Edit tour

Windows Analysis Report
https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0

Overview

General Information

Sample URL:	https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0
Analysis ID:	1277532
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish54

Antivirus detection for URL or domain

Phishing site detected (based on logo match)

Phishing site detected (based on image similarity)

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6104 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 2460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1956 --field-trial-handle=1644,i,6377621369673702105,3951177099500528634,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 5036 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
4.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.24.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.12.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.18.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.27.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.17.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.28.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.26.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.21.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.11.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.20.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.25.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 10 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://mvolenoazaqoerutien.com/?uiqqiefr

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://mvolenoazaqoerutien.com	Matcher: Template: microsoft matched with high similarity
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched with high similarity
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish54

Source: Yara match	File source: 4.6.pages.csv, type: HTML
Source: Yara match	File source: 5.7.pages.csv, type: HTML
Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 5.24.pages.csv, type: HTML
Source: Yara match	File source: 5.12.pages.csv, type: HTML
Source: Yara match	File source: 6.8.pages.csv, type: HTML
Source: Yara match	File source: 6.18.pages.csv, type: HTML
Source: Yara match	File source: 6.27.pages.csv, type: HTML
Source: Yara match	File source: 6.17.pages.csv, type: HTML
Source: Yara match	File source: 6.28.pages.csv, type: HTML
Source: Yara match	File source: 6.26.pages.csv, type: HTML
Source: Yara match	File source: 6.21.pages.csv, type: HTML
Source: Yara match	File source: 6.11.pages.csv, type: HTML
Source: Yara match	File source: 6.20.pages.csv, type: HTML
Source: Yara match	File source: 6.25.pages.csv, type: HTML

Phishing site detected (based on logo match)

Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	Matcher: Template: microsoft matched
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	Matcher: Template: microsoft matched
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	Matcher: Template: microsoft matched
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	Matcher: Template: microsoft matched
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	Matcher: Template: microsoft matched
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	Matcher: Template: microsoft matched

Phishing site detected (based on image similarity)

Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx

Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: Number of links: 0
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: Number of links: 0

Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();

Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: <input type="password" .../> found

Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="author".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: No <meta name="author".. found

Source: https://cfl.dropboxstatic.com/static/metaserver/static/cloud_docs/thirdpartycookie/post.html	HTTP Parser: No favicon
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0	HTTP Parser: No favicon
Source: https://outlook.office365.com/owa/prefetch.aspx	HTTP Parser: No favicon
Source: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx	HTTP Parser: No favicon
Source: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx	HTTP Parser: No favicon
Source: https://www.microsoft365.com/prefetch/prefetch	HTTP Parser: No favicon

Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="copyright".. found
Source: https://mvolenoazaqoerutien.com/?uiqqiefr	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lWMyoSN0L_AyPiCkfEWk6B_UbpnSnixW2pKalFiSWZ-3gUWgVcsPAbMVhwcXAIMEgwKDD9YGBexAm3K1_tcb7Y8yWfm84DtHd59DKdY9RM9XTJS0qqMcysdy9IsLNK0c8P9Hcu9LQv9PYuyfEpcEt0CzAJc81KTc0JtzawMJ7AJTWBjOsXG8IGNsYOdYRY7wwFOxgO8DD_4DhxZtWD1wUdvPV7x6yRWJla6pRuFJjpVRehH-Lr4BRSG5GqnG4XlJRqlaSdWpgf5JTqHFZoY-JrYAgA1&mkt=en-US	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Security-Policy: sandbox; frame-ancestors 'self';Content-Type: text/plain;charset=utf-8Date: Fri, 21 Jul 2023 16:50:48 GMTReferrer-Policy: originRouted-Canary: falseServer: envoyStrict-Transport-Security: max-age=31557600; includeSubdomains;X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Notes-Routing-Method: router-cometX-Paper-Request-Id: b2b2f159-9d65-43a2-82f0-7165f9197b6eX-Permitted-Cross-Domain-Policies: master-onlyX-Robots-Tag: noindex, nofollow, noimageindexX-Xss-Protection: 1; mode=blockContent-Length: 43Cache-Control: no-cache, no-storeX-Dropbox-Response-Origin: remoteX-Dropbox-Request-Id: f5d85095250246bdba6e3a6d6ed9d106Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Security-Policy: sandbox allow-forms allow-scriptsContent-Type: text/htmlAccept-Encoding: identity,gzipDate: Fri, 21 Jul 2023 16:50:48 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 925Strict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: e41f58c4983a402ab779341171703cedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Security-Policy: sandbox; frame-ancestors 'self';Content-Type: text/plain;charset=utf-8Date: Fri, 21 Jul 2023 16:50:51 GMTReferrer-Policy: originRouted-Canary: falseServer: envoyStrict-Transport-Security: max-age=31557600; includeSubdomains;X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Notes-Routing-Method: router-cometX-Paper-Request-Id: 378827f0-681d-4a3b-aece-3427ec49ac26X-Permitted-Cross-Domain-Policies: master-onlyX-Robots-Tag: noindex, nofollow, noimageindexX-Xss-Protection: 1; mode=blockContent-Length: 43Cache-Control: no-cache, no-storeX-Dropbox-Response-Origin: remoteX-Dropbox-Request-Id: c50f826be25f4ea285fd66ddd78e7442Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:51 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 552ef26737784a21a39d5e8c3805351eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:51 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 04c440cd6f414e98934b7c84421f204bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:52 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: b7963d660c6f410a9400ac55724f11d4Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:52 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: a9d08ef701b04b25834dc4d05bf056acConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:52 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 866c2994184b42caa4c64fb5391dda69Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:52 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d85dd63bbb9a4da1af8f4dd19bf135f9Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Security-Policy: sandbox; frame-ancestors 'self';Content-Type: text/html;charset=utf-8Date: Fri, 21 Jul 2023 16:50:53 GMTExpires: Sat, 5 Feb 1983 07:07:07 GMTLast-Modified: 21 Jul 2023 16:50:53 GMTPragma: no-cacheReferrer-Policy: originRouted-Canary: falseServer: envoyStrict-Transport-Security: max-age=31557600; includeSubdomains;X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookieX-Paper-Request-Id: 9cdd6e8b-fba1-4607-ac8b-fbb14469e25dX-Permitted-Cross-Domain-Policies: master-onlyX-Robots-Tag: noindex, nofollow, noimageindexX-Xss-Protection: 1; mode=blockContent-Length: 9Cache-Control: no-cache, no-storeX-Dropbox-Response-Origin: remoteX-Dropbox-Request-Id: 63271630f77a47c2bd612502c779d254Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:53 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 129d00e165014c628e8c7f5f91f8e84cConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:53 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 3bb3e06f131c4a7788beaa224d62487eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:54 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: bb82479fcef648a4901a03674664c7f8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:54 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4e6ed27e2e6f401487da6283d69411baConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:55 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 3f3317b1bb7a48d8986b43165a629ff6Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:55 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 256e7d53d2d6445bbf375fe2a59c85a8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:56 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 9034121b76c0480ba780e63eb5c303f4Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:50:56 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: dc548e63f3eb4365b473181ca77c54f1Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: efaf66c3-8488-4dfc-9632-a2e995d21200x-ms-ests-server: 2.1.15811.7 - WUS2 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}Referrer-Policy: strict-origin-when-cross-originDate: Fri, 21 Jul 2023 16:50:59 GMTConnection: closeContent-Length: 0Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:05 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1801474835578337177711804285533777882731"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: a8ab4e60-a01e-006a-5af3-bb12e9000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:05 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=42554438586027335554201588881021287583"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: a357bba5-001e-0011-7cf3-bb5075000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:05 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=113079511479868017304519865191248482609"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 1142bab0-901e-0013-47f3-bbeecd000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:05 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1810127570847449485115520743260698585411"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: cd3d6002-501e-0051-5cf3-bb574d000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:05 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1787316283015671542513533577707199136685"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: e23baa4d-401e-0000-4ef3-bbcac1000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:05 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=293650120642945056512290573961099114509"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: ba7f9d8c-f01e-003a-09f3-bbd0b9000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:06 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=111492700951079569197887870461279783455"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 37407fa7-501e-0023-4ff3-bb5002000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:06 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1238554692897642111618407890442066423043"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 54649ccd-101e-0022-27f3-bb0fde000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:07 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=33403324395619687459632580337406271977"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 3022929c-c01e-0043-3cf3-bb2c9d000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:07 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=104401300017854525982495361240718509130"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: a357c0cc-001e-0011-26f3-bb5075000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:07 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=104817843071515487093047287634500622090"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 7a916abd-f01e-0048-55f3-bbd7f6000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:07 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=128887618578750305513597886295064544316"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 47362e01-c01e-006c-1cf3-bb2156000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:07 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=150216614757849578791975873324875206302"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: f6ebd9d9-e01e-0009-1af3-bb8f12000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:08 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1023119855198168445714815931142746326899"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 4a6c2c79-b01e-0066-6af3-bb85e1000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:08 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1080925541937691470412802933080061212870"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 1a89db21-001e-004c-57f3-bb5af1000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:09 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=98852501219648784606553505910257035913"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: bb623837-401e-002f-40f3-bbc70a000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:09 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=312154682309247636416636221148045797381"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: ab55fe80-e01e-006b-29f3-bb4d35000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:09 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=138583077362244458819945153742416736938"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: e9af7cce-401e-0010-12f3-bb0fa9000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:09 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=339545827885763595315094429083810231433"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 7d0f6cb5-c01e-0053-10f3-bbe9f5000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:10 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=32310152873178738834466550720133403803"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: a1b62341-a01e-0055-77f3-bbda4a000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:10 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=53740738550608250015045799308879834798"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 0dfc82f3-301e-0025-10f3-bb63bd000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:10 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=13572904141431800918558817854876337885"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: c4e8cd00-301e-000a-0df3-bb6e76000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:20 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=23683666380573576013393800721749992955"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: c9287f12-401e-004d-32f3-bb052d000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:20 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=110791217963435240249411439117830616183"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 7dc529f3-d01e-0012-44f3-bbb111000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:19 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1475746631935415241716455628000721351446"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 2f30b8fc-101e-0050-3ef3-bb0891000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:20 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=517726016879383070811737471852035066324"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: e782872e-d01e-005f-27f3-bb7efd000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:20 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=40233754374447682901019913073496522875"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: efc31f05-901e-003c-68f3-bbe306000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:20 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=32108402010358805281505776696900455359"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: efc31f0c-901e-003c-6ff3-bbe306000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:22 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=639015469207404897510748681001556017226"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: b7ccc5de-b01e-003b-71f3-bb8f65000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:23 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=599062251856520517312355372040444480999"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 0f10c4c4-c01e-0031-03f3-bb2bd2000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:23 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=140465503924287200004618893064831440501"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: f6359335-201e-005b-5ef3-bbf3fa000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:23 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=126426091059207413463590366416780790143"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: aceaf1de-a01e-0037-2af3-bb186d000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:23 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1799770140397014670913685435012298016637"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: cb61b7b7-701e-0079-52f3-bb36e5000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:23 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1259166416496263928218358411924053089210"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 7f922818-901e-005e-63f3-bb2121000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:23 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=234701856675774329413614481691117348674"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 0520f6a8-f01e-0067-69f3-bbda3d000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:24 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=426231146919694372615267346740345150047"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 9091a7cc-501e-0033-14f3-bb956a000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:24 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=273551444264399195111592535393671707621"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 70611bf3-d01e-0002-5ef3-bb7479000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:25 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=610880996682758678314353521610077749860"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 91327c75-101e-0040-18f3-bbcdf9000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:39 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1786616260516488361813509394692871122600"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: bebd0964-901e-0061-69f3-bbe982000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:39 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=151414675422364175597211507584381670553"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 66464dd4-201e-0006-32f3-bbf97e000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:40 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=220954912074655489917107658997363688274"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 308650b6-801e-006d-41f3-bb7e8a000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:40 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=139339252307954110128646095551651137998"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 8a34e44d-b01e-002b-09f3-bb4a0d000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:40 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=112698949627456514464674798494676096260"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 1f8934bb-e01e-0036-20f3-bb47b1000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:40 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1558186433698146452716070019870068835360"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 73e80b8e-001e-0063-4bf3-bb573a000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:40 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=121029731948033499887977327598336623296"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 24a727ec-601e-0065-75f3-bb6485000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=18268107209567437832932159548396918678"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 9b7f3b1d-001e-0073-5bf3-bb9252000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1120941385833367841515161684584293603449"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: a4914e58-601e-0075-7ff3-bba1ed000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:41 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=66047191468865074699835423483867422350"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 7b62706d-b01e-0004-62f3-bb47c6000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:41 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=788520417619487985816637892710904409688"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 73e80ef6-001e-0063-5cf3-bb573a000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1307880725440508338418308466102086570064"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 788a5bdf-701e-000b-01f3-bb31aa000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:41 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1436731294864275151817297657428928386953"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: b6452caf-f01e-0005-49f3-bb181a000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=32583761419300935004922846597959568869"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 706152ec-d01e-0002-4af3-bb7479000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=374727367468628616012652049850368272866"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 8f859881-101e-000d-47f3-bb0215000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:43 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=148217828247611059296759877868015989"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 5407fb96-701e-0024-21f3-bb3c61000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1000116557054852137714172517795811372363"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: e23c1bb4-401e-0000-51f3-bbcac1000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=406392148016038205116028067083528849482"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 185148b4-401e-0062-51f3-bb08e6000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=157869514617823802233221411434565380134"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 70615913-d01e-0002-05f3-bb7479000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=324262020797518618918259781857621447884"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 0521524a-f01e-0067-66f3-bbda3d000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=95843785066190579103887475367142923049"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 336a099d-e01e-0026-01f3-bb82d9000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Fri, 21 Jul 2023 16:51:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=617283670864160315914242022653710421477"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 185148f7-401e-0062-10f3-bb08e6000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 21 Jul 2023 16:51:50 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: b968ff93380f46c9a095fc2600a1f058Connection: close

Source: chromecache_516.1.dr	String found in binary or memory: http://angular-ui.github.com/
Source: chromecache_516.1.dr	String found in binary or memory: http://angular-ui.github.io/bootstrap/
Source: chromecache_423.1.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_516.1.dr	String found in binary or memory: http://api.jquery.com/offset/
Source: chromecache_516.1.dr	String found in binary or memory: http://api.jquery.com/position/
Source: chromecache_620.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_620.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_620.1.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_620.1.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_375.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_375.1.dr	String found in binary or memory: http://github.com/angular-ui/ui-select
Source: chromecache_652.1.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_620.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_620.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_620.1.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_620.1.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_399.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_516.1.dr	String found in binary or memory: http://placekitten.com/100/150
Source: chromecache_516.1.dr	String found in binary or memory: http://placekitten.com/150/150
Source: chromecache_620.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_516.1.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_620.1.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_366.1.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_399.1.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_516.1.dr, chromecache_375.1.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_399.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_620.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_620.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_620.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_620.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_620.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_620.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=229280
Source: chromecache_620.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_620.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_620.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_620.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_375.1.dr	String found in binary or memory: https://github.com/DaftMonk/angular-tour
Source: chromecache_516.1.dr	String found in binary or memory: https://github.com/angular/angular.js/pull/10764
Source: chromecache_375.1.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_620.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_620.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_620.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_516.1.dr	String found in binary or memory: https://github.com/mbostock/d3/blob/master/src/format/requote.js
Source: chromecache_516.1.dr	String found in binary or memory: https://github.com/mgonto/angular-wizard
Source: chromecache_375.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_609.1.dr	String found in binary or memory: https://help.dropbox.com/files-folders/share/remove-link
Source: chromecache_465.1.dr	String found in binary or memory: https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate
Source: chromecache_609.1.dr	String found in binary or memory: https://help.dropbox.com/installs-integrations/desktop/dropbox-backup-faq#supporteddrives
Source: chromecache_465.1.dr	String found in binary or memory: https://help.dropbox.com/share/banned-links
Source: chromecache_620.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_399.1.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: chromecache_516.1.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_516.1.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_446.1.dr, chromecache_561.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_446.1.dr, chromecache_561.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_516.1.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_516.1.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_375.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/fabmdl2.4.51.woff
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.e
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.t
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.w
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-fina
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-fin
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-light-final.svg#w
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-regular-final.svg
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semibold-final.sv
Source: chromecache_506.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semilight-final.s
Source: chromecache_596.1.dr	String found in binary or memory: https://www.onenote.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?dws_page_name=cloud_docs_paper_content_page&path=%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FUntitled.paper&request_id=1b902fc12cf8423d9be8fc779df1ecb3&time=1689958229 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
Source: global traffic	HTTP traffic detected: GET /hstsping HTTP/1.1Host: dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=deghsLEKJOGSu-1QvrwgkKX3; locale=en
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_bundle.1885980d0c2e444b4c260d20339401ec.6JKOhZEZLVUo0awj9vBTCyS8J99CxnWy1B_2dSb-wc0.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-Regular-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_admin~paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~pap~98bcc4eb.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.P8g-ahw-OP17UflU4vPd6dqc_PiHjZGoAEn-_cwbCW0.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-RegularItalic-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-Medium-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_admin~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~paper_graphql~paper_influence~887f98f3.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.vn64oJWFEA7wxU-bxq9IMHUDOT746y1nS0QLwk8PHbw.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-MediumItalic-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-Semi-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-SemiItalic-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_jasmine_~1ca7a66a.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.ixdWsDn48iRVHMxQAzgAuo9ds-FDa6WGwOOI_r2D2Yg.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_native_desktop~paper_pifs~paper_te~b48e404f.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.PDLfAhd6xUj73iIPSwWB5L8ej6aIH9LdVfTJB4055qk.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_native_desktop~paper_pifs~paper_view_only.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.tXw8zQZf9pvbUGFBhTy9aeUGTRaPB0mEMIoN_T9VyMA.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-Bold-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-BoldItalic-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/SourceCodePro-Regular-2038.otf.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/SourceCodePro-It-1058.otf.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/SourceCodePro-Bold-2038.otf.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_pifs~paper_view_only.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.PsX3DrpPtPRgtmZz0vfnDHPUBj6lKaziWNK1ykQH5Wk.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/SourceCodePro-BoldIt-1058.otf.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/KaTeX_Main-Regular.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_cloud_docs~paper_pifs.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.LUMAba36qYZ-DzDv4MrULp74GhS0Iy4bZkavuZvI-QA.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/runtime_dc532339fcdb216ed9ee.G8ZQTZCS_VpPrXjqiUUTEAGGtIO7JBuw30s2EAFX5x8.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/544eb0bcacbf47681dcb.UBYHq28Ln5Hi8t6eUSEEz2fCkP8WJ0HWYEUftmX8eYE.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/3ee69373c43503423dee.hQ390ZRL-Hgo8uZZODlkclJcvKXLvy33mubixfvo22U.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/6e501f8b9009ee898fc6.wFEyMPzjGdp0HhzwUx04Vd1h31nD7XJiB3IVsODHoBk.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/ce3721cd78168aca8dff.TOBxGySy4L8Jev4cz1MMkll3TM-ZkPmz6kB0Q7cRP8c.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/b7447ec7a5639b81bb9e.5B1z69DJcJdOytocwBFk4mleBWMQRi8eATiNFmXWFrY.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/ep/redirect/image?url=https%3A%2F%2Fpaper-attachments.dropboxusercontent.com%2Fs_F80C94DC8897DE8BC2D47A16ABC6AC551833D8F3B9C020EE6655C97B689CEA19_1689873541689_micro.png&hmac=CXRdUHwDyoF0cpBzOzaE49fIOaM8hPXT%2F4a0HfywNMM%3D HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
Source: global traffic	HTTP traffic detected: GET /static/api/2/dropins.js HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/7b7bc1b94b6fa4bb7540.4kCVYgsQ9PUJwvE49OImq-373sTZn8Mp1CKG3UUt75o.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/58cc5c6db7c1186fa9f3.zY6o-XeH44T0_vpOvZUDLeJeznVBNUebzrAuflJz95U.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/d5234f674cac144b79bf.cDu6D0nBAZvocplrTbBtBSOvdUuoODvKDRycRtZhb4I.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/44358a50a900da035ada.LGT6HPSCk03xwXtkplDP_6Ti9yb6DDIdp68pzO0HY98.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/thumb/AB-xkKhbJ-5eZjqJkfR4QswIuG92izqYLGt1vO9MVU9zXMyuB-IIhiBQzvHqqU_6fMC5FGtA83r1PzfBmbax1X3rUdvnGLadcwGZ4667XLS4HptYyv2zdDSG0a9qm9HlNb6LmfjzHVHqZbrbbOpCw9wfvG237D5GG-6XWekcNRlTQMzI34XPyXpnD0aewH1IpR8nz-iYeDEtmdJMD1E0U3zXYeKvqClh7qPODStlXeXuAGdgSc1AbcrkwxeKjc0g9Y1tsAfOxaEVgLW8OtsV6Nf71wA8pCp5KWoRoS9iITHPCc2gnvCm9nXf9PpSgQHKneIWMpjTDrZYdRmLqJlm_Z_4mTsywrvF2e6cuv7ZGMityP5VoCtBPg-_GC-Z392qNyDnukyEdr_az-qUCcD25HSM/p.png HTTP/1.1Host: uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/c861c239bed0e42e4847.obO1giTD6WsT4sESd05O8sH8NTRGNr7BFGTPTNoAoKo.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/2cdc887fa30d028a6cac.yYomW_BQJnWDD10UrVD9zI1YaI83_RjUsYv9vtzPLm0.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/203e68a375ea7f28c0de.MMYkLQEeFZd4PYXbLlLiCe5SizWEJT-CGzSC04pJQ8c.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/e03046a2b8dc7c103bce.SZIL9KJIbSE8UBobNlCwsjQoiX0ekEuZ6bvWx6u226s.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/ea67d264b690942c8510.zy-U6PEBZo5tZvAwyC0Mt1Ga6AOObigtU7jOeqlAl_Q.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/aa7bc43daf3c3d0c03a8.i3qsTcFgoOzzyfb1BvKL1Ngsl_TBIEdwWAwwi2z1rq4.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/e1bc9664cd927a5217ca.Wqovou_Yti7G8yY3_MC3rgY9LTbMwHwduywhmvmZ3ZY.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/02419c289b2cc43fe5ef.mApMZZrA0_77_F4UomVbkhteOHx43L41fkpjXFdH9ZE.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/5c4e3ef7b51c8e10ef28.p5qECeQFha0harwiGBk34lwjoVRUw-0hbHStF4MC5-g.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/e0d8148a84ecb269e327.IeP00FobWk-c_AtiUoDfLvHTgizjKX98gEi7b6K1JTg.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/5c96e38211ab10ca7147.h3rhOr2LNO3D_82clEFt9El5YEWuTRA2E8rTrrtWqOo.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/3af77e47b247f637744f.DQ6v0YSq6-ztqbzUE8-jtbGwsLA38ge3i3Qt_FY7yek.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/00e4f72cc8d07e2964b5.ezimfJZlTtJey57m97Ax4xFG22d8BUDGW-mXRHxj1SA.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/51ad636d17314c9fbda6.-4AanJk8XBB8Xq-UvkkSlFpQHmXs-lIik_lOJMsVMYg.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/b11c258f8eee56d7cb5e.Hoi7ynA2p4z5-2Jcc2BP05ryA7I-X2lX9aG6h07S0OA.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/4ba0049880d2af404923.9CRyHZrHq1b9LsB2fiT0_y-o9kmEIIvVJy4qkE3xjW0.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/52403d18eae03c7ba478.cST5QAZGfkuKpwKd-cXLWyE_ukg0vbK6XJVnkD66jdI.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/9546d61e0af1829a5943.1niBeLXONVtz6eCwiOhEjyXETqjOWmtbnfYPS-qFGMQ.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/493371368d24a7dd558c.kZEJL0_iTh7LJAa5DQuPA7IwgSVAB6-F2gm4NhZnoIE.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/b12f522ce0ee55757f5e.2dcJbNyH591tHPSv0DWyEHi4jMDBGtqFibbP5rsRf_I.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/0ce09d6be201dc874940.Vjbt-av9zGPqb4iH55ZEtppKHIAS7YBNqMFhDsWmwmA.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/c34bb5d45fc66a39ca35.HaFmluvjFc8mm41OtrDeAfTrAvWXHKYT4YGXIBlSWLA.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/32b2c3f54e63e752572e.VMxDU3TeZKfX-lzEjMstleWBFHlXnMK-2oRoVGo7L3w.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/emoji/preferences?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/ep/stateless/calendars/calendar-events?padId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/cloud-docs/get-filesystem-info?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-pad-id: sPCvEN8YwVSfHh10HNmcFnotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8notes-tab-id: PyrhnmTtVxZUnEUavH4Ox-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/get-link-tracking-token?localPadId=sPCvEN8YwVSfHh10HNmcF&trafficSource=paper_address_bar&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-pad-id: sPCvEN8YwVSfHh10HNmcFnotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8notes-tab-id: PyrhnmTtVxZUnEUavH4Ox-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/3ca391fb196a76f06afb.Sf-O5SKhNZ9n5HaOYmICg0jW_NKUQqCqe-cbrqaYptA.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/0f87dfdb09fdf4689436.XmWd3ZCjNs5ikVl6X4w5UBoJH0WCva2GW011KNNjeIU.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fb.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fc.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fd.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/cloud-docs/urls?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-pad-id: sPCvEN8YwVSfHh10HNmcFnotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8notes-tab-id: PyrhnmTtVxZUnEUavH4Ox-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/ep/onboarding?productType=1&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/ep/stateless/calendars/calendar-events?padId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/get-link-tracking-token?localPadId=sPCvEN8YwVSfHh10HNmcF&trafficSource=paper_address_bar&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-pad-id: sPCvEN8YwVSfHh10HNmcFnotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8notes-tab-id: PyrhnmTtVxZUnEUavH4Ox-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fe.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3ff.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=383420915850636593080934&id=359881680158568536413245&channel=shortpolling&seq=0&create=yes&new=yes&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvzNotes-Pad-Id: sPCvEN8YwVSfHh10HNmcFNotes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0Notes-App-Time: 1689901056000Notes-Socket-Id: 359881680158568536413245Notes-Tab-Id: PyrhnmTtVxZUnEUavH4OUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/nginx/ping?tabId=PyrhnmTtVxZUnEUavH4O&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36x-paper-client-capabilities: [1]content-type: application/x-www-form-urlencoded; charset=UTF-8cache-control: no-cache, no-store, max-age=0x-requested-with: XMLHttpRequestsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/log/latency?metric=initial-page-load-total-latency2&values=%7B%22executed%22%3A11530%2C%22rendered%22%3A11074%2C%22responseStart%22%3A848%7D&tags=%7B%22pageName%22%3A%22editor%22%7D&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/d7c49816088408423a50.cjIp7UHClzqwu3lMbpCuK9_cMgk8uoSvsL8FX5pOS4Y.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fc.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fb.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fd.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3ff.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=794120692113024842781272&id=359881680158568536413245&channel=shortpolling&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvzNotes-Pad-Id: sPCvEN8YwVSfHh10HNmcFNotes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0Notes-App-Time: 1689901056000Notes-Socket-Id: 359881680158568536413245Notes-Tab-Id: PyrhnmTtVxZUnEUavH4OUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /p/thumb/AB-xkKhbJ-5eZjqJkfR4QswIuG92izqYLGt1vO9MVU9zXMyuB-IIhiBQzvHqqU_6fMC5FGtA83r1PzfBmbax1X3rUdvnGLadcwGZ4667XLS4HptYyv2zdDSG0a9qm9HlNb6LmfjzHVHqZbrbbOpCw9wfvG237D5GG-6XWekcNRlTQMzI34XPyXpnD0aewH1IpR8nz-iYeDEtmdJMD1E0U3zXYeKvqClh7qPODStlXeXuAGdgSc1AbcrkwxeKjc0g9Y1tsAfOxaEVgLW8OtsV6Nf71wA8pCp5KWoRoS9iITHPCc2gnvCm9nXf9PpSgQHKneIWMpjTDrZYdRmLqJlm_Z_4mTsywrvF2e6cuv7ZGMityP5VoCtBPg-_GC-Z392qNyDnukyEdr_az-qUCcD25HSM/p.png HTTP/1.1Host: uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fe.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/emoji/list?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/team/emoji-list?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/cloud-docs/urls?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-pad-id: sPCvEN8YwVSfHh10HNmcFnotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8notes-tab-id: PyrhnmTtVxZUnEUavH4Ox-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/ep/stateless/calendars/calendar-events?padId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/emoji/preferences?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=383420915850636593080934&id=359881680158568536413245&channel=shortpolling&seq=0&create=yes&new=yes&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=794120692113024842781272&id=359881680158568536413245&channel=shortpolling&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=878235726477585130301259&id=359881680158568536413245&channel=streaming&seq=0&create=no&new=yes&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1Host: 37.comet.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvzNotes-Pad-Id: sPCvEN8YwVSfHh10HNmcFNotes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0Notes-App-Time: 1689901056000Notes-Socket-Id: 359881680158568536413245Notes-Tab-Id: PyrhnmTtVxZUnEUavH4OUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=deghsLEKJOGSu-1QvrwgkKX3; locale=en
Source: global traffic	HTTP traffic detected: GET /paper/comet/post?r=241902745168834476259068&v=2&id=359881680158568536413245&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&xsrf=deghsLEKJOGSu-1QvrwgkKX3&postSeq=1&remark=&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=473432312466479119456147&id=359881680158568536413245&channel=shortpolling&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvzNotes-Pad-Id: sPCvEN8YwVSfHh10HNmcFNotes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0Notes-App-Time: 1689901056000Notes-Socket-Id: 359881680158568536413245Notes-Tab-Id: PyrhnmTtVxZUnEUavH4OUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/ep/stateless/calendars/calendar-events?padId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/favicon-32.png HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/emoji/count?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/emoji/list?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/comet/post?r=969207706799432086575527&v=2&id=359881680158568536413245&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&xsrf=deghsLEKJOGSu-1QvrwgkKX3&postSeq=2&remark=CLIENT_READY&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/favicon-32.png HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=473432312466479119456147&id=359881680158568536413245&channel=shortpolling&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /alternate_wtl HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/emoji/count?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /paper/log/connection-diagnostic-info?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /?uiqqiefr HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Idq2Hj-dVynnBd7zEp44UQ2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; fpc=ArQjXTss-z9PuVNWIVMS0rs; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; fpc=ArQjXTss-z9PuVNWIVMS0rs; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; fpc=ArQjXTss-z9PuVNWIVMS0rs; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_zrspqvfkkfzwifqf_ppbrg2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
Source: global traffic	HTTP traffic detected: GET /paper/cloud-docs/get-seen-users?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"notes-tab-id: PyrhnmTtVxZUnEUavH4Onotes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786sec-ch-ua-mobile: ?0notes-app-time: 1689901056000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
Source: global traffic	HTTP traffic detected: GET /?uiqqiefr HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_zrspqvfkkfzwifqf_ppbrg2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/embeddedfonts.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/admin/css/admin.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/o365themedefault.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15mvc.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/website.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/home.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/home15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/assistancepanel.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/conciergehelper.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/content/css/signup16.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/adoption.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/commonhealthdashboard.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/microsoftajaxcombined.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/headbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/controlbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularextensions.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminbootstrap.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminapp.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/mscorlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/listgrid.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/peoplepicker.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/gridview.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/netperf.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/searchbox.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/passwordstrengthmeter.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/hipcontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/geminiwizard.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webuivalidation.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrends.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrendsstream.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/home.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/reporting.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/assistancepanel.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/webcontrols.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /Images/transparent.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/servicestatus.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/list_bullet_5x5.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_16x16_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_24x24_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/signup_ms_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/o365_gallatin_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/image1.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft365.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /?uiqqiefr HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_zrspqvfkkfzwifqf_ppbrg2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/website.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/home.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/home15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/assistancepanel.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/conciergehelper.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/adoption.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/commonhealthdashboard.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/embeddedfonts.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 19 Jul 2023 22:15:37 GMT
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/admin/css/admin.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 19 Jul 2023 22:13:45 GMT
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/o365themedefault.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 19 Jul 2023 22:16:27 GMT
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 19 Jul 2023 22:15:44 GMT
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15mvc.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 19 Jul 2023 22:15:45 GMT
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/content/css/signup16.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 19 Jul 2023 22:17:20 GMT
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/microsoftajaxcombined.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:15:36 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:15:32 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/controlbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:19 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/headbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:18 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:28 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularextensions.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:35 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminbootstrap.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:37 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminapp.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:43 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/mscorlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:30 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/listgrid.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:01 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/peoplepicker.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/searchbox.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/gridview.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:33 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/netperf.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:17:25 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/passwordstrengthmeter.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:32 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrends.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/hipcontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:24 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/geminiwizard.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:32 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webuivalidation.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrendsstream.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/home.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/reporting.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/assistancepanel.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_2e62c59c862fb482c11d.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /images/webcontrols.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/transparent.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/servicestatus.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/list_bullet_5x5.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_16x16_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft365.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=9DDC34FF918C4725B9396D2D814A87B8; OIDC=1
Source: global traffic	HTTP traffic detected: GET /images/spinner_24x24_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/signup_ms_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/o365_gallatin_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/image1.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrapshim_IX6xrWCoGcREOsbbsQ1Yvg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wlivepackagefull_stPwvW3-5mShoxrbkAw2qw2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /knockout_old_GJ62c6D9R5HuKFdkoO8XYw2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accountcorepackage_Vb1PddtJLvvTQ36LqurOdQ2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resetpasswordpackage_7Avr9AiKpLBw7ARSByHeZQ2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?uiqqiefr HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_zrspqvfkkfzwifqf_ppbrg2.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/embeddedfonts.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:15:37 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/admin/css/admin.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:45 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:15:44 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/o365themedefault.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:27 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/website.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15mvc.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:15:45 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/home15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/home.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/assistancepanel.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/conciergehelper.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/content/css/signup16.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:17:20 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/adoption.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/css/commonhealthdashboard.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/microsoftajaxcombined.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:15:36 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:15:32 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/headbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:18 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/controlbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:19 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:28 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularextensions.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:35 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminbootstrap.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:37 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminapp.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:43 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/mscorlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:30 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/listgrid.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:01 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/peoplepicker.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/gridview.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:33 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/netperf.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:17:25 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/searchbox.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/passwordstrengthmeter.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:32 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/hipcontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:13:24 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/geminiwizard.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:32 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webuivalidation.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrends.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrendsstream.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/home.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/reporting.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.7.17.2/en/js/assistancepanel.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/webcontrols.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/transparent.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/servicestatus.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft365.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=9DDC34FF918C4725B9396D2D814A87B8; OIDC=1
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/list_bullet_5x5.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_16x16_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_24x24_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/signup_ms_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/o365_gallatin_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/image1.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_2e62c59c862fb482c11d.js HTTP/1.1Host: mvolenoazaqoerutien.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mvolenoazaqoerutien.com/?uiqqiefrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1956 --field-trial-handle=1644,i,6377621369673702105,3951177099500528634,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1956 --field-trial-handle=1644,i,6377621369673702105,3951177099500528634,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@35/310@21/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	1 Scripting	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Scripting	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0	0%	Virustotal		Browse
https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://mvolenoazaqoerutien.com/?uiqqiefr	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
http://angular-ui.github.io/bootstrap/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://mvolenoazaqoerutien.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mvolenoazaqoerutien.com	23.227.196.140	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.23.37	true	false	unknown
accounts.google.com	172.217.168.13	true	false	high
ZRH-efz.ms-acdc.office.com	52.97.201.194	true	false	high
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
paper.dropboxstatic.com	18.165.183.28	true	false	high
part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
edge-block-previews-env.dropbox-dns.com	162.125.69.16	true	false	unknown
t-9999.fdv2-t-msedge.net	13.107.237.254	true	false	unknown
k-9999.k-msedge.net	13.107.18.254	true	false	unknown
dropbox.com	162.125.248.18	true	false	high
www-env.dropbox-dns.com	162.125.69.18	true	false	unknown
www.google.com	172.217.168.4	true	false	high
clients.l.google.com	172.217.168.46	true	false	high
sni1gl.wpc.sigmacdn.net	152.199.21.175	true	false	unknown
uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.com	unknown	unknown	false	high
www.microsoft365.com	unknown	unknown	false	high
r4.res.office365.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
37.comet.dropbox.com	unknown	unknown	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high
account.live.com	unknown	unknown	false	high
m365cdn.nel.measure.office.net	unknown	unknown	false	high
outlook.office365.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
portal.microsoftonline.com	unknown	unknown	false	high
www.dropbox.com	unknown	unknown	false	high
clientlog.portal.office.com	unknown	unknown	false	high
acctcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://paper.dropboxstatic.com/static/webpack/production/6e501f8b9009ee898fc6.wFEyMPzjGdp0HhzwUx04Vd1h31nD7XJiB3IVsODHoBk.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/b11c258f8eee56d7cb5e.Hoi7ynA2p4z5-2Jcc2BP05ryA7I-X2lX9aG6h07S0OA.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_native_desktop~paper_pifs~paper_te~b48e404f.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.PDLfAhd6xUj73iIPSwWB5L8ej6aIH9LdVfTJB4055qk.css.gz	false		high
https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fd.png?version=7.0.1	false		high
https://paper.dropboxstatic.com/static/webpack/production/ce3721cd78168aca8dff.TOBxGySy4L8Jev4cz1MMkll3TM-ZkPmz6kB0Q7cRP8c.js.gz	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-BoldItalic-190618-Web.woff2	false		high
https://mvolenoazaqoerutien.com/?uiqqiefr	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Medium-190618-Web.woff2	false		high
https://outlook.office365.com/owa/prefetch.aspx	false		high
https://paper.dropboxstatic.com/static/webpack/production/e03046a2b8dc7c103bce.SZIL9KJIbSE8UBobNlCwsjQoiX0ekEuZ6bvWx6u226s.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/e1bc9664cd927a5217ca.Wqovou_Yti7G8yY3_MC3rgY9LTbMwHwduywhmvmZ3ZY.js.gz	false		high
https://37.comet.dropbox.com/paper/comet/channel?v=2&r=878235726477585130301259&id=359881680158568536413245&channel=streaming&seq=0&create=no&new=yes&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_admin~paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~pap~98bcc4eb.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.P8g-ahw-OP17UflU4vPd6dqc_PiHjZGoAEn-_cwbCW0.css.gz	false		high
https://www.dropbox.com/paper/emoji/list?role=work	false		high
https://www.dropbox.com/log/ux_analytics	false		high
https://mvolenoazaqoerutien.com/?uiqqiefr	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fe.png?version=7.0.1	false		high
https://www.dropbox.com/paper/cloud-docs/urls?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work	false		high
https://www.dropbox.com/paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work	false		high
https://www.dropbox.com/paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work	false		high
https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fc.png?version=7.0.1	false		high
https://paper.dropboxstatic.com/static/webpack/production/c861c239bed0e42e4847.obO1giTD6WsT4sESd05O8sH8NTRGNr7BFGTPTNoAoKo.js.gz	false		high
https://mvolenoazaqoerutien.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://paper.dropboxstatic.com/static/webpack/production/0ce09d6be201dc874940.Vjbt-av9zGPqb4iH55ZEtppKHIAS7YBNqMFhDsWmwmA.js.gz	false		high
https://www.dropbox.com/paper/comet/post?r=969207706799432086575527&v=2&id=359881680158568536413245&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&xsrf=deghsLEKJOGSu-1QvrwgkKX3&postSeq=2&remark=CLIENT_READY&padIsNew=false	false		high
https://paper.dropboxstatic.com/static/webpack/production/b12f522ce0ee55757f5e.2dcJbNyH591tHPSv0DWyEHi4jMDBGtqFibbP5rsRf_I.js.gz	false		high
https://www.dropbox.com/paper/emoji/count?role=work	false		high
https://paper.dropboxstatic.com/static/webpack/production/runtime_dc532339fcdb216ed9ee.G8ZQTZCS_VpPrXjqiUUTEAGGtIO7JBuw30s2EAFX5x8.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/7b7bc1b94b6fa4bb7540.4kCVYgsQ9PUJwvE49OImq-373sTZn8Mp1CKG3UUt75o.js.gz	false		high
https://www.dropbox.com/static/api/2/dropins.js	false		high
https://paper.dropboxstatic.com/static/webpack/production/203e68a375ea7f28c0de.MMYkLQEeFZd4PYXbLlLiCe5SizWEJT-CGzSC04pJQ8c.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/02419c289b2cc43fe5ef.mApMZZrA0_77_F4UomVbkhteOHx43L41fkpjXFdH9ZE.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/493371368d24a7dd558c.kZEJL0_iTh7LJAa5DQuPA7IwgSVAB6-F2gm4NhZnoIE.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_native_desktop~paper_pifs~paper_view_only.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.tXw8zQZf9pvbUGFBhTy9aeUGTRaPB0mEMIoN_T9VyMA.css.gz	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-MediumItalic-190618-Web.woff2	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Bold-190618-Web.woff2	false		high
https://www.dropbox.com/log_js_sw_data	false		high
https://www.dropbox.com/paper/emoji/preferences?role=work	false		high
https://paper.dropboxstatic.com/static/webpack/production/e0d8148a84ecb269e327.IeP00FobWk-c_AtiUoDfLvHTgizjKX98gEi7b6K1JTg.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/d5234f674cac144b79bf.cDu6D0nBAZvocplrTbBtBSOvdUuoODvKDRycRtZhb4I.js.gz	false		high
https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0	false		high
https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fb.png?version=7.0.1	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_bundle.1885980d0c2e444b4c260d20339401ec.6JKOhZEZLVUo0awj9vBTCyS8J99CxnWy1B_2dSb-wc0.css.gz	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-SemiItalic-190618-Web.woff2	false		high
https://paper.dropboxstatic.com/static/webpack/production/4ba0049880d2af404923.9CRyHZrHq1b9LsB2fiT0_y-o9kmEIIvVJy4qkE3xjW0.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/3af77e47b247f637744f.DQ6v0YSq6-ztqbzUE8-jtbGwsLA38ge3i3Qt_FY7yek.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/58cc5c6db7c1186fa9f3.zY6o-XeH44T0_vpOvZUDLeJeznVBNUebzrAuflJz95U.js.gz	false		high
https://outlook.office365.com/owa/prefetch.aspx	false		high
https://www.dropbox.com/paper/get-link-tracking-token?localPadId=sPCvEN8YwVSfHh10HNmcF&trafficSource=paper_address_bar&role=work	false		high
https://www.microsoft365.com/prefetch/prefetch	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://www.dropbox.com/paper/cloud-docs/get-permissions?role=work	false		high
https://www.dropbox.com/page_success/end?dws_page_name=cloud_docs_paper_content_page&path=%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FUntitled.paper&request_id=1b902fc12cf8423d9be8fc779df1ecb3&time=1689958229	false		high
https://paper.dropboxstatic.com/static/webpack/production/9546d61e0af1829a5943.1niBeLXONVtz6eCwiOhEjyXETqjOWmtbnfYPS-qFGMQ.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_cloud_docs~paper_pifs.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.LUMAba36qYZ-DzDv4MrULp74GhS0Iy4bZkavuZvI-QA.css.gz	false		high
https://www.dropbox.com/paper/cloud-docs/find-and-resolve-scls?role=work	false		high
https://portal.microsoftonline.com/Prefetch/Prefetch.aspx	false		high
https://paper.dropboxstatic.com/static/webpack/production/0f87dfdb09fdf4689436.XmWd3ZCjNs5ikVl6X4w5UBoJH0WCva2GW011KNNjeIU.js.gz	false		high
https://www.dropbox.com/paper/team/emoji-list?role=work	false		high
https://paper.dropboxstatic.com/static/fonts/SourceCodePro-BoldIt-1058.otf.woff2	false		high
https://paper.dropboxstatic.com/static/webpack/production/44358a50a900da035ada.LGT6HPSCk03xwXtkplDP_6Ti9yb6DDIdp68pzO0HY98.js.gz	false		high
https://paper.dropboxstatic.com/static/fonts/SourceCodePro-It-1058.otf.woff2	false		high
https://paper.dropboxstatic.com/static/webpack/production/32b2c3f54e63e752572e.VMxDU3TeZKfX-lzEjMstleWBFHlXnMK-2oRoVGo7L3w.js.gz	false		high
https://www.dropbox.com/2/cloud_docs/log_client_event	false		high
https://paper.dropboxstatic.com/static/webpack/production/d7c49816088408423a50.cjIp7UHClzqwu3lMbpCuK9_cMgk8uoSvsL8FX5pOS4Y.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/c34bb5d45fc66a39ca35.HaFmluvjFc8mm41OtrDeAfTrAvWXHKYT4YGXIBlSWLA.js.gz	false		high
https://dropbox.com/hstsping	false		high
https://paper.dropboxstatic.com/static/webpack/production/544eb0bcacbf47681dcb.UBYHq28Ln5Hi8t6eUSEEz2fCkP8WJ0HWYEUftmX8eYE.js.gz	false		high
https://www.dropbox.com/2/cloud_docs/get_doc_state_and_actions_logged_out	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mbostock/d3/blob/master/src/format/requote.js	chromecache_516.1.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=449857	chromecache_620.1.dr	false		high
https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate	chromecache_465.1.dr	false		high
http://angular-ui.github.io/bootstrap/	chromecache_516.1.dr	false	URL Reputation: safe	unknown
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_620.1.dr	false		high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js	chromecache_399.1.dr	false		high
http://www.json.org/json2.js	chromecache_399.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_620.1.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_620.1.dr	false		high
http://getbootstrap.com)	chromecache_375.1.dr	false	Avira URL Cloud: safe	low
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_620.1.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=229280	chromecache_620.1.dr	false		high
https://github.com/jquery/jquery/pull/764	chromecache_620.1.dr	false		high
https://openjsf.org/	chromecache_516.1.dr	false	URL Reputation: safe	unknown
http://github.com/jquery/globalize	chromecache_652.1.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_620.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_620.1.dr	false		high
https://help.dropbox.com/share/banned-links	chromecache_465.1.dr	false		high
https://www.onenote.com	chromecache_596.1.dr	false		high
http://underscorejs.org/LICENSE	chromecache_516.1.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_620.1.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_399.1.dr	false		high
http://www.opensource.org/licenses/MIT	chromecache_516.1.dr, chromecache_375.1.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_375.1.dr	false		high
https://github.com/jquery/sizzle/pull/225	chromecache_620.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_620.1.dr	false		high
http://github.com/angular-ui/ui-select	chromecache_375.1.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_620.1.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_516.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_620.1.dr	false		high
http://jquery.org/license	chromecache_620.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.227.196.140	mvolenoazaqoerutien.com	United States	29802	HVC-ASUS	false
162.125.69.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
13.107.246.60	part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.125.69.16	edge-block-previews-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
172.217.168.46	clients.l.google.com	United States	15169	GOOGLEUS	false
172.217.168.4	www.google.com	United States	15169	GOOGLEUS	false
18.165.183.28	paper.dropboxstatic.com	United States	3	MIT-GATEWAYSUS	false
52.97.201.194	ZRH-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.125.248.18	dropbox.com	United States	19679	DROPBOXUS	false
172.217.168.13	accounts.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	38.0.0 Beryl
Analysis ID:	1277532
Start date and time:	2023-07-21 18:49:21 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@35/310@21/13
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://mvolenoazaqoerutien.com/?uiqqiefr Browse: https://mvolenoazaqoerutien.com/?uiqqiefr Browse: https://mvolenoazaqoerutien.com/?uiqqiefr

