mirror of
https://github.com/fireeye/pywintrace
synced 2026-06-08 14:12:45 +00:00
Anthony Berglund
1143 lines
18 KiB
Plaintext
1143 lines
18 KiB
Plaintext
WININET_ROOT_HANDLE_CREATED
|
|
HINTERNET: 0xCC0004
|
|
_UserAgentLength: 9
|
|
UserAgent: TestAgent
|
|
_AccessTypeLength: 6
|
|
AccessType: DIRECT
|
|
_ProxyListLength: 0
|
|
ProxyList:
|
|
_ProxyBypassListLength: 0
|
|
ProxyBypassList:
|
|
Flags: 0x0
|
|
|
|
WININET_CONNECT_HANDLE_CREATED
|
|
ConnectionHandle: 0xCC0008
|
|
ParentHandle: 0xCC0004
|
|
_ServerNameLength: 13
|
|
ServerName: www.gmail.com
|
|
ServerPort: 80
|
|
_ServiceLength: 4
|
|
Service: HTTP
|
|
Flags: 0x0
|
|
|
|
WININET_HTTP_REQUEST_HANDLE_CREATED
|
|
ConnectionHandle: 0xCC000C
|
|
ParentHandle: 0xCC0008
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
_ObjectNameLength: 1
|
|
ObjectName: /
|
|
_VersionLength: 8
|
|
Version: HTTP/1.1
|
|
_ReferrerLength: 0
|
|
Referrer:
|
|
_AcceptTypesLength: 0
|
|
AcceptTypes:
|
|
Flags: 0x0
|
|
|
|
WININET_HTTP_REQUEST_HANDLE_CREATED
|
|
ConnectionHandle: 0xCC000C
|
|
_ServerNameLength: 13
|
|
ServerName: www.gmail.com
|
|
ServerPort: 80
|
|
_ServiceLength: 4
|
|
Service: http
|
|
|
|
WININET_HTTP_REQUEST
|
|
HINTERNET: 0xCC000C
|
|
|
|
WININET_SENDREQUEST
|
|
Request: 0x441F10
|
|
AddressName: http://www.gmail.com/
|
|
|
|
WININET_PRENET_CACHELOOKUP
|
|
Request: 0x441F10
|
|
|
|
WININET_PRENET_CACHEMISS
|
|
Request: 0x441F10
|
|
|
|
WININET_CONNECT
|
|
Request: 0x441F10
|
|
|
|
WININET_LOOKUPCONNECTION
|
|
Request: 0x441F10
|
|
|
|
WININET_LOOKUPCONNECTION
|
|
Request: 0x441F10
|
|
Socket: 4294967295
|
|
|
|
WININET_RESOLVEHOST
|
|
Request: 0x441F10
|
|
HostName: www.gmail.com
|
|
|
|
WININET_DNS_QUERY
|
|
_HostNameLength: 13
|
|
HostName: www.gmail.com
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_GETADDRINFO
|
|
Flags: 0x3
|
|
AddressName: www.gmail.com
|
|
|
|
WININET_AUTOPROXY_PERFTRACK_ALL
|
|
UniqueId: 1
|
|
|
|
WININET_AUTOPROXY_PERFTRACK_HOST_IP_LOOKUP
|
|
|
|
WININET_AUTOPROXY_PERFTRACK_HOST_IP_LOOKUP
|
|
|
|
WININET_AUTOPROXY_PERFTRACK_SWPAD_LOOKUP
|
|
|
|
WININET_AUTOPROXY_PERFTRACK_ALL
|
|
UniqueId: 1
|
|
|
|
WININET_AUTOPROXY_PERFTRACK_UNKNOWN_DETECTION
|
|
|
|
WININET_GETADDRINFO
|
|
Flags: 0x1
|
|
AddressName: wpad
|
|
|
|
WININET_GETADDRINFO
|
|
error: 11001
|
|
Flags: 0x1
|
|
AddressName: wpad
|
|
|
|
WININET_AUTOPROXY_DNS
|
|
DetectFlags: 3
|
|
Error: 1168
|
|
|
|
WININET_AUTOPROXY_DHCP
|
|
_InterfaceLength: 38
|
|
Interface: {07B2635F-5AA8-44F4-A6C9-4137234193A8}
|
|
_ConfigurationURLLength: 0
|
|
ConfigurationURL:
|
|
Error: 1359
|
|
|
|
WININET_AUTOPROXY_PERFTRACK_UNKNOWN_DETECTION
|
|
|
|
WININET_AUTOPROXY_SWPAD
|
|
WPADNetworkDecision: WPAD_NETWORK_DECISION_OFF
|
|
NetworkCount: 0x1
|
|
|
|
WININET_AUTOPROXY_PERFTRACK_SWPAD_LOOKUP
|
|
|
|
WININET_GETADDRINFO
|
|
error: 0
|
|
Flags: 0x3
|
|
AddressName: www.gmail.com
|
|
|
|
WININET_DNS_QUERY
|
|
_HostNameLength: 13
|
|
HostName: www.gmail.com
|
|
RequestHandle: 0xCC000C
|
|
_AddressListLength: 15
|
|
AddressList: 216.58.218.133;
|
|
|
|
WININET_RESOLVEHOST
|
|
Request: 0x441F10
|
|
HostName: www.gmail.com
|
|
|
|
WININET_SOCKETCONNECT
|
|
Request: 0x441F10
|
|
Socket: 808
|
|
SourcePort: 53254
|
|
RemoteAddressIndex: 0
|
|
|
|
WININET_SOCKETCONNECT
|
|
Request: 0x441F10
|
|
Socket: 808
|
|
|
|
WININET_TCP_CONNECTION
|
|
_ServerNameLength: 13
|
|
ServerName: www.gmail.com
|
|
ConnectionHandle: 0xCC000C
|
|
SocketHandle: 0x328
|
|
LocalPort: 53254
|
|
|
|
WININET_CONNECT
|
|
Request: 0x441F10
|
|
Socket: 53254
|
|
Protocol: HTTP
|
|
LocalAddressLength: 16
|
|
LocalAddress: 192.168.187.135:53254
|
|
RemoteAddressLength: 16
|
|
RemoteAddress: 216.58.218.133:80
|
|
|
|
WININET_SENDREQUEST_MAIN
|
|
Request: 0x441F10
|
|
Size: 62
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x328
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: false
|
|
|
