61 66 61 72 69 22 2c 4f 62 3d 22 53 61 76 65 22 2c 73 6a 61 3d 22 53 61 76 65 20 61 73 20 63 75 73 74 6f 6d 20 62 75 69 6c 64 69 6e 67 20 62 6c 6f 63 6b 22 2c 74 6a 61 3d 22 53 63 72 65 65 6e 20 72 65 61 64 65 72 20 73 75 70 70 6f 72 74 22 2c 75 6a 61 3d 22 53 65 61 72 63 68 20 66 6f 72 20 69 6d 61 67 65 73 22 2c 76 6a 61 3d 22 53 65 61 72 63 68 20 74 68 65 20 6d 65 6e 75 73 22 2c 77 6a 61 3d 22 53 65 61 72 63 68 20 74 68 65 20 77 65 62 22 2c 78 6a 61 3d 0a 22 53 65 63 74 69 6f 6e 20 62 72 65 61 6b 20 28 63 6f 6e 74 69 6e 75 6f 75 73 29 22 2c 79 6a 61 3d 22 53 65 63 74 69 6f 6e 20 62 72 65 61 6b 20 28 6e 65 78 74 20 70 61 67 65 29 22 2c 7a 6a 61 3d 22 53 65 63 75 72 69 74 79 20 6c 69 6d 69 74 61 74 69 6f 6e Data Ascii: p value.",rja="Safari",Ob="Save",sja="Save as custom building block",tja="Screen reader support",uja="Search for images",vja="Search the menus",wja="Search the web",xja="Section break (continuous)",yja="Section break (next page)",zja="Security limitation

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?usp=sharing_eip&ts=6788139f

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Windows Analysis Report
https://docs.google.com/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/edit?usp=sharing_eip&ts=6788139f

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:41 UTC	1005	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=XJNI6utPlXpX5JYfHunvcanE65nfux_Vc52igbTv64KfnMATJNfKXdXiOd_NHmzDlW5ipE-gapYxHj7-OT5br68GFJ2dvjwO1tve5jRgu-6HOATlOdLqT5kWRfL1LlD8DCmITDtb8fLUZAex95sXnsAiU1nw9pQ99dhXhFrLgK7BDFoiJNBZ-KxsUTasKwz0
2025-01-16 08:08:41 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117446 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 14 Jan 2025 15:40:57 GMT Expires: Wed, 14 Jan 2026 15:40:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 08 Jan 2025 15:23:05 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 145664 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-16 08:08:41 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 5d 29 3b 0a 76 61 72 20 63 61 2c 64 61 2c 68 61 2c 6d 61 2c 78 61 2c 41 61 2c 42 61 3b 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b Data Ascii: alue;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 71 61 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 71 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 72 61 3b 61 3a 7b 76 61 72 20 73 61 3d 7b 61 3a 21 30 7d 2c 77 61 3d 7b 7d 3b 74 72 79 7b 77 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 73 61 3b 72 61 3d 77 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 72 61 3d 21 31 7d 71 61 3d 72 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 Data Ascii: function(a){var b=function(){};b.prototype=a;return new b},qa;if(typeof Object.setPrototypeOf=="function")qa=Object.setPrototypeOf;else{var ra;a:{var sa={a:!0},wa={};try{wa.__proto__=sa;ra=wa.a;break a}catch(a){}ra=!1}qa=ra?function(a,b){a.__proto__=b;if(
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 7b 66 6f 72 28 3b 74 68 69 73 2e 46 66 26 26 74 68 69 73 2e 46 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 46 66 3b 74 68 69 73 2e 46 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6c 28 29 7d 63 61 74 63 68 28 6d 29 7b 74 68 69 73 2e 6d 71 28 6d 29 7d 7d 7d 74 68 69 73 2e 46 66 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 71 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 7a 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 68 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 45 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 Data Ascii: {for(;this.Ff&&this.Ff.length;){var h=this.Ff;this.Ff=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=null;try{l()}catch(m){this.mq(m)}}}this.Ff=null};b.prototype.mq=function(h){this.zP(function(){throw h;})};var e=function(h){this.Ea=0;this.wf=void 0;thi
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 6b 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 3d 6e 65 77 20 6b 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 68 3d 5f 2e 6c 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 68 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 68 29 29 3b 68 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 Data Ascii: h("unhandledrejection",{cancelable:!0}):typeof k==="function"?h=new k("unhandledrejection",{cancelable:!0}):(h=_.la.document.createEvent("CustomEvent"),h.initCustomEvent("unhandledrejection",!1,!0,h));h.promise=this;h.reason=this.wf;return l(h)};e.prototy
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c Data Ascii: done)})};return e});var Ca=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regul
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 46 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 79 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 Data Ascii: _hidden_"+Math.random();e("freeze");e("preventExtensions");e("seal");var h=0,k=function(l){this.Fa=(h+=Math.random()+1).toString();if(l){l=_.ya(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw E
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 74 68 69 73 5b 31 5d 2e 53 6b 3d 6d 2e 5a 65 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 53 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 53 6b 3d 0a 6b 2e 5a 65 2e 53 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 Data Ascii: this[1].Sk=m.Ze,this.size++);return this};c.prototype.delete=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Sk.next=k.Ze.next,k.Ze.next.Sk=k.Ze.Sk,k.Ze.head=null,this.size--,!0):!1};c.protot
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 79 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e Data Ascii: ction(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ya([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.n
2025-01-16 08:08:41 UTC	1390	IN	Data Raw: 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 5b 62 2c 63 5d 7d 29 7d 7d 29 3b 0a 6d 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 6d 61 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 5f 2e 6c 61 7d 29 3b 6d 61 28 22 53 Data Ascii: ray.prototype.entries",function(a){return a?a:function(){return Fa(this,function(b,c){return[b,c]})}});ma("Array.prototype.keys",function(a){return a?a:function(){return Fa(this,function(b){return b})}});ma("globalThis",function(a){return a\|\|_.la});ma("S