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 13.107.42.254, 172.217.168.35, 34.104.35.123, 104.16.100.29, 104.16.99.29, 23.10.249.144, 23.0.174.11, 20.190.181.1, 40.126.53.16, 20.190.181.4, 20.190.181.5, 40.126.53.17, 40.126.53.18, 20.190.181.0, 20.190.181.3, 52.182.141.63, 23.36.225.122, 52.109.68.34, 172.217.168.10, 172.217.168.42, 172.217.168.74, 216.58.215.234, 13.107.6.156, 104.109.250.149, 104.109.250.164, 104.109.250.171, 104.109.250.26, 104.109.250.178, 104.109.250.82, 104.109.250.180, 13.107.42.22, 95.100.53.90
Excluded domains from analysis (whitelisted): res-h3.public.cdn.office.net, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, cfl.dropboxstatic.com.cdn.cloudflare.net, e11290.dspg.akamaiedge.net, l-9999.l-msedge.net, www.microsoft.com-c-3.edgekey.net, login.live.com, update.googleapis.com, acctcdnvzeuno.azureedge.net, acctcdnvzeuno.ec.azureedge.net, res-prod-h3.trafficmanager.net, e40491.dscg.akamaiedge.net, acctcdnmsftuswe2.azureedge.net, l-ring.msedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, aadcdn.msauth.net, cdn-office.ec.azureedge.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, res-prod.trafficmanager.net, owamail.public.cdn.office.net.edgekey.net, aadcdnoriginwus2.afd.azureedge.net, owamail.public.cdn.office.net.edgekey.net.globalredir.akadns.net, account.msa.msidentity.com, privacy.microsoft.com.edgekey.net, www.tm.lg.prod.aadmsa.trafficmanager.net, res-2.cdn.office.net, home-office365-com.b-0004.b-msedge.net,
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6805
Entropy (8bit):	5.0695268080762395
Encrypted:	false
SSDEEP:	96:EcnAwv2P7VW0NSlTrMFMFCgjXksPsNA4mWTrY3aGoDf:BAU2zVW0NSdaitIrNf
MD5:	652CC043920DC6F065D26942459CD574
SHA1:	3BB112BC09B852BDC78C814E0F643434EBD47B75
SHA-256:	CFF06C4A63AAE8153E0BB2EC323FADA8AF75B6FD4BD133156BB74555FE6E6AC9
SHA-512:	CF4D7F9425F2EDBD8DA1B8F12CB472CA5AE16DF75206A51D2A08D88B85AC1A91EA444089BD195CC7481D8043F1320B0BBFCAA7006D73DD7B133C37C3329A941F
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/fluent-background-sources/header-default-desktop-652cc04392.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="2560px" height="340px" viewBox="0 0 2560 340" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com/sketch -->.. <title>Background_2560px_Transparency and gradient_9.6.18_Ignite</title>.. <desc>Created with Sketch.</desc>.. <defs>.. <linearGradient x1="50%" y1="0%" x2="50%" y2="36.7807904%" id="linearGradient-1">.. <stop stop-color="#F3F2F1" offset="0%"></stop>.. <stop stop-color="#F3F2F1" stop-opacity="0" offset="100%"></stop>.. </linearGradient>.. <rect id="path-2" x="0" y="0" width="2560" height="340"></rect>.. <linearGradient x1="46.43137%" y1="93.8222137%" x2="82.3039269%" y2="0%" id="linearGradient-4">.. <stop stop-color="#EFEDE9" stop-opacity="0.2" offset="0%"></stop>.. <stop stop-color="#FFFFFF" stop-opacity="0.25" offset="100%"></stop>.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (311)
Category:	downloaded
Size (bytes):	676
Entropy (8bit):	5.396086053208549
Encrypted:	false
SSDEEP:	12:U2eAi/ZnTUQxkNP371H5ouSA0CVKR/x6rgYaTm0XnxlEUArxhJm9:xeAi/ZnTU7Z371HOu70CViTm4K1k
MD5:	D6C8641BD86682AC6984C4B363AB97C0
SHA1:	E9C54EE16BD898335E699C8CFA88BE30F2F71A38
SHA-256:	30D479EFC07AF1577824901626EBC9DCB2E96E639C6882C62FB0A9E922049572
SHA-512:	232D449483053CC2F22CC7106F259AFA4EB6B6607A0608CA81ECDEF92BBE3368FF3FE26313600E599DCA5202572C2F35C2EDA6B52BD3825D687F58CA0ED79048
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/logos-vfl1shkG9.css
Preview:	/ @generated -- This file is automatically synced from dig-logos@2.2.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..:root{--color__glyph__primary:#1e1919;--color__glyph__accent:#0061fe;--color__inverse__glyph__primary:#696663;--color__inverse__glyph__accent:#3984ff}.dig-Theme--dark{--color__glyph__primary:#696663;--color__glyph__accent:#3984ff;--color__inverse__glyph__primary:#1e1919;--color__inverse__glyph__accent:#0061fe}

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20822)
Category:	downloaded
Size (bytes):	20884
Entropy (8bit):	5.179492368752439
Encrypted:	false
SSDEEP:	384:7BtIkxiiCGOIMe6Hk2qXQmeb2AVrRe22ZzlKW0kBfnDxzwzTCRNNe3K:7BtIkxibGUbk28u/822PKW0KndUnCLIK
MD5:	E5793F30765B70D11765A5B1EBE56A07
SHA1:	C80E6852821C92D9F623CB9F397C9906412BF748
SHA-256:	DA50BB738AE57B32191AD7DBA3976FF656039909EF316D5A400FC50BD65BA07D
SHA-512:	0235CA310542AB3A06D8D80F33B13D686EC20D11A997452C2FD777C3D4C72852B6E34AE1FF03B8105E56019FA396A23488A3118E83571E75E2D8C3AE457DECE5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-previews_core.min-vfl5Xk_MH.js
Preview:	define("typescript/libraries/comments2/src/components/utils/throttle-debounce",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.debounce=t.throttle=void 0,t.throttle=function(e,t){let o=!0,i=null;function r(){o=!0,null!==i&&(e(...i),i=null)}return function(...n){o?(o=!1,e(...n),setTimeout(r,t)):i=n}},t.debounce=function(e,t,o=!1){let i;return function(...r){const n=this,s=o&&void 0===i;void 0!==i&&window.clearTimeout(i),i=window.setTimeout((function(){i=void 0,o\|\|e.apply(n,r)}),t),s&&e.apply(n,r)}}})),define("typescript/libraries/comments2/src/transforms/index",["require","exports","typescript/libraries/comments2/src/transforms/comments","typescript/libraries/comments2/src/transforms/threads","typescript/libraries/comments2/src/transforms/users","typescript/libraries/comments2/src/transforms/revisions","typescript/libraries/comments2/src/transforms/annotations","typescript/libraries/comments2/src/transforms/third_party_source"],(funct

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
URL:	"https://portal.microsoftonline.com/pp.l?CID=547fb60b070a4e20bb5daa6beca4fd28&pageId=Prefetch.aspx&d={B:{S:%27L%27,LT:4473,UT:-1,MT:-1},A:{ET:-1,OT:29,DT:29,CT:140,RT:180,ST:740,MT:-1,LT:6986},C:{LT:1689990705252}}"
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7600), with no line terminators
Category:	downloaded
Size (bytes):	7600
Entropy (8bit):	4.755347264022592
Encrypted:	false
SSDEEP:	96:gTJ0Z6QYvW81oyLEfqSorX5Kjb6tk63LA5D287sq5pY+0dnk3P54aaoJ99orOoY0:S0dYjueAynT8js
MD5:	BC6A941A872D57146E13823F6935A7F2
SHA1:	E648D16D68417B81616454539EDD8303E04DBEC7
SHA-256:	D132D49C1C8945F5C43AE470BADF2B6EDCD584297E84E59DD2034FFB7DC863B3
SHA-512:	F9629A3E82E24FC48DEA4C677491235AAB0098CEDF40DB9F98E53CA430B5DD105A2D9F092E007351AFE2BCCCD2A430C9020EDAE55665E3F3517703A3D00CDB71
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/css/o365themedefault.css
Preview:	.o365-theme-base,.o365-theme-base input,.o365-theme-base textarea,.o365-theme-base select{background-color:#fff;color:#333;border-color:#666}.o365-theme-base h1,.o365-theme-base h3,.o365-theme-base h4,.o365-theme-base h5,.o365-theme-base h6{color:#333}.o365-theme-base h2{color:#666}.o365-theme-base a{color:#0078d7}.o365-theme-base input:focus,.o365-theme-base input:hover,.o365-theme-base textarea:focus,.o365-theme-base textarea:hover,.o365-theme-base select:hover,.o365-theme-base select:focus{border-color:#2b88d8}.o365-theme-base a[disabled],.o365-theme-base a[disabled]:hover{color:#666!important}.o365-theme-base input[disabled],.o365-theme-base textarea[disabled]{background-color:#f4f4f4;border-color:#eaeaea;color:#a6a6a6}.o365-theme-base input:disabled,.o365-theme-base textarea:disabled{background-color:#f4f4f4;border-color:#eaeaea;color:#a6a6a6}.o365-theme-base input[type=submit]{background-color:#0078d7;border-color:#0078d7}.o365-theme-base .DataTable td,.o365-theme-base .DataTable

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.248780637682586
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1KBVAz7DP2SYRnQg6n:MMHdVBKW/UTcAXDP+R16
MD5:	A4013F830FDBAA435E9E1B4A628F3B6D
SHA1:	8CFA9BD8AF0665D162D2C64BBE9495F2BA3E26BC
SHA-256:	0C022D00B9ECB8BCEB05F0CDC182D3D1803EA48652DDC4FCD0A564D8983EF295
SHA-512:	E21227F686031EBCD6E7B3248A45B40BF1F2C14DD62C261F98B49C3C6C72FF737EFD7FC9B6CDB39B1717899D5F04247B5DC779197A2C1946DF01F1EBB160D179
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/scrollbar/arrow_staticup_16.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:185148f7-401e-0062-10f3-bb08e6000000.Time:2023-07-21T16:51:45.1249604Z</Message></Error>

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52687)
Category:	downloaded
Size (bytes):	52751
Entropy (8bit):	5.426606358681387
Encrypted:	false
SSDEEP:	1536:ncPPfP8jPPUoiiSagwtzFQxP4bPxxPhJPQ7PEjPWYVXHlOv+WphqHl:cfOBFaaTDamuYVQ+WphqHl
MD5:	009330C9E74E2E728AEB0A658DFA95A5
SHA1:	465C3223D051AD348C7778AE333EC6D2C81BE11F
SHA-256:	89B04BCE8D624862A79C63A303A790A20CC68054851E362A675230A8B9D47785
SHA-512:	AEE85709AD11CB9F2F81454E2CD79C2B33BE20FE472BCDBAB83923C341424AE980BEB094E695F9B72950848D6CC53E5C0C7810DD0D6281433C05171CC1E9D69C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-campaigns_toolkit.min-vflAJMwye.js
Preview:	define("js/pap-events/campaigns_client/cancel_campaign_sequence",["require","exports"],(function(e,a){"use strict";Object.defineProperty(a,"__esModule",{value:!0}),a.PAP_Cancel_CampaignSequence=void 0,a.PAP_Cancel_CampaignSequence=function(e){return{class:"campaigns_client",action:"cancel",object:"campaign_sequence",properties:e}}})),define("js/pap-events/campaigns_client/complete_campaign_sequence",["require","exports"],(function(e,a){"use strict";Object.defineProperty(a,"__esModule",{value:!0}),a.PAP_Complete_CampaignSequence=void 0,a.PAP_Complete_CampaignSequence=function(e){return{class:"campaigns_client",action:"complete",object:"campaign_sequence",properties:e}}})),define("js/pap-events/campaigns_client/confirm_campaign_format",["require","exports"],(function(e,a){"use strict";Object.defineProperty(a,"__esModule",{value:!0}),a.PAP_Confirm_CampaignFormat=void 0,a.PAP_Confirm_CampaignFormat=function(e){return{class:"campaigns_client",action:"confirm",object:"campaign_format",proper

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.2656098250809675
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1yQIp+I/Ymhz8g6n:MMHdVBMHgWdzR059Ipfgm6
MD5:	C91DB5A50EB2DE5D15D6384B0EC96D5A
SHA1:	451363244878EE2F389DEA627F4751F7AF0369F8
SHA-256:	830C2DE788634277981AFF418E02A9E8409117F6A954AAE7184C8E22156F9A21
SHA-512:	989540A315A09AC9ADBB27807B74E62511C5A595D646B1A210D79A71773243314B7324F856AE59397DB14676D2595592A7B0E5460249B4A628E22BE565B1AD9C
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Images/list_bullet_5x5.gif
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:02e423ee-a01e-0018-71f3-bb15a6000000.Time:2023-07-21T16:51:44.2406675Z</Message></Error>

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3254
Entropy (8bit):	7.881903934112887
Encrypted:	false
SSDEEP:	48:oUrW498bxWFYf4BohZ5UYosBzQq26oZlaEC/seHdtpGsx1Cgv/fZZR:PrGfoOxBzQqUZeswtpGsxZv33R
MD5:	F8AB974B28712B004AF916D2C01D4E86
SHA1:	E62CD02778BA129D1980C97B70B260D4CC785C4B
SHA-256:	0ADB74E5FDE0A3721A35E40D7E4549DDB0952BA017E7789E7653818BAEA2B0DA
SHA-512:	F135A48DC81A28D572AF87B5BC922CB3F31E30233B92E035A2DFCD292BD1E0757A81B40E0986D606BE3E56E529C316AA507B36AFD995191B238B3A64B568D0D3
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fd.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....CIDATx..[kl.....3....M.....+).....8Q..TZ.H#T.J....G).....r.QJ..."..m..P)$.B.h.B...}..%.1.&.Ml..>.qO...zvwfv..M.I#.sg...y..A.u...Et..d.8.<...c.~f.t'.n.......O...C..}..e.........@.+....N..,.Nu...e...Q..,........Z....=...Y....n.T..&.U.&..l.(/...,B@x...l...$M....;v;0/....>.e.PJ.v'9./z..9a......}/a..\|....`v...+..D.BH.....%{.;0.=..5.9.......0.lQ.>w.J.......0...m........tj,.W..{.).Nu..L...\...m...y.sk..3l...J..:.l......3..v..>V.CD......p..5...s.~..u..3@...`...un.`..@."aY.e....U.(..',...g.e..V-_..Y..s..nf..pV...o....c.f.....4....cnMc>....b.`...L..%. ..ol/...@)#D..?.!?...l.. H........^....b....f.....YAk1...."..j~h..uc.-.<.e...o.s..O......,..^^.(.."....A4$`........>.o!.E.<<r.V.a..f...@.+\&..@.N.b.......3...5.W.T....h...B5.q.J.Q>.T"....M"..=sYUD+......&B.& "..C.X.H......_..U......U...^..S....`,W....m..#M.(5.g.~......._..4b..R.[.R..7.$z....0...r..!":;iY

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	1314761
Entropy (8bit):	5.1925524239668635
Encrypted:	false
SSDEEP:	6144:mZ18TNwHUqPb4QOv3dZ4x8PIQpIhDe6RaHc4Rqt/6QYRED7PWMtyJk7eOMTu82:/TGPkZ7IWy/6QYE6Mt5eOMTu82
MD5:	5D2C52CE84CEC342414F7107AF997780
SHA1:	E0191E76B339716EF03261E8615D63F9F8834B52
SHA-256:	D426D1E999F326BE5531F26282F4E3BB18769CAA4991C618D88B4478A989E58B
SHA-512:	E84693287779C3D868C59E22AABD9FE5B3CB094E34728F5DF82F1F1118B65FF369B940699C502637D1EE5F4BDC0F1881EFC114FC8ACF814C4B021BE89FA321AA
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/admin/css/admin.css
Preview:	.fake{color:red}.k-reset{margin:0;padding:0;border:0;outline:0;text-decoration:none;font-size:100%;list-style:none}.k-floatwrap:after,.k-slider-items:after,.k-grid-toolbar:after{content:"";display:block;clear:both;visibility:hidden;height:0;overflow:hidden}.k-floatwrap,.k-slider-items,.k-grid-toolbar{display:inline-block}.k-floatwrap,.k-slider-items,.k-grid-toolbar{display:block}.k-block,.k-button,.k-header,.k-grid-header,.k-toolbar,.k-grouping-header,.k-tooltip,.k-pager-wrap,.k-tabstrip-items .k-item,.k-link.k-state-hover,.k-textbox,.k-textbox:hover,.k-autocomplete,.k-dropdown-wrap,.k-picker-wrap,.k-numeric-wrap,.k-autocomplete.k-state-hover,.k-dropdown-wrap.k-state-hover,.k-picker-wrap.k-state-hover,.k-numeric-wrap.k-state-hover,.k-draghandle{background-repeat:repeat;background-position:0 center}.k-link:hover{text-decoration:none}.k-state-highlight>.k-link{color:inherit}.k-textbox>input,.k-input[type="text"],.k-input[type="number"],.k-textbox,.k-picker-wrap .k-input,.k-button{font-si

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20275)
Category:	downloaded
Size (bytes):	20276
Entropy (8bit):	4.646578752329214
Encrypted:	false
SSDEEP:	384:wG0HaJ6HQ6O0yWS2UAh+NSa4yofSUHGfw8SAjy8bmeFNUEBgwpUzc1thl/v:wGlic3
MD5:	EDDDB11E353CCF4C3F3CFF1E4FB3CCBD
SHA1:	0B2B90AD66082EFB0CF08549904425E6DA2D56BF
SHA-256:	A3C2604437FD833C0B61934414D6998D1E694DB1905E6B7F4CE19FFF7F9B206C
SHA-512:	9E8D564F0EA8EFF86578758E1CB5F7145285AA3DF60ABBA34D624B148AB9312AD1C0788B539BC29F184731BE2387CD2D82F9CF9C823F7323CC65CEEDF63BDA10
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/components/button-vfl7d2xHj.css
Preview:	.tabbing .button-primary:focus,.tabbing .button-secondary:focus,.tabbing .button-tertiary:focus{box-shadow:0 0 0 3px #428bff;text-decoration:none}.tabbing .button-primary::-moz-focus-inner,.tabbing .button-secondary::-moz-focus-inner,.tabbing .button-tertiary::-moz-focus-inner{border-color:transparent}.tabbing .button-as-link:focus{text-decoration:underline}.tabbing .sprite-button:focus{box-shadow:0 0 0 3px #428bff;margin:-2px;padding:2px;text-decoration:none;border-radius:5px}.button-as-link{margin:0;padding:0;cursor:pointer;color:#0061ff;background:none}.button-as-link::-moz-focus-inner{border:0;padding:0}.button-as-link:hover{text-decoration:underline}.button-as-link:disabled:hover{text-decoration:none}.button-as-link--inline{font-size:1em !important;line-height:inherit}.button-primary,.button-secondary,.button-tertiary{margin:2px 0 5px;min-height:34px;line-height:normal;box-sizing:border-box;border-radius:3px;-webkit-appearance:none;margin-top:16px;padding:6px 16px}.maestro .button

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2829)
Category:	downloaded
Size (bytes):	2888
Entropy (8bit):	5.153593191475632
Encrypted:	false
SSDEEP:	48:94ebwVcG9j0SsIG2biHqYHyHDu2Bm292RQHy7nHBtYH1qIgDR1+F+QPE:ifSCrsRWHDuSmIQd9ygNgF+QPE
MD5:	7B52E4910C2BDC93D71E44D336A78598
SHA1:	A3546AF5945F8D48C83DD2CA6857228D3E2BE7BE
SHA-256:	99AC0C4C15C61BBDC405911CC0CA35854057E7D058E290CB1C9782D5663F497F
SHA-512:	E85B28D400B2312CD9DDF7B18903864516D05805D429EA27096157B0885B6B1B9879FCA5677291EC624169D7EF0C64CA77C6F6837C67CC14110CC73FE79FF868
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-thumb-stores.min-vfle1LkkQ.js
Preview:	define("metaserver/static/js/flux/flux_store",["require","exports"],(function(t,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.FluxStore=void 0;e.FluxStore=class{constructor(t){this._listeners=[],this._dispatcher=t,this._dispatchToken=this._dispatcher.register(this.__invokeOnDispatch.bind(this)),this.__hasChanged=!1}teardown(){this._dispatcher.unregister(this._dispatchToken)}getDispatcher(){return this._dispatcher}getDispatchToken(){return this._dispatchToken}addListener(t){return this._listeners.push(t),()=>this._listeners=Array.from(this._listeners).filter(e=>e!==t)}hasChanged(){return this.__hasChanged}__emitChange(){this.__hasChanged=!0}__invokeOnDispatch(t){if(this.__hasChanged=!1,this.__onDispatch(t),this.__hasChanged)return Array.from(this._listeners).map(t=>t())}}})),define("metaserver/static/js/photos/thumb_loading/http2_thumb_loader",["require","exports","metaserver/static/js/photos/thumb_loading/utils"],(function(t,e,s){"use strict";Object.defineProperty(

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3037
Entropy (8bit):	7.91875067094988
Encrypted:	false
SSDEEP:	48:ozf5ipgAwSJel7pU7/2ZsofMqeJ71UFDkP4KfD3xJyAsNuVg2o:0qK7pUbWfLzW4QJVg2o
MD5:	C4CE23F7313E8E2319F10E4D8AEB20D1
SHA1:	EBE18FA8C318E3BA6D54636FCA980996B183172A
SHA-256:	E2D2BC5EF69F49E711E2147DA9D5A5D67F478312D30D78AE486B0E1763AF0430
SHA-512:	98E07B9E4D7C40E245BF39071A879E6E094AEB5F2B3B264E0ACA1730B58B4CC8B84664A1F24174966FACE6642033E592F3A58F3C956B346DCE98A8D745DD0E48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....jIDATx..]...u....G.t.F3.lF.F+...z..uH.IX....b..,!^...1.].....0..<..$.iE...."...`0.b.<..M...H..dY.W..vF.QU..<T.LWwUu.L......{...O.s...&...'~...G.L#r..W"q'..>......lV..N<.s.U..ob{..\|C..k}!.....?.....?,..j......z....}v\.-F\...../._.,..b...nn?..G.E..P.....'gBV..M.T.}...n..(.!..\|.+..z...g...6.......c^....5..........c..`...C......Gq...Xw.8{.?4.6..".{j..P..u..h..c....}.^....B.......q.5.Duk[..C........i..3.#..<.......D..;c+.Y9..1.....[.u`...`.........W.^>....m-X..8vy.g=?..WI...`...1.Ml.3.v.!.s...@..g..!#....+m.^`.....S.....Z.~....~....~FJ...%?.....@...?.b....G.C..:...W.ucM..?6W9st..s..D9#........W..Pu.....5pTU..g..\|.....p.....x@A..4=....(........U.m..........?..0F.Y-....P..........Z..S...7.BW.3wo........A..=..1.y<...;.....R...,J..b.........R.f..A.....>...Pv..C...g.....z.vF...3P..V./3^Z%...F.]~._..F..... .(R@UA..P..<...jz,hT....Y)......-.d.RvQ.a?..