|
WININET_SENDREQUEST_POSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 573
|
|
|
|
WININET_HTTP_RESPONSE
|
|
ResponseCode: 301
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x328
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
_ContentLengthStrLength: 3
|
|
ContentLength: 226
|
|
|
|
WININET_KEEP_ALIVE_CONNECTION_POOLED
|
|
ConnectionHandle: 0xCC000C
|
|
SocketHandle: 0x328
|
|
|
|
WININET_USAGELOGREQUEST
|
|
URL: http://www.gmail.com/
|
|
Verb: GET
|
|
RequestHeaders: GET / HTTP/1.1
|
|
User-Agent: TestAgent
|
|
Host: www.gmail.com
|
|
ResponseHeaders: HTTP/1.1 301 Moved Permanently
|
|
Location: https://www.google.com/gmail/
|
|
Content-Type: text/html; charset=UTF-8
|
|
X-Content-Type-Options: nosniff
|
|
Date: Fri, 10 Feb 2017 09:46:05 GMT
|
|
Expires: Sun, 12 Mar 2017 09:46:05 GMT
|
|
Server: sffe
|
|
Content-Length: 226
|
|
X-XSS-Protection: 1; mode=block
|
|
Cache-Control: public, max-age=2592000
|
|
Age: 1068498
|
|
Status: 301
|
|
UsageLogRequestCache: Missed
|
|
|
|
WININET_REDIRECT
|
|
Request: 0x441F10
|
|
AddressName: https://www.google.com/gmail/
|
|
|
|
WININET_PRENET_CACHELOOKUP
|
|
Request: 0x441F10
|
|
|
|
WININET_PRENET_CACHEMISS
|
|
Request: 0x441F10
|
|
|
|
WININET_CONNECT
|
|
Request: 0x441F10
|
|
|
|
WININET_LOOKUPCONNECTION
|
|
Request: 0x441F10
|
|
|
|
WININET_LOOKUPCONNECTION
|
|
Request: 0x441F10
|
|
Socket: 4294967295
|
|
|
|
WININET_RESOLVEHOST
|
|
Request: 0x441F10
|
|
HostName: www.google.com
|
|
|
|
WININET_DNS_QUERY
|
|
_HostNameLength: 14
|
|
HostName: www.google.com
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_GETADDRINFO
|
|
Flags: 0x3
|
|
AddressName: www.google.com
|
|
|
|
WININET_GETADDRINFO
|
|
error: 0
|
|
Flags: 0x3
|
|
AddressName: www.google.com
|
|
|
|
WININET_DNS_QUERY
|
|
_HostNameLength: 14
|
|
HostName: www.google.com
|
|
RequestHandle: 0xCC000C
|
|
_AddressListLength: 89
|
|
AddressList: 64.233.177.147;64.233.177.104;64.233.177.105;64.233.177.99;64.233.177.103;64.233.177.106;
|
|
|
|
WININET_RESOLVEHOST
|
|
Request: 0x441F10
|
|
HostName: www.google.com
|
|
|
|
WININET_SOCKETCONNECT
|
|
Request: 0x441F10
|
|
Socket: 848
|
|
SourcePort: 53255
|
|
RemoteAddressIndex: 0
|
|
|
|
WININET_SOCKETCONNECT
|
|
Request: 0x441F10
|
|
Socket: 848
|
|
|
|
WININET_TCP_CONNECTION
|
|
_ServerNameLength: 14
|
|
ServerName: www.google.com
|
|
ConnectionHandle: 0xCC000C
|
|
SocketHandle: 0x350
|
|
LocalPort: 53255
|
|
|
|
WININET_HTTPS_NEGOTIATION
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x350
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: false
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 96
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 96
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 361
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x350
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: false
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 4096
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 75
|
|
|
|
WININET_HTTPS_SERVER_CERT_VALIDATED
|
|
RequestHandle: 0xCC000C
|
|
_CertHashLength: 40
|
|
CertHash: 7C60793928C9410F9D4CAD5B7F54948C99BDCF35
|
|
WarningFlags: 0
|
|
|
|
WININET_HTTPS_NEGOTIATION
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_CONNECT
|
|
Request: 0x441F10
|
|
Socket: 53255
|
|
Protocol: HTTP
|
|
LocalAddressLength: 16
|
|
LocalAddress: 192.168.187.135:53255
|
|
RemoteAddressLength: 16
|
|
RemoteAddress: 64.233.177.147:443
|
|
|
|
WININET_SENDREQUEST_MAIN
|
|
Request: 0x441F10
|
|
Size: 93
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x350
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: false
|
|
|
|
WININET_SENDREQUEST_POSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 581
|
|
|
|
WININET_HTTP_RESPONSE
|
|
ResponseCode: 302
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x350
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