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:41 UTC	714	OUT	GET /static/document/client/js/904133340-client_js_prod_kix_nestedsketchycore.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=XJNI6utPlXpX5JYfHunvcanE65nfux_Vc52igbTv64KfnMATJNfKXdXiOd_NHmzDlW5ipE-gapYxHj7-OT5br68GFJ2dvjwO1tve5jRgu-6HOATlOdLqT5kWRfL1LlD8DCmITDtb8fLUZAex95sXnsAiU1nw9pQ99dhXhFrLgK7BDFoiJNBZ-KxsUTasKwz0; GFE_RTT=321
2025-01-16 08:08:42 UTC	801	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 316952 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 14 Jan 2025 10:59:17 GMT Expires: Wed, 14 Jan 2026 10:59:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 09 Jan 2025 05:01:50 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 162565 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-16 08:08:42 UTC	589	IN	Data Raw: 63 4b 28 65 31 61 29 3b 0a 76 61 72 20 63 6e 66 3d 22 23 46 46 46 46 46 46 30 30 22 2c 64 6e 66 3d 22 25 73 20 61 6c 72 65 61 64 79 20 62 65 6c 6f 6e 67 73 20 74 6f 20 25 73 22 2c 65 6e 66 3d 22 25 73 20 69 73 20 6e 6f 74 20 61 6e 20 61 6c 6c 6f 77 65 64 20 73 68 61 70 65 20 70 72 6f 70 65 72 74 79 20 66 6f 72 20 61 20 4d 65 64 69 61 43 6c 69 70 2e 22 2c 66 6e 66 3d 22 2c 20 65 78 69 74 41 6e 69 6d 61 74 69 6f 6e 3d 22 2c 67 6e 66 3d 22 31 30 30 22 2c 58 4c 3d 22 31 31 22 2c 59 4c 3d 22 32 34 22 2c 68 6e 66 3d 22 3a 61 6e 69 6d 61 74 69 6f 6e 22 2c 69 6e 66 3d 22 3a 62 61 63 6b 67 72 6f 75 6e 64 22 2c 6a 6e 66 3d 22 3a 64 6f 63 75 6d 65 6e 74 22 2c 6b 6e 66 3d 22 3a 67 75 69 64 65 22 2c 5a 4c 3d 22 41 4d 22 2c 6c 6e 66 3d 22 44 6f 63 75 6d 65 6e 74 20 64 Data Ascii: cK(e1a);var cnf="#FFFFFF00",dnf="%s already belongs to %s",enf="%s is not an allowed shape property for a MediaClip.",fnf=", exitAnimation=",gnf="100",XL="11",YL="24",hnf=":animation",inf=":background",jnf=":document",knf=":guide",ZL="AM",lnf="Document d
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 55 4d 4e 53 22 2c 78 6e 66 3d 22 54 57 4f 5f 4f 42 4a 45 43 54 53 5f 57 49 54 48 5f 54 45 58 54 22 2c 79 6e 66 3d 22 54 72 61 6e 73 66 6f 72 6d 20 25 73 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 66 6f 72 20 6f 62 6a 65 63 74 20 25 73 22 2c 7a 6e 66 3d 22 56 45 52 54 49 43 41 4c 5f 54 49 54 4c 45 5f 41 4e 44 5f 56 45 52 54 49 43 41 4c 5f 54 45 58 54 22 2c 41 6e 66 3d 22 59 6b 22 2c 61 4d 3d 22 5a 6b 22 2c 42 6e 66 3d 22 62 6f 64 79 50 6c 61 63 65 68 6f 6c 64 65 72 4c 69 73 74 45 6e 74 69 74 79 22 2c 43 6e 66 3d 22 64 6f 63 73 2d 65 61 73 6d 22 2c 44 6e 66 3d 22 69 6e 64 65 78 20 25 73 20 69 73 20 6f 75 74 20 6f 66 20 62 6f 75 6e 64 73 22 2c 45 6e 66 3d 22 70 72 6f 70 65 72 74 69 65 73 22 2c 46 6e 66 3d 22 73 6b 65 74 63 68 79 2d 61 64 64 41 6e 69 6d 61 74 Data Ascii: UMNS",xnf="TWO_OBJECTS_WITH_TEXT",ynf="Transform %s is not valid for object %s",znf="VERTICAL_TITLE_AND_VERTICAL_TEXT",Anf="Yk",aM="Zk",Bnf="bodyPlaceholderListEntity",Cnf="docs-easm",Dnf="index %s is out of bounds",Enf="properties",Fnf="sketchy-addAnimat
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 70 74 79 22 2c 6e 6f 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 63 75 72 72 65 6e 74 50 61 67 65 2d 69 6d 70 6c 22 2c 6f 6f 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6c 69 76 65 2d 70 6f 69 6e 74 65 72 2d 63 6f 6f 72 64 69 6e 61 74 65 73 2d 65 6d 70 74 79 22 2c 0a 70 6f 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6c 69 76 65 2d 70 6f 69 6e 74 65 72 2d 63 6f 6f 72 64 69 6e 61 74 65 73 2d 69 6d 70 6c 22 2c 71 6f 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 64 69 61 43 6c 69 70 22 2c 72 6f 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 64 69 61 43 6c 69 70 2d 65 6d 70 74 79 22 2c 73 6f 66 3d 22 73 6b 65 74 63 68 79 2d 73 65 6c 65 63 74 69 6f 6e 2d 6d 65 Data Ascii: pty",nof="sketchy-selection-currentPage-impl",oof="sketchy-selection-live-pointer-coordinates-empty",pof="sketchy-selection-live-pointer-coordinates-impl",qof="sketchy-selection-mediaClip",rof="sketchy-selection-mediaClip-empty",sof="sketchy-selection-me
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 68 79 2d 75 70 64 61 74 65 41 6c 74 54 65 78 74 22 2c 61 70 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 43 6f 6c 75 6d 6e 57 69 64 74 68 73 22 2c 62 70 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 45 6e 74 69 74 79 22 2c 63 70 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 4c 69 73 74 45 6e 74 69 74 79 22 2c 64 70 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 52 6f 77 48 65 69 67 68 74 73 22 2c 65 70 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 54 61 62 6c 65 42 6f 72 64 65 72 53 74 79 6c 65 73 22 2c 66 70 66 3d 22 73 6b 65 74 63 68 79 2d 75 70 64 61 74 65 54 61 62 6c 65 43 65 6c 6c 50 72 6f 70 65 72 74 69 65 73 22 2c 67 70 66 3d 22 73 6b 65 74 63 68 79 2d 7a 4f 72 64 65 72 22 3b 0a 66 75 6e 63 74 69 6f 6e 20 68 4d 28 61 2c 63 Data Ascii: hy-updateAltText",apf="sketchy-updateColumnWidths",bpf="sketchy-updateEntity",cpf="sketchy-updateListEntity",dpf="sketchy-updateRowHeights",epf="sketchy-updateTableBorderStyles",fpf="sketchy-updateTableCellProperties",gpf="sketchy-zOrder";function hM(a,c
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 3d 58 28 35 36 30 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 4b 61 64 28 74 68 69 73 2c 61 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 48 2c 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 65 5b 66 5d 2e 73 70 6c 69 63 65 28 61 2c 30 2c 63 28 29 29 7d 29 3b 64 42 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 68 3d 58 28 32 36 31 2c 41 28 22 46 22 29 29 3b 49 4f 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 68 3d 58 28 32 36 30 2c 41 28 22 48 22 29 29 3b 49 56 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 68 3d 58 28 32 35 39 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 2e 44 2e 44 7d 29 3b 44 56 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 68 3d 58 28 32 35 38 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: =X(560,function(a,c){Kad(this,a,!0);for(var e=this.H,f=0;f<e.length;f++)e[f].splice(a,0,c())});dB.prototype.Mh=X(261,A("F"));IOd.prototype.Mh=X(260,A("H"));IVd.prototype.Mh=X(259,function(){return this.D.D.D});DVd.prototype.Mh=X(258,function(){return this