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7132)
Category:	downloaded
Size (bytes):	7194
Entropy (8bit):	5.0403472083023155
Encrypted:	false
SSDEEP:	192:0AO6Fatca75GHoJYkyRDVIJi6hJR8OAoA5:0AO6Fatt0HoJYkipIJimJR/BA5
MD5:	335C4F83554C6DDBB9D7D73ED328A0DF
SHA1:	7AC95F5ED1D820B5ACD656A6AF47391CBFDADBD2
SHA-256:	13BB4AC1933D4797B3A0169F6F93579276CC6032998008CC464DD0BE8E027514
SHA-512:	A3BB5B2D5E7E8CB075A59C2EE40D70C226EF9739FC7B84DE03D918B8F93DB94491B430080E5D573924B5F5C1665D17693AFD231CD5094DECDFFE7EE7FB653037
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-frame_messenger.min-vflM1xPg1.js
Preview:	define("js/file_viewer/libraries/frame_messenger/index",["require","exports","js/file_viewer/libraries/frame_messenger/frame_messenger_base","js/file_viewer/libraries/frame_messenger/frame_messenger_client","js/file_viewer/libraries/frame_messenger/frame_messenger_host","js/file_viewer/libraries/frame_messenger/frame_messenger_logger"],(function(e,s,r,t,i,n){"use strict";Object.defineProperty(s,"__esModule",{value:!0}),s.logFrameMessage=s.FrameMessengerHost=s.FrameMessengerClient=s.SendMessageConverter=s.ReceiveMessageConverter=s.Parameters=s.MessageHandler=s.Message=void 0,Object.defineProperty(s,"Message",{enumerable:!0,get:function(){return r.Message}}),Object.defineProperty(s,"MessageHandler",{enumerable:!0,get:function(){return r.MessageHandler}}),Object.defineProperty(s,"Parameters",{enumerable:!0,get:function(){return r.Parameters}}),Object.defineProperty(s,"ReceiveMessageConverter",{enumerable:!0,get:function(){return r.ReceiveMessageConverter}}),Object.defineProperty(s,"SendMe

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (843)
Category:	downloaded
Size (bytes):	899
Entropy (8bit):	5.118254809878975
Encrypted:	false
SSDEEP:	24:1bmCnDKPY0B4hOzkmc1yOLBoBZzWxrim+NLJGLS6yjwJ7WLa:1aJrUm4o6xr28Qa
MD5:	BAD4EF0AD1248A3871DBD29D21AD9BC1
SHA1:	3C1397F92451BEDF302D73C879E006F71DE08F8D
SHA-256:	EC373644891C597BB41C46D066EBCFD6AB2F51E2440D585B579BDB6EB45F158F
SHA-512:	12AE3C6C69CEDFA6FA4234334B56433F7819D87DF354BAD861557896BC5359FB7E3E9048F74DE5F01902A6D989E5FEDF17D43A4BD0660AA5EB0D509CDC0FA604
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/clean/flash_pagelet.min-vflutTvCt.js
Preview:	define(["require","exports","metaserver/static/js/core/i18n","metaserver/static/js/core/notify","metaserver/static/js/core/html","metaserver/static/js/core/toast/toast_on_init"],(function(e,o,t,i,s,r){"use strict";Object.defineProperty(o,"__esModule",{value:!0}),o.utils=o.initialize_module=void 0,o.initialize_module=function({message:e,isError:a}){window!==window.top\|\|o.utils.cookies_are_enabled()\|\|i.Notify.error(t.intl.formatMessage({id:"G39vbK",defaultMessage:"Unable to access strictly necessary cookies. The website might not function correctly."})),e?null==a\|\|a?i.Notify.error(new s.HTML(e)):i.Notify.success(new s.HTML(e)):(0,r.showToastFromCookie)()},o.utils={cookies_are_enabled:()=>navigator.cookieEnabled?navigator.cookieEnabled:(document.cookie="this_is_a_test_cookie",-1!==document.cookie.indexOf("this_is_a_test_cookie"))}}));.//# sourceMappingURL=flash_pagelet.min.js-vflxY9qQE.map

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6631.16/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65120)
Category:	downloaded
Size (bytes):	100634
Entropy (8bit):	4.8644295862781926
Encrypted:	false
SSDEEP:	3072:zHnhII08McAv7FWoTSn8AiVX340lOfadwia6gWkeTvkU5EfIbxxXh/SixwtKm4tI:zHhII08McAv7FWoTSn8AiVX340lOfadC
MD5:	81495E1F8D08D63CBF0B2A48D4900CB4
SHA1:	D7EB1C24AC9AAC38B644720CD03E9C2444BA54E0
SHA-256:	94329E135FA68DCF0C06E652287E6496EE1908E5FF03F82C14E2BFAA24DDB5ED
SHA-512:	DC900B61E0CBEBBD2E4C071631E8DB0A0645D2F4D46AAE65433D757FAC18B636437B1317BC7995BFAFE3C1FE3FD78EB6ADF3989CA73CCBF0C08B31B8482279AC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-components-vflgUleH4.css
Preview:	/ @generated -- This file is automatically synced from dig-foundations@1.5.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./.../* -- index.css /./! autoprefixer: off */.._4rjmw90{box-sizing:border-box;-webkit-font-smoothing:antialiased}.ekabin0{appearance:none}.ekabin1{user-select:none}.ekabin2{cursor:default}.ekabin3{cursor:pointer}.ekabin4{word-break:break-all}.ekabin5{word-break:break-word}.ekabin6{word-break:inherit}.ekabin7{word-break:keep-all}.ekabin8{white-space:normal}.ekabin9{white-space:nowrap}.ekabina{overflow:hidden}.ekabinb{overflow:scroll}.ekabinc{overflow:visible}.ekabind{overflow:auto}.ekabine{overflow-x:hidden}.ekabinf{overflow-x:scroll}.ekabing{overflow-x:visible}.ekabinh{overflow-x:auto}.ekabini{overflow-y:hidden}.ekabinj{ov

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 134107
Category:	downloaded
Size (bytes):	30097
Entropy (8bit):	7.988708194449055
Encrypted:	false
SSDEEP:	768:am8cpNWE/3BJpWhmZct1itvC7c8v8FeawS9r8SR8V1qvT:d8cpL/3TRZw0tv+c+kwur8a+y
MD5:	892A28CAD5DB513D7228CDC6E6834B18
SHA1:	D4FDA482B754D1D6A8373377AAA7F626EABA6B12
SHA-256:	020C036F013F589194A338F4C79E0C5C181F4FFDB11A3B735B7E7E9B10C6DA60
SHA-512:	2F65A72145626F9ADFF4D954A2BAA7BE38DBC154F33C104EC94CF016D24105F9683596A096697D850F22032E0100B6D601AC4104647183BA9206BB3082AE76EC
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/c861c239bed0e42e4847.obO1giTD6WsT4sESd05O8sH8NTRGNr7BFGTPTNoAoKo.js.gz
Preview:	............n]....O....`.Y.*.d%....F.^...a0.m..E...x.s...o\.jNR2e.9.....8f.Y..o...w....wg.....~.._.z.[...\|w.o....................W...?.}{I....__........o^\|....=x}..G......./.y..........O~x...7oo...}..g7.wO.......y....._^?:}.?{.....on^....oO...~}.........._.~..\|..........x..o^........5=.\|..W..'..o..\|..W.\|.s......~.....y..w..._....._.l...\|.7..2..o......^O/.+.._}.z...h..S.gs..p......~......~...5.y..w..........se.t../.y..).?.\.z...z...;..........S....~..4....w...{...z.....4..{_......../...{...v......+..{?..T.,......zx....,._..............[....:.....o.XK......^...........g...}rzC...._.y{....?<.I#..../.^.....Ow.on.?}yzvv..oO>......O.?zq../.C.../....7..o/....kZ.._.NY.:.....(......-.....o.\.....G_\.\|s.H...'.\|u.......~:..Z..V...{.......J.J?.........._>:.....~}......$G...../.>zu.J....__....O^<}.Y(g.,....J.u.......nY.IX....I.g.z......$W.~jHwg!TdW.......w...ROw..6>w.,..{.....R/...+._.<H......~.O.......].....k.l....

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25173)
Category:	downloaded
Size (bytes):	25228
Entropy (8bit):	5.276344438891898
Encrypted:	false
SSDEEP:	384:biTqJpGdQ8v8YlMZTJrx5+3d8K/So8yBYEXr9+nh0GsCiil2KMdU:bi5dTv80MZt15+3d8KhBYEXxAcCiZ6
MD5:	E494BE7ECA7457AD869FF4168BB9BD56
SHA1:	1F3291DED23CC068BC86D5D9D7B13F0F763E5AD8
SHA-256:	609D8D372FC01CF960F8C78762D4A1110C6819CAC653ABB91645984D94664C87
SHA-512:	3653BE3DD9AA263DADC39DD98225C57126942FD285ECBF82868C87465D352EB616242E64DE109A489EB805C3ED97E59CFF10CB7784F4C2873FCC96B3E9176442
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-external.min-vfl5JS-fs.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/_commonjsHelpers",["exports"],(function(e){"use strict";var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.commonjsGlobal=t,e.getAugmentedNamespace=function(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r},e.getDefaultExportFromCjs=function(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}})),define("metaserver/static/prod_assets_web_modules/dompurify",(function(){"use strict";

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18075)
Category:	downloaded
Size (bytes):	18076
Entropy (8bit):	4.7924487080947715
Encrypted:	false
SSDEEP:	192:os1Zdnhla3ur3JM7x5vh9TnTRlqyxfJb2CKV:PPdnhla3ul+R6CKV
MD5:	D2AEFBF240B50A4025ABDC473CF402CB
SHA1:	55D61FE968C6412254DFF8D0CBB72E79858B8327
SHA-256:	DCFD99D32F44E67FAF575FE819C06DCC451AD2F8C42BA92C00C385F26E8018A9
SHA-512:	9A9CF769E4EC097B4DF87CF15E45C927A8A0E21486FC556029BD2E5C35EA6F932D55B4D237ED4EFBE6F01AE467329F6D3B06133266D01E4A9CFE1BD65F670C26
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/notifications-vfl0q778k.css
Preview:	@keyframes notification{0%,100%{transform:rotate(0deg)}12%,62%{transform:rotate(-5deg)}37%,87%{transform:rotate(5deg)}}@keyframes bounce{1%{transform:scale(0.7)}25%{transform:scale(1.1)}45%{transform:scale(0.9)}63%{transform:scale(1.05)}79%{transform:scale(0.95)}100%{transform:scale(1)}}div#account-header #notification-feed-nav-link{position:relative;height:32px}div#account-header #notification-feed-nav-link #notifications-bell-active{display:none}div#account-header #notification-feed-nav-link.active #notifications-bell{display:none}div#account-header #notification-feed-nav-link.active #notifications-bell-active{display:inline-block;vertical-align:middle}.legacy-notification-button{background:none}.legacy-notification-button .notification-button-bell-container{position:relative}.legacy-notification-button .notifications-bell{display:inline-block;vertical-align:middle;margin-top:-7px}.legacy-notification-button .notifications-bell.shake{transform-origin:5.5px -18px;animation:notificatio

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/js/webuivalidation.js
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 279795
Category:	downloaded
Size (bytes):	62989
Entropy (8bit):	7.99559662676427
Encrypted:	true
SSDEEP:	1536:iMwYqtGXnk8E+Jn3T8ElGNIgLqeRP9vGPm8zL9C3bhWK9X5pyCcJ:iMfqqfEaD8+G3VRP9vQm81w/pyPJ
MD5:	B42D9F48A0711E340C8650166F5041A0
SHA1:	652957C8FC5EB1F98B6DA7ABB38B977FC6563AF1
SHA-256:	D1C6E64ED95844F5D86F906B14D4945DB83A5495DABB67293CEC00E74195540F
SHA-512:	84EE863EACBC23AC89B6CAE1F453EDEC4608E7413A38B05CBED8698C463E1B27918EFF660A301A1565CD04CF65EC04ED2DD875530FCA9623359FE1FF626BCD72
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/3af77e47b247f637744f.DQ6v0YSq6-ztqbzUE8-jtbGwsLA38ge3i3Qt_FY7yek.js.gz
Preview:	...........iw.H...].....+.&P...Y>^....r.._....E.A....,...7.....Aj...QwYL..FF.......0;5....z.....8\|\|...o/.....i.._?\|....b...Cg.....%......0M.. .V.a6X....(]%.A.}./'..h.,>-.y..4;.PUa2.B..;.{.{.k..V..r......w._......0.Mf..<..g..^..(Y...4....1.\|p....[.'..u<\|0.>.R......4.....xJ..xp&.]d\|./.'Y~8..g.e".?...y.....r..x.x6\|...g.d..u<<..n.....e.e2[....l......ar...W.e6./...d=...Q.cR..\.'.x..U=X....wY.....vj.d.w..I.....'....O.lJ.bty..I...w...x.h.SW.8.....:.0.N...e.O..\|5..P3...\........u{....^J?...M.......F..._.....E.7B.no..&e_!.R.9>.T..A.w.g.r.......P.Sd..?.CDY......G...45{...'.....L...?!.C...>.~%....,.k.. N...$.=......n.1.Q...@..w.n..~.....A.9...o(Gm....x.........x@..u...7.....;.<...yGr..H......>..p89%.A..g..\|2<.,~;....Q.x..e...#..Q...h..&Ju.z.2..}.....F...Z.gFE....n....q29./......l...R.W3Za.....yv..).....1..t.~.....w.^....Jy...q>.g.-E.m...&v...d..gZr.n..........g.{0[........-...2.....\.FmM..x8...,...\|B$.h<..hn....ev...F.~.I=.........#q...

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	497
Entropy (8bit):	7.471761176000909
Encrypted:	false
SSDEEP:	12:6v/7iby0CDdAfPcBsKDs0TkF4yEiwWh9j3xYC8tqYAME1:py0KahKDtTkFjGWh9CCiqYAMG
MD5:	EC2E6E18A914B2BAE990F7CC9F8CD4DD
SHA1:	33E2B67E19BB8C21E4C36902316E0B00F7FA6017
SHA-256:	C0BCE318A2ABA982ED09E4C18146D93CB202B71AF00FC0764FF794742D83853C
SHA-512:	5727FFEDC630901DB996A97AE7964793E780B3663D37AB5ED0FAD7FEBC9EFF5F198C55D98E21F6DDA8AA934E6883CCE1E6DC4868C5E31057852C75C6B6E2800B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx..GCQ...2Z.BP...JH...Z(.B.-@IK.B...& ....@...d..A..%v:.c0.k.}....w...{..C9.4a....F.\6.d...K..(...K3l........0...o.I@M.=.v=..B.'.^.8.!..f~!..z]..V..l..CD...4.i...&.5.....1...\|Gq...^..`......3.......x.....Q...Q....8......E$.u3..~j.A-z...n.qG...\9......C(..j.#.o..C.z.w],...-.t..v..^.F.....S.z.....7...ly.":..4...]}...e4......../.... ..../........P..3.."9.H:...te...b..)x...lt3.7.XA...byo.w..2F.....W....}...:..)..TQ5.....IEND.B`.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35788)
Category:	downloaded
Size (bytes):	36184
Entropy (8bit):	4.894915094225079
Encrypted:	false
SSDEEP:	192:hpnht75iWDwyfcP6Vk+6D1iZp4VmwJNZgEWJ83ptaLcsyxmsH/1F4XvMF0X077J0:hpnhtQY5Vx5VOmzBSQs5Vn5VBmzB3
MD5:	A3DFCD8947E19F9F441E6AFFCB54E2DB
SHA1:	8D242B803120D73E2D13E1C7DB1A283D676B937D
SHA-256:	2563161CDAA532D999EE8876CD1CFE7CC0E1F44CB5E539DE382DAD41D79C474B
SHA-512:	313F82604213446AB5A99D08D0A908E472B02BF485437D35B6B4CD1201F6CBCA453BE14FA5633B675D63FE942A99732BC45F06915C790C48CE56942ABE0F3157
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-tokens-vflo9_NiU.css
Preview:	/ @generated -- This file is automatically synced from dig-foundations@1.5.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../! autoprefixer: off /.:root{--type__title__medium--lineheight:28px;--type__title__medium--fontweight_strong:500;--type__title__medium--fontweight:400;--type__title__medium--fontsize:22px;--type__title__standard--lineheight:28px;--type__title__standard--fontweight_strong:500;--type__title__standard--fontweight:400;--type__title__standard--fontsize:22px;--type__title__small--lineheight:26px;--type__title__small--fontweight_strong:500;--type__title__small--fontweight:400;--type__title__small--fontsize:16px;--type__title__large--lineheight:36px;--type__title__large--fontweight_strong:500;--type__title__large--fontweight:40

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 166176
Category:	downloaded
Size (bytes):	49931
Entropy (8bit):	7.994340401208441
Encrypted:	true
SSDEEP:	768:VOn1GMwsn4ghCXDq6+MH+YRv295JuJ1J9oft4uL5WL6G3IXM22TEwm54vijbJ4Qy:VO1G3o4gQe6+OXf8fC25G3IRwmiqwSs
MD5:	C2295F578375683A6FB54652CBFD7F4B
SHA1:	5C521BCA654705D1606BB23825203F3EFC81EF01
SHA-256:	BAD5652F70BB9EC010C0B2BFE31FFFD8E80B517B2C30CD4E8BFE1ACC5514B5E0
SHA-512:	95A773C32221606C32FC32DB5AEAA726F9D3090F5FB2249DA00FED65B93E5E1C2AE40E3B3EE9287A761CF9A5480F01E463C89DAE1772DF5E987F9919B23443F2
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/aa7bc43daf3c3d0c03a8.i3qsTcFgoOzzyfb1BvKL1Ngsl_TBIEdwWAwwi2z1rq4.js.gz
Preview:	............z.H.'.?...c.-...B..+.r..].r..G......6Dh.P.,i.y.}.}.....N.".7...[w.l.J ..........~....G..x.....{;....x{..7..?>......_,.I..P.....q4>...g..8===......Yr%cN..x^\|,f.$...$]....(...(....\|...92..5<W=._wL......(...n..{...z.Q..l..W...$W,......Y.+.f#.b.`o:.gY<V.h..Obe."....+..<...K7....2J.m...t..GW.,.E.S..L9.R=.Q\|.+.2J./.i4....i>.zd)h..7YFz.G.<....uZO.D.l4.........?...XO.gO..6{..j{....F...~.%q.)...,.s....]P.F...5.>.\...1..)Z.q>.........h....4...E..Z.F.z=..-.)...j_U.o...__..}..{..w.......}.l.}....Wo...Ke.....z...2.'.t1G...S.3.3.....T4)..G...6;[Dg.r.^....H!.:.f...8F1..\|.G9.....=.H.....}..{..,...' d.4#.....?/N.....FW.ao.......?.....y.(.z............^..._.)o.}..{..W..}no.>.....}...y..1uU9K.(Q......('T......c....$.g...8;..^qa.%."....E..j.d..(Y.\|...I4..6..q.L...F.G.+._..h.4..4...."J.+..l .r>..j5._Q.(JI/0v.7jeD....re.W"@..I.Q..(h.}..y\....qJ..t....<.......q.g..g.X.~...(.#..L....lPo1....Q..YC.>U.9.gJxN.}./.?.D..dmi.Mj....+].4..y.\|.L...Z.2[....-n.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 224
Category:	dropped
Size (bytes):	179
Entropy (8bit):	6.8340740871871635
Encrypted:	false
SSDEEP:	3:FttJmVr2a9GCyQmzVlCPZhDQBg1ncydKkqpyNTPkqkH+itc1w8ZY98oiVGMjc:XtoVyVCyQ8V+QW1RzqIdPkJ+ODWNoqG1
MD5:	E61F0B987E7FA04847E5C351DBE9D8DE
SHA1:	18562B0741E8484649FA64E78990CFC97EE7A39F
SHA-256:	016CF2A4A3FC33926FEED2F2EC5EDE7CC6E6B18392A10FAF599314C98A742263
SHA-512:	A4DF06B553DEBC39E5B5F1553FAB68F3A91E968AD997824461114CD8CBC7350597A415B0E563665A20A67AC9CDFA72555F7E505B56B7EC9B700466175A434C4C
Malicious:	false
Reputation:	low
Preview:	..........u.;..0.D.bm.?\|.&.)R'.H...-9...s..PGZ.v.^1l#.?~..,.r.<..b..u.............5n.x..3.6........N.Co.>..A..GK...\fE.Yy*..X[...yO@.K....2..L8..O..Z....y;.5L.d...w_........

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	4.732461163164896
Encrypted:	false
SSDEEP:	96:Qf/OU3Ni9W0UyKVkV3AnRP+TwVeYRxXobRt4CuVXxSozuIuJj5YQyHzLr:q/OF9W0UyKqVwn4wVeYRpobL4CuVBSo9
MD5:	E0C60341169BDF51CA0D658DFB51DA7C
SHA1:	0C92136E9D25306F2A3356EAAA499A86004ABED4
SHA-256:	61D6F2E3A46A68DDA5DD71BA05EB36BA0F7FC4FF84691BB169E77A707F6515F3
SHA-512:	7F2D447D1790DD479F6F94927E669D981485CF2ABD37B50C1B29131F6C05D2474B6541BFD7B9E5BCC61D8ED7085E78F3E4B033D10BACB2EF22F893E78E301F43
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="47px" height="9px" viewBox="0 0 47 9" xml:space="preserve">..<style type="text/css">....st0{fill:#008A00;}....st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#008A00;}....st3{fill:#0078D7;}....st4{fill:#094AB2;}....st5{fill-rule:evenodd;clip-rule:evenodd;fill:#094AB2;}....st6{fill:#DC3C00;}....st7{fill-rule:evenodd;clip-rule:evenodd;fill:#DC3C00;}....st8{fill:#107C10;}....st9{fill-rule:evenodd;clip-rule:evenodd;fill:#107C10;}....st10{fill:#D24726;}....st11{fill:#FFB800;}....st12{fill-rule:evenodd;clip-rule:evenodd;fill:#434856;}....st13{fill-rule:evenodd;clip-rule:evenodd;fill:#FFB800;}....st14{fill:#2A3282;}....st15{fill:#249DD1;}....st16{fill:#A0D5EB;}....st17{fill:#FFFFFF;}....st18{fill:#666666;}....st19{fill:#00ADF1;}....st20{fill:#00AFF0;}....st21{fill-r

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	220
Entropy (8bit):	4.985014409688824
Encrypted:	false
SSDEEP:	3:F+uMXDwKoB6/Q5i6IKBfbtRQ52dlKGgEKhY4LGRFOh55bsLyWrE0D7/YpHhJ9ZPO:F5MTgf5Z3BTtWaK5i4ycvAVx0lf9xPGn
MD5:	330A8E9C74137672E55805B776D73023
SHA1:	07AB02635654A9C6BAF75340CF21561BD40A202F
SHA-256:	E5C5BF79C77EDBD9EAE2F3997076633FC776F663153193A0CA7EBEED01CF98C3
SHA-512:	0C670909B9C9761CF495DB85E0E4F805D5C9F0822D9F11440477369E6F8BCEDB3B5542B4CED5C9D93F61F0C7F58A963FBB81D1E74ECFCD75B2FC28823B9D7A00
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-react-libs.min-vflMwqOnH.js
Preview:	define("metaserver/static/prod_assets_web_modules/classnames",["./common/index","./common/_commonjsHelpers"],(function(s,e){"use strict";return s.classNames114}));.//# sourceMappingURL=pkg-react-libs.min.js-vfltloBxh.map

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	689016
Entropy (8bit):	4.210696031972732
Encrypted:	false
SSDEEP:	6144:DnQWWDY3mr16XRxcpuEhjMPRKkC0d7xyF0FA9OgoUE0HUN4oe+:DBWU3xhDKkTshoj5
MD5:	3B72E939A304CE05F0CEAB4A0AC39DD9
SHA1:	B2CFD3CB1BD0EE53C795E040063D0F55F544D939
SHA-256:	CC58721894324D6F6F53B7FE4CB0D08F923AA75E52506C0A58D29E4390B7CEDD
SHA-512:	F4AF43BA51B76496C98A30F06D9903440C4957E18F82B09D2B9C706CAD5939446D8BAA4353FD0620A2F68CEA79878824CD2313594997F0F8403C13FF767E6112
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js
Preview:	!(function (e) {. function n(n) {. for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++). (i = o[s]),. Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]),. (a[i] = 0);. for (t in r) Object.prototype.hasOwnProperty.call(r, t) && (e[t] = r[t]);. for (d && d(n); c.length; ) c.shift()();. }. var t,. i = {},. a = { 22: 0 };. function o(n) {. if (i[n]) return i[n].exports;. var t = (i[n] = { i: n, l: !1, exports: {} });. return e[n].call(t.exports, t, t.exports, o), (t.l = !0), t.exports;. }. Function.prototype.bind \|\|. ((t = Array.prototype.slice),. (Function.prototype.bind = function (e) {. if ("function" != typeof this). throw new TypeError(. "Function.prototype.bind - what is trying to be bound is not callable". );. var n = t.call(arguments, 1),. i = n.length,. a = this,. o = function () {},. r = function () {. return (.

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 107931
Category:	downloaded
Size (bytes):	30294
Entropy (8bit):	7.992523534562122
Encrypted:	true
SSDEEP:	768:u9kjnqYT+xp+y8LLX0y48z/PVt7YOet2DA:SmnFmp3iky48jwOE2k
MD5:	2E6D581DB4112C6EDFAB785320E92757
SHA1:	99B473F0F8CEC2916EBA5AB54FC9F347584A99A2
SHA-256:	1967F572CFB11C180E59A5E552068534F618959B10AC48D1E2FCD2C3F035BE21
SHA-512:	2CB9C888137F036BEEFE6648CCE69F9BA123C08D43D355BFFE7C12C9AEE77B9E7DD10DF5D86D1E9FE4D3D0B50A2CC709E02E81302E0281AF64DA5F571390C77F
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/resetpasswordpackage_7Avr9AiKpLBw7ARSByHeZQ2.js?v=1
Preview:	...........{W..8.?..tr.i.xl.k.(.x&$..yd.Y.A...I.<.w.Op?..$...[..........R..]]......v.......G..t..b.X.wN8........7f\......7..5-...F..:..9F.....mw<.......0...}..N..v[k.N.`CV.t...ip.).((.h._.;....}.....2u.T.%....t......._T6...Z.R.>.......1M.~Z..U..ON.d.>..Ax..L.....E..9mn....$.......].w;.m...t.....Y.d./.R....\|m...N..G.5H...~+.=...S..7k..<..Ip...B.....a.j.^x....<.Q+1@6..Z3>.../.:.>....c..._.7.n.....]..\|.....(._.......n..w.:h...7...._....a...x..i.......L.....S....8....c>..C-yh.a.....M\|.i...A3...j.}......%{hz..}K;._.Gm......1....}?..ZS~. 2_. J.3..........(xb&\|.........b....7<.0..'J..T&..fV4{O....(v..u..o^.)qr?.Je...w.c.j.....w...i.M..z.$..o...7...r..,.w.....x..4n.X4..o.\..+...i.N=.a.Y....q3.9p?\|...yC......k-....C..f!.Z.:#u........e7\|;XZ....%{...v...1.Y._............6....4...\...@\..e.KXc,.=......^.5.l-.e5.0.N.b..z.V0.a.0.z1.Lv.[..?..yn.V..t.C.....F.(.M..Es&.aB.A;N+.eEa...s..!....h.Y.....Z.E6.-..W?.v,)\|T.......8.;4=.Xu9....tX.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21852)
Category:	downloaded
Size (bytes):	21908
Entropy (8bit):	5.243327766432676
Encrypted:	false
SSDEEP:	384:bVeWUghBIV0SWtqJ3HfFbVN8tsjRBh2zRQ1dpgi/BvUQvYZEdCOhJe1Krq+W0Uix:bVeWUghOVnYqlHfpVN8tsjRBh2zqdOif
MD5:	5BA5DBCDB5327B2D5CE79028FC0A0507
SHA1:	CC48C381EAFFAB4815DF8F7240EFBA38B63D5C27
SHA-256:	7B0676F15132B3978B57339A424710E3D61AB4998728BB3007307C94886F97D6
SHA-512:	A4F1293AD4B770DFD85A403E8F80B2149B3B1A3D45EC0882518DE3C4B66BC5B24B0FBEA25196A3B92CE7BEABDD1C3ACF8B6478F7C55FB673B77A3EF92FEF7BBF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-chips.min-vflW6Xbzb.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/motion",["exports","react","../../common/Transition","react-dom"],(function(t,e,n,r){"use strict";var o=(function(t){if(t&&t.__esModule)return t;var e=Object.create(null);return t&&Object.keys(t).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(t,n);Object.defineProperty(e,n,r.get?r:{enumerable:!0,get:function(){return t[n]}})}})),e.default=t,Object.freeze(e)})(e),i=t=>t&&t.scrollTop,l={enter:"cubic-bezier(0, 0.6, 0, 1)",leave:"cubic-bezier(1, 0, 1, 0.5)",transition:"cubic-bezier(0.66, 0, 0, 1)"},a=t=>{const e=t.filter(({property:t})=>"opacity"===t);return e.length>0?e[e.length-1].value:1},c=t=>{const e=[0,0];return t.filter(({property:t})=>"up"===t\|\|"down"===t\|\|"left"===t\|\|"right"===t).forEach(({property:t,value:n})=>{"up"===t?e[1]+=-1n:"down"===t?e[1]+=n:"left"===t?e[0]+=-1n:"right"===t&&(e[0]+=n)}),`${e[0]}px, ${e[1]}px`};t.Motion=({children:t,style:e,transitionIn:r,transitionOut:

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11866
Category:	downloaded
Size (bytes):	3788
Entropy (8bit):	7.948978552615409
Encrypted:	false
SSDEEP:	96:Xx8sCmBibiCkfKlVTAHS+4OWOCmkyfKib:B8snibXaYOtdiib
MD5:	4729C4788725E58BD054118223446E03
SHA1:	16105BA56B33FCDFB2CABEA8B1E5991440792645
SHA-256:	FE6D7E294CF2BFD40BF91CE4E10A1AD4D66D94DD321300456D6323C003F7F60C
SHA-512:	69B28AD96D059715CEAF345EDD6BEFC45F29504F796A1943785401B574C5613E85984499E38EF2E535B55EF30872432FFE2629144D3B3902E2CF581B25D69A47
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/9546d61e0af1829a5943.1niBeLXONVtz6eCwiOhEjyXETqjOWmtbnfYPS-qFGMQ.js.gz
Preview:	...........Zms.6..._a.Z.y.i)N.D2.I..e.sQ.6..xh...P C.N\.....$.f;.^f2...b..g.4......g./^.xyv.N_]......f...#no....tm..F..4...I4.K...R......#/U...t.0z.i.6....^.4..X5..R..5z6...s..X.......2c.."fR.....W...m..a.7I.....qyI....Bj...ft.;.)..EY.s.e.K7..u..;...$.3.......E.....")<<9\|j....?.11<.@O.C.w..0`..G..j..6....2?..Qk0-zw.imQ4wX....C.Cj.q..!.AJ.d.m(.u{......Z>Y.....+Z...1.Lq=.q..1....T.Zv...XM...$....ah2..!!K...%b./CN..B[B.M.R...Q..P.%..\| &............M%.nI...... %bp..0\|K=..f.....H.gm....m..H...D...n.v....2.6......j.......}y..."...........)[..ph..a....w....2."Np.e....kh..]G..Vg-................Sl.....G.....K._...Q.l1.!.DO./..^..kwC'R..\|s...~...p..U..O...wE.....]d.....'Q...Z..b..)M~M.@WB..!$..\..v.S.O.u../&....R`..j.......!.Ie..!.#.L......(SV>..=.N.9.<\..avt.........o....\...6D FOC..iz.a..3X.?u>ns.[..v.iDW{.....J%.........}..b...e.y..?........yD.x..A...0..f.(....v...1n....D4..z...!1.R^..-[..e.......`....h".2]m,b3.9.e.7.xf....[.I.].V.`....?..