_ContentLengthStrLength: 3
|
|
ContentLength: 226
|
|
|
|
WININET_USAGELOGREQUEST
|
|
URL: https://www.google.com/gmail/
|
|
Verb: GET
|
|
RequestHeaders: GET /gmail/ HTTP/1.1
|
|
User-Agent: TestAgent
|
|
Host: www.google.com
|
|
Connection: Keep-Alive
|
|
ResponseHeaders: HTTP/1.1 302 Found
|
|
Location: https://mail.google.com/mail/
|
|
Cache-Control: private
|
|
Content-Type: text/html; charset=UTF-8
|
|
X-Content-Type-Options: nosniff
|
|
Date: Wed, 22 Feb 2017 18:34:24 GMT
|
|
Server: sffe
|
|
Content-Length: 226
|
|
X-XSS-Protection: 1; mode=block
|
|
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
|
|
Status: 302
|
|
UsageLogRequestCache: Missed
|
|
|
|
WININET_REDIRECT
|
|
Request: 0x441F10
|
|
AddressName: https://mail.google.com/mail/
|
|
|
|
WININET_KEEP_ALIVE_CONNECTION_POOLED
|
|
ConnectionHandle: 0xCC000C
|
|
SocketHandle: 0x350
|
|
|
|
WININET_PRENET_CACHELOOKUP
|
|
Request: 0x441F10
|
|
|
|
WININET_PRENET_CACHEMISS
|
|
Request: 0x441F10
|
|
|
|
WININET_CONNECT
|
|
Request: 0x441F10
|
|
|
|
WININET_LOOKUPCONNECTION
|
|
Request: 0x441F10
|
|
|
|
WININET_LOOKUPCONNECTION
|
|
Request: 0x441F10
|
|
Socket: 4294967295
|
|
|
|
WININET_RESOLVEHOST
|
|
Request: 0x441F10
|
|
HostName: mail.google.com
|
|
|
|
WININET_DNS_QUERY
|
|
_HostNameLength: 15
|
|
HostName: mail.google.com
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_GETADDRINFO
|
|
Flags: 0x3
|
|
AddressName: mail.google.com
|
|
|
|
WININET_GETADDRINFO
|
|
error: 0
|
|
Flags: 0x3
|
|
AddressName: mail.google.com
|
|
|
|
WININET_DNS_QUERY
|
|
_HostNameLength: 15
|
|
HostName: mail.google.com
|
|
RequestHandle: 0xCC000C
|
|
_AddressListLength: 15
|
|
AddressList: 216.58.218.133;
|
|
|
|
WININET_RESOLVEHOST
|
|
Request: 0x441F10
|
|
HostName: mail.google.com
|
|
|
|
WININET_SOCKETCONNECT
|
|
Request: 0x441F10
|
|
Socket: 1132
|
|
SourcePort: 53256
|
|
RemoteAddressIndex: 0
|
|
|
|
WININET_SOCKETCONNECT
|
|
Request: 0x441F10
|
|
Socket: 1132
|
|
|
|
WININET_TCP_CONNECTION
|
|
_ServerNameLength: 15
|
|
ServerName: mail.google.com
|
|
ConnectionHandle: 0xCC000C
|
|
SocketHandle: 0x46C
|
|
LocalPort: 53256
|
|
|
|
WININET_HTTPS_NEGOTIATION
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x46C
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: false
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 96
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 96
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 3068
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 5
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x46C
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: false
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 3072
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 51
|
|
|
|
WININET_HTTPS_SERVER_CERT_VALIDATED
|
|
RequestHandle: 0xCC000C
|
|
_CertHashLength: 40
|
|
CertHash: 30580ECCBB5D9B44CE21B4F2EFDB66ECA5714A43
|
|
WarningFlags: 0
|
|
|
|
WININET_HTTPS_NEGOTIATION
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_CONNECT
|
|
Request: 0x441F10
|
|
Socket: 53256
|
|
Protocol: HTTP
|
|
LocalAddressLength: 16
|
|
LocalAddress: 192.168.187.135:53256
|
|
RemoteAddressLength: 16
|
|
RemoteAddress: 216.58.218.133:443
|
|
|
|
WININET_SENDREQUEST_MAIN
|
|
Request: 0x441F10
|
|
Size: 93
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x46C
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: false
|
|
|
|
WININET_SENDREQUEST_POSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1058
|
|
|
|
WININET_HTTP_RESPONSE
|
|
ResponseCode: 302
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x46C
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
_ContentLengthStrLength: 5
|
|
ContentLength: Chunk
|
|
|
|
WININET_SENDREQUEST_POSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 0
|
|
|
|
WININET_USAGELOGREQUEST
|
|
URL: https://mail.google.com/mail/
|
|
Verb: GET