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 6f 3b 66 3d 61 2e 58 6c 3b 61 2e 46 6f 3d 63 2e 76 6e 2a 65 2b 63 2e 46 6f 2a 66 3b 61 2e 58 6c 3d 63 2e 53 6f 2a 65 2b 63 2e 58 6c 2a 66 3b 65 3d 61 2e 44 3b 66 3d 61 2e 46 3b 61 2e 44 3d 63 2e 76 6e 2a 65 2b 63 2e 46 6f 2a 66 2b 63 2e 44 3b 61 2e 46 3d 63 2e 53 6f 2a 65 2b 63 2e 58 6c 2a 66 2b 63 2e 46 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 72 70 66 28 61 29 7b 76 61 72 20 63 3d 77 45 63 28 61 29 3b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 63 29 26 26 69 73 46 69 6e 69 74 65 28 61 2e 44 29 26 26 69 73 46 69 6e 69 74 65 28 61 2e 46 29 26 26 63 21 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 73 70 66 28 29 7b 7d 4a 28 73 70 66 2c 4b 29 3b 73 70 66 2e 70 72 6f 74 6f 74 79 70 65 2e 74 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: o;f=a.Xl;a.Fo=c.vne+c.Fof;a.Xl=c.Soe+c.Xlf;e=a.D;f=a.F;a.D=c.vne+c.Fof+c.D;a.F=c.Soe+c.Xlf+c.F;return a}function rpf(a){var c=wEc(a);return isFinite(c)&&isFinite(a.D)&&isFinite(a.F)&&c!=0}function spf(){}J(spf,K);spf.prototype.tb=function(){return
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 6f 6e 20 47 70 66 28 61 29 7b 43 4e 62 28 29 3b 72 65 74 75 72 6e 20 46 70 66 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 31 45 33 29 2c 55 6d 28 61 25 31 45 33 2a 31 45 36 29 29 7d 66 75 6e 63 74 69 6f 6e 20 48 70 66 28 61 2c 63 29 7b 46 4f 62 28 29 3b 72 65 74 75 72 6e 20 46 70 66 28 63 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 2d 61 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 2c 63 2e 44 2d 61 2e 44 7c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 49 70 66 28 61 2c 63 29 7b 74 68 69 73 2e 44 3d 61 3b 74 68 69 73 2e 46 3d 63 7d 4a 28 49 70 66 2c 4b 29 3b 66 75 6e 63 74 69 6f 6e 20 4a 70 66 28 61 2c 63 29 7b 61 2a 3d 63 3b 72 65 74 75 72 6e 20 6e 65 77 20 49 70 66 28 61 2b 63 2f 32 2c 61 2b 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 70 66 28 61 2c 63 2c 65 29 7b 76 61 72 20 Data Ascii: on Gpf(a){CNb();return Fpf(Math.floor(a/1E3),Um(a%1E31E6))}function Hpf(a,c){FOb();return Fpf(c.getSeconds()-a.getSeconds(),c.D-a.D\|0)}function Ipf(a,c){this.D=a;this.F=c}J(Ipf,K);function Jpf(a,c){a=c;return new Ipf(a+c/2,a+c)}function Kpf(a,c,e){var
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 3d 3d 31 26 26 61 2e 42 6e 28 29 3d 3d 30 7d 76 61 72 20 58 70 66 3b 66 75 6e 63 74 69 6f 6e 20 59 70 66 28 61 2c 63 2c 65 29 7b 5a 70 66 28 29 3b 74 68 69 73 2e 46 3d 30 3b 74 68 69 73 2e 48 3d 61 3b 74 68 69 73 2e 44 3d 4c 73 28 63 29 3b 74 68 69 73 2e 46 3d 65 7d 4a 28 59 70 66 2c 4b 29 3b 59 70 66 2e 70 72 6f 74 6f 74 79 70 65 2e 42 6e 3d 41 28 22 48 22 29 3b 0a 59 70 66 2e 70 72 6f 74 6f 74 79 70 65 2e 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4c 28 74 68 69 73 2c 61 29 3f 21 30 3a 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 59 70 66 3f 4d 6d 28 61 2e 46 2c 74 68 69 73 2e 46 29 3d 3d 30 26 26 4d 6d 28 61 2e 48 2c 74 68 69 73 2e 48 29 3d 3d 30 26 26 61 75 28 74 68 69 73 2e 44 2c 61 2e 44 29 3a 21 31 7d 3b 59 70 66 2e 70 72 6f 74 6f Data Ascii: ==1&&a.Bn()==0}var Xpf;function Ypf(a,c,e){Zpf();this.F=0;this.H=a;this.D=Ls(c);this.F=e}J(Ypf,K);Ypf.prototype.Bn=A("H");Ypf.prototype.Va=function(a){return L(this,a)?!0:a instanceof Ypf?Mm(a.F,this.F)==0&&Mm(a.H,this.H)==0&&au(this.D,a.D):!1};Ypf.proto
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 4a 2e 44 2e 6c 65 6e 67 74 68 29 26 26 28 21 74 68 69 73 2e 46 7c 7c 74 68 69 73 2e 44 2e 44 2e 6c 65 6e 67 74 68 3d 3d 74 68 69 73 2e 46 2e 44 2e 6c 65 6e 67 74 68 29 2c 22 67 6f 22 29 7d 4a 28 62 71 66 2c 4b 29 3b 62 71 66 2e 70 72 6f 74 6f 74 79 70 65 2e 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4c 28 74 68 69 73 2c 61 29 3f 21 30 3a 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 71 66 3f 74 68 69 73 2e 44 2e 56 61 28 61 2e 44 29 26 26 74 68 69 73 2e 4f 2e 56 61 28 61 2e 4f 29 26 26 74 68 69 73 2e 52 2e 56 61 28 61 2e 52 29 26 26 72 6e 28 74 68 69 73 2e 48 2c 61 2e 48 29 26 26 72 6e 28 74 68 69 73 2e 4a 2c 61 2e 4a 29 26 26 72 6e 28 74 68 69 73 2e 46 2c 61 2e 46 29 3a Data Ascii: this.D.D.length==this.J.D.length)&&(!this.F\|\|this.D.D.length==this.F.D.length),"go")}J(bqf,K);bqf.prototype.Va=function(a){return L(this,a)?!0:a instanceof bqf?this.D.Va(a.D)&&this.O.Va(a.O)&&this.R.Va(a.R)&&rn(this.H,a.H)&&rn(this.J,a.J)&&rn(this.F,a.F):
2025-01-16 08:08:42 UTC	1390	IN	Data Raw: 33 31 33 34 38 36 32 33 31 35 37 45 33 30 38 2c 68 3d 30 2c 6b 3d 61 2e 6c 65 6e 67 74 68 3b 68 3c 6b 3b 68 3d 68 2b 32 7c 30 29 7b 76 61 72 20 6d 3d 61 5b 68 5d 3b 6d 3d 3d 6e 75 6c 6c 26 26 28 6d 3d 4e 61 4e 29 3b 76 61 72 20 6e 3d 61 5b 68 2b 31 7c 30 5d 3b 6e 3d 3d 6e 75 6c 6c 26 26 28 6e 3d 4e 61 4e 29 3b 63 3d 4d 61 74 68 2e 6d 69 6e 28 63 2c 6d 29 3b 65 3d 4d 61 74 68 2e 6d 69 6e 28 65 2c 6e 29 3b 66 3d 4d 61 74 68 2e 6d 61 78 28 66 2c 6d 29 3b 67 3d 4d 61 74 68 2e 6d 61 78 28 67 2c 6e 29 7d 72 65 74 75 72 6e 5b 63 2c 65 2c 66 2c 67 5d 7d 66 75 6e 63 74 69 6f 6e 20 6e 71 66 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 46 28 61 2e 78 2d 63 2e 78 2c 61 2e 79 2d 63 2e 79 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 71 66 28 61 2c 63 29 7b 72 65 74 Data Ascii: 31348623157E308,h=0,k=a.length;h<k;h=h+2\|0){var m=a[h];m==null&&(m=NaN);var n=a[h+1\|0];n==null&&(n=NaN);c=Math.min(c,m);e=Math.min(e,n);f=Math.max(f,m);g=Math.max(g,n)}return[c,e,f,g]}function nqf(a,c){return new tF(a.x-c.x,a.y-c.y)}function oqf(a,c){ret

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:43 UTC	709	OUT	GET /static/document/client/js/1931159430-client_js_prod_kix_app.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=XJNI6utPlXpX5JYfHunvcanE65nfux_Vc52igbTv64KfnMATJNfKXdXiOd_NHmzDlW5ipE-gapYxHj7-OT5br68GFJ2dvjwO1tve5jRgu-6HOATlOdLqT5kWRfL1LlD8DCmITDtb8fLUZAex95sXnsAiU1nw9pQ99dhXhFrLgK7BDFoiJNBZ-KxsUTasKwz0; GFE_RTT=321; lbcs=0