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.305087436701054
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1645g/RVKYnA6Ag6n:MMHdVBMHgWdzR05IRTnXF6
MD5:	74BFB792D511D1943A06490787CC36ED
SHA1:	B945FB68E62CC3AA61295CBD45F965D6DAE96A40
SHA-256:	8FD0C6403C81E7D040A9EC832902DFD8757D59C3127A6E2D4DBB6F87599084FF
SHA-512:	FCB5EF0BB0B29A27E37C29C490902D2EC488E142B0422BFBAA519E8B69303B726B44AF128A0F1D2057F87BB02CCDF0FFAB4BDCC388C6E1A5BC2F282A32A2AC2B
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/O365SharedClusteredImage.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:7e32a226-501e-000c-4cf3-bb5dc9000000.Time:2023-07-21T16:51:43.3105391Z</Message></Error>

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 68093
Category:	downloaded
Size (bytes):	14745
Entropy (8bit):	7.986253470731183
Encrypted:	false
SSDEEP:	384:AvuCTUSErGZkPwqhtDIuL2NOJLHc8On4PVW:AvXTUSAP55IbMFGn4U
MD5:	1D09B2FD9DD2EE93998166C19DE4FB2E
SHA1:	EAB17995528AF7842C2D28FE75E79B2A77A8A623
SHA-256:	7277C0F9F5509D925CEE3611C257962F9FFA676B779946645DA828551909E425
SHA-512:	E3074ADB7893954EF60656B2BAFBE18806BE0A8579143C9EAD39EF1AF299DEE697815F99F6458D4ED0E34F341B2418AC19B50F164E6BE3B1D46ACAAFDB985479
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/52403d18eae03c7ba478.cST5QAZGfkuKpwKd-cXLWyE_ukg0vbK6XJVnkD66jdI.js.gz
Preview:	...........}.r.8...>...5.\|.c.p]./.3.%v..\Z.dN$.CRN4...5.....t.B.$H.N.}..#..[...Fw..................#...pp.....W.....o7.F'.E...=..'..A%'.O.1...?...f.l.......g`;....xb..D...\|...d...3.]..L..'.o.B.X..f.Mn;$&..x..VH<...K.....P.c;#.s.C.Z........l....MfN.....zq.......rpqyt>8<:..2....Nx=..k..t...N\|.F1~...\1.....w.....e...y....\|pzrvr..........r..w......1.......^C...O.O. ..@a.]...............O.....Q&].f.>..:NF..V..1.....gRX.~.\Zc.....".....[.Z.ghB.2#c.jo.d..6.2.?....?{....?v.r....rh...C.....'..0...6:.=.....>.iF{1..x...Q..p.~zu..3....f....t(..%.%.`.........u..k.0.d....=zs.}......i..4....l.......{G...I9.de...y'...u.R.?.>d.<\M.S..........G......W......A.o.#W..<:...b.3^. '....om..V,...At.[.c.q.{.~.......-..P......\|=....y.......#.......b..V.j......8......t.X...#.P..4,{..q......x.[a(.1z{..)(......L.;;..+...".D...L..../._.f..h.c....3a.......\..la.....=?.....\|{~../.@...m.Pu.[).o...~Pp,+.......T.......TC;..eq*ab9.pz~.g\|...!.H......pl7.v.~....$

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 136357
Category:	downloaded
Size (bytes):	32961
Entropy (8bit):	7.992655093569576
Encrypted:	true
SSDEEP:	768:0fj+FqQpwphF/4SLzY0tBNa0BY3UVvU3jHKQ:0fj+C/3tBLlUh
MD5:	B6010B0B5317C70DCD524245FAFD3077
SHA1:	3FBB0D1A97B785216A2B81FBC7C52EE8EE4B5E82
SHA-256:	77D429478BD82754C48F7CC34316EBA3FCEC4ABFBAB9C4B04385B41EC6FA6530
SHA-512:	59B1C7254ADDA704B9D9C8D3D0CDD011E77A70818257765B30A9CA4A167A1B0C17E7929E757C8E470C3EA3D5CB7EBE8CB78223D7F0234F2699FC501CF3DDF9CD
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/d7c49816088408423a50.cjIp7UHClzqwu3lMbpCuK9_cMgk8uoSvsL8FX5pOS4Y.js.gz
Preview:	...........k..Wv ......H".".R....ERb.JUEQ".b$......e&..V...;..n..3;a..g....q.'.......?.d....s.7.@..RwK..}?.=.{.........'.....>..@g.....\|r..qa.(....l..+......)=.l}.....n?t<.bk..g'._v...+.2.s4..........v..o{....a..W....5...r....G.....sw..-w.j............O..o..=..C.....[....W..Eyf..T...:.l...35...14.x....m.0([A.....,...\|j...s+.....+!LF9.5..:...Zt.2......yX.. ..Z#...'...EdO...{..,.5.......Y+O..3._..8.?.8.X+..l..<....i.5.O...=a.V....;.%..f..!_..SN..4=#..k8.]..z....z~f.CL.Co2.Nq.}..88.@/..a=.Nl......a.l(.).d.yV0.&..S./ ....&...8. ..p.Iy...ov.u>..........N..ay.`.{..ee....@..{...P.`......./..{...;...t...{.......:.~.......=.S...>.......>.Nys.:...n...].n}t..../4jl....l{g.U..:8.w.............c..~p........<8.C.V.\|........;jo.!....Z.......;w..w..ow .....=..&x...].....u.C...%6O,.FZ~t.......w.........G...`..Gq.G..;Zy...!.......,.1......k..?.KP....;q.....}h...An[...]..#(...Te...Js.8.8...9......X(..@......@.+M..8nn..i...._Qn[.....`8..].

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://account.live.com/Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5435
Entropy (8bit):	4.729886758075337
Encrypted:	false
SSDEEP:	96:Qf/Or7Vir8P8KJfGVfd+nPkRCrthXXQJ/T6SXuVX3ns9ozR0z5tsQyiPr:q/Okr8P8KBGVUnsCrthHQJb6SXuVnn8v
MD5:	5FEAA482D83C2A69D012F9BFF660D373
SHA1:	EE586D2B46E1A0110C581D507033480A40704606
SHA-256:	356F7D1241F92C9DE9C9CFD0BEBB6C10D1B38508A3F37CEBC26329C656BAD19F
SHA-512:	BC07C9DB3C3494A46E4246CAB6EBE39215F01AE5329A333C2872052992DC1E23765C1826631113F5AC6FC932ED7F17DC5030AB78457D2BFF3E0AA0F7472A4EB2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="47px" height="9px" viewBox="0 0 47 9" xml:space="preserve">..<style type="text/css">....st0{fill:#008A00;}....st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#008A00;}....st3{fill:#0078D7;}....st4{fill:#094AB2;}....st5{fill-rule:evenodd;clip-rule:evenodd;fill:#094AB2;}....st6{fill:#DC3C00;}....st7{fill-rule:evenodd;clip-rule:evenodd;fill:#DC3C00;}....st8{fill:#107C10;}....st9{fill-rule:evenodd;clip-rule:evenodd;fill:#107C10;}....st10{fill:#D24726;}....st11{fill:#FFB800;}....st12{fill-rule:evenodd;clip-rule:evenodd;fill:#434856;}....st13{fill-rule:evenodd;clip-rule:evenodd;fill:#FFB800;}....st14{fill:#2A3282;}....st15{fill:#249DD1;}....st16{fill:#A0D5EB;}....st17{fill:#FFFFFF;}....st18{fill:#666666;}....st19{fill:#00ADF1;}....st20{fill:#00AFF0;}....st21{fill-r

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2721
Category:	downloaded
Size (bytes):	1054
Entropy (8bit):	7.822083670877693
Encrypted:	false
SSDEEP:	24:Xuy9ZvRYhJk3EgrdcbSnjELNm7AKskt2WbB+Z3cUeYzFyV:XuopYfk5cTL0ND+Z3k8yV
MD5:	DDFF31CDD2F0FD498DA6583D1E2BD201
SHA1:	5A5FB3B0FA35444B8201A111C941FAFD1465CCF2
SHA-256:	922145E5575A4B99D4A3741D1FC130CA04B7D899723DA404B72E11B465A3DE3C
SHA-512:	BBB37502D3718CBFA86E4ACD063FE2C767A29FB8969EA541AF96C9C2B4266E28AFB369C17EF2D2EACB5B579B2BAEEC242A093950B701167F34250B4EC9C9B590
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1
Preview:	...........V.n.8.}.W..B!Q.q..-.A7-.."..[P,hil..I.......w(.\|I.{..K..g..C..+..m.e..k.(..Z.~.;.+g.n.H.6K....5.p......mnh..MW.....P/..A..B....\|0....e.:.....A<...fP. ..:....j..$...(.O.j._ _....]...U-.:&.,..(..=.V.6..Z&@.s.B....w.k0.@..V:.T....V..\|Qb.`.K..q.4..#.%...%.6.U(.<.4V.Z.....!...Y......H..J..n.)Z.....Q#....@L..]f...3nD.S.....3dh...Q..VCx^.AF8......6..$...=e`.\|._.dl_..$.1......W.TPw...h\....=.n._+.i.X..^.].NT....+v....`g..$.p..<...m......".%.cZt.............W!.TY.!.....lvV..%..1....@....Oa....[...Z. .$4.>..=nQ3UW..M.W.R..m:.=...lFJ,..66u.B.@5e.K....A..F...........V.s....p'...1.>plKP?..{T.@..).^...O%....FD...(7......y...s.>..~.}.i.p........>N.*H8..q/.c....}:...j..Fu:..]i...#SL.c....U..S.n.9.QBe...W]A.a..a....].4..]ja....].fT\.-...e}....i...23."#^.8...Ib..\|..U@~.aE...>0......E..9.{..\.\..H]....m.j.$JL....r\h....X.....s.D.......<.$....8.;..^c.8....X.`.X5.O.......y.{]Ud2a.=.....!..r..2xn.....l...$.0...ug......W...?.r9.....O...H..

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.285596332496302
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV15AcHFGRKYmLQg6n:MMHdVBMHgWdzR055A0FGRd06
MD5:	849196FA1F826E6ABD59CDD275121EF6
SHA1:	922C230877217C94111B06544CEFDE8C1C7122D3
SHA-256:	27E88DB2E078607FCD5F1C79BB2C8F1501CF22B33D5FE1C7AD45F52410764B09
SHA-512:	24BF13BC596D683DF8CD43A7218641310E130DF7285A74A7CF08B748B464C7867C20EB02A572B9E9524768785FD048BD5EBA0E3640C1817394E87C543A6CE98E
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/header_wizard_hl_mos.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:11431a03-901e-0013-48f3-bbeecd000000.Time:2023-07-21T16:51:44.2339964Z</Message></Error>

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13541)
Category:	downloaded
Size (bytes):	13610
Entropy (8bit):	5.211745825915507
Encrypted:	false
SSDEEP:	384:8oyuyXfNSI2I8HYYs0fZh9cOge+/havNOmx2OZ2UgyqJcmiyXh:8XuyVB/AZhzKyOfUxih
MD5:	AB78A0CD23BE07AE2C05FB06045E167E
SHA1:	7546B2B5FB4388107D705827D20B46570EE7062A
SHA-256:	8F25A93D1AB3B459D9BC3C40FD991AFE4BD7A5D92ECD8608EA927AB306F6BDFF
SHA-512:	4F978863734A1B63F55ADD9D2882565EF0F57619E0C3448CB3FE707B31ADE7E487A6E2E85741E5E04E4DAA7B11718129164A193DC3F9A0CA825EEB580CD87A94
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-folder-overview-common.min-vflq3igzS.js
Preview:	define("metaserver/static/js/clean/open_in_mobile_app",["require","exports","tslib","react","@dropbox/dig-components/typography","metaserver/static/js/clean/clipboard_v3","metaserver/static/js/core/i18n","metaserver/static/js/clean/analytics","metaserver/static/js/core/browser","metaserver/static/js/core/browser_detection","metaserver/static/js/core/assert","typescript/component_libraries/spectrum-sharing/src/utils/sharing_constants"],(function(e,t,r,i,n,s,a,o,c,u,l,d){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.cleanup=t.open_android_intent=t.open_ios=t.open_on_click=t.registerLoggingHandlers=t.CopyUrlLabelText=void 0,i=r.__importDefault(i),o=r.__importStar(o),c=r.__importStar(c),u=r.__importStar(u);function m(){return u.iOS&&(window.location.pathname.startsWith("/s/")\|\|window.location.pathname.startsWith("/sh/")\|\|window.location.pathname.startsWith("/scl/"))}t.CopyUrlLabelText=e=>m()?i.default.createElement(n.Text,Object.assign({color:"faint",tagName:"div"},e),a.i

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 224102
Category:	downloaded
Size (bytes):	50463
Entropy (8bit):	7.995354290010407
Encrypted:	true
SSDEEP:	1536:NUfC51Km7anQ30cPPL6PHxweoSTBlCOGlS3:NP5junQ30+L6PH6eoIBX
MD5:	8F70798D752A7BEA2934A21A7D86D99C
SHA1:	84E38B336983F34E36FC7DB662EFD8852137BE2E
SHA-256:	1409A70361B790A67521A1191935A75D42642EB6D1F571F21C637F39AE292210
SHA-512:	0E3C44122CAE371EE384B63BC8B02DC0693F48ED1E0581B8D2085E2A20952287EB082B97854108DA83ED64C0261CDC5EAF0042A116B6533229E75D3323F4E5F6
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/4ba0049880d2af404923.9CRyHZrHq1b9LsB2fiT0_y-o9kmEIIvVJy4qkE3xjW0.js.gz
Preview:	...........Ys.X. .._A.=..N.)j..X9J-)UjK-.U....qI...L..R...7.~i....3^f&.1..w.#.......K...~l...s..p.\p.....R.p.{.{.9...............M...q..}.....9../g.Z..t.ggz..3...1._...k9L<..o`]X^+./\3......._..K;....X.[..z}A?7....F{.B.s.....rwp..k.5..m......o.._\.`.....k.......zm.%..v.^1\|..\|y.b...E......xv......R................X.....Y......\2....Xm.k....4`A.4..z....8.T.....a....6..>.vS..Md.C.Z.....F.Ka9..a...j.S..v`../_..].m......&a.X.5.5Xek.`o.X..`0}......nm......{......J.....z.5..B7.{b^.3...Y...f..,...]...........C.g.6.[.#..`...BA....,<....B......}..+...S....a...qD...r.R.Wk...H...M6..M...........b.....ak....=\Qy3.^...?..O....l.\|5...J....X-nO.......-4.......~.n.....`.\|a.k........t.6....7...\|e.v.......B.]........U.qC.k..w..8k.H$......i..64..u....r. .7{..w.U..j..Vr..7.......k..j.E.p...}.xG..........{....U..0_q..(...I....5..............-...f.....(Pb..'.@.J~D.*.y=...f..xYyT.#.,......u.q...5..aC.cn......f.......}.Z..........14.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65399)
Category:	downloaded
Size (bytes):	93146
Entropy (8bit):	5.265820615168494
Encrypted:	false
SSDEEP:	1536:ElQF9RJBsvCipiGzxaUCZaq0s6DPINAx9DmLhgfYsTDTkVRWd1M4tgUVA06fu:ECRJDNizWRF4XYfu
MD5:	2C84DDD7EB49D7F61BE23D6FC145887A
SHA1:	38A20CC871F34D86652F7C0C98C9BA6F8DB780A0
SHA-256:	2589FE90B2849F35F294CB20BF433135E44CE0CA8CE98D8E4F0CA7B62FA50191
SHA-512:	8C60683163719094F96A7F363C18D823E83D898C52F7DBA12B34FF5390A0D98057EF31E7392A174F15F435BC1B1C8CF56E0CF322B521C665AAC6BE206E17D13E
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/js/jquery/jquery-1_10_2_min.js
Preview:	/! jQuery v1.10.2 with a fix integrated from v1.12.2, 3.4.0, and 3.5.0 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license /.(function(n,t){function ci(n){var t=n.length,r=i.type(n);return i.isWindow(n)?!1:1===n.nodeType&&t?!0:"array"===r\|\|"function"!==r&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in n)}function ue(n){var t=pi[n]={};return i.each(n.match(s)\|\|[],function(n,i){t[i]=!0}),t}function ou(n,r,u,f){if(i.acceptData(n)){var h,o,c=i.expando,l=n.nodeType,s=l?i.cache:n,e=l?n[c]:n[c]&&c;if(e&&s[e]&&(f\|\|s[e].data)\|\|u!==t\|\|"string"!=typeof r)return e\|\|(e=l?n[c]=b.pop()\|\|i.guid++:c),s[e]\|\|(s[e]=l?{}:{toJSON:i.noop}),("object"==typeof r\|\|"function"==typeof r)&&(f?s[e]=i.extend(s[e],r):s[e].data=i.extend(s[e].data,r)),o=s[e],f\|\|(o.data\|\|(o.data={}),o=o.data),u!==t&&(o[i.camelCase(r)]=u),"string"==typeof r?(h=o[r],null==h&&(h=o[i.camelCase(r)])):h=o,h}}function su(n,t,r){if(i.acceptData(n)){var e,o,s=n.nodeType,u=s?i.cache:n,f=s?n[i.expando]:i.expando;if(u[f]){if(t&&(e=r?u[f]:u[f].d

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	233
Entropy (8bit):	4.593100023907812
Encrypted:	false
SSDEEP:	6:hxuJL/UGKLB9+LgKEUO7BQ47j3Nt6X4QL:hYYuL3b0B56oQL
MD5:	9DA3FC4713DEE47BAC5E53A98E1B87F5
SHA1:	0564AF0CCB9AA9191E7BA80F362F64FF303E77BD
SHA-256:	57F4A9957CFB84388E1B5DA8B7E1610198DF9AA4D578301885A34300A6CD209C
SHA-512:	779559E1237F3F2713DE1E145290C2100869223D8ECD92CE845B47DC9CAB50A0D7DF1C2DEC02A137AFC5342C9C8052FC51DFBA058D1ACC5387887A38EDAA76D8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/cloud_docs/thirdpartycookie/detect.html
Preview:	<!DOCTYPE html>.<html>. <head></head>. <body>. <script>. document.cookie="thirdparty=yes; Max-Age=3600; SameSite=None; Secure";. document.location="post.html";. </script>. </body>.</html>.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 68806
Category:	downloaded
Size (bytes):	22002
Entropy (8bit):	7.989289593563935
Encrypted:	false
SSDEEP:	384:af8SFSBy5H1KOpRH7Jynd9vAWPZHqD+iJzfOtA8iEqtHmxeiWsTBerlCRivE1rai:alSByKGbynPvFQvGA1riclZ81eLwtgJs
MD5:	C6CB1CFB737879950133A6559E6FACF3
SHA1:	5C549B128EC6DE316A09EB7006AE44728AD36F51
SHA-256:	C8F47E63365743745C9C39E2AF1889A7FC59E88AD256EA003CB0B8B4C1DEE8E0
SHA-512:	75CACBABC3AFFB346672F2D66B1A24DE0C2235B850D1C3F3DC7F2E8E33E9E6F564CCC0BAB2CFAF5FD3CEBA761F9B1BD8EC99267BD26181C5C14F0482A4FD4626
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/e03046a2b8dc7c103bce.SZIL9KJIbSE8UBobNlCwsjQoiX0ekEuZ6bvWx6u226s.js.gz
Preview:	............z.8.(._OA...1-....G..}....r{.HH.".H...~.........@..9Iw.:3.uL..B.P(T.R.?z..>6F....i..b@.......W?.G#..//w.Fc..g..;}a/X4....o.{.N&...=.....9c@.".c..>.?.?\.#7tb....l........5'.}..\|.....2p./...L..x....9I.e./`...0$O...G#._...g...`.K..h....i...[....=..W..6...:.i.6....N..0...5...=.8..6.s.p.s.........n...sn=.^...+{...2I.@7ks......m/..4n#..\|.....\b.....E....{....^..2.0..oA.A.1.x.X...-.yqc.......m8...6.....u.{..8...D[...[..L..,}..2'...U.........*tY.K.....+s./...#...l....s>+.n<.......Kf.vb.^.Xl.3R.Z.(..a@.r...1?f.,Pf..r..!._,....-.t..>[l...7.>o%...t.N.n.....3...F<...{.`.y.k2..{ .A....u....5.$\`Sm...ZI.......U/....7.r....2\.l....R...x.E....^l..W`.B5..z........{q..@..'.saG. r.Z.ne..1..k.s/Q.c....M}f....r...T.W.Z.)........$.V.%..`...[..d$E......)?chG..D!j..t...Nw..E-.o...k!.hn..,o.0z.0.#3B.SU..b.6.v......7e.x.&..+LS.$....D..fxo%w.}.e>K...+...Ys..f..mB........`....P..EBo.P.@.C.v..[.c..{K....i.., .o.B..$!F.Y.X..%.H..fM...=....\..=a....Q...6!.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (36426), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	234809
Entropy (8bit):	5.343810878054669
Encrypted:	false
SSDEEP:	3072:iGS+R33v/5tAZofihPACRAoPdr+XdPFM1ys9goXgGN+xK:iGS835tAZofuACRAoPSFM1ysbIg
MD5:	265288CEB173493CA2285EEAF658B310
SHA1:	FD50F76AB9BE5A72866ED23B3B939230DD08D481
SHA-256:	8910C606836BFAAB3D35DC0EBCF8536663FE9DAA973DF771F92A2A2675E3A678
SHA-512:	09D5FF9AA28F1F2B607D44CABE6EABE1FE2284E44F2DB3763B5E32483AD0F1F49728A5733475EAB2CF80C8133C5AE26AF4F8DCCBE1F318C2A816A4591F37AB60
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/privacy_consent.bundle-vflJlKIzr.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; define((function(){return function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.c

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4046)
Category:	downloaded
Size (bytes):	4107
Entropy (8bit):	5.4948887668134185
Encrypted:	false
SSDEEP:	96:XlZoGUAd8EGUKlZ2lZDGUrLlZ3blZt81I8ZXI40:XlZoGUAd8EGUKlZ2lZDGUflZ3blZt8ho
MD5:	E8019D809E378C844D1C819DA34F7C5D
SHA1:	0C1800387B3A1FEE1A4ECA8BFF5979E76E16CF98
SHA-256:	47649E41D013A8B6BB841D9A34CEE6FF1FE5E85F85254A282FCDDE768AC66713
SHA-512:	629B83926748936DCCDEC93E025F7DC7D9297EBC9F1E843E438684386BB27E559F8E6E3C144A78C741022509C559915D55676E60F76385E4F2DF8B900A2019FF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-form-icons.min-vfl6AGdgJ.js
Preview:	define("spectrum/icon_arrow/bundle",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.ICONS=void 0,t.ICONS=JSON.parse('\n {"right-small":{"attrs":{"width":"12","height":"12","viewBox":"0 0 12 12"},"dangerouslySetInnerIconHtml":"<path d=\\"M6.243 5.998L4.12 3.878l.707-.708 2.829 2.828-.354.354-2.475 2.475-.707-.707 2.122-2.122z\\" fill=\\"#637282\\" fill-rule=\\"evenodd\\"></path>"},"right":{"attrs":{"width":"24","height":"24","viewBox":"0 0 24 24"},"dangerouslySetInnerIconHtml":"<path d=\\"M10.414 7.05l4.95 4.95-4.95 4.95L9 15.534 12.536 12 9 8.464z\\" fill=\\"#637282\\" fill-rule=\\"evenodd\\"></path>"}}\n ')})),define("spectrum/icon_arrow/index",["require","exports","tslib","react","spectrum/icon_templates/stateless/index","spectrum/svg_icon_bundle/index","spectrum/icon_arrow/bundle"],(function(e,t,n,r,o,l,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.IconArrow=t.ICONS=void 0,r=n.__importStar(r),Object.define

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.291086436665339
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1CXTUq/I/U64VKY11WAg6n:MMHdVBMHgWdzR05CXT6/I11WF6
MD5:	3BC7AC91A190B78FCDF25D4E7E973E3F
SHA1:	BF1754958A3D85B7DBB07D8D44A2ECE46554E41F
SHA-256:	401AC9D23AD0E793F5FAC24F50B14AB47BD4889B4CD8706EA88962974460693B
SHA-512:	7138D4D8836CC933DECF8B1D93BCA1C861DB9A8AF9D21BCB78D7A4279B72F494BED1DB6A31EB3D638B23FC10A74F02C43C70060083A6C5D6C43F0C5FBA6410AA
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Images/transparent.gif
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:8e45b761-201e-0016-13f3-bb3c16000000.Time:2023-07-21T16:51:43.2531271Z</Message></Error>

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17195)
Category:	downloaded
Size (bytes):	579686
Entropy (8bit):	5.462113059271342
Encrypted:	false
SSDEEP:	6144:ty1f03G9q1XFtVTrSvURy8L1ExMc/9nZhu8hYuBa91JLTZARk6y:I1f03G9qtKS1JTZ4A
MD5:	5C0E9BC07D66220319D1CD38CB7B7E5E
SHA1:	09CF537C4E61D20F51A638DA3AA076E0883ECC56
SHA-256:	53550E80BB799974BE33EA42A663D61A5C8CFEAC97E5F0C959719D50FC76A5E6
SHA-512:	D873483B971A18EAD45E460FA1B6827B02247491FD07827F653BA1D94EF0A9ACD03329D48BDA29406318604906F637406537ACA9F2692275AB22698E95B3CBCF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-account_connected_apps.min-vflXA6bwH.js
Preview:	define("js/pap-events/cloud_docs/create_google_shortcut",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Create_GoogleShortcut=void 0,t.PAP_Create_GoogleShortcut=function(e){return{class:"cloud_docs",action:"create",object:"google_shortcut",properties:e}}})),define("js/pap-events/cloud_docs/dismiss_cloud_docs_manual_conversion_modal",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Dismiss_CloudDocsManualConversionModal=void 0,t.PAP_Dismiss_CloudDocsManualConversionModal=function(e){return{class:"cloud_docs",action:"dismiss",object:"cloud_docs_manual_conversion_modal",properties:e}}})),define("js/pap-events/cloud_docs/dismiss_configure_gdd_migration_modal",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Dismiss_ConfigureGddMigrationModal=void 0,t.PAP_Dismiss_ConfigureGddMigrationModal=function(e){return{class:"cloud_do

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 78311
Category:	downloaded
Size (bytes):	27856
Entropy (8bit):	7.990524062202554
Encrypted:	true
SSDEEP:	768:hYhFL7zwPKJgYTcPCecee9xxmhoxDWz4rKJ:wFLfwCJriCce9xx8MrKJ
MD5:	DE1AEF9E0E99480752089C74A3FD6723
SHA1:	4A1E6F0E504348B6B6B2DE226C7EB90B4A4DD92D
SHA-256:	7B8C94D5006B6CBFB45C60C39A4F383F8FE9D057D0F3BA8432A7C1E897732D76
SHA-512:	31E7DF1448FC7333E5AFBA47B1D78AC0577AA3B046DF7CD3E7F825C8BB5C9588A3A448BB4102C2AAB420377953019F562B98CBD9AFB8B301737B0A60F31D9D06
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/knockout_old_GJ62c6D9R5HuKFdkoO8XYw2.js?v=1
Preview:	...........kW.H.6..k.?(...R.....VZ...Ta..\....-/.+.L0...g?;".....y.S.c..P\w.....ck....\\.._:g...7'.G.{............<}...e.P8..(w.o..y.L'.t..&.t>...E^8c.w>.GNw>.;.~.....y.(..X.GI>..9.57...\|q.....N..`B_...==...d.....O2nmD?&E.,'Y>w........i1...y..[.XR..p.y.....N..G.\..j..nd..W....2j.....i..).8[...t2...A..a............&=..m\p?(...!d.t.X.,..-.8.9S.>wx......B1.wz.x.%.....y....B....ir...3...L8y...f..{....<p.....i:..../.m\|...3.8...{....`..y..\,..\|.\.. `.q...,....F>.A:.....r.B....www.tF...<....ww<X....?.1...~.X..^........)O.=m..(.6 ..'........x...v2..;39.i....lc......;@. +..i:..%.4]b.xt\|....._..\|.".i.c.q...>v.vy1..r......F._...B.}\|. ..].4~.R8.i6..o..-.:.}.d.4.,.TX...I`....E>.3:..w...yT.X.._-..{.W(...0.r>..s.&..q.@.(A..tDG.SK..l....#q.-l2..7!..`Vm.zU.qn.\..uM+..3.c..v...P.wY.i@..9v..^].~p~.\8...~;9:>r.........7g....q~..P/a.w.8...;...?.._\8g......'.Tv.........K..0.szB.J.^.9.P5ur\|........P.....?......Z}E..0.?9.pzp..p.....pD.;{w...9.t....e@=

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 111100
Category:	downloaded
Size (bytes):	20105
Entropy (8bit):	7.980108733727221
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG4UbcFII2IydQcrQl4V5Cxt:9CGEiL/w7R81UgFIjicru4Vsxt
MD5:	E759D76139117DE00214DA95C3B6C0ED
SHA1:	C11ACF355368525D321B781F06ECB3B4DD3F8980
SHA-256:	636E68CF84FBB20CB7DA5B5F3CDDAD43946C81A3899ACDE89C77F14769781834
SHA-512:	EA34A4166814D39338A1360CBBB9520966D669963A28C839E4AA4B874A4D6247A1B1E7591F3099C5CBB92E01B629F9E71481D468150D78A02D897CEB0AF8AE26
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	159373
Entropy (8bit):	5.226444625327631
Encrypted:	false
SSDEEP:	1536:WgFAhcPyCrbqhRtFV1l0UBVHyfN+e/KOoF07JWwhmbkxXnFRGvTWlGWLwD3CyY8T:W0SCUbyfMe/KOwNDgxVRGvTgGWCTT
MD5:	B4CD7CF90D9F0EE2D9D5504FEF529244
SHA1:	7EDE840F4CBD9FACB3AD35B552E040FB367DB70C
SHA-256:	41A8EB2356079E81D6A1166D5872E9F4BDF6BAE18699A0A552510CA518FC30B8
SHA-512:	7E8C1CE637B0B484B4BABDD7BC7C61A277306D94F837C92EAAA027248ADDE3E5612113D1D0B4BEEC0D807B6F2F9055E087E486B018F4F8CF45C296788534505C
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/jsc/angularlib.js
Preview:	/!. AngularJS v1.3.15. (c) 2010-2014 Google, Inc. http://angularjs.org. License: MIT./.(function(n,t,i){'use strict';;function v(n){return function(){for(var i=arguments[0],u,t,r="["+(n?n+":":"")+i+"] http://errors.angularjs.org/1.3.15/"+(n?n+"/":"")+i,i=1;i<arguments.length;i++)r=r+(1==i?"?":"&")+"p"+(i-1)+"=",u=encodeURIComponent,t=arguments[i],t="function"==typeof t?t.toString().replace(/ \{[\s\S]*$/,""):"undefined"==typeof t?"undefined":"string"!=typeof t?JSON.stringify(t):t,r+=u(t);return Error(r)}}function wr(n){if(null==n\|\|vr(n))return!1;var t=n.length;return n.nodeType===at&&t?!0:l(n)\|\|s(n)\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in n}function r(n,t,i){var u,f,e;if(n)if(o(n))for(u in n)"prototype"==u\|\|"length"==u\|\|"name"==u\|\|n.hasOwnProperty&&!n.hasOwnProperty(u)\|\|t.call(i,n[u],u,n);else if(s(n)\|\|wr(n))for(e="object"!=typeof n,u=0,f=n.length;u<f;u++)(e\|\|u in n)&&t.call(i,n[u],u,n);else if(n.forEach&&n.forEach!==r)n.forEach(t,i,n);else for(u in n)n.hasOwnProperty(u)&&t.call(i,n[u