|
|
RequestHeaders: GET /mail/ HTTP/1.1
|
|
User-Agent: TestAgent
|
|
Connection: Keep-Alive
|
|
Host: mail.google.com
|
|
ResponseHeaders: HTTP/1.1 302 Moved Temporarily
|
|
Content-Type: text/html; charset=UTF-8
|
|
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
|
|
Pragma: no-cache
|
|
Expires: Mon, 01 Jan 1990 00:00:00 GMT
|
|
Date: Wed, 22 Feb 2017 18:34:24 GMT
|
|
Location: https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1<mpl=default<mplcache=2&emr=1&osid=1
|
|
X-Content-Type-Options: nosniff
|
|
X-Frame-Options: SAMEORIGIN
|
|
X-XSS-Protection: 1; mode=block
|
|
Server: GSE
|
|
Alt-Svc: quic=":443"; ma=2592000; v="35,34"
|
|
Accept-Ranges: none
|
|
Vary: Accept-Encoding
|
|
Transfer-Encoding: chunked
|
|
Status: 302
|
|
UsageLogRequestCache: Missed
|
|
|
|
WININET_REDIRECT
|
|
Request: 0x441F10
|
|
AddressName: https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1<mpl=default<mplcache=2&emr=1&osid=1
|
|
|
|
WININET_KEEP_ALIVE_CONNECTION_POOLED
|
|
ConnectionHandle: 0xCC000C
|
|
SocketHandle: 0x46C
|
|
|
|
WININET_PRENET_CACHELOOKUP
|
|
Request: 0x441F10
|
|
|
|
WININET_PRENET_CACHEMISS
|
|
Request: 0x441F10
|
|
|
|
WININET_COOKIE_REQUEST_HEADER_CREATED
|
|
URLLength: 40
|
|
URL: https://accounts.google.com/ServiceLogin
|
|
|
|
WININET_CONNECT
|
|
Request: 0x441F10
|
|
|
|
WININET_LOOKUPCONNECTION
|
|
Request: 0x441F10
|
|
|
|
WININET_LOOKUPCONNECTION
|
|
Request: 0x441F10
|
|
Socket: 4294967295
|
|
|
|
WININET_RESOLVEHOST
|
|
Request: 0x441F10
|
|
HostName: accounts.google.com
|
|
|
|
WININET_DNS_QUERY
|
|
_HostNameLength: 19
|
|
HostName: accounts.google.com
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_GETADDRINFO
|
|
Flags: 0x3
|
|
AddressName: accounts.google.com
|
|
|
|
WININET_GETADDRINFO
|
|
error: 0
|
|
Flags: 0x3
|
|
AddressName: accounts.google.com
|
|
|
|
WININET_DNS_QUERY
|
|
_HostNameLength: 19
|
|
HostName: accounts.google.com
|
|
RequestHandle: 0xCC000C
|
|
_AddressListLength: 14
|
|
AddressList: 216.58.194.45;
|
|
|
|
WININET_RESOLVEHOST
|
|
Request: 0x441F10
|
|
HostName: accounts.google.com
|
|
|
|
WININET_SOCKETCONNECT
|
|
Request: 0x441F10
|
|
Socket: 1372
|
|
SourcePort: 53257
|
|
RemoteAddressIndex: 0
|
|
|
|
WININET_SOCKETCONNECT
|
|
Request: 0x441F10
|
|
Socket: 1372
|
|
|
|
WININET_TCP_CONNECTION
|
|
_ServerNameLength: 19
|
|
ServerName: accounts.google.com
|
|
ConnectionHandle: 0xCC000C
|
|
SocketHandle: 0x55C
|
|
LocalPort: 53257
|
|
|
|
WININET_HTTPS_NEGOTIATION
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x55C
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: true
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 96
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 96
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 394
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x55C
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: true
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 4096
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 75
|
|
|
|
WININET_HTTPS_SERVER_CERT_VALIDATED
|
|
RequestHandle: 0xCC000C
|
|
_CertHashLength: 40
|
|
CertHash: 5CED90A0E912C75A6618115DE9B85B93950438C5
|
|
WarningFlags: 0
|
|
|
|
WININET_HTTPS_NEGOTIATION
|
|
RequestHandle: 0xCC000C
|
|
|
|
WININET_CONNECT
|
|
Request: 0x441F10
|
|
Socket: 53257
|
|
Protocol: HTTP
|
|
LocalAddressLength: 16
|
|
LocalAddress: 192.168.187.135:53257
|
|
RemoteAddressLength: 16
|
|
RemoteAddress: 216.58.194.45:443
|
|
|
|
WININET_SENDREQUEST_MAIN
|
|
Request: 0x441F10
|
|
Size: 293
|
|
|
|
WININET_HTTP_REQUEST
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x55C
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
Cookie: true
|
|
|
|
WININET_SENDREQUEST_POSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1024
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 837
|
|
|
|
WININET_HTTP_RESPONSE
|
|
ResponseCode: 200