2025-01-16 08:08:43 UTC	802	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 2733240 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 14 Jan 2025 10:59:17 GMT Expires: Wed, 14 Jan 2026 10:59:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 09 Jan 2025 05:01:50 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 162566 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-16 08:08:43 UTC	588	IN	Data Raw: 63 4b 28 57 30 61 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0a 20 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 72 65 73 74 72 69 63 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 Data Ascii: cK(W0a);/* Copyright 2020 Google Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 0a 20 46 49 54 4e 45 53 53 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 0a 20 41 55 54 Data Ascii: tions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUT
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 20 4f 54 48 45 52 0a 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 0a 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 76 61 72 20 61 4a 66 3d 22 5c 6e 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 5c 6e 22 2c 72 4e 3d 22 20 2d 20 22 2c 62 4a 66 3d 22 20 2d 20 32 34 70 78 29 22 2c 63 4a 66 3d 27 20 61 72 69 61 2d 63 68 65 63 6b 65 64 3d 22 27 2c 64 4a Data Ascii: OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/var aJf="\n-------------\n",rN=" - ",bJf=" - 24px)",cJf=' aria-checked="',dJ
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 4e 3d 22 20 6d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 57 69 7a 49 63 6f 6e 53 76 67 73 53 76 67 49 63 6f 6e 22 2c 4f 4a 66 3d 22 20 6d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 57 69 7a 49 63 6f 6e 53 76 67 73 53 76 67 49 63 6f 6e 20 6d 61 74 65 72 69 61 6c 64 65 73 69 67 6e 57 69 7a 49 63 6f 6e 53 76 67 73 52 74 6c 49 63 6f 6e 22 2c 50 4a 66 3d 27 20 6d 61 78 6c 65 6e 67 74 68 3d 22 27 2c 51 4a 66 3d 22 20 6d 65 67 61 62 79 74 65 73 2e 22 2c 52 4a 66 3d 27 20 6e 61 6d 65 3d 22 27 2c 7a 4e 3d 22 20 6f 66 20 22 2c 53 4a 66 3d 27 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 27 2c 54 4a 66 3d 22 20 72 65 71 75 65 73 74 65 64 20 62 79 20 22 2c 55 4a 66 3d 27 20 72 6f 6c 65 3d 22 27 2c 56 4a 66 3d 27 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 27 2c 57 4a 66 3d 22 20 Data Ascii: N=" materialdesignWizIconSvgsSvgIcon",OJf=" materialdesignWizIconSvgsSvgIcon materialdesignWizIconSvgsRtlIcon",PJf=' maxlength="',QJf=" megabytes.",RJf=' name="',zN=" of ",SJf=' placeholder="',TJf=" requested by ",UJf=' role="',VJf=' role="button"',WJf="
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 6e 70 75 74 3a 27 2c 42 4b 66 3d 27 22 20 6a 73 61 63 74 69 6f 6e 3d 22 6b 65 79 64 6f 77 6e 3a 27 2c 43 4b 66 3d 27 22 20 6a 73 61 63 74 69 6f 6e 3d 22 6d 6f 75 73 65 6c 65 61 76 65 3a 27 2c 44 4b 66 3d 27 22 20 6a 73 61 63 74 69 6f 6e 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 3a 27 2c 4a 4e 3d 27 22 20 6a 73 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 27 2c 4b 4e 3d 27 22 20 6a 73 6e 61 6d 65 3d 22 27 2c 45 4b 66 3d 27 22 20 6a 73 73 6c 6f 74 3e 27 2c 46 4b 66 3d 27 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 3e 27 2c 47 4b 66 3d 27 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 74 69 74 6c 65 3d 22 27 2c 48 4b 66 3d 27 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 27 2c 49 4b 66 Data Ascii: nput:',BKf='" jsaction="keydown:',CKf='" jsaction="mouseleave:',DKf='" jsaction="transitionend:',JN='" jscontroller="',KN='" jsname="',EKf='" jsslot>',FKf='" role="alert">',GKf='" role="button" tabindex="0" title="',HKf='" role="button" tabindex="0">',IKf
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 38 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 27 2c 4e 4e 3d 27 22 20 77 69 64 74 68 3d 22 27 2c 6c 4c 66 3d 27 22 2f 3e 27 2c 6d 4c 66 3d 27 22 2f 3e 3c 2f 64 69 76 3e 27 2c 6e 4c 66 3d 27 22 3e 3c 2f 61 3e 27 2c 0a 6f 4c 66 3d 27 22 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2c 70 4c 66 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 62 75 74 74 6f 6e 3e 27 2c 4f 4e 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 2c 71 4c 66 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 72 4c 66 3d 27 22 3e 3c 2f 64 69 76 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 27 2c 50 4e 3d 27 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 73 4c 66 3d 27 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 Data Ascii: 8"><path class="',NN='" width="',lLf='"/>',mLf='"/></div>',nLf='"></a>',oLf='"></button><span class="',pLf='"></div></button>',ON='"></div></div>',qLf='"></div></div></div><div class="',rLf='"></div></td></tr>',PN='"></div><div class="',sLf='"></div><div
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 2d 63 6f 6c 6f 72 73 77 61 74 63 68 2d 74 72 61 6e 73 6c 75 63 65 6e 74 2d 77 72 61 70 70 65 72 22 2c 6f 4d 66 3d 22 2d 63 6f 6e 74 65 6e 74 22 2c 70 4d 66 3d 22 2d 63 6f 70 79 22 2c 71 4d 66 3d 22 2d 64 69 73 61 62 6c 65 64 22 2c 72 4d 66 3d 22 2d 64 72 6f 70 64 6f 77 6e 22 2c 73 4d 66 3d 22 2d 68 65 61 64 65 72 22 2c 74 4d 66 3d 22 2d 68 65 6c 70 2d 74 65 78 74 2d 69 64 22 2c 75 4d 66 3d 22 2d 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 76 4d 66 3d 22 2d 69 63 6f 6e 22 2c 77 4d 66 3d 22 2d 69 6e 6e 65 72 2d 62 6f 78 22 2c 78 4d 66 3d 22 2d 69 6e 70 75 74 20 6a 66 6b 2d 74 65 78 74 69 6e 70 75 74 22 2c 79 4d 66 3d 0a 22 2d 6c 61 62 65 6c 22 2c 7a 4d 66 3d 22 2d 6c 61 62 65 6c 2d 69 64 22 2c 41 4d 66 3d 22 2d 6f 72 69 67 69 6e 22 2c 42 4d 66 3d 22 2d 6f 75 74 65 Data Ascii: -colorswatch-translucent-wrapper",oMf="-content",pMf="-copy",qMf="-disabled",rMf="-dropdown",sMf="-header",tMf="-help-text-id",uMf="-horizontal",vMf="-icon",wMf="-inner-box",xMf="-input jfk-textinput",yMf="-label",zMf="-label-id",AMf="-origin",BMf="-oute