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1500327
Category:	downloaded
Size (bytes):	204641
Entropy (8bit):	7.997990438642493
Encrypted:	true
SSDEEP:	6144:ZwcYtuQK17Z4IyNbBoXbZ15Y+0wkH0z2Eb:ZwxfK17Z4IykXbZj0/rc
MD5:	0B34782F75D917E2934705A63663662F
SHA1:	B1AA3DE255CEF98166CB52EE38D2C67543EE0D7C
SHA-256:	BFBC3016510A8BC0CE1CA807EBC41CE264FA64E29D0FDE8D0206BA827C2A9299
SHA-512:	CA9F2CCF4E790F94C47EFBF91854C8B643CC8CAAE85B671B6F7DEC6468B89E513E799D4AAFA01C36CB4A3A52FAA5A925336E689F31F04296C16DE77A0F93B396
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_bundle.1885980d0c2e444b4c260d20339401ec.6JKOhZEZLVUo0awj9vBTCyS8J99CxnWy1B_2dSb-wc0.css.gz
Preview:	...........k..(..B...>.#.P.[..c........7fg....D..D-I..jE.....n...M<. .P.....$.....D.SQ...?..6.m....z......O.<Y&..K.........j0........ 8\..`.4.\|......,.%y...Z...WVR.......uPd.t7`H<<.s....z<A-_P..%./.M.....M...Sz\|[.;#.q1.}v.....>..c2@?..'...F..(.iv..!.#.$.,.....2-......O.r..Ci8Q...1/.s..I...@....j..4..4.`Y..,?.G..............,.T.H.'..W.i.j..K..._._.]yX....u=..B.Mv.=..^....:.....@p..*;..s"V=^./..L..^@2..2)J..9.....U...T.x.>f.\|..^.t.K.t.09..K....e.v..4G.7C.<.C,7.,.e..x...I8..d..F..._...[r..7.....I.79.....;E.O.....am#...>.2....N..h.%..x.-&...N.9.r.".#.58.^.sT .'.,....C......[,..o.[S..J.<....E..0...f..u.K0...,.f.r....!.....HL..M.9............B.).pyh..!..pc"5Q....+D.M...F..+..V,.k._....L......#......N.k@).B#.m.&y.#+KY..: d.dE.u.:. ._KY.=..e....c.y.u=....O..B:....5..y....d0:ge.tv3I.O._Wx.#.r..b.y..:.c.]...]...wg..py.6W4.g.....a4..u..-.H.'.s...S..U.\|......QL....>Fk0.I....k.."/@.?/...G...`..1..#.....8.....$..T...N.....J.....I.4...\'

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66
Category:	downloaded
Size (bytes):	43308
Entropy (8bit):	7.995084572292543
Encrypted:	true
SSDEEP:	768:Y6isHlLX1zBleTdZ0MS1wQ1vBIG2z1oCA2/Ovub/uOe:YKlr1zBleTdZJYN5INz1oCdGmbK
MD5:	93B6F18EC99BCB7C3FA7EA570A75E240
SHA1:	60B9E3062FE532CBC18B897FAC542C56A03544C7
SHA-256:	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
SHA-512:	AC1A9398B74EB75AC4D52B9A9054A1ADD5A836F2572B99307851A0BB6D93288A13199E06E5DF4F1391209403BF775C9235A679BD081CA7F62B7752ED0FA691C6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2
Preview:	wOF2.......,...............B.......................d.......`..\....a..... ..R.....6.$..x..~.. .....\|..5[r.......bJU..T...^.Ui5.$..c.OI...(...V.%......... ........"..]..$m+.X..........'..p..".Y...q..f.......B[........tjS.6..ZF.V.'8..]L.;f.....p...H.JtYQ.r.......U..v.F.....M..L.Js... ....j)o3/...L.r...%....('......O......7.a..&..z.!/.w.%.....p.P.o..#.....$..~.&r...=.a;.K......RE.....U..F..M..ARd.c.:........Ji..z.X].&..6..2Y.dM..6...8`I....T..BqPc.W.].......q......lG\.....{.j..\|.Ab.s.C...q...w.9...j`. F.a4b..o..?:......~.........Al;...~n=.(.=b.cQlc...+..V.2..J..........wx.Y.q.UxQF....JQ.{...D"PA...Dx...^........].!.......{'.#..I.P...R........p....$K.%Y..!.n..,d..sO...(O@.R...q.(...t:.T....){p1w..Pc..V(._... t\|.....rm....ed%2....D"O"OrM.\....z+.=U..QL.qK...V....Ckw($..........mH..0...v......H=.Y.\|.5.~.3......b.g..X..M.R..Q...UZ.b.lV..-.$#Q..]?1[....O.:.&74.]l...H.W.n.l.?..-.K.r......Z.W..<..HG.c...N...2..V.;..a.....`.T..q.`#...?r...T.Ak....y.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 152931
Category:	downloaded
Size (bytes):	42446
Entropy (8bit):	7.992984629105663
Encrypted:	true
SSDEEP:	768:labitzxClOxR5A0k6v51Wpfi0X6cgp+27ofR81m2tZq/a5TsduODcnQ8QBZq3hQ:lK2zxCM1kaWpaM52Efqea5QduODcnQL7
MD5:	E01BA78B4DA3F240439DF1E93AB7BF83
SHA1:	D849A912BC05C8B910748AC118B9D1472F79BCFB
SHA-256:	F4C030B32C944804FC312CBC40984F68957E92D19E57EC289535FC0E764675F9
SHA-512:	7397D1B1EF8910ACFC78A18D7624DEE15FC770C50D1D307CBCEBBC7884B77D793C8CE1FD0677E0525DDB74AE6736C173B4DE5B09A1A03DC633E9C33A353B1A0B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/b11c258f8eee56d7cb5e.Hoi7ynA2p4z5-2Jcc2BP05ryA7I-X2lX9aG6h07S0OA.js.gz
Preview:	............v.F. ...p.U.-..rN.(.R.t..L.$.]e]--....@..@......}.u.......w......Nw.UN1.s..S.....(..]\\|:.}....>....b.../?.\\...xx8;.z.Y1v..i8e..%4b...?fi.0.c.d.."..(.%,&q..JV..,....]D.....Y8......v....m..w._.\|....a.g....O..../lX."6.....:(...w..X.9.f.s..M..X.}k...^.I8d..r8>..+...Y.1..'....h\/.&,.U.B.r._.c...&......&.. u..x..!.............W.=?.._.C.w...'.3Lb..E..nQ...Q.S.Kg..8h...e.\|..A?....]/..........{9+gy..../.`./a.[0M.7.I...{p.n......m.+.x...O.....h.A.$..[Ysg...<.',.........=(<..Y.\|.....T<.&.Y..O....]...U9..p....w.\|..sh.<.js..dc.>.M...;6..]....]m_Xo.&.I...{..}a._...G.^&l......wp#...ei.....<.............,K.g..f.=._..4.\.........C.M....p..C.....9..{+.<...$..F.7.s..kDZ..jt..8.m..5c.....N...1,Y.-hz}..[z..7T..n.(.'..l....ir.'..f.........-..-Y.Q.&......6gx..I.5..6......Pnll.k.`....6{......\|(....J'.......QUK1vS.........U/..V..........D.a.r.'....w~v.=.^Q.y..-K..L...Gp......?."1P..U..F...,...''..NR....~qe.:.u..dAH.>+...!..........H..rX.b. (...

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17165)
Category:	downloaded
Size (bytes):	17221
Entropy (8bit):	5.218316122719719
Encrypted:	false
SSDEEP:	384:0VAhW46bRfZKvVcQTyOsLRLFMyO2IfKK9qST8UgS:0VNNflQTyOsLpFMD9qSaS
MD5:	70B48073357AABDDD0246F1D6B50E537
SHA1:	ADCCD76DAB8A727E613AF7647373D700CCA4B858
SHA-256:	EDE93D16124EF6718056564A14B2D4D408E335F26AEAB44C0C37C770F15053CC
SHA-512:	72BE4DBAF858B65979DB5DD11B1DFD5FB51E084E978E0C917B9A8BB64505E8DF198C5B4EB1C25F67320E8778F0F91E49223C6D7ED86A97D888F2CCE4DEE41261
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-telemetry.min-vflcLSAcz.js
Preview:	define("metaserver/static/js/logging/compression",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getBestCompressionCodec=t.IdentityCodec=void 0;class n{inflate(e){return e}deflate(e){return e}}t.IdentityCodec=n,t.getBestCompressionCodec=function(){return new n}})),define("metaserver/static/js/logging/hive/schemas/web-user-action",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.WebUserActionRow=void 0;t.WebUserActionRow=class{constructor(e){this.category="web-user-action",this.session_id=null,this.user_id=null,this.team_id=null,this.on_maestro=!0,this.extra={},this.ua_browser_name=null,this.ua_browser_version=null,this.ua_dist_name=null,this.ua_dist_version=null,this.ua_os_name=null,this.ua_os_version=null,this.authed_user_ids=null,this.identity_gid=null,this.anon_ip=null,this.active_user_id=null,this.team_type=null,this.locale_browser_header=null,this.locale_user_selected=null,thi

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 123406
Category:	downloaded
Size (bytes):	29248
Entropy (8bit):	7.991601728399196
Encrypted:	true
SSDEEP:	768:m4cqVuPUOvnVZPFk7pWs1ipPDPt1FvKAnC+q4ris3iHSk3QlXsMf:rbOvVl/s0FD17C+qad3jPBb
MD5:	F5FA5413A58F2ED2EFC40F2F4EE098B6
SHA1:	8C5081EF6B67AE691BB057C180C9464EFA16BE5C
SHA-256:	E53D1E332EB3E18C1473CB34B81E38A6164DD7BFE03B27E2D31804F5BD6DE7D9
SHA-512:	CF34F85FB6D0674314BB90C79618588381B3B2990535C39E7D353581C9FA0FA547665485BA9DE33D09C034926E0AD9D36C296AD55824564E44F331D38E9F5562
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/3ca391fb196a76f06afb.Sf-O5SKhNZ9n5HaOYmICg0jW_NKUQqCqe-cbrqaYptA.js.gz
Preview:	...........{...0.??.....!.......4.Z.k)M[.^. r$.....u1...?..}..H.N.g......r..3.:...yv?..\|.............?.....pg....7Z.........y...4...wq^..$.H...~...+.z...8K.......2.."..;...`@.qZ.Q:..u...r.g...w.....<..A.$J...$.F.Y..E7.....{..~`&.8....c.\|N..UR..dK`....K2o}...8../..../.o....5...d.8..QB.r.d.!.4....E..h...yt..0.6.....e.u\|.....A..JV..CG.. ...q).y....Y.3.S...4/.a<1T..>z$..[7.qFe....-..J.+..d..^7..S...Z..?.l. ..O...p..w..y6.A...@....6..$k.Q?#..>...<>...O?..a.......:z...=....K(i......+8.el..0d..lz....W.o!1....wwY<...{k..y\|G.].JQ.Y.[.{.=v.4y.x..,.R..yO.....w......`. .g.s..L..k.S..b:."....H.]v.(M...e....9.v..`...j U1...%..l~_........Y(....;...^K\..JGW@...o.C.....(.i....i......,.W.?.....7#?..........I.1....m.(p.nWE.q...+.....S$0h.\...t%..X..tml._..j....v.."..o....=...+........&.ZO.,.'a.N..(.o..0.q"..D.B...k ?.awv3Ot.@0....>......d$.....1Pg......y.`.z...2y. . j.....6..t....w.....,..{..Q}1.K8...... j..j.ch..?:20...?....M..\|..s.F..5m..A...-.E....

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6631.16/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3361
Entropy (8bit):	7.878036271697802
Encrypted:	false
SSDEEP:	96:iP675Pk+D0h4nCz9Cx0v7C89KfN+CAfLVWu/Gu:iP6RDVnC5Ou7CTlwfLsu
MD5:	CD5A34185731B928DEAA73D238282AD6
SHA1:	ADC51D268F441C1B1BD650560434A23BFE75F881
SHA-256:	5C4CEF1338D37E798C56FDC594A933D4267848242E5128D57E0CE34D032D748E
SHA-512:	00248261793456A65DC2F1A2318030507D0B47480456F87E518B9D913EB9346611BF74003557F51C2CA0C668ADC404B2566219292C4D9CCA49FF5B08F85F3F9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[i..G..^Uw....k.c'.1.a" ...K.J.#..`G...H..B.$@..AB........Lb......? ....q.E.D"b...w}...\}.{...9.]...3v........]U.K....y.(.!.7..... ,O.~.[..\|....+..........v..jx.v...rY..g...k...}..U....W.+R.y.......nz..gf..._.l.........l...........Y...a..H.-W..F.x....A..E.o[n..e.pd../.0........\|....!..!..\|_f...B.......u..N!u/H6@....}.z..FFFx9c[.tL..Gv......Ut.u.i..D..........(..(..A....;!..X.s..W.r.r.z...K[.<..."..{...6..J....W.].x.tv]E..z.n...c.-.U.o..[n.Yo......G...=..mI8:.I..ss.uZ..q...j.....<...n)[... ..._...SQ..:.j.....(!.s.y...r.+...tlK... .W.S.U..d7..jd)O..tlK... P..z..D."....&.(.{.".a..2..<..G?.{f.>..@......b......G..e.E.....$...R........\|. ..&R.0.P.5 [.%V.....pd.......E^.z5.0pOO....(m.q%..Q %.F...K[..~e.Z.\|i...t.fE....8s..lq>..,> q.6.D^&& .w......4-.\|.@C./..&F..T..N...a....$%..@.Ph......(.b..O..H#.$. ....%......VUoxq...3.\|.......<K]...!.s..Nq[..$...5.f..{..%

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 550147
Category:	downloaded
Size (bytes):	161609
Entropy (8bit):	7.998141093045708
Encrypted:	true
SSDEEP:	3072:oaA6fZPgy0IOqNfMc5vuI0QfcJk47NhyCHIK+DbYv4AIEhptke5oqvoivklJhYOM:+6f9gNIRkc5X0Qf4OKScv4ATa7DYb
MD5:	6C45A1193C091A08F258C0D89F840161
SHA1:	9537C94241DA9B8988DAA4C175E5E3B7B7A10149
SHA-256:	81557729DC15395B1E0FAD05598B98CC93565DF5A52D8D703D04D4B8C74640C9
SHA-512:	0BF0954B502B5BBB1D45C44BE089D22B96B063420FBE1792456FEBD4BFA80E8E124AB1793C0DA4EF1A399F8864C9F5101E70BE89E654C11C8312FDF50B9E099A
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/203e68a375ea7f28c0de.MMYkLQEeFZd4PYXbLlLiCe5SizWEJT-CGzSC04pJQ8c.js.gz
Preview:	............v.H....OA..V.E."8...e.eu.[.]U.b.!2)...,........}..E..H.Z....-"..........M.........Wo..........~........q8..e8+....^.......R.W.tzu.+.s.e.5.f..,...d`........2bb..k..&...k..i\Ok..x(...7...+1#2<..U...D...Z..W.Y.7.]...Qu.....>...K..]]..?Y.L3.nmw../j+}pk.....u......Yd..Xu...../X../...MN.t.B..e.....VoX.!d...0/.h.aI....`<..^t:Y......;b..{....N.?.U;...W.V.... ..6..[.......P.....~...`....v.F.....Y.0...!..........WF.y.9.n..]..'....*.....?....I...5\'....P..A.T.,pM.0r...S.:).,..b........:(......#......a+..nV.?...+.L..2.?.y.j....b...1..~..kxV........O.,..Y!.d..?.,..y .a....i(..C...j..y ......?....!.....F5.~...^.\|6(......jx...h....}..%e.Gzq..,.}.v..S...U^-.C..`...P.g..........."...w.{..>E.^..y.y..~.....`.U.<....2`O.)].9./..{9c...@.b...b.....&....-.\|..U.yDa.N`.i,1..<.L....v..h..\|..?-Y.=..S....w...K).\|..x..2.i..E..P..p.....z.... .Q..X......B........?..\..M....i...%I.yk{..........1...............Z."=.kx..\|..A..\|.Y5sjy....t'GN.p...;....[.&..

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7184
Entropy (8bit):	4.491409940008751
Encrypted:	false
SSDEEP:	192:rpy1QmMyKEXwTAUTXN1HSMV7xTCBIzZc/KFlSESZies:rvMcnTbDTCazVSUh
MD5:	B9F4589659563B0E18C8346229C06FC5
SHA1:	A14FB850193E8CE07638F6895AD7B172C2D2E6F8
SHA-256:	98CCD3ED8357751AFFFDA2FC244C2F9C2A6F58BD1FBA5008B0678D2F5C4573C3
SHA-512:	FBDA40420D6B18DE8D19268311A8AAAC03D341D1AC9C6967194D38647371898E88BE9E03780ADD91828686A24DD16F29143E4CA0221EEC20B3ED019AAC98BFF8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="266px" height="32px" viewBox="0 0 266 32" xml:space="preserve">..<path opacity="0.6" fill="#FFFFFF" enable-background="new " d="M51.627,12.316c-0.396,0-0.822,0.045-1.28,0.144...c-3.198,0.737-3.506,4.297-3.506,4.297s-3.629,0.123-3.629,3.438c0,1.903,0.984,3.806,3.752,3.806c0.922,0,14.515,0,14.515,0...C63.262,24,64,22.465,64,21.115c0-2.762-2.522-3.008-2.522-3.008c0.061-2.026-1.045-3.253-2.215-3.744...c-0.599-0.261-1.175-0.352-1.687-0.352c-1.17,0-2.003,0.475-2.003,0.475C54.904,13.509,53.673,12.316,51.627,12.316z M51.795,8...c-2.177,0-3.959,1.264-4.892,2.988c0,0-0.905-0.564-2.197-0.564c-0.613,0-1.314,0.127-2.048,0.502...c-1.599,0.86-2.583,2.762-2.398,4.604c0,0-3.26,0.246-3.26,3.744c0,1.903,1.723,3.622,3.629,3.622c2.398,0,2.398,0,2.398,0...c-0.615-0.92-0.738-1.842-0.738-2.578c0-3.684,3.875-4.235,3.875-4.235s0.492-3.49

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.300648435011847
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1w7bf+YXg6n:MMHdVBMHgWdzR05mRw6
MD5:	82D7ABFDFD44AFA090699EF4459B927F
SHA1:	71CA9B75F02F75830E8168F7F2622D702B98C508
SHA-256:	8175F78FE28A3D2806AF5887B983D717A23D42949F73121A21CCB89461A0345E
SHA-512:	3384FB7B04A60C7F8D0DCB9687BA2414CA28815CF0B78A890A73476A0FAF0C52458E462364C570A3AD49DD7953FEB9F2BA59D34F25B013F254665E8CDFBE72EE
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/pagelayout_mos_background_left.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:7f925e32-901e-005e-68f3-bb2121000000.Time:2023-07-21T16:51:44.1712564Z</Message></Error>

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3254
Entropy (8bit):	7.881903934112887
Encrypted:	false
SSDEEP:	48:oUrW498bxWFYf4BohZ5UYosBzQq26oZlaEC/seHdtpGsx1Cgv/fZZR:PrGfoOxBzQqUZeswtpGsxZv33R
MD5:	F8AB974B28712B004AF916D2C01D4E86
SHA1:	E62CD02778BA129D1980C97B70B260D4CC785C4B
SHA-256:	0ADB74E5FDE0A3721A35E40D7E4549DDB0952BA017E7789E7653818BAEA2B0DA
SHA-512:	F135A48DC81A28D572AF87B5BC922CB3F31E30233B92E035A2DFCD292BD1E0757A81B40E0986D606BE3E56E529C316AA507B36AFD995191B238B3A64B568D0D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....CIDATx..[kl.....3....M.....+).....8Q..TZ.H#T.J....G).....r.QJ..."..m..P)$.B.h.B...}..%.1.&.Ml..>.qO...zvwfv..M.I#.sg...y..A.u...Et..d.8.<...c.~f.t'.n.......O...C..}..e.........@.+....N..,.Nu...e...Q..,........Z....=...Y....n.T..&.U.&..l.(/...,B@x...l...$M....;v;0/....>.e.PJ.v'9./z..9a......}/a..\|....`v...+..D.BH.....%{.;0.=..5.9.......0.lQ.>w.J.......0...m........tj,.W..{.).Nu..L...\...m...y.sk..3l...J..:.l......3..v..>V.CD......p..5...s.~..u..3@...`...un.`..@."aY.e....U.(..',...g.e..V-_..Y..s..nf..pV...o....c.f.....4....cnMc>....b.`...L..%. ..ol/...@)#D..?.!?...l.. H........^....b....f.....YAk1...."..j~h..uc.-.<.e...o.s..O......,..^^.(.."....A4$`........>.o!.E.<<r.V.a..f...@.+\&..@.N.b.......3...5.W.T....h...B5.q.J.Q>.T"....M"..=sYUD+......&B.& "..C.X.H......_..U......U...^..S....`,W....m..#M.(5.g.~......._..4b..R.[.R..7.$z....0...r..!":;iY

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.244571642115861
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1LCopVXcYuWg6n:MMHdVBKW/UTBCwbun6
MD5:	3FF6B10BF8606B87B7F79A895E8AF483
SHA1:	A47C91BDC1DCA0DD2B76F0B14977C2C70F42BDEB
SHA-256:	793B26F9FDB6550B73604E30622CBA976DFA92E21AF960220F048EBEDF59461D
SHA-512:	50E34FA7AAB694F0246000D9F74A802AEFEC9DAACE499978311ED50069F3870D56E8CD77A8E58909FA6300BC196A4838FB4AAC9CD95E98A4EF40E06FA950F714
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/webcontrols.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:706152ec-d01e-0002-4af3-bb7479000000.Time:2023-07-21T16:51:43.1134604Z</Message></Error>

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73229
Entropy (8bit):	5.218269460236542
Encrypted:	false
SSDEEP:	768:l5RC6tHbUN04vg1JjkZNF4CHvWKGgKhKyw1TNO0T8pgV/dErUUXH5hDXzh4vWvZc:KzhmSXRdErUqXl/loFwi7
MD5:	01DF31FCF813E2BF95FB5CC1771702C9
SHA1:	22CFDAB09CBED6A190C6B368A13374F209AC1B6C
SHA-256:	0634C206B71E8A784A5E0AD5681BDC0D892680253274B528830FB9CBDDF75B7C
SHA-512:	949CA1EECDFF684CAE37AAB61AD0813F95B041D1717CDF8CCEBFF14CD79A08DC7515BCF8A8A2C4AD660CEC113402CF6DC941E9C911E818FA9A4446310BB8C443
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-timing-new-proto.min-vflAd8x_P.js
Preview:	define("typescript/dropbox/proto/js_init_data/web_timing_logger/web_timing_logger_pb",["require","exports","@bufbuild/protobuf"],(function(t,e,i){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.WebTimingLoggerServerContext_DWSOptions=e.WebTimingLoggerServerContext_SourceType=e.WebTimingLoggerServerContext=void 0;class n extends i.Message{constructor(t){super(),this.isDws=!1,this.sourceType=s.UNKNOWN,this.subtypes={},this.url="",i.proto3.util.initPartial(t,this)}static fromBinary(t,e){return(new n).fromBinary(t,e)}static fromJson(t,e){return(new n).fromJson(t,e)}static fromJsonString(t,e){return(new n).fromJsonString(t,e)}static equals(t,e){return i.proto3.util.equals(n,t,e)}}var s;e.WebTimingLoggerServerContext=n,n.runtime=i.proto3,n.typeName="web_timing_logger.WebTimingLoggerServerContext",n.fields=i.proto3.util.newFieldList(()=>[{no:1,name:"is_dws",kind:"scalar",T:8},{no:2,name:"dws_opts",kind:"message",T:r},{no:3,name:"source_type",kind:"enum",T:i.proto3.getEnumType(

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1318)
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	5.132124505106267
Encrypted:	false
SSDEEP:	24:NbmLWsRX6zCXj9WKHcnR2RLZR2SVLc3xA1GbTWMW52ky6XRFLtgQSEsAha/:NaysRXZXpWKHiQ1ZQSJcBA1GblA2kZzu
MD5:	6B0AA5F0F93B2C08C7322BB0F71FCB77
SHA1:	629D080AA342886C53E6F2D15CAC2CFC8106C704
SHA-256:	CEC2D5FBD01B28EBA1B9E3BBA878CA37DC363C4E59D8FF2169494D36B641C1A3
SHA-512:	25A87205F2FB409B5974A1923589346A0B79E7A6E30C8C7D15905550D1D792C9EA8DFCEE6BE3E256E906E51A42F549C476B2039953E4DF28E15CFFD4DE81A093
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-inject-css.min-vflawql8P.js
Preview:	define("js/browser/css/inject_css",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.injectCss=void 0;const n=["loadCssWithCache","CssEntryPoint","css-modules"],l=["css-modules"];function s(e,t,s){if(s[t].length>0){if(l.includes(t)){const n=s[t];for(let t=0;t<n.length;t++){const{elem:l,path:s}=n[t];if(s>e.path)return[l,t]}}return[s[t][s[t].length-1].elem.nextElementSibling,null]}const i=n.indexOf(t);for(let e=i-1;e>=0;e--){const t=s[n[e]];if(t.length>0)return[t[t.length-1].elem.nextElementSibling,null]}for(let e=i+1;e<n.length;e++){const t=s[n[e]];if(t.length>0)return[t[0].elem,null]}return[null,null]}function i(e,t,n,l,i){e.elem.setAttribute("data-loader",t),e.elem instanceof HTMLStyleElement&&e.elem.setAttribute("path",e.path);let c=null,o=null;i\|\|([c,o]=s(e,t,n)),null===o?n[t].push(e):n[t].splice(o,0,e),c?l.insertBefore(e.elem,c):l.appendChild(e.elem)}t.injectCss=function(e,t,n=document){const c=n.defaultView;c.__injectCssCache\|\|(c.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 31842
Category:	downloaded
Size (bytes):	10945
Entropy (8bit):	7.9840812649181085
Encrypted:	false
SSDEEP:	192:9XLXKu8LvzQKTrPgIOa3SvwDmi3APSy+MK4i9r6YEmjEFsGXLc/XkRYWNVSx:9XLXC71PIQawYqy+MT8ulXLYW+x
MD5:	2A94E693FB118FAA6FD42F801249DA80
SHA1:	C71E945A496425146276006367FD32C2A179F715
SHA-256:	09595C02F926939C36D5F3D3BEDA1C831252FE498B250FD60F2DD507AF52C1DD
SHA-512:	D520F4F539885E2B695469A7845AAB3BBA1864FCCEDEBBE9409BD10683DEDE535EB423303170145E59524EA932A1084F7C9ECAD9EAD7DDAD1365ADA7034E68D4
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/d5234f674cac144b79bf.cDu6D0nBAZvocplrTbBtBSOvdUuoODvKDRycRtZhb4I.js.gz
Preview:	...........}}w.......n..N.H...2.'.@S ..ZZ_.\..."..J..c.\|.g.=...@.=.Y..4.{....3qo.t.....O.....>./G.....p....y.....p.......s.x^.k./X~~..Y.~..d...<+'.l...1On....W<[..d...$..<K...........?\0g.:.{...i..y....{+.,X..y2.N?.&.....]].[.y.M+...]h.[..y.Z.X.ny}.....uT.'..r..i7..y.d...o.9.xd..y.V..u.C...e"..X.G.?.i........=...s.{j........./.......y.R.Z.=.....'...?.;:??....Ek...#^,..7..8.6...ucW@..=<...O..)j....;c.r..:..Qc....Y...Q..8...-....Bk.k....A.......^.q.N..2.cD.6G$..Z.CK.b...........5.R....$^p.>._.Z...%G.'v=NA..8._a.....uo-..m}..y..ow..e......_v.S..,...-...5..5/.?d...mt...P@[...M#).:.~Z+..'..y..3.s.`..Y2i-..].Lo.xq.m.s...i....Q._...eE0g.%....D.........<?......Oww.\|.....j.t...Y..v....u.@.....I.L.6.2\|.M...].......y.)KR.../t.o.../`..\|..r>..c.vg./.........G.G.~.:^.....wvX........I....T..[.A.\|..rv..b.....$;...0..<...;.B.R.....G..Pe(.^.q...D.'8..F...H......J,._k...h7.!.=.*......w.g...n>.#.b."......Q<..f.)P..s.R.FS.0.7..,..<..T.......EY3.X....E

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.236426882067503
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1KFhswSYC1z8g6n:MMHdVBKW/UTc4gC1zx6
MD5:	06A7A797BC230C6B37E356ABD98E033E
SHA1:	52A9222ED6A33922064DB0C57A36FC21C8383299
SHA-256:	4FF9550E554B12B50150A533F23CC9BD00C46DA26511422F21DF4AA0819F4AAF
SHA-512:	202807B0F21A6758684261C6B5FCB42C2B90770DE9FEA0F017B8820FFE57695F04D2BEA01E50BF2FEC48906FD6E76451031AA28E830541A1A9980A5991B0EADC
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/shell/images/o365_gallatin_logo.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:185148b4-401e-0062-51f3-bb08e6000000.Time:2023-07-21T16:51:45.0250176Z</Message></Error>

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Category:	downloaded
Size (bytes):	103533
Entropy (8bit):	5.185521628741577
Encrypted:	false
SSDEEP:	1536:RSJTHB1b0jqznjA95j2cr1O2rdAGLRdZvOZ7wF9nc:Pj2Y8
MD5:	D93056F6640C9B624DA5F257DE63384B
SHA1:	1D79D632D75485B3BB4BD512A2F782A1976282B2
SHA-256:	87F8AF6403A130648D1953226661784C5C6306E6961D8352BAB1A9817458B177
SHA-512:	518B6E789F339B6D2D6C549263ED2A0B26E6182DAC26BADD78581708E167C938C6D1FFBFD21C574222B246A89CF6287D8285DDB9FC4BEF76B2B5FD302016EA8B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-cloud_docs_iframe.min-vfl2TBW9m.js
Preview:	define("metaserver/static/js/cloud_docs/cloud_doc_acl_fixer",["require","exports","tslib","lodash","react-intl","react","metaserver/static/js/sharing/async_share_modal_util","metaserver/static/js/api_v2/types","metaserver/static/js/clean/ui/snackbar","metaserver/static/js/sharing/access_level","metaserver/static/js/sharing/actions/sharing_actions","metaserver/static/js/sharing/api/client","metaserver/static/js/sharing/stores/sharing_info","metaserver/static/js/core/i18n","metaserver/static/js/cloud_docs/types","metaserver/static/js/cloud_docs/utils"],(function(e,t,o,s,r,a,i,n,c,d,l,p,u,m,h,g){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.CloudDocAclFixer=void 0,s=o.__importStar(s),a=o.__importDefault(a);t.CloudDocAclFixer=class{constructor(e){this.loadCloudDocMembersToStore=e=>new Promise((t,s)=>o.__awaiter(this,void 0,void 0,(function*(){l.SharingActions.listMembers({user:this.user,contentId:e.docInfo.fileId,isFolder:!1,client:this.shareApiClient}).then(()=>t({succes

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15417)
Category:	downloaded
Size (bytes):	15474
Entropy (8bit):	5.11293142793647
Encrypted:	false
SSDEEP:	192:bR9rtVXd9hTWLZHVz13RkBv7m8hEHE6sNwd9nhLsu/jxCjzbmFIRxbRkiswh:bXVWLZb3RkM8hEHExNwJICjIiWRxVkRS
MD5:	945066289466672B1C9446FF5CC87C03
SHA1:	5C1103348D723F81AEC84A1E4E1C432E01358985
SHA-256:	B3B49E6B11C09B069E62EAB9842ED23BD7A62836A89C95759D6CA27740017AB0
SHA-512:	A4411FD07C25EF22A17494B77DE781BD7E5E6DBFDCC0FACC6F7772C31D65BA2AE2D950C27CB9FBC9FB33F6BB88EF79C0E2A2036A44EA4FC3677020F22E6E618A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-vendor.min-vfllFBmKJ.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/Transition",["exports","react","react-dom"],(function(t,e,n){"use strict";function i(t){return t&&t.__esModule?t:{default:t}}var o=i(e),r=i(n);function s(t,e){if(null==t)return{};var n,i,o={},r=Object.keys(t);for(i=0;i<r.length;i++)n=r[i],e.indexOf(n)>=0\|\|(o[n]=t[n]);return o}function a(t,e){t.prototype=Object.create(e.prototype),t.prototype.constructor=t,t.__proto__=e}function u(){}function c(){}c.resetWarningCache=u,(function(){function t(t,e,n,i,o,r){if("SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"!==r){var s=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw s.name="Invariant Violation",s}}function e(){return t}t.isRequired=t;var n={array:t,bool:t,func:t,number:t,object:t,string:t,symbol:t,any:t,arrayOf:e,element:t,elementType:t,instanceOf:e,node:t,objectOf:e,oneOf:e,oneOfType:e,shap

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3352
Entropy (8bit):	7.873239198854956
Encrypted:	false
SSDEEP:	96:22xh1Jm3gNpDxda7ajnVfAptPHdsWN4lhYGNGGmb:227aADvJVfwP9xNeCGGL
MD5:	B735B5F2FD640F4E93BBFA17772E4790
SHA1:	D8DAE0623C2A479E077764CEA5D81ACBC16698B8
SHA-256:	A42BF0B91B66F18474C243AEC9BAEC010A86E5D4D99AF841C9E762505B0D0C4B
SHA-512:	24544808FB2A0279FBF151A8CFE53B367241425DF16AD4406C92CFEAC5018A9F6F0CAEC649B50524548DE782B0DE549A5B450D9FBB6D672FBA809CDF5726CF2C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[Yl$.y....{x..x.Z+.*..-A..u ..`..,...8@...C.. @.$.O~0......!.. q`.zH..0..6\|..%.:.$...]r..p...CO..p..3...@.{........!...8{..A.5".C@M.......?/.S;....V..f'.HA?2.).g&.e...xs.BD....n..V..B.V...I...S...I..s..).D>...vA2.;...N..aa....._...Dj...9.........HX.]L..0...^..'...$p,..g'_....C..LZ4Z-.i./X..C.....%.&P...O..].K.~^...x..o..w...:...c....S....}..>.C.03.z..;..'/?....g.ZZE..n...1..X..r...~.....Ji..5<....x^..K.`H.. "\.... H.>+..3..4....b~z2..\.^..k.?.0...m.....oX.p(.B2a......[.x....g.I5?....!.).....mx...b.H!.,..KD..H.t..... $L...9..F.1....q...{......'.@....8..iC.k\...q.>.!o..m.Z...H.,..&._....Q....j....D.$.y.a..C.pq.....h..d..\._.Q...C...@(.... ..(..4.8_x...>.I..."l.6Won}..BH.....\|....!1.g'...<055M.659.\|..%.).....E..5.u.`\|...]` ...f&.......e.......0.).C.&...........s......0E?..i..x.U .3... H..B(S.J=4L...m.n.;..>.C..pX'....w1t.].0.....P.R.".