|
|
RequestHandle: 0xCC000C
|
|
SocketHandle: 0x55C
|
|
_VerbLength: 3
|
|
Verb: GET
|
|
_ContentLengthStrLength: 5
|
|
ContentLength: Chunk
|
|
|
|
WININET_COOKIE_HEADER_RECEIVED
|
|
URLLength: 40
|
|
URL: https://accounts.google.com/ServiceLogin
|
|
|
|
WININET_POSTNET_CACHELOOKUP
|
|
Request: 0x441F10
|
|
|
|
WININET_POSTNET_CACHEMISS
|
|
Request: 0x441F10
|
|
|
|
WININET_SENDREQUEST
|
|
Request: 0x441F10
|
|
StatusLineLength: 15
|
|
StatusLine: HTTP/1.1 200 OK
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 12717
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1418
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 16
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 16
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1392
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1392
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 10
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 11
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 11
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1392
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1392
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1433
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1392
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1392
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 4279
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1373
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1373
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2881
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 1358
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 1358
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2896
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 185
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 185
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2651
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 175
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 175
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2661
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 165
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 165
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2671
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 155
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 155
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2681
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 145
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 145
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2691
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 135
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 135
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 5537
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 269
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 269
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 5403
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 249
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 249
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2587
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 239
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 239
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2597
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 229
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 229
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2607
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 389
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 389
|
|
|
|
WININET_READDATAPOSTRECEIVEBUF
|
|
Request: 0x441F10
|
|
Size: 32768
|
|
|
|
WININET_READDATA
|
|
Request: 0x441F10
|
|
Size: 2591
|
|
|
|
WININET_KEEP_ALIVE_CONNECTION_POOLED
|
|
ConnectionHandle: 0xCC000C
|
|
SocketHandle: 0x55C
|
|
|
|
WININET_HTTP_RESPONSE_BODY_RECEIVED
|
|
RequestHandle: 0xCC000C
|