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 75 61 72 74 65 72 22 2c 6f 4e 66 3d 22 35 30 70 78 22 2c 70 4e 66 3d 22 38 46 36 34 38 36 42 46 2d 44 32 41 35 2d 34 31 30 45 2d 39 31 43 39 2d 45 31 33 34 38 39 33 33 32 38 38 31 22 2c 71 4e 66 3d 22 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 22 2c 72 4e 66 3d 22 3b 20 62 6c 75 72 3a 22 2c 73 4e 66 3d 27 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 22 3e 3c 2f 64 69 76 3e 27 2c 74 4e 66 3d 22 3b 20 63 68 61 6e 67 65 3a 22 2c 75 4e 66 3d 22 3b 20 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 22 2c 76 4e 66 3d 22 3b 20 66 6f 63 75 73 3a 22 2c 77 4e 66 3d 22 3b 20 66 6f 63 75 73 69 6e 3a 22 2c 78 4e 66 3d 22 3b 20 66 6f 63 75 73 6f 75 74 3a 22 2c 79 4e 66 3d 22 3b 20 69 6e 70 75 74 3a 22 2c 7a 4e 66 3d 22 3b 20 69 74 20 6d 75 73 74 20 62 65 20 6e 6f 20 Data Ascii: uarter",oNf="50px",pNf="8F6486BF-D2A5-410E-91C9-E13489332881",qNf=":focus-visible",rNf="; blur:",sNf='; border-radius: 50%"></div>',tNf="; change:",uNf="; contextmenu:",vNf="; focus:",wNf="; focusin:",xNf="; focusout:",yNf="; input:",zNf="; it must be no
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 27 2c 0a 70 4f 66 3d 27 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 27 2c 71 4f 66 3d 27 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 27 2c 72 4f 66 3d 27 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 27 2c 70 4f 3d 22 3c 64 69 76 22 2c 73 4f 66 3d 27 3c 64 69 76 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2c 74 4f 66 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 61 75 74 6f 63 6f 72 72 65 63 74 2d 62 75 62 62 6c 65 2d 6f 70 74 69 6f 6e 20 27 2c 71 4f 3d 27 3c 64 69 76 20 69 64 3d 22 27 2c 75 4f 66 3d 27 3c 64 69 76 20 69 64 3d 22 6c 69 6e 6b 2d 62 75 62 62 6c 65 2d 74 68 75 6d 62 6e 61 69 6c 2d 69 6d 61 67 65 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 Data Ascii: <a href="',pOf='<a target="_blank" href="',qOf='<button class="',rOf='<circle class="',pO="<div",sOf='<div aria-label="',tOf='<div class="docs-autocorrect-bubble-option ',qO='<div id="',uOf='<div id="link-bubble-thumbnail-image" style="background-image:u
2025-01-16 08:08:43 UTC	1390	IN	Data Raw: 36 4c 34 38 30 2d 34 32 34 4c 32 35 36 2d 32 30 30 5a 22 2f 3e 3c 2f 73 76 67 3e 27 2c 67 50 66 3d 27 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 34 2d 32 38 38 68 37 32 56 2d 35 32 38 48 34 34 34 76 32 34 30 5a 6d 33 35 2e 37 39 2d 33 31 32 71 31 35 2e 32 31 2c 30 20 32 35 2e 37 31 2d 31 30 2e 32 39 74 31 30 2e 35 2d 32 35 2e 35 54 35 30 35 2e 37 31 2d 36 36 31 2e 35 54 34 38 30 2e 32 31 2d 36 37 32 54 34 35 34 2e 35 2d 36 36 31 2e 37 31 54 34 34 34 2d 36 33 36 2e 32 31 74 31 30 2e 32 39 2c 32 35 2e 37 31 74 32 35 2e 35 2c 31 30 2e 35 5a 6d 30 2e 34 39 2c 35 30 34 51 34 30 31 2d 39 36 20 33 33 31 2d 31 32 36 54 32 30 38 2e 35 2d 32 30 38 2e 35 54 31 32 36 2d 33 33 30 2e 39 36 54 39 36 2d 34 38 30 2e 34 36 54 31 32 36 2d 36 32 39 2e 35 74 38 32 2e 35 2d 31 32 Data Ascii: 6L480-424L256-200Z"/></svg>',gPf='><path d="M444-288h72V-528H444v240Zm35.79-312q15.21,0 25.71-10.29t10.5-25.5T505.71-661.5T480.21-672T454.5-661.71T444-636.21t10.29,25.71t25.5,10.5Zm0.49,504Q401-96 331-126T208.5-208.5T126-330.96T96-480.46T126-629.5t82.5-12

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:44 UTC	868	OUT	OPTIONS /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/test?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&sid=4aed4b531914cc9f&includes_info_params=true&usp=sharing_eip&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=1&ar=5&arat=nGJ_d1cN2clYRA&smv=68&smb=%5B2147483647%2C%204A%3D%3D%5D&cimpl=0&TYPE=xmlhttp&zx=ke4sdl4igqxp&t=1 HTTP/1.1 Host: 0.docs.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-same-domain Origin: https://docs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-16 08:08:44 UTC	738	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 16 Jan 2025 08:08:44 GMT Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Headers: x-same-domain X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2025-01-16 08:08:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:44 UTC	1293	OUT	GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/test?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&sid=4aed4b531914cc9f&includes_info_params=true&usp=sharing_eip&cros_files=false&VER=8&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=0&smv=68&smb=%5B2147483647%2C%204A%3D%3D%5D&cimpl=0&MODE=init&zx=m3lgi0gp05do&t=1 HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
2025-01-16 08:08:44 UTC	4630	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet x-client-wire-protocol: HTTP/1.1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 16 Jan 2025 08:08:44 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-_mG367fuYhrPXvNjuXxbDg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Reporting-Endpoints: default="/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/web-reports?bl=editors.documents-frontend_20250107.02_p1&context=eJwV0HlY1NUaB_DT73fOUWFgFmBQVAIRFBUDzSRREIaZQBTNkDOiaCwjlcYkoma5V3YvpgR6JRVlgAEGxlFTedwlczdNSdMbGqW5JEte0ZHFhPvtj8_znu15vud9Xfb203Qlk_VckCm9BSmB5a6COGC_QpALEK0SpBx8NYIM8RJEB6chTStInbcgI_oKYocpPoJ49hckeYAgVl9BXgwSJDNAkBNBWA8TxG2EIGqwwfAQQQpHCrIuTBDDGEHyYDP0vCHI1LGCXAsX5B5ERQry9gzkGgUZC1dTBPkdElIFmQUlcwS5mSbIQ-iTKUg_-NkkyOvzBYmF5sXIhpCP0QfwZYJo4b-rBfkTbGsEOQQ_rhWkEWI_EyQJwjcIEgd5WwTZBoFFgoyB7m8Ecd8qyNpi_B_WlqDCCIsg42G7FbOAiw5BGsBzryCD4XAtZgmNxwX5C_zPChIGK2ADxJ8XZCZE_4B-wXAJc4StUA3DrgoyDo5fF-QyPL0hiHxTkI2_CLITKhoEqYXDcAFcfhXEB75vFOQn8L0jyEgouidIFSjvC_Iq7IPv4SzcgId_CtIO6W2C5MADeA7pSiP5Dq6CQmUkA-Cht5GoXjcSP5j7hpEsgqPwA2x700hq4AY8gDcjjCQe-kwxkshpRpIIm2HdO0ayBQ4ajeROipGsSTWSAohOM5K34WS6kdSDahFyICkXWSuNJAtyYTlsgu1wG-5B4CojCQEzLIWNsAUuw89wF5rgN696kjKsWUqHhqwn0l344tQTaQNk3W2TzNDvtaeSP6QmPJVMsGekUzoZ6pQKwpySb5xTCoIZK5xSKgxY7ZQGg_dap_QqPD_ilLqh-IxTssKF-e1SPSwb3yGtAeOEDuld [TRUNCATED] Document-Policy: include-js-call-stacks-in-crash-reports X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2025-01-16 08:08:44 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2025-01-16 08:08:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:44 UTC	1135	OUT	GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/trash/read?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&includes_info_params=true&usp=sharing_eip&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