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	89590
Entropy (8bit):	5.193479693663803
Encrypted:	false
SSDEEP:	1536:x7cx5Yu0kcI4OtiiB2ZaJUx3qVnS8auwqme2cumAaUmE4Y/rHww1erQ+Hfx07im4:+QROIiB2ZAYuwtjR1ec+y7imfg
MD5:	A55B9665B3C5DACA296C27422BF152FA
SHA1:	9220BE1BC39C3ED05FC5CF25D825B8B3A171FCD2
SHA-256:	5B53C6DB5ABDA0AEAD4DEB08A073B3A982E4CEE523A0D5FC2DC69473CD6EFB36
SHA-512:	7950DD0060557B299CEC6D6FD18F89F264E45D8A39E84F97EBB365DC8205ACD4119E7141E0C1867F99BE03D45722D57102D4368DC6E9BA65FCE194B8B24EBF04
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/jsc/controlbundle.js
Preview:	var TextBox=window.TextBox\|\|function(){var r=function(i){var u=t(i),r=n(i),f=i.value;return r&&f.length-u.length>=r?!1:!0},u=function(t){var i=n(t);return i?!1:!0},f=function(r){var u;if(window.clipboardData&&(u=n(r),u)){var f=r.value,e=t(r),o=u-f.length+e.length,s=window.clipboardData.getData("Text").substr(0,o);return i(r,s),!1}return!0},e=function(t){var i=n(t),r=t.value;i&&r.length>i&&(t.value=r.substring(0,i))},n=function(n){var t=n.attributes.multilineMaxLength;return t?parseInt(t.value):null},t=function(n){var t,i;return n.document?(i=n.document.selection.createRange(),t=i.text):t=n.value.substring(n.selectionStart,n.selectionEnd),t},i=function(n,t){var r,i;n.document?(i=n.document.selection.createRange(),i.text=t):n.value=n.value.substring(0,n.selectionStart)+t+n.value.substring(n.selectionEnd)};return{OnKeypressHandler:r,OnBeforePasteHandler:u,OnPasteHandler:f,OnBlurHandler:e,GetMultilineMaxLength:n,GetSelectedText:t,SetSelectedText:i}}();var HelpCallout=window.HelpCallout\|\|fu

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65531), with no line terminators
Category:	downloaded
Size (bytes):	132830
Entropy (8bit):	5.340669082672345
Encrypted:	false
SSDEEP:	1536:RO7F3O5fxfSe3UkrAr2J16Surw+ZjAsnkXKQRaKXjDuyu:RQe5fxae3UkrAE16fsOAs90Huyu
MD5:	6C448C2CFE8826A7C4DA4710F537739C
SHA1:	44BEA67BFC099439460B37779624C34C10B0EE33
SHA-256:	2965E0D5ADE79A3942422DA3E837B8736BCA9BA0C6A9BFE4C39CC389C69DC8F2
SHA-512:	0A7CE631614A20E2C122B1FB228AD22523BB92AA3CBFBD064183A858569B10AC0F678F74232B26E4F5BD3BA8BC42946A7022DEF93037D82DCC32A93DE79AC122
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-action-bar.min-vflbESMLP.js
Preview:	define("js/file_viewer/preview_error/preview_error.module.css",["require","exports","css!js/file_viewer/preview_error/preview_error.module.out.css"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.illustrationContainer=t.ctaLink=t.ctaSecondary=t.message=t.header=t.img=t.container=void 0,t.container="_container_9t5i9_1",t.img="_img_9t5i9_12",t.header="_header_9t5i9_16",t.message="_message_9t5i9_24",t.ctaSecondary="_ctaSecondary_9t5i9_29",t.ctaLink="_ctaLink_9t5i9_34",t.illustrationContainer="_illustrationContainer_9t5i9_38";t.default={container:"_container_9t5i9_1",img:"_img_9t5i9_12",header:"_header_9t5i9_16",message:"_message_9t5i9_24",ctaSecondary:"_ctaSecondary_9t5i9_29",ctaLink:"_ctaLink_9t5i9_34",illustrationContainer:"_illustrationContainer_9t5i9_38"}})),define("js/file_viewer/preview_error/download_dropdown",["require","exports","tslib","@dropbox/dig-components/buttons","@dropbox/dig-components/menu","react","react-intl","react-redux","js/file_view

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1457)
Category:	downloaded
Size (bytes):	1513
Entropy (8bit):	5.317492117975362
Encrypted:	false
SSDEEP:	24:8HihmLRSlPcPbzLeaelliamqDWio3GMT6pFRAu7jsMRAuK1n1XRAuJXLe6r5Xo4o:2KPcPbzLoApPGMT2vKJ1JbX5XoHSm
MD5:	6DA44F1816AFF4CB20EA1324BBF31882
SHA1:	855040715BCC515D7474F3E06F1E4C82DAB0FA40
SHA-256:	79D23006CB69DD637014CF42CE54A2F265CC74BCBB253A0A4D5655F05A1260D0
SHA-512:	791F0AB018918663DFECB3349CB4677114CFC87D6F5B119C126B31744B8D23C958C61DC89C357014154C560C07387365F33ED89572DF5C9E890F2BD8449FDA91
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-open_with.min-vflbaRPGB.js
Preview:	define("metaserver/static/js/size_class/constants",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.SizeSystem=t.SizeClass=void 0,(function(e){e[e.Small=1]="Small",e[e.Medium=2]="Medium",e[e.Large=3]="Large",e[e.ExtraLarge=4]="ExtraLarge"})(t.SizeClass\|\|(t.SizeClass={})),(function(e){e.DIG="dig",e.MAESTRO="maestro"})(t.SizeSystem\|\|(t.SizeSystem={}))})),define("metaserver/static/js/clean/open_with",["require","exports","tslib","metaserver/static/js/cloud_docs/constants","js/filepath/filepath"],(function(e,t,i,o,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),s=i.__importStar(s);let r=void 0;const a=[{id:"word",icon:"word",name:"Word for the web",exts:["odt","docm","docx"],editor:o.MicrosoftEditors.WORD},{id:"excel",icon:"excel",name:"Excel for the web",exts:["ods","xlsb","xlsm","xlsx"],editor:o.MicrosoftEditors.EXCEL},{id:"powerpoint",icon:"powerpoint",name:"PowerPoint for the web",exts:["odp","ppsx","pptx"],editor:o.M

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	80211
Entropy (8bit):	5.37906967078424
Encrypted:	false
SSDEEP:	1536:dr1MdLE9ANDGYaX8LUYxiDoYOXKHgBryrvVLGywAro:bWpLUYxikzA0
MD5:	DB52CCA6F0B5B9CEA5475A155AD8E7B7
SHA1:	3F61C2CB46D5D0476B34DE2221963251A610E555
SHA-256:	7283B6770BA6B6E280C7934867F12DD63B679B899B7937B3268654A4DA3ECA4B
SHA-512:	79FBD32084F8782EB323F700378CA1811481B0CD88C7BF571B7233DF6D5CFFBC6A1165F7853E846D515DCDEAC373EFB419255550F6B06471497A868BACB8874F
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/jsc/headbundle.js
Preview:	var Namespace={Register:function(n){for(var r=!1,t="",u=n.split("."),i=0;i<u.length;i++)t!=""&&(t+="."),t+=u[i],r=this.Exists(t),r\|\|this.Create(t)},Create:function(n){for(var i=n.split('.'),r=window,t=0;t<i.length;t++)("undefined"==typeof r[i[t]]\|\|null===r[i[t]])&&(r[i[t]]={}),r=r[i[t]]},Exists:function(n){for(var i=n.split('.'),r=window,t=0;t<i.length;t++)if("undefined"!=typeof r[i[t]]&&null!==r[i[t]])r=r[i[t]];else return!1;return!0}},Shared;Namespace.Register("Microsoft.Online.BOX.JS.Shared"),Microsoft.Online.BOX.JS.Shared=new function(){function n(){O365.Log.WriteLog(509159,O365.LogLevel.Info,"account switch intiated"),clearcache()}function t(n){var r=window.location.hostname.toUpperCase(),u=n.origin.toUpperCase(),t,i;if(u.indexOf(r)!=-1&&n.data){t=null;try{t=JSON.parse(n.data)}catch(f){return}if(t&&t.eventId){if(t.eventId==="abtSignOutEventForHostUserGenerated")try{i="/estslogout",window.open(i,'_self')}catch(f){O365.Instrument.ClientInstrument.getInstance().logMessage(504151,"Fai

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	downloaded
Size (bytes):	98173
Entropy (8bit):	5.343936799864253
Encrypted:	false
SSDEEP:	1536:b8p3cOWVvK6gME6eb6dUVl3O9f+6YbwwhMBHTj:b8pMh2oXYbKH
MD5:	F8E80183A2FB14E908B63369ADBA86A0
SHA1:	48344F71E63073CEC76041FA37D95DECFCDA6678
SHA-256:	1D73A859DA08F2BAADA5758A7A761510D739E8442EB6C4E5B2E14E67BA3B5CBD
SHA-512:	F6E8A8DD6872502574AEDC04027995771744A08C1BE0FDD4CF4372AB327333E5BDBC8CBBB618AB37096B9FB35D7BCD8D7725C369982E6578FB6A102751211A43
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-external-lodash.min-vfl-OgBg6.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/lodash",["exports"],(function(t){"use strict";var e="object"==typeof global&&global&&global.Object===Object&&global,r="object"==typeof self&&self&&self.Object===Object&&self,n=e\|\|r\|\|Function("return this")(),i=n.Symbol,o=Object.prototype,a=o.hasOwnProperty,u=o.toString,s=i?i.toStringTag:void 0,l=Object.prototype.toString,c=i?i.toStringTag:void 0;function f(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":c&&c in Object(t)?(function(t){var e=a.call(t,s),r=t[s];try{t[s]=void 0;var n=!0}catch(t){}var i=u.call(t);return n&&(e?t[s]=r:delete t[s]),i})(t):(function(t){return l.call(t)})(t)}function h(t){return null!=t&&"object"==typeof t}function p(t){return"symbol"==typeof t\|\|h(t)&&"[object Symbol]"==f(t)}function d(t){return"number"==typeof t?t:p(t)?NaN:+t}function v(t,e){for(var r=-1,n=null==t?0:t.length,i=Array(n);++r<n;)i[r]=e(t[r],r,t);return i}var y=Array.isArray,g=i?i.prototype:void 0,_=g?g.toString:void 0;funct

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45991), with NEL line terminators
Category:	downloaded
Size (bytes):	100459
Entropy (8bit):	5.372244683851154
Encrypted:	false
SSDEEP:	768:lsJ3687fBEc408QYHLMzPnLtedvj39MtqOh2eMrFGob/fmltYUyGSGk8Q:lkK4mm/8LMDyj39MPCrF3b/elBycQ
MD5:	A6532E759A01E871430AEBE79970845C
SHA1:	1BFD3A638E226479A62A7AA398A9DEB8BEC584BF
SHA-256:	804E20541376C7AABE9E91A6AA0B0DA5C6F6D8345AE4C66FA1ADC334E06A59B3
SHA-512:	366B6929019D0CD728A0B74ADAC69538880C443BE1E985C0E68DE6592ED883886917B993029E6413B3D1039D0E904A6DE5F67C767DE63CE5CCA86046008E9593
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/polyfills-bundle-dcde7ddcdcdb2aaa6ffc.js
Preview:	!function(t){var r={};function n(e){if(r[e])return r[e].exports;var o=r[e]={i:e,l:!1,exports:{}};return t[e].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=r,n.d=function(t,r,e){n.o(t,r)\|\|Object.defineProperty(t,r,{enumerable:!0,get:e})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,r){if(1&r&&(t=n(t)),8&r)return t;if(4&r&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&r&&"string"!=typeof t)for(var o in t)n.d(e,o,function(r){return t[r]}.bind(null,o));return e},n.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(r,"a",r),r},n.o=function(t,r){return Object.prototype.hasOwnProperty.call(t,r)},n.p="",n(n.s=1)}({"+5TE":function(t,r,n){"use strict";n("Muwe");var e=n("0K2p"),o=n("+iL7"),i=n("GHf2"),a=

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74668
Entropy (8bit):	5.382088521413171
Encrypted:	false
SSDEEP:	1536:FIAjoRWrkhNSYlgZtlIAa3Wg3pOpSWia2HZOXR2q6jTrUbbPh:FIRAr6SYBUbbPh
MD5:	2668C9E2194B10044A2E5A89385A3235
SHA1:	7E9FD857BCEB173EBE4711E21CFDCF6E501B3630
SHA-256:	5A451C525B68CC0EE9F4B7C7AC2D6348AA6D3404D1BA3E45F8BA0B31D39AB740
SHA-512:	6A7E9E82F864432B8D434C468EE922D5F9E004040807774EBEF90DE51312DE0D015164A6EF20F82DD09C9521E8A7C561697A359B7EB75D25CC62D9CA54C3CC99
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-fvsdk-support.min-vflJmjJ4h.js
Preview:	define("js/pap-events/filesystem_item_actions/star_file",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Star_File=void 0,t.PAP_Star_File=function(e){return{class:"filesystem_item_actions",action:"star",object:"file",properties:e}}})),define("js/pap-events/filesystem_item_actions/unstar_file",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Unstar_File=void 0,t.PAP_Unstar_File=function(e){return{class:"filesystem_item_actions",action:"unstar",object:"file",properties:e}}})),define("metaserver/static/js/onboarding_checklist/async_share_button_tooltip",["require","exports","tslib","metaserver/static/js/async/loadable","metaserver/static/js/clean/web_timing_logger","metaserver/static/js/browse/data/store"],(function(e,t,s,n,i,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.AsyncOnboardingChecklistShareButtonTooltip=void 0,t.AsyncOnboardingChecklistShareButton

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 78503
Category:	downloaded
Size (bytes):	21206
Entropy (8bit):	7.988628798501732
Encrypted:	false
SSDEEP:	384:Zq0T7IsYfH4Lp7PjwHwRlkNFuqwodo/WB/BSY+bVQODkyRui2P5Y+VbIT:H4sYwLp7PjwHwHkNU3A/BBaiEhR72P2p
MD5:	176A3E30B15F97951DF33759E0E1262C
SHA1:	74A64CECA508F93D36992C5C60010D0A383F3CF0
SHA-256:	E944B3E2FE250DD2A251695EEFE91C27F6D09D566044E3B7AEB117792AAE226D
SHA-512:	741BC87214F2E1A553F5FAAFDDF7EB48D7705F08EF54C5564FAE947580A20A4B2E4647A19BCBF2D02DC82843BB322D31A5ECFC69CC58B97E2518937DA2AFAA22
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/5c4e3ef7b51c8e10ef28.p5qECeQFha0harwiGBk34lwjoVRUw-0hbHStF4MC5-g.js.gz
Preview:	............n#. ...rp.[I...dg...[.KU.%U7f..B....Ef.3.RiK<....`.......c^.?...._..x....Zq..H........#..+.-....ar..\|.~............>.....2x.........{~....K/..4....}...T......?..d>..&.L...l\|...P..N............/^<..\|1.v...Fw.Eo4..y....s?..._...y{.FQ.>..4....w./Yv.......7!..[.,.~.......e.M....F.&L.Q..].O..m.O........_;.P.a..].....`..n.x..k<.......Xo....#..Y.j...9T....P.........;,....#.u.C..._.......O./....z..oif...'......P.....aq...?.q.`)..3..-...^...){.G,..^c.......&.&p...h........B..p..+..........UC.?.n.n.g.o.A..w.....?.?......?..=fY....Y..w..iv.sN.og...[....N\|..mBY.........x...&...\|.e.Y..?.0....t..=K.<..f..2.........M&..t..,..NS.....'.E_o?K.0...trY4`.=B].+=.......l.&....yr..Q\|.......,...t.F?..q{...\|.]w}.&...,ju/..8.....]t..#^.L..{.N....h\|hc.......{.^.....#w....'9.dy.wUk...c/.-&.y}.{.....1...T.S.......OQ.j...t.r`9...Mqr..`.,.T.....l......;..%.F...3mu. .Q..........4MR...;..7..kM.B.l...o.5..M.M....X..~&...p[.p....~H3.b'.o..0g.<ia../.rs.....

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6631.16/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5933
Category:	downloaded
Size (bytes):	1844
Entropy (8bit):	7.891101209670831
Encrypted:	false
SSDEEP:	48:XQ82wiYDJJk6PU2irGBt2fBWzCMkyeojQtf35BBIv:6YJkWxiqHGBmeocdlw
MD5:	C027CF33B07F6299FA980DB7FADF2FFC
SHA1:	6A34F3218FE5E0379057129D363081D654A9753F
SHA-256:	BFCD04F103BA9135FFD847A088D1AC1339A845D40D54B6EC5B8FA65C374A1913
SHA-512:	A407CF8DFA2A422EA52A5091C3CDA0C5893AA1ED6B83DB73216AC07844C70B50570C5EAB2E85A7D967D30C132DB5CDC44109CA84A88F60A87B1EDF827E389802
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_native_desktop~paper_pifs~paper_view_only.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.tXw8zQZf9pvbUGFBhTy9aeUGTRaPB0mEMIoN_T9VyMA.css.gz
Preview:	...........Xm..6..._.Cq@....l..; i.6@R.m....Z.,fiRGR..a...E..]7.%@.K3.yy..P....)D...!#k..5.d.<..^.)f ..,):.9..M..P.,,...K..g1.JN+.7..7....W............O...90..(}..^..K9."...K..?I.B,C"K.Vn.9h.q.h....s.M..<N..&.7.R.5g,j.'.A....GbG.g..g....T....\dX...K..u.`.qR....?..{..dx.D..i....<."i^.T.i..'....D.....Q.'x.?.'.D6&#....@.z..>p...s.-.+..f&..%.cO....j..6.....P..nR1.</..\|H?....=...pm..]4[..p.......=..E.'....w.1.I,Hne$... ....u!..n.C`..@.q.Ak..\E.....$.8U8s....._ .O7G..7..o.;.?WR...&..L........<.{.T.1...p.o..I.....8?.6......\..QM.8'...z[..."..-.5...6....{.)+.A...a(.v....^."-5.".\|l..&).W..Fc%....$.0...<S.S_..,.)%.$r...s....a.U.; ...6.....:............/....O.@.E3..s.n...,..I....)Pq...0..G.=;;v.o..uG.-.I.yL.L."_0..-..2..J.....~.(k.0..<C...O....Q.6..I9z.wb.E/.. ...3..>.....'..b.Jg<..u..h..0.-...aoy.+.>..}..p10.wu...,..kX...aQ.E..x.C.]%..E=..G..l..#......F....W.0u&.v...I01uu...].._7p.N.......-...Y...v!.t..ow....@5.*6M......6.V...}..Z.u...6...mm.D

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 167967
Category:	downloaded
Size (bytes):	42732
Entropy (8bit):	7.994666807412944
Encrypted:	true
SSDEEP:	768:cfsMvaniQM2SabCsyCvV0M/vdjq5OvVW4w71/Fz2m/zqAYJFkFIhTpuuB4BPEzXk:cfJvaJQRsyIV0M/ljllwRF6qq9PkFIhg
MD5:	BD71DD2DFD3DA7DB8433B7B535B9AEA9
SHA1:	275AA8CFC73D7703BEFFA7D58B2A58F49ED0389D
SHA-256:	DCBE8CF9750C478A2D2A6FEB3109239EF70F028550E67480A6166A0FF89CB0F1
SHA-512:	3D3B01806DB6B5B1122E2859BDBFB63E884FBA4E9280612347394EE6A7D92CF39A70CF27CD3C567EFC0601907CE34E964C7007630434E7292EFEA542F581E1E5
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/00e4f72cc8d07e2964b5.ezimfJZlTtJey57m97Ax4xFG22d8BUDGW-mXRHxj1SA.js.gz
Preview:	............r.H. ...0.j..d...,.V.KfV.S....A$$.D.,..R%q...>....y._...?./Y.D....Ieeu..(. ...........0..w.._.;8:x...~..}>\|....?...x\|<;w[.iz.8;s&.$H>_@. ...a..G.x......0...E.]..A4....0.>gA..B......a..d....^....s.=.:.....i4..8j.^.E..._.A.......$.F..F.9.?..x8....p.C.....e.4.^L....(...o.pXo.n.....F..\|.g..B\|..c.w......z.~...7..?....m8.x<.. q\o...N........i._...x.M#.b.d.t2..`.F7.`....,........\|.R.,.s.:..s.(.x5@. .'.....:L.A..I}.....$.~w.D..:.O...e.x....8.....Mo.~..L.x.`.]..$...u...:..QV..}xD....4.&.......z.P......E0..z\|Y.....7.. ...>..(.).....?.N.S..t..}........._.:[7.....(..D..F*..a....0..<...gP.y.....S.g~.a....{..j......n.R......}.}7.y...x.M0....l...G..>...G....fz.'C....}7l]..i..$N..F.zD].T.H"3i..2..x. U4.^...y....3o.Z0U.;sg3.x{.w.v...[...w..7............[...'...zC........G...F9...c.....G.q...u.<.C...m....\....3..sp.C\....U.c.:6...M..b4l...b...N.#@.E...4.h.4...".^f......!...r]4].m..'.....?...V.v.\|...7&VI.K.. .......)K..R.h...........gf....T..{l

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 26110
Category:	downloaded
Size (bytes):	8415
Entropy (8bit):	7.9738896651434965
Encrypted:	false
SSDEEP:	192:lrI+BRWuh0+Ye5jismFJ0300+UMLJ4GzNy5VueREYiOsTL:eCsa5j3mFJ03Jm40Nyqeh0TL
MD5:	C31862C91E99891006CD762D645DC48D
SHA1:	165720E7E9809084A4530247D9ED2F28FF91ED8A
SHA-256:	F5673EAE751722BAAD1FF047014C77E51B5FC5E84FB970DB2D51A94E16A4492A
SHA-512:	2C7F9C473F0D9910ACE8336C263BA1B84B0417B680E7C8BCBFFB5C9F46AC9BFD41AD03D43C116BE306B9EAEC1676F1FA918B44600CF3B5EFF601B6439CFC8D25
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/02419c289b2cc43fe5ef.mApMZZrA0_77_F4UomVbkhteOHx43L41fkpjXFdH9ZE.js.gz
Preview:	...........]{s.6.._....9...%...<......#.&...."A.+...."s?.u....=..^%.. .4..._w..........xu\|z.....qvz.....'...5..n.t#L.v{..VH.{.Yz.?K....?x..=...\|3..i.?...S.`.,u..f......Y....t^..o..W..7....i`'..4J.........u..^G..HVZB..{._0'..J....... ...V.03.:....p_'....$2...5.N...N..Q}..T.-...N`R.\|_K.^L.......1.p...{..4..:VB...u`.4.$P....2.p.V.'.c.Y.g.V...-...M.(P.,1.%,Y.@.[.,.Ar.9.,..r......ub..Ul....bG%8....q.......`Y...~}..J..E.."Y..vD.3...3M..0M@..kIG.W.....s.qh..!#.o.q#....C.Z]...4...r.'...'...q...22<x5h.m..61..=.#..k....\|`.....~}.VK.....kk....k+..T....=..m.G../...!..i.......?R/....Ge9.E.~Q`.K/..V.,J:.D+...iP...T..7...g...-H}....J.y.)}.h..Y..HS?....T\..c....h...@...b...-.I%=...J.7L.m.........TyZ..dn........lF..41U...3.)x......%..[.Y.A.S.u).~r...x..T.....2l..L.K.8..%...RQcQ.xY?.B.y...R.WV... .....9...~Y.5..^.Y...=.S{...a....%......;.Y....'s..k.y...;..?I#dN.Y..V..../...d.x>.T.0....5L.kaA....Wo.u....z.:...;.1)>Cy......:q..w:Y..}hh......d&L.7..z\|

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6626)
Category:	downloaded
Size (bytes):	6691
Entropy (8bit):	5.216858318251075
Encrypted:	false
SSDEEP:	96:UwpykjSrzta/B5sE5dvZIn7tHcJVdo/8blghv6amD:3pykRAEvZc7tHcJVdo/OlKY
MD5:	ED21D0D400F96D285CAC25E268F46E9C
SHA1:	5052D27CECA009766D556F0220E0E248A346D67A
SHA-256:	146AC9BD4CF1A055AD761A5841B5B5382AFA1BD907A69F24D1CE73C42B315AF7
SHA-512:	8C54CBF3DE7C7F42EA0AF60546854F1E155CA7B0499AC9199C59AF7D92CCF0575A6AE0A963EED94095065E297AF06D256A97EFE60850BB217A85C3246414EDFF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-pagelet-shared.min-vfl7SHQ1A.js
Preview:	define("metaserver/static/js/components/loading_indicator",["require","exports","tslib","classnames","react","prop-types","lodash","metaserver/static/js/core/accessible_announce","metaserver/static/js/core/i18n"],(function(e,t,a,s,n,i,r,o,l){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LoadingIndicator=t.LoadingIndicatorStyle=void 0,s=a.__importDefault(s),n=a.__importDefault(n),i=a.__importDefault(i),r=a.__importStar(r),t.LoadingIndicatorStyle={DOTS:"dots",SPINNER:"spinner",BLUE_SPINNER:"blue_spinner"};class c extends n.default.Component{componentDidMount(){this.props.shouldAnnounceMessage&&o.AccessibleAnnounce.polite(this.props.startMessage)}componentWillUnmount(){this.props.finishMessage&&this.props.shouldAnnounceMessage&&o.AccessibleAnnounce.polite(this.props.finishMessage)}render(){let e={};if(this.props.className){const t=this.props.className.split(" ");e=r.zipObject(t,t.map(e=>!0))}return e=Object.assign(Object.assign({},e),{"c-loader":!0,"c-loader--spinner":th

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4052
Category:	downloaded
Size (bytes):	1219
Entropy (8bit):	7.844871843322954
Encrypted:	false
SSDEEP:	24:Xcmv48w7wz+e9f61XyK1pyS5IOJM0/BCUbTeLPcKmI2QZZr4mDr:Xcmo7wzjsQ8T5bM0/BzTalmIrDtr
MD5:	16E9719D264315CA6B7EF13859DCF551
SHA1:	5946891FC553137B8343361DE250FD62DE15E2A5
SHA-256:	9492B1F74D1005ED355DF4E8BD7A5D09424989E53ED19A49E13FCE0867CD337C
SHA-512:	D185BAC8D120CF05CCA6A83D059F49B09788AA04AA5942438D54E3B79E23E2C4255892E10227DB5B62D53FDAD2C682272D5E1D7889AA540EDAFDFDA1D48B7A46
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_jasmine_~1ca7a66a.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.ixdWsDn48iRVHMxQAzgAuo9ds-FDa6WGwOOI_r2D2Yg.css.gz
Preview:	............Mo.6.........b.d[vd...u...m.....l&.....D....E....k.bX.......9.L.,Bb[gQC..8zJ.N.k..l....4c....ir..UiT.&ZrF&;.n..K.U.a.h.!..0w-&..[.6[../7.l.PUQ.E4<,`........I.yX....0)R.......6...Gx....6....0...D.].k..J+..R..........#A8..Uc.....L.4..........2pTiJ...........$........)......,.NQm$.u.0..6.'i.=....\|.T.tuJ....=...k..l...}y....6...O..k...?.pjA.$.<(.;X..e'....T.......Y..2.Q..,.5......(DX.!..;e...y.....z;.....=.4.b.3b.i.....i.{..Vr.....v....l.....a.Jb..u.k.Lxl....2v._R..wT.....g..Z...6....c..c.......f..l.v....e...Kd~...m.7. 0..8.....I..4...lV...R../?..04.-A.n?...k..n.X,...Z;.......[k...!F....._&....b.......x.w..7...f...s..F......8j...'IAV..]f.p..q....$].t.t.T....wIw.L.9..ge:.".We.,....4.2.l......9...~.[.......u>.4.F...F..<f....fM.2..._...{...Q.....qp..P....{a..@b.t..BS.~..Z...(.....x.......W.g.0q..Z....\].\.....(...t.'.....q.W....,"O.lc.2..S.eA.!{.q.....!/..... ..PBc..<.2..1{*...w..#.L.U.`.J....E.V..{.C..+...f...T..A....p..+..nl......8.:..s....

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30369)
Category:	downloaded
Size (bytes):	30510
Entropy (8bit):	5.223113739669028
Encrypted:	false
SSDEEP:	768:3woZF+cT60/E3YN5WP6N8QALdxaNIF6nZ7ZhYD+Y+:33XTbEBP6URxCdXX
MD5:	3E480D9D1A06DA1AFDBBC2BE025CA33A
SHA1:	4FB6C9A2B02E56DC7A02C8234D9F772992E4F1B0
SHA-256:	6C83F232A8BAE0B3A5ADBC1C001795376C3056CC859AD03779DCD50194BFDE8E
SHA-512:	A08FC4CF437FD4599F7467BEF1CA3540CB0D3783C604C0298D9101EB43FE61AB47F41DB1879403E9D5E8C7BD77EC1793619D800D51CE98F973632363B5C16510
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/alameda_bundle/alameda_bundle_chrome_en-vflPkgNnR.js
Preview:	/! For license information please see alameda_bundle_chrome_en.js.LICENSE /.!function(e,n){for(var t in n)e[t]=n[t]}(window,function(e){var n={};function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var o in e)t.d(r,o,function(n){return e[n]}.bind(null,o));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	downloaded
Size (bytes):	630
Entropy (8bit):	5.104525783493949
Encrypted:	false
SSDEEP:	12:1bmyTbpTCTtuvpTjYZKIt7D3D3zCxLg9rjbNUzkHDAmL7WyLwV:1bmqbpatuvpjYZKIdD3D3zCNgdNUzkj8
MD5:	9996AB583D80B72842267A8252AD79B7
SHA1:	5604CD3694964D87CADBE6681AB19F31B83BA047
SHA-256:	CF34A4F97849257F5AE0AE6BAF148C0528BCE4B8536152696E3526762A68BAE2
SHA-512:	2108180C2191599180D7583E4397CDDB70BBA4669B6DDD7A4EE1256DE141F1D235328AC88437F955E0DF5A88544A810B27590288ABEE7D34D2038FCDBAB49AD2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/clean/uxa_pagelet.min-vflmZarWD.js
Preview:	define(["require","exports","tslib","metaserver/static/js/clean/analytics","metaserver/static/js/core/exception","metaserver/static/js/ux_analytics/ux_analytics","metaserver/static/js/pap/analytics_client"],(function(e,t,i,s,a,r,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.initialize_module=void 0,a=i.__importStar(a),t.initialize_module=function({UXAConfigs:e}){r.UXAnalytics.initialize(s.UXAnalyticsLogger,e,(function(e){a.reportException({err:e,severity:a.SEVERITY.CRITICAL,tags:["ux_analytics"]})})),(0,n.updateConfigs)({requestId:e.requestId})}}));.//# sourceMappingURL=uxa_pagelet.min.js-vflrd5ssh.map

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25581)
Category:	downloaded
Size (bytes):	25687
Entropy (8bit):	5.469170972270034
Encrypted:	false
SSDEEP:	768:SpMsx1Z70CvEjVJlMiDt4U5BNcGTSLKfwAINpj8:4NIyBj8
MD5:	2C466D28B739E073B3613922A4A17398
SHA1:	E3A3BCBED17213D86D5217758D847E08F27BFFE8
SHA-256:	7010F220D17CCC2F7EE223DBB52B55C990458546108D07053A625B1EC3A4F846
SHA-512:	DE111AFC702A1F47B89328C1261A84F25663192CC677A5FC7892CB4C4E23B048E2DAF1F9B7DF7E4031DB19E7897D8AAE3BDDC04E9C07CF9496492D54FE90B9AC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-browse-and-photos.min-vflLEZtKL.js
Preview:	define("metaserver/static/js/flux/action_type",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.withActionNamespace=void 0;t.withActionNamespace=function(e,t){const r={},s={};for(const a of Object.keys(t\|\|{})){const o=t[a];if(r[a]=`${e}__${o}`,null!=s[o])throw new Error(`Duplicate action value '${o}'!`);s[o]=!0}return r}})),define("metaserver/static/js/sharing/clean/util/guards",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.isEither=t.isBoth=t.isObjectOf=t.isArrayOf=t.isObject=t.isArray=t.isUndefined=t.isNull=t.isNumber=t.isString=t.isBoolean=t.isExactly=t.isUnknown=void 0;t.isUnknown=e=>!0;t.isExactly=e=>t=>t===e;t.isBoolean=e=>"boolean"==typeof e;t.isString=e=>"string"==typeof e;t.isNumber=e=>"number"==typeof e;t.isNull=e=>null===e;t.isUndefined=e=>void 0===e;t.isArray=e=>Array.isArray(e);t.isObject=e=>!(0,t.isNull)(e)&&!(0,t.isArray)(e)&&"object"==typeof e;t.isArrayOf=e=>r=>(0,

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1217)
Category:	downloaded
Size (bytes):	1274
Entropy (8bit):	5.1029774955694185
Encrypted:	false
SSDEEP:	24:8ghdoJainBR8+qIa3zsapGlsuG8Kh7HeAlzsaqhQs8USbFlQbPSF7LeL:bhGJayWDZFdxbC3NbPS5M
MD5:	129919CA46D84B3EE089A45A456206AE
SHA1:	1C9A18701CB5D3DE6D279F8E13460FD4DEAE9CB5
SHA-256:	B5346E33936EAF6481217FC40455E813C33A13D824D6520C7AEDED203BBE37EB
SHA-512:	E92F0BB9E8BBA9709F5EE058FE8709B97238A8EF52E13589B4A4A3633CD0E9386E18EDF90BB73B01B5D1B306DE77C07A18A6F1B1DBD7649466A9BE9754958523
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-badges.min-vflEpkZyk.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/badges",["exports","../../common/index","react","../../common/_commonjsHelpers"],(function(e,t,s,a){"use strict";var i=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(s){if("default"!==s){var a=Object.getOwnPropertyDescriptor(e,s);Object.defineProperty(t,s,a.get?a:{enumerable:!0,get:function(){return e[s]}})}})),t.default=e,Object.freeze(t)})(s),c=({className:e,children:s,inverse:a,status:c,...n})=>{const o=t.classNames114("dig-AccessoryBadge",e,{"dig-AccessoryBadge--inverse":a,[`dig-AccessoryBadge--status-${c}`]:c});return i.createElement("span",{className:o,...n},s)};c.displayName="AccessoryBadge",e.AccessoryBadge=c,e.NotificationBadge=({className:e,children:s,status:a,...c})=>{const n=t.classNames114("dig-NotificationBadge",{"dig-NotificationBadge--dot":!s,"dig-NotificationBadge--label":!!s,"dig-NotificationBadge--status-alert":"alert"===a,"dig-Noti

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5796)
Category:	downloaded
Size (bytes):	24524
Entropy (8bit):	5.292906767203005
Encrypted:	false
SSDEEP:	384:BlvvfWpDjd12DNkN8mOANNgi+Ys/IgBxgvrwvQ9b02DT08YO/utej:HvvfWpDjd12DaN8mOANii+Ysw/vroQ9l
MD5:	884599C944B2EB324C0B20EE52E563CD
SHA1:	0AD6BC351AD4D11EB343EA32107B8D0A92004E0A
SHA-256:	576BAE8C41C4A76C0522FA25A4453CF4105F071D3660E151E8FF7847242B1B45
SHA-512:	F95F7B0301013C5830666232B30D0C8239D8A86806BB7ACA63E785B804AA16DCFF3907382DEC4E7E10DCFAE99E74B92CB6E0642F12F49F4D8FCE4BFBFEF428E0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-account_core.min-vfliEWZyU.js
Preview:	define("metaserver/static/js/account/email_verify_reasons",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.EmailVerificationReasons=void 0,(function(e){e.SHARE_FOLDER="share_folder",e.CREATE_API_APP="create_api_app",e.PUBLIC_FOLDER="public_folder",e.GENERIC="generic",e.SHMODAL="shmodal",e.SHARE_FILEVIEWER="share_fileviewer",e.MOBILE_SHARE_FOLDER="mobile_share_folder",e.EMAIL_ALIAS="email_alias",e.CHANGE_EMAIL="change_email",e.PROMPT_CAMPAIGN="prompt_campaign",e.ADD_COMMENT="add_comment",e.SUBSCRIBE_TO_COMMENTS="subscribe_to_comments",e.CREATE_FILE_COLLECTOR="create_file_collector",e.JOIN_DISCOVERED_TEAM="join_discovery",e.CREATE_TEAM="create_team",e.NEW_DFB_TEAM_TRY="new_dfb_team_try",e.NEW_DFB_TEAM_BUY="new_dfb_team_buy",e.GIFT_BUY="gift_buy",e.REFER_FRIENDS="refer_friends",e.UJ_VERIFY_EMAIL="uj_verify_email",e.SHOWCASE_USER="showcase_user",e.CLOUD_DOCS="cloud_docs",e.REVERIFICATION_CAMPAIGN="reverification_campaign",e.CHANGE_EMAIL_

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 80256, version 1.0
Category:	downloaded
Size (bytes):	80256
Entropy (8bit):	7.997293870492385
Encrypted:	true
SSDEEP:	1536:b3v/dJWGemfrtJQQET8OP+Ec9DLJGXq3bhmj8WLsAhu9qT5C7zx94S:TvV0Gem7Q18c+Ec9D0q3bhmj3vu9qtCl
MD5:	9BE183D893FC4E9776E2AC5C30D05CA5
SHA1:	1C98D7DF402EEC10E05E276FDA9F097FC781FB79
SHA-256:	679054B9F305D91D3EB1DF88FA37A7490784E6E5AE6779A4335E7781504A5031
SHA-512:	AA7018E5397FBEE805D72C8A84AEA059634CCF01A9510B28DAECCB9A8A85457642DC08EB070D3478E73D51F387EB098B089A500709D954969A3DB310B22A96B4
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Semi-190618-Web.woff2
Preview:	wOF2......9...........9............................&..j.`..v.H..s.....D.....,..6.$..T. ..I..B..f[i....E.O?oa........IrV.1...;..ab..<zm..z_..l..t.v.4"=.%..!^%...........d.k.;.... ((X...4.....7..IL..@.K:. +a....n..M...x..V:.b...}....].Y..q#..r.q:...bvZ)....s.._.E....\..5.y.hm7.(....M..G.%I..75..(...Y^.k.."O.........1.7.zOjs.9.C..q...&.............../T...G&..^MR.;.1x..c.K..s.[..\{...RWe.q..G.V.fh#.x..J8@.......d.{.8uY.v.h....\Fie.>a..../.R.$..s.......... q..w;..o.b._........%.....\JMr7...nR..JF.$Y}J".,....'.-.(.pi......\..zX...b....M.:..,..B.>..~..t....N%.u.Z..<.<.n`....3.3'.EM..\|...Y.C+\|.'....Hm..U..u4..V._}...84r..A..U"...l...l>r..>..,kB2...&.1.rl.......[N....J...N..j..J....`!6Uy.........@l...$e`)7a.7a..y...s.Q!M.4.....t`..3.wg...YS.)..Wx_L.9!.?..z..."4)....U.z.:.+.C...K2.%.(...y..;L8w#^....=..j..T....J.-G.\y....P.c..XH......GDBb.j..H%dR...W..\=.....N.n]...Q.1a.E.v*.W.!..d+...oq....0.nI.H.T.. b..%Q&H..Q.z....cD..X..c."V.o.o.~.j...

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2517)
Category:	downloaded
Size (bytes):	2574
Entropy (8bit):	5.089037126818044
Encrypted:	false
SSDEEP:	48:VB7YcLLciAVB2YC9cEiAybBA0YobbBAqqkoSNIjuYtD:UcLwiKC9cEidYotqk8
MD5:	D168BFB5D6227A80BB469DAC84D62DC6
SHA1:	9DA5E0EB26A4BEEAE93B2A46E95F283DCA569F04
SHA-256:	2BDBFBD3E89725C9B390171D122F0C6289207AD3349B50BF637A21E28450D080
SHA-512:	8DA2B87C19A1B8B9E9A1D2D9C7CA45CD115626945BF55874C71F37F975196B9817741996F5507E16B629481975E62A239CA745BDC8088C44CBF2243BDD2FD787
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-files-page.min-vfl0Wi_td.js
Preview:	define("metaserver/static/js/logging/hive/schemas/web-largest_contentful_paint",["require","exports","metaserver/static/js/modules/constants/request"],(function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LargestContentfulPaintEventRow=void 0;t.LargestContentfulPaintEventRow=class{constructor(e){this.category="web-largest_contentful_paint",this.user_id=null,this.country=null,this.referrer=null,this.session_id=null,this.user_agent=null,this.ua_browser_name=null,this.ua_browser_version=null,this.largest_contentful_paint=e.largest_contentful_paint,this.product_name=e.product_name,this.request_id=s.REQUEST_ID,Object.seal(this)}}})),define("metaserver/static/js/logging/hive/schemas/web-time_to_first_byte",["require","exports","metaserver/static/js/modules/constants/request"],(function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TimeToFirstByteEventRow=void 0;t.TimeToFirstByteEventRow=class{constructor(e){this.category="web-time_to_first_

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (18958)
Category:	downloaded
Size (bytes):	19020
Entropy (8bit):	5.249691561258687
Encrypted:	false
SSDEEP:	384:Dci4Vkliep/HPEKgG4wP78aSCJUAwUhJw/818LkyLqRop4/PJ7G4TS08r0yogyOt:5lia/HPmG4wP78jCJUAwUhGxLOop4/d8
MD5:	198CFB8F56429233786FE282F54B558F
SHA1:	D9DB9C77143177312B419FA0EC250E7485D7B72A
SHA-256:	BAF37E1294D363F362E57FFFC02FA48F2A77EF393107DCA863125C99669E4765
SHA-512:	8CDD1C3C2889B458ECD695C02B4F9218EBE984D756E264D498BD3C02B5288EF416D1B35752A3C50182A44486FE71F51D01F902F447422E7F7B568F04A8051E0D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-deprecated.min-vflGYz7j1.js
Preview:	define("metaserver/static/js/deprecated_ajax/ajax_jquery",["require","exports","tslib","@dropbox/ttvc","metaserver/static/js/user_centric_perf_metrics/component_visually_complete/ajax","metaserver/static/js/deprecated_ajax/job_progress","metaserver/static/js/deprecated_ajax/util","metaserver/static/js/core/persistence/storage","metaserver/static/js/modules/constants/ajax_strings","metaserver/static/js/modules/constants/page_load","metaserver/static/js/modules/constants/request","metaserver/static/js/core/assert","metaserver/static/js/core/attribution_header","metaserver/static/js/core/browser","metaserver/static/js/core/html","metaserver/static/js/core/notify","metaserver/static/js/core/uri","metaserver/static/js/clean/csrf","metaserver/static/js/clean/viewer"],(function(e,t,s,r,n,o,i,a,c,d,u,l,h,_,p,m,f,g,b){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.SilentBackgroundBeaconRequest=t.ValidationSchemaRequest=t.SilentBackgroundRequest=t.BackgroundRequest=t.WebProgress

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1859407
Category:	downloaded
Size (bytes):	469214
Entropy (8bit):	7.999250280608447
Encrypted:	true
SSDEEP:	12288:X9B+J85Ii08QW3O01ra5q6JM0rYRx4atN6:NMcIiP3OU8JhYRxLu
MD5:	7BC1B91FAF9D93A22E801C231E6F9078
SHA1:	3CEEA1900E82CFF450F5296C08514CD2BBA11491
SHA-256:	6353E87946902E49B300F3E72987DD9DD3D4608386857D9B9CF6EEBD232E9B7F
SHA-512:	E7C453973E4C280F74959D0790EEAC810DE6333CC3377CE865433753510E59DA36DD8689EEDF91B90E376FDFD2D9B306B1D5A0B54A7C23131A9FE792B56221EB
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/e1bc9664cd927a5217ca.Wqovou_Yti7G8yY3_MC3rgY9LTbMwHwduywhmvmZ3ZY.js.gz
Preview:	...........kc.(.].Bf.:..Z.W..a\|.z.g.:~.$q.ZZ.$.......[.oU. .>$..d7.....B.P(................9...a..............jM....1&..=.....(.{.`.{..c/......Y,?...0.......~".<7..En....\|.t...;...cwfn}.Z.(.y3....B...ZO.....~......y.A}..Lm..c.I.M.f.O.n0e...I[.Q.c..C.{....7}'4.,;.?.,.?.?Yv.d.ZO.g.......t.G..n.G.i.Q.(d.I.=...i.......OZ..0.;.....?.Q..s..i..&...\|.....8l.....j...lY.5.....&.......=t\|..7I.ah>a..M.ho...jtjZ<q.Qk.~77.....gJl ...7..Z.K+..[..9.<.......!...#..C........Q1-.q9...c.a%.X,....X...\|@.#I.(....k.5.H....J..X. ..zM...T..U.M..4..a..C..i..!..a7.'.K..<bX."..5u..Q.z..s.'}~f....:.3.R..&.t.....8...{...c.. >...JM#T.............f.V.....;..x....5ik...61C.8>U..`.0....Va.vlK 7=.....V...P.f.E..>Y...U+]4.\|j1.....\|.2....e.\|-.....}/o.(........bR.O[V...9,.K.c.E......\|...?......l.6...........YF`CA......!G.O~s..{..!L....Y".f..n._?/..D..........!...G.g.c.7A.wh....v.h5o. ..2...-.Qcn....X.8_.i...U...P"..F.....K\|h.J..e..k.n~.l..!....-{.......nZ..KA......G

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 612
Category:	downloaded
Size (bytes):	375
Entropy (8bit):	7.512342751871064
Encrypted:	false
SSDEEP:	6:Xtz6LKGWcCA79+xbR1iZUC/2n22vfrBVzLE4rOy6vJyAeP67SmYf5QGhf1kNSmsF:X4+A7WEO223HvayPydQ5rp14szZP
MD5:	8D9717A9089198E500FFB96046CE911B
SHA1:	5EDCD53AB017C65B4E590250B322160B8E423F3B
SHA-256:	E24563BD2DFB05CD9FEB78C8002432CFC703D1A15D1639BDDC80947C11B14396
SHA-512:	D50E890F8C1268476AFED270B328CDA2CBF1C8DFB6B2282531133B34368B1EDACFC15DBEBD08C7FF4E28BDFD2E2A9ED9EB1CA8EF842AEA63298C6746EA7CC29D
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_cloud_docs~paper_pifs.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.LUMAba36qYZ-DzDv4MrULp74GhS0Iy4bZkavuZvI-QA.css.gz
Preview:	.............n.0.....H.$Q!@.K@....C.C.....`..l.. ..ew[.J......?.............-..Ec...K.Gpr....;.#~f...:1g.<.biA...'...pgq,Y....0.....q.X...M..g=.l.....R;7....<...4..z ..4...P...{..(..,M....A.F?E^:D.m..l.9>e.C.\|y.,.@......~4...t....qcN..B........B.R.W.\|\|..5.....9.Z......(4...+...w.......C.yr....d..?..X..R.b....,u>A...*O..u.VyQ...kKy.].a..r_...>..^\...F.ld...

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23988)
Category:	downloaded
Size (bytes):	24056
Entropy (8bit):	5.018412881309393
Encrypted:	false
SSDEEP:	384:kKEo7fGfnRVxy5bV9qOU2KBxKTWQnhUJNgvIDPDoHMdlH8OOIKTvD2EXBiAuMQDG:k9fnRVxy5bV8B4TWQhUJNgvcdlcOOIK7
MD5:	E9001E5D5501946B7BC5894FAFC6D370
SHA1:	0542DC6EFB39DB8D1DAB4692FABA90F5CCA9EFD6
SHA-256:	10F0C28EE7B5493CE2A94D61ECC4E08333454C7D4D5C514E311DD7E3838A35FB
SHA-512:	CA32814E88D0CAB60926257F73752888E5C3BD24B9D280BB71DA322B5FF4E77840F7B68370443315435AAF5CB52EF00B8397F5FF5CAE633E72FD92F45BDCC918
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-file-viewer-constants.min-vfl6QAeXV.js
Preview:	define("typescript/dropbox/proto/js_init_data/file_viewer/enums_pb",["require","exports","@bufbuild/protobuf"],(function(p,e,s){"use strict";var t,m,o,i;Object.defineProperty(e,"__esModule",{value:!0}),e.FileViewOriginType=e.FileViewTargetType=e.PreviewSourceAction=e.ShareModalVariant=void 0,(function(p){p[p.Off=0]="Off",p[p.Closed=1]="Closed",p[p.Prefilled=2]="Prefilled",p[p.Unfilled=3]="Unfilled",p[p.LinkSettings=4]="LinkSettings"})(t=e.ShareModalVariant\|\|(e.ShareModalVariant={})),s.proto3.util.setEnumType(t,"file_viewer.ShareModalVariant",[{no:0,name:"Off"},{no:1,name:"Closed"},{no:2,name:"Prefilled"},{no:3,name:"Unfilled"},{no:4,name:"LinkSettings"}]),(function(p){p[p.None=0]="None",p[p.Visit=1]="Visit",p[p.Click=2]="Click"})(m=e.PreviewSourceAction\|\|(e.PreviewSourceAction={})),s.proto3.util.setEnumType(m,"file_viewer.PreviewSourceAction",[{no:0,name:"None"},{no:1,name:"Visit"},{no:2,name:"Click"}]),(function(p){p[p.PRIVATE=0]="PRIVATE",p[p.SHARED_LINK=1]="SHARED_LINK",p[p.SHARED_C

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (830)
Category:	downloaded
Size (bytes):	882
Entropy (8bit):	4.831614021479653
Encrypted:	false
SSDEEP:	12:QTgfxNBd52LfhB9nrddskeEoRcpJkpjNT2nOe9Iu2RuhMDJ43qK4Km4nTgfxNBdd:8ghdEbhPsSQuadxH7GghdbapuaXs/x
MD5:	5BAC96F7F677229D5DC860C2A27780D8
SHA1:	6D790B359D0311B4E445ABA49866D6254DD1E556
SHA-256:	E11B08E0F7E33745697403C79824CA08D5A41A3EA95CBC939605285322E7C2B0
SHA-512:	F875CCC1838F9433987D6AC2ECF34B57571A3232D44295DD3B06F194AEA194CABE8AF874A3061F3E5C7A7279DEA92002F6E9FB8974AE733F52DD65282C9D6C3C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-d.min-vflW6yW9_.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/buttons",["exports","../../common/index","focus-visible","react","../../common/pictogram_icon","../../common/chevron-down","../../common/index.esm3","../../common/index.esm2","../../common/_commonjsHelpers","../../react-transition-group/CSSTransition","../../common/extends","../../common/Transition","react-dom"],(function(o,t,e,n,s,m,c,i,r,d,a,u,p){"use strict";o.Button=i.Button,o.IconButton=i.IconButton,o.SplitButton=i.SplitButton,o.StylelessButton=i.StylelessButton})),define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/typography",["exports","react","../../common/index","../../common/index.esm","../../common/_commonjsHelpers"],(function(o,t,e,n,s){"use strict";o.Label=n.Label,o.Link=n.Link,o.Text=n.Text,o.Title=n.Title}));.//# sourceMappingURL=pkg-dig-d.min.js-vflmKf2je.map

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 64584, version 1.3801
Category:	downloaded
Size (bytes):	64584
Entropy (8bit):	7.996835296394317
Encrypted:	true
SSDEEP:	1536:OflHh/Z3j0qlC0emW75hltTVIAXu+O+TFaCkGt:EHdSKCXVTDFZ4Gt
MD5:	197F00BE92B49F2CCBA2E43105AF9F7D
SHA1:	14922675CC816A3C7538E7703E2D8A143A75C99E
SHA-256:	B6CEE80EB7532FF69B4038A549FE5B51FD10E55B025A2EB01B8D781B806FD88E
SHA-512:	C7A0EF16F2B4A01D9E1FE5D855FA2DBC970875134C203A58A1F1748CC468ECC4814BF69AAF4EB44DFB727C32AD717C85B260487BCA1E1DB5B266C0F27F11AD9A
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/SourceCodePro-BoldIt-1058.otf.woff2
Preview:	wOF2OTTO...H....... .............................F...I.....H..>.`....6.$..p....:. [2....F.n..A..Wv..}z'E..'... (.o....5....4l..oCmf.......M..[...vwi@(.i."X..;/..!$....i..y/.m..y.$....F..)...I.F.mtt.w.@8..g._..mi.pd....5.J.d........5NZW..]~.......aEX.V....).....HHO.F.e#.pF..I...\| 1}7..J)..<....q......7...+..X....!Bf=...4.e...HH....}g..0P...M..#..y+...^...\|.......$...Z........B.3..1.c..-...:3.v.KD.j..{-.#..'..X\|..$...k.&$...2W(..[xrUU(.;n3..f.......N....,2.....9Q?.3f.N...EaZ.......cJ).d..1...~%q.`.\X.b....p..b.....1.v50J7.WZ....PA..ye.d..E...q..U.....>..#...........l....fU..L....Ju...?NoJ'.SE...S........eP"Z.X.....7."KH.,+aE$%=].!b.p..d<.p..1#..1d...b.0!r..!.9L...Q..g.Le"T.{~.._....zU...7.ph.}0.x...33..........A....D,X`..........:.>.?...".Y=4:..=$kx(. .O.....tf...:.....$%k[aD.g.u...L.3...[W..w$^.g ....-Y...v.s...[.)..7.......%....7.D&.....Mrz..u.{......x...y.@d.9...CyR.../....0...iCN.:)X...R"......6..Y...u....w..B...Xh..,C.'.q.....

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11124)
Category:	downloaded
Size (bytes):	11177
Entropy (8bit):	5.241066668517427
Encrypted:	false
SSDEEP:	192:6QpKS6ABz4bzkwa/52gX2ij2VEfLYhnljLkebphslw1LeAkm7tJksbKuV:6fah4bgh/oAj2VZhndkebpdedm7TXmuV
MD5:	528AEE02BBF32A047A83EF6560BFC119
SHA1:	AF1A13081E99A5EC54AF4649DB0B758560633104
SHA-256:	1DE72E442ACA56828320F887256BAC59D4E89F206AC439180E024778EC95F5E4
SHA-512:	A7C34EF81EAFF773B1DAFAE382CEE9607517E21F5116C1F96684CDC9A9E66816136CAC8021DF2347181BD110024DF5B9589E8126D1C2AC183D60859D9424BF54
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-coreui.min-vflUoruAr.js
Preview:	define("metaserver/static/js/clean/init_react",["require","exports","tslib","metaserver/static/js/core/exception","react","react-dom"],(function(e,t,n,o,s,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getReactInitData=t.mountComponent=void 0,o=n.__importStar(o),s=n.__importDefault(s),r=n.__importDefault(r);t.mountComponent=function(e,t){let n;n=null!=t.component_name?e[t.component_name]:e;const i=Date.now();(function e(){const c=document.getElementById(t.elem_id);if(c){const e=t.component_name\|\|"unknown_react_component",i=new a(e).start();try{r.default.render(s.default.createElement(n,t.props),c),i.end()}catch(e){console.error(e),o.reportException({err:e,exc_extra:{componentDesc:Object.assign(Object.assign({},t),{props:"redacted"}),domElementExists:!!c}})}}else Date.now()-i<1e4?window.requestAnimationFrame(e):o.reportStack("React container not found in DOM after 10s: "+t.elem_id)})()};const i=!(!window.performance\|\|!window.performance.now);class a{constructor(e){th

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 402323
Category:	downloaded
Size (bytes):	116150
Entropy (8bit):	7.997100306476673
Encrypted:	true
SSDEEP:	1536:I4JOG/HUL+hag6kPOTihCrqZmLxARTaMmyBmNBTiIej8wnW2HonR2bJdDWP:I4Jlhk+OOqnxAvVBqpDej8w5InR2bJk
MD5:	AEC76401B3EA856665A74F68B798E8C4
SHA1:	0B64D6EB046C2C52172BFF3831B87167C2525076
SHA-256:	73DF76B54F1D24BCEE6C3D1F6894065636DEFB4B85A2C9D7EF46D771878A85C8
SHA-512:	21887BCD8BAC6FF7EEB1DE0CAD9613DD4FCABEADF22F69FA52109D1796EDE2CEA66817853E53C23036B22783A91653D9DBC3D542FBA9AADBD0982103A30BE8CD
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/6e501f8b9009ee898fc6.wFEyMPzjGdp0HhzwUx04Vd1h31nD7XJiB3IVsODHoBk.js.gz
Preview:	...........mw.F.&......6...h...(v...dlG.....4E..)R!).N......$.d......g.....~....z..z4........7...v....?......y....B.....su=....?........U.j0..wq9.4....x..r4x..t2~.<.,......b<p?.......~..Eo>\|..^..r00.?..zG....I.1.N....G.._...h............Pn.w.G._N...\|1Z.z..+.._g...l...;\..;.......z........d2..w&pw./{.h.`q7=<.=Xt&w'.G}........x4..YR.......%....n....u....]e1...W.^.pw2x.=..\|.................O.....<.........G........k..^..D.w........1......\J.....]<h...$.\|2.....x...._Lg.{...u..'..Gw.........N...OG....g)..t)u;.w.~..<x.`..j0}.9..{..?7....6~...3.,.....z1.{...G..'.4~t.......<8....Q...D....u........O.....;..0ht.X....] ..\|.....L...x0y...M...g.............>..p...k..q.............4.?.....N.:....D...'...`4.8A}......Aov..wG...>..-.....qg:y...^..4vm.R...@:8...M...>....;`.2..\|...M..u.......n]...2............`-wdin.+.6..\.0....29.*..t"e..Y...VY...H.z.kG.....(.+.Fql....y.G~K...._~..8;.....w3q.{..^..x....hc...+Z....,N..>.r..~P....\&.6.i:.....w'B3.... ..qp......

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 45281
Category:	downloaded
Size (bytes):	15547
Entropy (8bit):	7.983148497564046
Encrypted:	false
SSDEEP:	384:XEJgo433kgzUM/EEnUFhdx6DZgIjoeFgSDGsA+hgL+:4PyUM/XIzsvjt7DGsN+C
MD5:	DD977C5BF0413B561E91851DC4A22D24
SHA1:	32DB7E116C442823579A8D7AB56D185AF1E07379
SHA-256:	09002C2634297034055918CDEFD68ABAB214FFEBDBEC1333C83A228C45E3F33C
SHA-512:	1DEA88BE741584C7EA72E92B0BF6582DA7DF950E579850573B58E4DCD849A947826E917D4F9B5F2767BA69FEAF32BC2EE78D4BEDF0E5DB84A02BA1E89941F286
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/44358a50a900da035ada.LGT6HPSCk03xwXtkplDP_6Ti9yb6DDIdp68pzO0HY98.js.gz
Preview:	...........}kw...w...'[..aFr......N.6.S;i..MA...TI.H.....A....>...e. ....ya..o"6.o........^........\L&..56...qWY..G#.B.$.?.`E..%.L.}....p.g..4.uU...N.4...\E3..:.7..-.1Y.....Y.B......Y[YJ.)O..[..Ml......z..4M...Y0.S.....:.<KX;.:y..G.(....7Bx.5...6....Cb?q.....}.!.o..e......(...r.P.q..k...KH.....#......u....C?...F.........U...:........5..9....W}..0....KzE...t.0.....@.. r.Q.Z.w..bW.$..w....dF.......n5?.....:0l;./.K..._....,i.mY.....7n..El...+..NX.ki&P....X.9...#..5..%.....$.q(......R.6K.5w..*Nx...4.ty;.o...F:H.. y..%es..${{.ZN.>J...R.].$.\R..l:}.\..Y4...N.X..2.V....{.D\=sH...#..;.....I.\|...<..D.....`.]UX..cm:...'k.e...F..2..{..\o........%z$j.....0.......0.....e.L5.T...pD.`s.-9M.b,y...&.h.&..r....N.D0y7X..wv..T.%E.............$..)1.D.5.$>.....t...o......c..;q.....8..E.kjH.5...{..1m.....}....g......t.......E.. ..q,..H.CJ94.c~..g.a.QjL..(H..VAA...T.:.'. .4.R0..0l6e.R...af8.i.x...D...i...:\|..7mFo..tFA...8I.K._Di{...y..R...x.,..N...4...N.F.,.tj..