2025-01-16 08:08:44 UTC	4655	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 16 Jan 2025 08:08:44 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce--dM4cmTbN7w8dY9e98kDcQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Reporting-Endpoints: default="/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/web-reports?bl=editors.documents-frontend_20250107.02_p1&context=eJwV0HlY1NUaB_DT73fOUWFgFphBUQhESFQMNJNEQRhmAkk0Qs6IIbFJpUEiapZ7ZfdSSqBXXFAGGGBgHDWMx10yd9OUNL2hUZpLsuQVHVlMuN_--Dzv2Z7nPe_X6cAQTW8S-ZILMn2gIGWw3FkQO-xTCHIOIlWCVIK3RpCXtILo4SSk6QRp9BBkzGBBbDDdUxD3oYIkDRPE4i3Is-GCZPoJciwA61GCuIwRRA1WGB0kSPFYQdaFCGKcIEgBbIL-VwWZMVGQK6GC3IGIcEHenIW-JkEmwuVkQX6HuBRB5kDZXEGupwlyHwZlCjIEfs4S5JX5gkRD22L0hqCPMAfwZYLo4L-rBfkTrGsEOQA_rhWkBaI_FSQRQtcLEgMFmwXZBv4lgkyAvi2CuG4VZG0p_g9ry1BhjFmQybDdgizgvF2QZnDfK8gIONiALKHlqCB_ge9pQUJgBayH2LOCzIbIHzAvGC8gR9gKtTDqsiCT4OhVQS7C42uCyNcF2fCLIDuhqlmQBjgI58DpV0E84fsWQX4C71uCjIWSO4LUgPKuIC9CPXwPp-Ea3P9TkC5I7xQkD-7BU0hXmsh3cBkUKhMZBvc9TET1ion4QOqrJrIIDsMPsO01E6mDa3APXgszkVgYNN1EwmeaSDxsgnVvmchm2G8ykVvJJrImxUSKIDLNRN6E4-km0gSqRegDifkmol1pIl6QCtmQD8thI2yHm3AH_FeZSBDkwlLYAJvhIvwMt6EVftM2keRRbVI6NGc_km7D5yceSesh-3anlAtDXn4s-UJK3GMpC_aMdUjHgx1SUYhD8o5xSAEwa4VDSoFhqx3SCPBY65BehKeHHFIflJ5ySBY4N79LaoJlk7ulNWCa [TRUNCATED] Document-Policy: include-js-call-stacks-in-crash-reports X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2025-01-16 08:08:44 UTC	28	IN	Data Raw: 31 36 0d 0a 29 5d 7d 27 0a 7b 22 54 52 41 53 48 45 44 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 16)]}'{"TRASHED":false}
2025-01-16 08:08:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:44 UTC	1138	OUT	GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/peruserchrome?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&includes_info_params=true&usp=sharing_eip&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
2025-01-16 08:08:45 UTC	4655	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 16 Jan 2025 08:08:44 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-nRPyX-qggEFJ8avKqxO-rw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Reporting-Endpoints: default="/document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/web-reports?bl=editors.documents-frontend_20250107.02_p1&context=eJwV0HlYlFUbBvDT-55zVBiYBRgUlUCERMVAM0kUhGEmkEQz4YwYGstIpTKJqFnulX0fpQT6SSrKAAMMjKOGcblL5m6akluhUZpLsuQnOrKY0N0fv-s523Xd53lc9gzQdCeTL7ggU_oKUgLLXQVxwF6FIGchWiVIOfhqBHnJSxAdnIA0rSD13oKM7C-IHab4COI5UJDkQYJYfQV5NkSQzABBjgZhPVwQt5GCqMEGI0IEKRwlyLowQQxjBcmDTdD7qiBTxwlyOVyQOxAVKcibScg1CjIOLqUI8jskpAoyC0pmC3I9TZD70C9TkAFw1STIK_MEiYWWxciGkA_RB_Blgmjh59WC_Am2NYLshx_XCtIEsZ8IMgPC1wsSB3mbBdkKgUWCjIWerwVx3yLI2mL8H9aWoMJIiyATYJsVs4BzDkEawXOPIEPhQB1mCU1HBPkL_E8JEgYrYD3EnxFkJkT_gH7BcB5zhC1QDcMvCTIejlwR5AI8viaIfF2QDb8IsgMqGgWpgwNwFlx-FcQHvm8S5CfwvSXIKCi6I0gVKO8K8iLUwvdwCq7B_T8F6YD0dkFy4B48hXSlkXwHl0ChMpJBcN_bSFSvGIkfzHnVSBbBIfgBtr5mJDVwDe7BaxFGEg_9phhJ5DQjSYRNsO4tI9kM-4xGcivFSNakGkkBRKcZyZtwLN1IGkC1CDkwIxdZK40kC3JhOWyEbXAT7kDgKiMJATMshQ2wGS7AVfgZfoffvBpIyvAWKR0asx5Jt-Gz44-k9ZB1u10yw4CXH0v-kJrwWDLB7lFO6VioUyoIc0q-cU4pCJJWOKVUGLTaKQ0F77VO6UV4etAp9UDxSadkhbPzOqQGWDahU1oDxomd0juQ [TRUNCATED] Document-Policy: include-js-call-stacks-in-crash-reports X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2025-01-16 08:08:45 UTC	12	IN	Data Raw: 37 0d 0a 29 5d 7d 27 0a 7b 7d 0d 0a Data Ascii: 7)]}'{}
2025-01-16 08:08:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:44 UTC	706	OUT	GET /static/document/client/js/1153489568-client_js_prod_kix_docos.js HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
2025-01-16 08:08:45 UTC	802	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 1099332 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 14 Jan 2025 10:59:17 GMT Expires: Wed, 14 Jan 2026 10:59:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 09 Jan 2025 05:01:50 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 162568 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-16 08:08:45 UTC	588	IN	Data Raw: 63 4b 28 61 31 61 29 3b 0a 76 61 72 20 65 4d 6a 3d 22 20 63 6f 72 72 65 63 74 65 64 20 74 6f 20 22 2c 66 4d 6a 3d 27 20 64 61 74 61 2d 69 73 2d 73 65 61 72 63 68 3d 22 74 72 75 65 22 27 2c 67 4d 6a 3d 22 20 67 72 6f 75 70 2c 20 70 72 65 73 73 20 65 6e 74 65 72 22 2c 68 4d 6a 3d 22 20 6f 74 68 65 72 73 20 68 61 76 65 20 72 65 61 63 74 65 64 2e 22 2c 69 4d 6a 3d 27 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 27 2c 6a 4d 6a 3d 22 20 74 6f 20 22 2c 6b 4d 6a 3d 22 20 7c 20 22 2c 6c 4d 6a 3d 27 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 6d 4d 6a 3d 27 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 26 62 75 6c 6c 3b 3c 2f 64 69 76 3e 27 2c 6e 4d 6a 3d 27 22 20 Data Ascii: cK(a1a);var eMj=" corrected to ",fMj=' data-is-search="true"',gMj=" group, press enter",hMj=" others have reacted.",iMj=' style="display: none"',jMj=" to ",kMj=" \| ",lMj='" aria-hidden="true"/><div class="',mMj='" aria-hidden="true">•</div>',nMj='"
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 27 2c 77 4d 6a 3d 27 22 20 72 6f 6c 65 3d 22 64 69 61 6c 6f 67 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 78 4d 6a 3d 27 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 3e 27 2c 79 4d 6a 3d 27 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3e 27 2c 7a 4d 6a 3d 27 22 20 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3d 22 27 2c 41 4d 6a 3d 27 22 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3d 22 27 2c 42 4d 6a 3d 27 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 27 2c 43 4d 6a 3d 27 22 20 73 74 79 6c 65 3d 22 27 2c 44 4d 6a 3d 27 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 3c 2f 64 69 76 3e 27 2c 45 4d 6a 3d 27 22 20 73 74 79 6c 65 3d 22 Data Ascii: tyle="display:none">',wMj='" role="dialog"><div class="',xMj='" role="heading">',yMj='" role="presentation">',zMj='" stroke-dasharray="',AMj='" stroke-dashoffset="',BMj='" stroke-width="',CMj='" style="',DMj='" style="display: none"></div>',EMj='" style="
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 22 2c 6c 4e 6a 3d 27 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 70 65 6f 70 6c 65 6b 69 74 2d 69 64 3d 22 27 2c 6d 4e 6a 3d 22 3c 2f 64 69 76 3e 3c 2f 74 64 3e 22 2c 6e 4e 6a 3d 27 3c 2f 64 69 76 3e 3c 64 69 76 20 70 65 6f 70 6c 65 6b 69 74 2d 69 64 3d 22 27 2c 6f 4e 6a 3d 22 3c 2f 74 61 62 6c 65 3e 3c 2f 64 69 76 3e 22 2c 70 4e 6a 3d 22 3c 2f 74 64 3e 3c 2f 74 72 3e 22 2c 71 4e 6a 3d 22 3c 62 75 74 74 6f 6e 22 2c 72 4e 6a 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 22 2c 0a 6e 59 3d 27 3c 64 69 76 20 70 65 6f 70 6c 65 6b 69 74 2d 69 64 3d 22 27 2c 73 4e 6a 3d 27 3c 64 69 76 20 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 27 2c 74 4e 6a 3d 27 3c 64 69 76 20 73 74 79 6c 65 3d 22 Data Ascii: ></div></div></div>",lNj='</div></div><div peoplekit-id="',mNj="</div></td>",nNj='</div><div peoplekit-id="',oNj="</table></div>",pNj="</td></tr>",qNj="<button",rNj="<div class=",nY='<div peoplekit-id="',sNj='<div role="option" class="',tNj='<div style="
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 43 45 45 44 45 44 22 2c 59 4e 6a 3d 22 44 69 73 63 61 72 64 20 43 68 61 6e 67 65 73 22 2c 5a 4e 6a 3d 22 44 69 73 63 61 72 64 20 63 68 61 6e 67 65 73 22 2c 24 4e 6a 3d 22 44 69 73 63 61 72 64 20 63 6f 6d 6d 65 6e 74 22 2c 61 4f 6a 3d 22 44 69 73 70 6c 61 79 20 61 6c 6c 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 62 4f 6a 3d 22 44 69 73 70 6c 61 79 20 6f 70 65 6e 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 63 4f 6a 3d 22 44 69 73 70 6c 61 79 20 72 65 73 6f 6c 76 65 64 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 64 4f 6a 3d 22 44 69 73 70 6c 61 79 69 6e 67 20 6f 70 65 6e 20 61 6e 64 20 72 65 73 6f 6c 76 65 64 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 65 4f 6a 3d 22 44 69 73 70 6c 61 79 69 6e 67 20 6f 70 65 6e 20 63 6f 6d 6d 65 6e 74 73 2e 22 2c 66 4f 6a 3d 22 44 69 73 70 6c 61 79 69 6e Data Ascii: CEEDED",YNj="Discard Changes",ZNj="Discard changes",$Nj="Discard comment",aOj="Display all comments.",bOj="Display open comments.",cOj="Display resolved comments.",dOj="Displaying open and resolved comments.",eOj="Displaying open comments.",fOj="Displayin
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 72 61 67 65 20 6d 65 63 68 61 6e 69 73 6d 3a 20 51 75 6f 74 61 20 65 78 63 65 65 64 65 64 22 2c 59 4f 6a 3d 22 53 75 67 67 65 73 74 69 6f 6e 20 61 63 63 65 70 74 65 64 22 2c 5a 4f 6a 3d 22 53 75 67 67 65 73 74 69 6f 6e 20 72 65 6a 65 63 74 65 64 22 2c 24 4f 6a 3d 22 53 75 70 70 6c 69 65 72 73 2e 6d 65 6d 6f 69 7a 65 28 22 2c 61 50 6a 3d 22 53 78 39 4b 77 63 22 2c 62 50 6a 3d 22 54 49 4d 45 4f 55 54 22 2c 63 50 6a 3d 22 55 6e 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 69 6e 65 22 2c 64 50 6a 3d 22 55 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 72 72 6f 72 20 63 6f 64 65 22 2c 65 50 6a 3d 22 56 69 65 77 20 73 6d 61 72 74 20 73 75 67 67 65 73 74 69 6f 6e 22 2c 66 50 6a 3d 22 56 69 65 77 65 72 73 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 63 61 6e 20 73 65 65 20 63 Data Ascii: rage mechanism: Quota exceeded",YOj="Suggestion accepted",ZOj="Suggestion rejected",$Oj="Suppliers.memoize(",aPj="Sx9Kwc",bPj="TIMEOUT",cPj="Unavailable offline",dPj="Unrecognized error code",ePj="View smart suggestion",fPj="Viewers of this file can see c
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 65 6c 65 63 74 65 64 22 2c 54 50 6a 3d 22 62 65 66 6f 72 65 2d 73 75 67 67 65 73 74 69 6f 6e 2d 61 63 63 65 70 74 65 64 22 2c 55 50 6a 3d 22 62 65 66 6f 72 65 2d 73 75 67 67 65 73 74 69 6f 6e 2d 72 65 6a 65 63 74 65 64 22 2c 56 50 6a 3d 22 62 65 66 6f 72 65 2d 76 69 65 77 2d 66 6c 75 73 68 65 64 22 2c 57 50 6a 3d 22 62 65 66 6f 72 65 5f 75 6e 64 6f 22 2c 58 50 6a 3d 22 62 65 66 6f 72 65 63 68 61 6e 67 65 22 2c 59 50 6a 3d 22 62 65 66 6f 72 65 66 6f 63 75 73 22 2c 0a 5a 50 6a 3d 22 62 65 66 6f 72 65 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 2c 24 50 6a 3d 22 62 6c 6f 63 6b 65 64 22 2c 61 51 6a 3d 22 62 6f 6c 64 22 2c 62 51 6a 3d 22 63 4a 30 6d 4d 63 22 2c 63 51 6a 3d 22 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 22 2c 64 51 6a 3d 22 63 61 6c 6c 2d 74 Data Ascii: elected",TPj="before-suggestion-accepted",UPj="before-suggestion-rejected",VPj="before-view-flushed",WPj="before_undo",XPj="beforechange",YPj="beforefocus",ZPj="beforeselectionchange",$Pj="blocked",aQj="bold",bQj="cJ0mMc",cQj="call-to-action",dQj="call-t
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 62 61 64 67 65 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 59 51 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 6e 6f 6e 65 22 2c 5a 51 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 6f 74 68 65 72 22 2c 24 51 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 73 65 6c 65 63 74 2d 66 6f 63 75 73 22 2c 61 52 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 2d 79 6f 75 22 2c 62 52 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 22 2c 63 52 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 2d 61 73 73 69 67 6e 65 65 2d 74 65 78 74 22 2c 64 52 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 67 6e 65 65 76 69 65 77 2d 6c 61 62 65 6c 22 2c 65 52 6a 3d 22 64 6f 63 6f 73 2d 61 73 73 69 73 74 65 64 77 72 69 74 69 6e 67 2d 73 6d 61 72 Data Ascii: badge-container",YQj="docos-assignee-none",ZQj="docos-assignee-other",$Qj="docos-assignee-select-focus",aRj="docos-assignee-you",bRj="docos-assigneeview",cRj="docos-assigneeview-assignee-text",dRj="docos-assigneeview-label",eRj="docos-assistedwriting-smar
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 4b 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 6d 65 6e 75 2d 76 69 73 69 62 6c 65 22 2c 4c 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 61 63 74 69 76 65 22 2c 4d 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 63 6f 6d 6d 65 6e 74 22 2c 4e 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 69 6e 70 75 74 2d 70 61 6e 65 22 2c 4f 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 6f 70 65 6e 22 2c 50 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 70 6c 79 63 6f 6e 74 61 69 6e 65 72 22 2c 51 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 65 73 6f 6c 76 65 22 2c 52 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f 63 6f 76 69 65 77 2d 72 6f 6f 74 72 65 70 6c 79 22 2c 53 52 6a 3d 22 64 6f 63 6f 73 2d 64 6f Data Ascii: KRj="docos-docomenu-visible",LRj="docos-docoview-active",MRj="docos-docoview-comment",NRj="docos-docoview-input-pane",ORj="docos-docoview-reopen",PRj="docos-docoview-replycontainer",QRj="docos-docoview-resolve",RRj="docos-docoview-rootreply",SRj="docos-do
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 2c 79 53 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 62 75 74 74 6f 6e 73 22 2c 7a 53 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 63 61 6e 63 65 6c 22 2c 41 53 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 6e 6f 68 69 64 65 22 2c 42 53 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 70 61 6e 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 43 53 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 70 6f 73 74 22 2c 44 53 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 74 65 78 74 61 72 65 61 22 2c 0a 45 53 6a 3d 22 64 6f 63 6f 73 2d 69 6e 70 75 74 2d 74 79 70 69 6e 67 22 2c 46 53 6a 3d 22 64 6f 63 6f 73 2d 69 72 66 63 22 2c 47 53 6a 3d 22 64 6f 63 6f 73 2d 6c 61 79 6f 75 74 2d 76 65 72 74 69 63 61 6c 22 2c 48 53 6a 3d 22 64 6f 63 6f 73 2d 6c 6f 63 61 74 69 6f 6e 2d 66 69 Data Ascii: ,ySj="docos-input-buttons",zSj="docos-input-cancel",ASj="docos-input-nohide",BSj="docos-input-pane-placeholder",CSj="docos-input-post",DSj="docos-input-textarea",ESj="docos-input-typing",FSj="docos-irfc",GSj="docos-layout-vertical",HSj="docos-location-fi
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 73 2d 72 65 70 6c 79 76 69 65 77 2d 71 75 6f 74 65 2d 65 78 70 61 6e 64 65 64 22 2c 73 54 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 72 65 70 6c 79 2d 63 6f 75 6e 74 22 2c 74 54 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 72 65 73 6f 6c 76 65 2d 62 75 74 74 6f 6e 22 2c 75 54 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 73 74 61 74 69 63 22 2c 76 54 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 74 69 6d 65 73 74 61 6d 70 22 2c 77 54 6a 3d 22 64 6f 63 6f 73 2d 72 65 70 6c 79 76 69 65 77 2d 74 6f 6d 62 73 74 6f 6e 65 22 2c 78 54 6a 3d 22 64 6f 63 6f 73 2d 72 65 73 6f 6c 76 65 2d 64 6f 63 6f 22 2c 79 54 6a 3d 22 64 6f 63 6f 73 2d 72 65 73 6f 6c 76 65 2d 68 69 67 68 6c 69 67 68 74 22 2c 7a 54 6a 3d 22 64 6f 63 Data Ascii: s-replyview-quote-expanded",sTj="docos-replyview-reply-count",tTj="docos-replyview-resolve-button",uTj="docos-replyview-static",vTj="docos-replyview-timestamp",wTj="docos-replyview-tombstone",xTj="docos-resolve-doco",yTj="docos-resolve-highlight",zTj="doc

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:45 UTC	726	OUT	GET /document/font/getmetadata?includes_info_params=true&usp=sharing_eip&cros_files=false HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lbcs=0; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
2025-01-16 08:08:45 UTC	1201	IN	HTTP/1.1 400 Bad Request Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 16 Jan 2025 08:08:45 GMT Content-Type: text/html; charset=utf-8 x-chromium-appcache-fallback-override: disallow-fallback Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-_6AVVXnp3ERAL-u_Hzs45A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2025-01-16 08:08:45 UTC	189	IN	Data Raw: 63 31 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 Data Ascii: c18<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-width, initial-s
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d Data Ascii: cale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><link rel="shortcut icon" href="//docs.google.com/favicon.ico"><title>Page Not Found</title><meta name="referrer" content="strict-origin-when-cross-origin"><link href="//fonts.googleapis.com
2025-01-16 08:08:45 UTC	1390	IN	Data Raw: 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 45 58 4b 7a 66 4a 76 65 36 49 73 5a 64 79 69 53 48 66 58 69 55 41 22 3e 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 61 2c 20 61 3a 6c 69 6e 6b 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f 72 3a 20 23 31 31 32 41 42 42 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 45 58 4b 7a 66 4a 76 65 36 49 73 5a 64 79 69 53 48 66 58 69 55 41 22 3e 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 20 7b 66 6f Data Ascii: /css" nonce="EXKzfJve6IsZdyiSHfXiUA">body {background-color: #fff; font-family: Arial,sans-serif; font-size: 13px; margin: 0; padding: 0;}a, a:link, a:visited {color: #112ABB;}</style><style type="text/css" nonce="EXKzfJve6IsZdyiSHfXiUA">.errorMessage {fo
2025-01-16 08:08:45 UTC	134	IN	Data Raw: 3b 7d 23 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ;}#innerContainer {margin-bottom: 20px; margin-left: 40px; margin-right: 40px; margin-top: 80px; position: relative;}</style></html>
2025-01-16 08:08:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-16 08:08:45 UTC	1592	OUT	GET /document/d/1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I/test?id=1HIOBfs0mWDPFLsdxEPq2-ATwAzHTRvdLS4tFC2XMu9I&sid=4aed4b531914cc9f&includes_info_params=true&usp=sharing_eip&cros_files=false&VER=8&tab=t.0&lsq=-1&u=ANONYMOUS_06287517911256457317&flr=0&gsi&ssfi=1&ar=5&arat=nGJ_d1cN2clYRA&smv=68&smb=%5B2147483647%2C%204A%3D%3D%5D&cimpl=0&TYPE=xmlhttp&zx=ke4sdl4igqxp&t=1 HTTP/1.1 Host: 0.docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: COMPASS=documents=CmIACWuJV5QY10SoIkJ6cHruuT4ryX-BkYeUH8Kd7vtWR-IjYYSPV6yvMXIbbFeQLhEqs_YICxuU0fuhJdFkV6aMUMRVoDRL5ZHdNgVxdrZTmKLnm_7g8pASJ3MwyKHBh1BqWRCUmaO8BhpzAAlriVfEVX-f_MOFSXKfwVoCpp0Qo-4--_sKP_3rHDZi2K6UZa9iGMesfoFta0R-zVqTF42NGMN2BMoNtiRPxFYABiCKvIrkY0ZoQESBM3O1FITY2X01YoxEAOiXyvA-8cgrC6XsVHbrvR7uV_vHVD4NhQ==; NID=520=QVSIKgVqdYUIf9fpiRaw9sf3LEr13K13fkp8azn5LB1zt48r6IRCWuNXkcN79_J5Qu2QDcskYSxK9pyadfznG-2b0xHsnWgyiyJW9pJA8dtBAxlo2aiwmexFJ_gtsjAXd0veoJdIvuInpw46Oj9UA3OI5DxEHn3ZsF8cayIABAAXfsDQKGSkwb8Wmv4DWUXzP44ZaW81
2025-01-16 08:08:45 UTC	1166	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 16 Jan 2025 08:08:45 GMT Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Cache-Control,Content-Encoding,Content-Length,Content-Type,Date,Expires,Pragma,Server,Transfer-Encoding,X-Google-GFE-Backend-Request-Cost Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Origin-Trial: AkelR2Z6goRvgb0wFhWpw1XHmsXA4wp5nA4L2zOZhcxBenM8w6ceB+Q54iFgXclpJUWY6RsUfri12O+Hq4jtJgUAAABieyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkVkaXRDb250ZXh0IiwiZXhwaXJ5IjoxNzA5NjgzMTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-5 Connection: close Transfer-Encoding: chunked
2025-01-16 08:08:45 UTC	10	IN	Data Raw: 35 0d 0a 31 31 31 31 31 0d 0a Data Ascii: 511111