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10571)
Category:	downloaded
Size (bytes):	10640
Entropy (8bit):	5.19744661953822
Encrypted:	false
SSDEEP:	192:btmgw+JM5GvKo2mV+e5YFke6flisOHwQ0OnD03/DKFC:bQlCsflg7vtisOHwQbqiC
MD5:	3017413C1039AC5D7B281B1494D01F96
SHA1:	1D9DE23158947114E002F7A2599746D9E9AA7012
SHA-256:	CF4228AE7348BA2A15EE5B3E1903D2216CAF84A06586DA83B9D3BCD1F05ED62C
SHA-512:	E644F380EB2B1ED613098ADFF194B6F9857CD4A218FEEDCD1D0841C9EB3FCE2AE6C5DE5361893242F860AA9EBBF78136801E204A3FC88EF02FA42DEA66D0E7D9
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-react-transition-group.min-vflMBdBPB.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/TransitionGroup",["exports","./Transition","./extends","react"],(function(e,t,n,r){"use strict";var s=(function(e){return e&&e.__esModule?e:{default:e}})(r);function i(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function a(e,t){var n=Object.create(null);return e&&r.Children.map(e,(function(e){return e})).forEach((function(e){n[e.key]=(function(e){return t&&r.isValidElement(e)?t(e):e})(e)})),n}function o(e,t,n){return null!=n[t]?n[t]:e.props[t]}function l(e,t,n){var s=a(e.children),i=(function(e,t){function n(n){return n in t?t[n]:e[n]}e=e\|\|{},t=t\|\|{};var r,s=Object.create(null),i=[];for(var a in e)a in t?i.length&&(s[a]=i,i=[]):i.push(a);var o={};for(var l in t){if(s[l])for(r=0;r<s[l].length;r++){var c=s[l][r];o[s[l][r]]=n(c)}o[l]=n(l)}for(r=0;r<i.length;r++)o[i[r]]=n(i[r]);return o})(t,s);return Object.keys(i).forEach((function(a){var l=i[a];if(r.isValidElement(

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2779)
Category:	downloaded
Size (bytes):	2848
Entropy (8bit):	5.3854277849026
Encrypted:	false
SSDEEP:	48:449rarz+zY+zmm+ZBNzGjSzXTWsa1LgblASaRaFyebnVc/wZ9Ro1zB8/z8z7z8zz:40r0eYeN+ZBNzGjSzXTWZylAIFyebnVZ
MD5:	32BD02B335C35C4BB804AA5F6F500D7A
SHA1:	105EC0F585DE6F41E2C28DF5DE5FE83FB76B63A2
SHA-256:	B7F4C3FD895479FE164C006FB55B9ED930F449BE25829EDD65881939A4FB96AF
SHA-512:	55F6EEABC0518293CAA5C55A2E2C75CE436A5020BFA0AB28155EB189DF8D3F93018DD0C1876B31DC6425D5757F43688207D560BD030A75A4265A91802D178B04
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-lazy-ux-analytics.min-vflMr0Csz.js
Preview:	define("metaserver/static/js/clean/ux_analytics_globals",["require","exports"],(function(e,r){"use strict";Object.defineProperty(r,"__esModule",{value:!0}),r.DBX_UXA_GLOBAL=void 0;const t=void 0!==self&&self?self:window;t._DBX_UXA_GLOBAL=t._DBX_UXA_GLOBAL\|\|{},r.DBX_UXA_GLOBAL=t._DBX_UXA_GLOBAL})),define("metaserver/static/js/clean/lazy_marketing_tracker",["require","exports","metaserver/static/js/clean/ux_analytics_globals","metaserver/static/js/ux_analytics/lazy_ux_analytics"],(function(e,r,t,n){"use strict";var i;Object.defineProperty(r,"__esModule",{value:!0}),r.resetForTesting=r.unloadMarketingTrackerLoggingQueue=r.pushToMarketingTrackerLoggingQueue=r.registerLogToMarketingTrackerFunction=r.InclusionMethod=void 0,(function(e){e.BASE="BASE",e.TOP_FRAME="TOP_FRAME",e.CLIENT="CLIENT",e.NEED_TO_DEFINE="NEED_TO_DEFINE"})(i=r.InclusionMethod\|\|(r.InclusionMethod={}));r.registerLogToMarketingTrackerFunction=(e,r=i.NEED_TO_DEFINE)=>{t.DBX_UXA_GLOBAL.logToMarketingTracker\|\|(t.DBX_UXA_GLOBAL.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://account.live.com/Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1483)
Category:	downloaded
Size (bytes):	1550
Entropy (8bit):	5.215352338162081
Encrypted:	false
SSDEEP:	48:1aAZD6tUraFCEzQzV/de+IK1u1zfDd/Dw+8MMUz9p:lZDviB8t5gfDRDp9p
MD5:	CCEB6629B5BD8A8AB3ACA01ECFB2C96B
SHA1:	A5FFC50AB9090B300C91A5ADA436A2C00D7BA400
SHA-256:	8A82F78C5D142BBA443AE69FD392D7FB03F315381CD37D2C6C9EDF78F238A190
SHA-512:	CDFE46DF35220E17C820B669712560D27BCE707953046D37BDD5F72FA06841BF5A2C000EE8FE609C9CF0FC0CE2D2DDE25BA1A8609C0C0E4C177E3CA2DE0E96B0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/window_history_listeners.min-vflzOtmKb.js
Preview:	define(["require","exports","tslib","metaserver/static/js/ux_analytics/lazy_ux_analytics","metaserver/static/js/ux_analytics/dispatch_custom_event"],(function(t,e,a,s,l){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.installHistoryListeners=e.lib=e.SPA_HISTORY_STATE_CHANGE=void 0,l=a.__importStar(l),e.SPA_HISTORY_STATE_CHANGE="SPAHistoryStateChange";const i=t=>{const a={detail:{eventSource:t}};(0,s.runAfterUxaListening)(()=>{l.dispatchCustomEvent(e.SPA_HISTORY_STATE_CHANGE,a)})},n=history.pushState,o=history.replaceState,r=t=>{i("popState")};e.lib={oldReplaceState:o,oldPushState:n,resetHistoryListenersInstalled:()=>{self._DBX_UXA_historyListenersInstalled=!1},getHistoryListenersInstalled:()=>self._DBX_UXA_historyListenersInstalled,installPushStateMonkeyPatch:()=>{Object.defineProperty(history,"pushState",{value:(t,a,s)=>{const l=location.pathname+location.hash;e.lib.oldPushState.call(history,t,a,s),l!==location.pathname+location.hash&&i("pushState")},writable:!0})},ins

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1312)
Category:	downloaded
Size (bytes):	1369
Entropy (8bit):	4.98826817172651
Encrypted:	false
SSDEEP:	24:8XYLmq9Vu5N0dpnBcdATZyMTmuz9VIvguvQ5AIKvewL:IwOaJBcdAThTvzP8Q5AX
MD5:	A05BDED48437652A9F90A7291409EB33
SHA1:	2AE12BD7AE556E1B38C761595860302DB34AC8D9
SHA-256:	9CD33F86489E059EC2820774194A26FA73471D2456669212B6D7D20372466F3D
SHA-512:	380FC67EB4F4E4FCC2440C7CF1F6C1BC2BC4204A601B57C77A11752788E005C4B41C691C9D4000F237356088CD882DBD2452B184C2ABF999A78EF7428D941A60
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-file-store.min-vfloFve1I.js
Preview:	define("metaserver/static/js/file_store/utils",["require","exports","tslib","js/filepath/filepath"],(function(e,i,n,t){"use strict";function r(e){return"fq_path"in e}function s(e){return e.is_dir}function o(e){return e.is_dir&&"fq_path"in e}function l(e){return`${e.ns_id}:${e.sjid}`}function u(e){return s(e)?o(e)?t.filename(e.fq_path):e.filename:r(e)?t.filename(e.fq_path):e.filename}function f(e){return 0===e.bytes}Object.defineProperty(i,"__esModule",{value:!0}),i.isSymLink=i.isEmptyFile=i.getFilenameWithoutExtension=i.getFilename=i.getExtension=i.getFileRevisionOrHrefId=i.getFileRevisionId=i.isBrowseFolder=i.isFolder=i.getFileStoreId=i.isSharedFile=i.isBrowseFile=i.areFilesEqual=void 0,t=n.__importStar(t),i.areFilesEqual=function(e,i){return e.ns_id===i.ns_id&&e.sjid===i.sjid},i.isBrowseFile=r,i.isSharedFile=function(e){return!r(e)},i.getFileStoreId=function(e){return l(e)},i.isFolder=s,i.isBrowseFolder=o,i.getFileRevisionId=l,i.getFileRevisionOrHrefId=function(e){return`${e.ns_id}:$

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6631.16/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50152)
Category:	downloaded
Size (bytes):	50214
Entropy (8bit):	5.204902057270298
Encrypted:	false
SSDEEP:	768:0M9Krs/TXMvn669MUiEC3oMUhznuKhTwedy6q4lypdDF4x4wbzy/K4IJxZ:l9RyOaGeUH4caKGZ
MD5:	3F9D4F8DE42CBE3D670525312F9867DE
SHA1:	99542560D3066150997ADC7A366E0915DDB57697
SHA-256:	911371BF4FC8D1AA5E6C4D39FC858D5341F86E9808145EF270600197ABCC3D48
SHA-512:	5FC7417B9B7CF39E383861DAF67D10B62A1B7544C49BA185624C0F0F0040B8097174552CBF26F5782FEFE5CC02FE447AE7075E83DAE59C4529602ACAA2E73FE6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-notifications.min-vflP51Pje.js
Preview:	define("metaserver/static/js/user_notifications/notification_tray_logger",["require","exports","tslib","metaserver/static/js/deprecated_ajax/ajax_jquery"],(function(e,t,i,s){"use strict";function n(e){s.SilentBackgroundRequest({url:"/log/notif_tray_events",data:{event_dict:JSON.stringify(e)}})}Object.defineProperty(t,"__esModule",{value:!0}),t.logMarkAllAsRead=t.logTrayOpen=void 0,s=i.__importStar(s),t.logTrayOpen=function(e){n({event_name:"tray_popup_shown",badge_count:e})},t.logMarkAllAsRead=function(){n({event_name:"mark_all_as_read"})}})),define("metaserver/static/js/photos/batch_thumb_loader",["require","exports","tslib","metaserver/static/js/deprecated_ajax/ajax_jquery","metaserver/static/js/modules/constants/env","metaserver/static/js/core/uri"],(function(e,t,i,s,n,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.BatchThumbLoader=void 0,s=i.__importStar(s),n=i.__importStar(n);t.BatchThumbLoader=class{constructor({batch_size:e,max_parallel_requests:t,on_batch:i,

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2798
Category:	downloaded
Size (bytes):	983
Entropy (8bit):	7.776784006473983
Encrypted:	false
SSDEEP:	24:XBGHCtUpGGnXHMsW3pYUhfKxtu36HalQWFhsQLV+oWznnuAjCpmU4l:XElpGGXHfCpThjcacc+DzukCpo
MD5:	18A2A3D9663031CD85330B94C763BAA0
SHA1:	F71F54FB49B610A12738E366D6FC0297E407916A
SHA-256:	70648327E5633AD695B318E185496BA7B70295EAA75EC2E008F65B4DC5249089
SHA-512:	0C7441AD751011EFB8F884053932D5CAF34288A0BF9D13034EDE2BE14D7D0AABB5080E15A2420DD955989DB183BCB4D774095A9AB29C506BBEB4034A10EAD9CA
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/bootstrapshim_IX6xrWCoGcREOsbbsQ1Yvg2.js?v=1
Preview:	...........V..6...+l".I..N.)`G1.&A.-.b...,h..bF&....a....M.....\|..9...l..+....,....hg.......H..}.:.\|y.eW6V...wg...Nv[7.....v.4............l..[v..4..q..7.P.....%6.;.%T...s.a-....e.........(.o0.`.-.f..(..$..T.7.V..9.H..q.QV...z..M.Jn6PQ.. ..uCX.D.X..../_?....]\| }&d.D.`..J.qY.?w..Z..DVo6E.a....<..Y.\.@...G..Mh....;lST.c..9/..x.....z<....J3....(.A..c..2y.Ri...C>.H..7.BL.....$.QL..s./o...w)*d........&..Tz...k...-X.w81...cY.=.d]....E..V..&.c...QDTR..SP.O...P.....<..j.B.0.3\.=..n...>C&v..."t....CgC.f..t....;....t.Q.a.R]......U.....ZtF1.?q..!..:......v^L...0.....8.]..yt....C.5...\ul..$.A&.....@.zyY]v.[.#..z.?.....2.;W..9.E....X.+~G..@=.+h.j.Km....:...1.#.....M=.+4s..../.~.......`....q.e:`R.V..y.[...!K..WH.{`.~.9.a..?..y...N.o....;.nN&?}........u..-.tV..P....`.Xae.O..<W..l.,JDQ..Z..FLO.Z..n.3......r..+.0p..`q2...L.m:Cl..4h.....A.....#.6l..:x#D ...:I^..d.M,#..)..W...{A....6.;.8..o....cgKs<^.v......aYI......<.'.B5..lf.kX..)[...]......

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6631.16/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9028), with no line terminators
Category:	downloaded
Size (bytes):	9028
Entropy (8bit):	5.2055101815002125
Encrypted:	false
SSDEEP:	192:epfigVSPs7ns7nXpVgAy0/0NxfU/S0fUNRf0QaUax0EUNRf8GKbtOOR74s2:ePVS07nynXpZy0/uxfKS0fORfTaUax0t
MD5:	D66AE4644B136B468507E2E758E2C732
SHA1:	8540307D3EAA68D1540AE501E1D0A65682249B62
SHA-256:	78F204FB7B794AAD7425F3822F1C8C0107F0FA1442369A798AEF0DC6BF35B40D
SHA-512:	1A6564216182A71E63EC83417A3DD5C16FC7AB3AD6DBB5A6EA1957770293D08BB73BE9BE9E185CA55D4CBD3CE529A4373E3F8AE7C1C9FCCA68A40B5D007A7397
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/geminiwizard.js
Preview:	var GeminiWizard=function(n,t,i,r,u,f,e,o,s){this.Id=n,this.NavigationPanelId=t,this.Steps=[],this.ForceValidationOnNext=r,this.EnableAnimationOnTranisition=u,this.LastCompletedIndex=-1,this.StartAtStepIndex=typeof f=="undefined"\|\|f==null?0:f,this.CurrentStep=null,this.IsInAnimation=!1,this.NavigationQueue=[],this.QueuedNavigationTimeout,this.BaseFieldCount=3,this.MinimumScreenPadding=50,this.OrginalItemSpacing=30,this.OnNavigationCompleted=null,this.OrginaScreenPadding=30,this.MinimumFieldSpacing=10,this.StepNotStarted=e,this.StepInProgress=o,this.StepCompleted=s,This=this,GeminiWizard.prototype.FocusAfterNavigate=function(){$("input[type='text']:visible",$("#"+This.CurrentStep.Id)).first().focus()},GeminiWizard.prototype.AdjustMinHeight=function(){if(typeof screenHeight!="undefined"&&screenHeight){var n=screenHeight-$(".footer").height(),t=$('.steps-container').outerHeight(!0)+$('.left-nav h1').outerHeight();$(".screen").css("min-height",(n<t?t:n)+"px"),$(".background").css("height",

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	690285
Entropy (8bit):	5.295047538901373
Encrypted:	false
SSDEEP:	12288:7KWN2Id+Jue9v8E8m8t8E8E8M8m8U08Ehv481usi:7KWN2IoJue9v8E8m8t8E8E8M8m8U08E8
MD5:	39D8D889CF22F2DD0746D950F8BD26DF
SHA1:	FECDE1AF1C793119948973D2F93E14BFB7E158E3
SHA-256:	2EE7E7C028A86026075E9D08162CD4C2F566F9B5599307C43F8F09EDA2430045
SHA-512:	2191DB3C75D74A8F23892753C6597338435CE5D6B9EB4FEAE22E0E6069B0D9F749F3D477873DEF56CDBCAF6054B6EF1D564C103E4C79586B9A93576C0E0C68DD
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/jsc/adminapp.js
Preview:	Array.prototype.find\|\|Object.defineProperty(Array.prototype,'find',{value:function(n){var i,u,f,t,r;if(this==null)throw new TypeError('"this" is null or not defined');if(i=Object(this),u=i.length>>>0,typeof n!='function')throw new TypeError('predicate must be a function');for(f=arguments[1],t=0;t<u;){if(r=i[t],n.call(f,r,t,i))return r;t++}return undefined},configurable:!0,writable:!0}),Object.entries\|\|(Object.entries=function(n){for(var i=Object.keys(n),t=i.length,r=new Array(t);t--;)r[t]=[i[t],n[i[t]]];return r}),typeof Object.assign!='function'&&Object.defineProperty(Object,"assign",{value:function(n){'use strict';;var f,r,i,u;if(n==null)throw new TypeError('Cannot convert undefined or null to object');for(f=Object(n),r=1;r<arguments.length;r++)if(i=arguments[r],i!=null)for(u in i)Object.prototype.hasOwnProperty.call(i,u)&&(f[u]=i[u]);return f},writable:!0,configurable:!0}),String.prototype.startsWith\|\|(String.prototype.startsWith=function(n,t){return this.substr(!t\|\|t<0?0:+t,n.lengt

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24942), with no line terminators
Category:	downloaded
Size (bytes):	24942
Entropy (8bit):	5.213985584208541
Encrypted:	false
SSDEEP:	384:H3xbuOg4kiHaATrphVIVXxvz0uvcIUwBnAw1Lmbfoi+H9JT59gpHb:HtXnaAphSxhz0uvc2BnAbf9+HfTgRb
MD5:	4542D764783C82BD784326FB357F0C62
SHA1:	FC5619DAD451C77794AB8759C404D3233F5FA1A8
SHA-256:	965993B2B2C5B69E0AAF3C76372CC5D1494E638C79AF67F2FEFA0AECF67572A1
SHA-512:	51A469D84B7064CA03259E443C776FB208168AE4240F76553331F806F5D9A11BD3B55D5B5BA8257BBF66CD7116CB5B4AACA1E1754AD96656FB011E297E1CC701
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/js/mscorlib.js
Preview:	(function(){function f(t){n?n.push(t):setTimeout(t,0)}function i(){var i,t,r;if(n)for(i=n,n=null,t=0,r=i.length;t<r;t++)i[t]()}var u={version:"0.7.2.0",isUndefined:function(n){return n===undefined},isNull:function(n){return n===null},isNullOrUndefined:function(n){return n===null\|\|n===undefined},isValue:function(n){return n!==null&&n!==undefined}},e=!1,n=[],t,r;document.addEventListener?document.readyState=="complete"?i():document.addEventListener("DOMContentLoaded",i,!1):window.attachEvent&&window.attachEvent("onload",function(){i()}),t=window.ss,t\|\|(window.ss=t={init:f,ready:f});for(r in u)t[r]=u[r]})(),Object.__typeName="Object",Object.__baseType=null,Object.clearKeys=function(n){for(var t in n)delete n[t]},Object.keyExists=function(n,t){return n[t]!==undefined},Object.keys?Object.getKeyCount=function(n){return Object.keys(n).length}:(Object.keys=function(n){var t=[],i;for(i in n)t.push(i);return t},Object.getKeyCount=function(n){var t=0,i;for(i in n)t++;return t}),Boolean.__typeName

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	4.975328551374136
Encrypted:	false
SSDEEP:	6:pcYdWHWqR2LVeHVXMOkufN0cYh35AHRKO+6pmQsI:pXR5e1XMOkAebJ0p
MD5:	3461BB2CE406006E896AC49EFC40A5D6
SHA1:	2A53521B28C3CDA52812AEED7EE1C7F80F2BC78E
SHA-256:	37AF57A33E6053D39F7E06D6B1C1677739FF83F2835661A72300A5057798D301
SHA-512:	6384464FC33A06BD59C5F43D9163BC7ECFED108B9D5654FBD66CD30F2FCA03BFDF4D401FAE194F16C76EAFEB4BA1E08A9033E5D96038661213137A01AC08DC19
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/user_survey/user_survey.module.out-vflNGG7LO.css
Preview:	._user-survey-iframe_1jh31_1{background-color:transparent;border:none;bottom:0;position:fixed;right:0;z-index:11000}._user-survey-iframe-bottom-left_1jh31_10{bottom:0;left:0;right:auto;top:auto}./# sourceMappingURL=user_survey.module.out.css.map /

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24945)
Category:	downloaded
Size (bytes):	35070
Entropy (8bit):	5.051956823638353
Encrypted:	false
SSDEEP:	384:1B21YWf8EzY+Ye77bUnz3DCTFpDx1qYk7IdbBeueWaO2tnmKxMKCSXL2QKl1a:myEzY+Ye77bUnz3DCLZexp
MD5:	D046870D17DE8600288AEEA55CC9D9D9
SHA1:	67DD712CD1D7D94EE1CD3808E4714B0BDCB28621
SHA-256:	12FD034CC5E83EC32306E4DB83519C32B5EB3F109B8D66D3904591E39FA62322
SHA-512:	D69DF5110D81A66E02F32DFBCF1DA6233CAE9EE04A83AF5DD674EF8A4DEAB552AE639FDBA597ED0CFDF59A3E4A3E7A0B1182A7BC269B039F35AE3833CEC342EB
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/scooter/scooter-scoped-vfl0EaHDR.css
Preview:	/!. . * SCOOTER. . ---. * /. * /______. * 0 0. . scoot. * verb [no obj.]. * go or leave somewhere quickly: "I'd better scoot". . /.scooter-css *,.scooter-css ::after,.scooter-css ::before{position:relative;margin:0;padding:0;box-sizing:inherit}.scooter-css input,.scooter-css button,.scooter-css textarea,.scooter-css select{font:inherit;-webkit-appearance:none;-moz-appearance:none;appearance:none}.scooter-css input[type='checkbox']{-webkit-appearance:checkbox;-moz-appearance:checkbox;appearance:checkbox}.scooter-css input[type='radio']{-webkit-appearance:radio;-moz-appearance:radio;appearance:radio}.scooter-css ul,.scooter-css ol{margin-left:46px}.scooter-css p,.scooter-css table{margin-bottom:23px}.scooter-css table{border-collapse:collapse}html.scooter-css,.scooter-css:root{box-sizing:border-box;font:81.25%/1.75 'Open Sans', 'Helvetica Neue', Arial, sans-serif;color:#3d464d}.f-headline,.f-subhead,.f1,.f2,.f3,.f4{display:block;margin-bottom:23px;font-weight:400;

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 133376
Category:	downloaded
Size (bytes):	41585
Entropy (8bit):	7.994324727532402
Encrypted:	true
SSDEEP:	768:1pRByEisGXowAIpglskM5f2lc7laVIl68cKSYY+ks5HFdW5Wwi3VXgI:HyEisBlNeuaD6FY1ksz45WwqXj
MD5:	895D732E3F4C851612D16D80D33D6732
SHA1:	A254062FA941E9A6EC8F1147AB243F04BAECF8FC
SHA-256:	5201F4627152DB5E2BE92565BCC1460074D242532A4D482DC4054D5FC254F4C8
SHA-512:	E98D04CEDB1750D2A6AF1811D45BC7FEA633239CDE60564FD383162B8AEF1F6BEFF3953B60C47B049DBF5BC2D46F8C75CA7C06FFFF4BBAC47BA352A39A778F2B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/2cdc887fa30d028a6cac.yYomW_BQJnWDD10UrVD9zI1YaI83_RjUsYv9vtzPLm0.js.gz
Preview:	...........iw... ....Q....\e.6.4[...]K.W...I...6.Ig&.Xb....ez.Yz.g.e....y.=..=..?2........@f.R...).........@ ...=......'.7.n...I....._=.t..w..8?..Y..,:,...}w8......`4..y....S...Y.P~.....8....`.......7...O6o.f....R.>+4..Z.....^....[g...A\.....a.9......,z..gcV....W.s.s.E.I2..d...c....M. ...).K.t...#H.9....eV.Y<..b\|.E5.{..#.`....`.1?.....US..m..&,t..@c...4.4_...o..}..0..]..r..q.=.....^....+...U....aN.].&H}%.6..A....8...3....6d...M...?.0=..!,.......>h...\.a...Nx../.>..T^WO..q0x...#.^..Z.WO.....P...\|...J..4....q..I...J.f4.7.0........>....Cw.v..s...S.r....Q.N..d..?\.e2...'.7x.Q[WI..\..]...x...5.......7...Jfq5z...\|8#T....0.x..Dl.v.6x..A....z6W..Ek/..78]40..izFWD...g....2.+"h6..a..U.o..!.r...i..v5d....A..........;.c..wp8..c.!__...3...C6.BX._..y.]............WD.......GA8...d.W2...e..t].y..........~.{.w..j..\..h.g]%.9.]...J.<..'....?..M*<r.O.?.,.$.+R................tnWB.I.....[o..~y...r..........Y^..>.w.xq.Jg:.+'....9.]....H..wBX G[>...y..A...e.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3041), with no line terminators
Category:	downloaded
Size (bytes):	3041
Entropy (8bit):	5.443939715136298
Encrypted:	false
SSDEEP:	48:8/JawL2CDpLGLg0ELdcImwDb3+qoekDYk/GCqpufqv0wgViv9Y+eMNzeRqKb+mpZ:cL5ug3dVf+qpkMkgpufqvFgVi++ecUqK
MD5:	2A29FC3105377608989FDCF710A47554
SHA1:	F6AC20B91A57841A4F84A7DAFA490502FB20D6A4
SHA-256:	8DC4107571BA20983D62DF95A23D5CABC961418C55B75A8CEB1437A83CC7AB3F
SHA-512:	85FFFBC2A8681989E048E9A3E754ADE8D60C9FA603F88747C73C0EC02848EEF34A703EA47F0DCF40B59405B02FBA2C1B3F1700DE8D7710B9DBC6F7291B1EAB5A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/js/passwordstrengthmeter.js
Preview:	var PasswordStrengthMeter=function(){function n(n,t,i){(this.PasswordMeterDiv=document.getElementById(n+"_passwordStrengthMeter"),this.PasswordStrengthMeterId=n,this.PasswordTextBox=document.getElementById(t),this.PasswordTextBox!=null)&&(this.PropertySheetId=i,this.PasswordTextBox.PasswordStrengthManager=this,this.PasswordTextBox.onchange=this.TextChangedHandler,this.PasswordTextBox.onkeyup=this.TextChangedHandler,this.PasswordTextBox.PasswordStrengthManager.EvaluatePassword(!1),this.PasswordStrengthMeterDisplayed=!1)}return n.prototype.EvaluatePassword=function(t){var i='weak',r;this.SetMeterLevel(this.PasswordStrengthMeterId,n.METERLEVEL_URGENT),r=this.PasswordTextBox.value,n.ClientSideStrongPassword(r)?(i='strong',this.SetMeterLevel(this.PasswordStrengthMeterId,n.METERLEVEL_HEALTHY)):n.ClientSideMediumPassword(r)?(i='medium',this.SetMeterLevel(this.PasswordStrengthMeterId,n.METERLEVEL_CAUTION)):n.ClientSideWeakPassword(r)&&(i='weak'),this.PasswordMeterDiv.innerText=i,this.PropertyS

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3600)
Category:	downloaded
Size (bytes):	3659
Entropy (8bit):	5.2045683933583
Encrypted:	false
SSDEEP:	48:XnkIPkhTWe/WhqJM8e3CwfvR7SAvB9MlMGh4g3xcFXyKEroqOFAezc+TUMrd:XkIPkhTWeuEM8emA5fGh3xcEwBzXbrd
MD5:	F295F673C72F173D81AB88E570846B83
SHA1:	60EE5B98C4F7537F2AC34EA456AFABBF6196BCA7
SHA-256:	44C70FF1E5F1409205692E85D1CA366E98285F17C512D02EA9112E69F7AFE8DA
SHA-512:	E98FAA65684BDB2FE924D415F875E15095496139C0382AF41D465EFB0CEC5B86061A9AACA62A59AF1AEEC772C5489C8FFC50A650A1B5DB0D4831B570E3ABC1A8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-api_v2-extra.min-vfl8pX2c8.js
Preview:	define("metaserver/static/js/core/attribution_header",["require","exports","metaserver/static/js/modules/constants/page_load"],(function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getAttributionHeader=void 0,t.getAttributionHeader=function(){if(!window.ensemble)return void 0!==n.YAPS_PROJECT&&void 0!==n.YAPS_DEPLOYMENT?`${n.YAPS_PROJECT}:${n.YAPS_DEPLOYMENT}`:void 0;const e=window.ensemble.getPageletInfoForExceptionReporting().filter(e=>void 0!==e.yaps_deployment&&void 0!==e.yaps_project);return 0!==e.length?e.sort((e,t)=>e.pagelet_name<t.pagelet_name?-1:1).map(e=>`${e.yaps_project}:${e.yaps_deployment}`).join(";"):void 0}})),define("metaserver/static/prod_assets_web_modules/eventemitter3",["./common/_commonjsHelpers"],(function(e){"use strict";var t={exports:{}};!(function(e){var t=Object.prototype.hasOwnProperty,n="~";function r(){}function o(e,t,n){this.fn=e,this.context=t,this.once=n\|\|!1}function s(e,t,r,s,i){if("function"!=typeof r)throw new TypeError("

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5435
Entropy (8bit):	4.729886758075337
Encrypted:	false
SSDEEP:	96:Qf/Or7Vir8P8KJfGVfd+nPkRCrthXXQJ/T6SXuVX3ns9ozR0z5tsQyiPr:q/Okr8P8KBGVUnsCrthHQJb6SXuVnn8v
MD5:	5FEAA482D83C2A69D012F9BFF660D373
SHA1:	EE586D2B46E1A0110C581D507033480A40704606
SHA-256:	356F7D1241F92C9DE9C9CFD0BEBB6C10D1B38508A3F37CEBC26329C656BAD19F
SHA-512:	BC07C9DB3C3494A46E4246CAB6EBE39215F01AE5329A333C2872052992DC1E23765C1826631113F5AC6FC932ED7F17DC5030AB78457D2BFF3E0AA0F7472A4EB2
Malicious:	false
Reputation:	low
URL:	https://account.live.com/Resources/images/Microsoft_Logotype_Gray_X-qkgtg8KmnQEvm_9mDTcw2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="47px" height="9px" viewBox="0 0 47 9" xml:space="preserve">..<style type="text/css">....st0{fill:#008A00;}....st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#008A00;}....st3{fill:#0078D7;}....st4{fill:#094AB2;}....st5{fill-rule:evenodd;clip-rule:evenodd;fill:#094AB2;}....st6{fill:#DC3C00;}....st7{fill-rule:evenodd;clip-rule:evenodd;fill:#DC3C00;}....st8{fill:#107C10;}....st9{fill-rule:evenodd;clip-rule:evenodd;fill:#107C10;}....st10{fill:#D24726;}....st11{fill:#FFB800;}....st12{fill-rule:evenodd;clip-rule:evenodd;fill:#434856;}....st13{fill-rule:evenodd;clip-rule:evenodd;fill:#FFB800;}....st14{fill:#2A3282;}....st15{fill:#249DD1;}....st16{fill:#A0D5EB;}....st17{fill:#FFFFFF;}....st18{fill:#666666;}....st19{fill:#00ADF1;}....st20{fill:#00AFF0;}....st21{fill-r

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57110)
Category:	downloaded
Size (bytes):	57184
Entropy (8bit):	5.109128544239661
Encrypted:	false
SSDEEP:	768:WPDR65eMCHIMHxDBSUVHFnmHOtHO0V0BxAKhLLncolnGDBFnxfD/Cguc:WPDR65eM2Im5muAIKhLLCxOq
MD5:	D46D0D1F4F5AC34A1754B2506A9A48CA
SHA1:	B8722B4A718496A995ED03D324B0EA70A2D75B57
SHA-256:	471C4932EEF05AE101E6504F1D02FE137B2E81081EB8D34795928B4EFEB2049F
SHA-512:	B45B7C3CBD5700062CA53A4A42A972A86E55EC5F65265D077C33F4370A496FD2F0E4F6AE1767D3056123664C366628BBC42BB474F6CA28CCC111CD03124910A4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-externals-unneeded-for-home.min-vfl1G0NH0.js
Preview:	define("typescript/component_libraries/spectrum-sharing/src/utils/sharing_util",["require","exports"],(function(t,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.isRighteousLink=void 0,e.isRighteousLink=function(t){return Boolean(t&&t.audience_options&&t.effective_audience&&t.link_access_level)}})),define("metaserver/static/prod_assets_web_modules/immutable",["./common/_commonjsHelpers"],(function(t){"use strict";var e,r={exports:{}};e=r,t.commonjsGlobal,e.exports=(function(){var t=Array.prototype.slice;function e(t,e){e&&(t.prototype=Object.create(e.prototype)),t.prototype.constructor=t}function r(t){return u(t)?t:P(t)}function n(t){return s(t)?t:N(t)}function i(t){return a(t)?t:H(t)}function o(t){return u(t)&&!h(t)?t:V(t)}function u(t){return!(!t\|\|!t[c])}function s(t){return!(!t\|\|!t[_])}function a(t){return!(!t\|\|!t[p])}function h(t){return s(t)\|\|a(t)}function f(t){return!(!t\|\|!t[l])}e(n,r),e(i,r),e(o,r),r.isIterable=u,r.isKeyed=s,r.isIndexed=a,r.isAssociative=h,r.i

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 124867
Category:	downloaded
Size (bytes):	38695
Entropy (8bit):	7.995027024783633
Encrypted:	true
SSDEEP:	768:syvN8BEo9+EwuIF22D1PI7xdyUgf68SYvE9mwWEu7J1vOhB9FHxtuGz7w9zUnKiw:syvN8DPIF/1Q7x87fRyHuaIoZnKkBWy0
MD5:	DE36B85C95518605AE874A634FD6C0F2
SHA1:	AF6EDC2A1440C2B61ED68F344520E69EE9070337
SHA-256:	44CB94E46FA8203FED0A57FFEC849FFBBEDE3D0B1ED029D75DFB38F164E7173E
SHA-512:	A6936FC5649905F7F8AF638698928CBAD57F09E196C1D48E88468055A0EC1A30501E99F7BD7B8690BC4CD53363F2054900CC88EDC6FA9E165E5F1325894C9335
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/7b7bc1b94b6fa4bb7540.4kCVYgsQ9PUJwvE49OImq-373sTZn8Mp1CKG3UUt75o.js.gz
Preview:	...........{..F.0..>.._..L..$..UV..8..8vm'i..KI#..D*...I.g....9...g..............(.i_\.:.y.....=.......O...O.X.....<O/....5..I.....'..h.F..x\|q..8.../...'.%.FS._..8.]..$...GC.....>y..p..<g.F......0....,c..h.).H.$.f.^..9.k.M..\|.".Y.D.......c+.6...1..qc..9.e\.e`...H....9..q.$...9.pY.?.....Q.m....l.O..8q.;Q8.2>.x...}...[-~....GX......\|.9I.....Xje.......w.8.9no8..tc..F.\|.Ak."....\d..p......2...:..9 ..b.j%j.n...p...w.i.H....8..fG..i0O..4.q..J....8.....o.4...]..u..:....%.$.i.w....u....^.N.Q>s.T..r....Vi...7.....I.D.fc..E...gX.9~y....j^..+N.".;.....W{.{..rr. ...I.+.._f....v<.......C...f..&..Y..y.}..]`.._.p.y.....S..g\|.\. .UW.0...Q>.....m.ps.qsZ...Y..IX4..2%.OD.@.F9Y/..,.<..w..?_.-c.-.'.<...........zX.E...M.....%x...++.l..P....cm.......h.J....... R..!..[\...DN.o".#.1.s.p..B.z..I....Si.'C..`..L...a#.......u....D,...h8.....>....Y\|.Gm.>OW..N..:...y\|.tDI....(.R...q(r/.8....V00...v.VK..%.&.0.w..{.]..C\.@.H....8...F..X.......$.]{..@K`r....m..U......6

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31220, version 1.0
Category:	downloaded
Size (bytes):	31220
Entropy (8bit):	7.9922945477639304
Encrypted:	true
SSDEEP:	768:uErHoikL6e4Qme5J20E4INgcgS8rB/HJlceZWv04uWHZ11zi5O:DIikWe4QYHFx8rB/7QvdnVoO
MD5:	BD65225294E9AD1114DED0A8BDE4D38B
SHA1:	B4AD89CF62BA389A9FE273E3154F0C509B36F79C
SHA-256:	15ACF74F7B49F0E1684532D3B16624880610E0CE41E4518696DC6568FCF0612E
SHA-512:	769E0CA17D129A8E8DD77C1426526F630AA7B15DC6C6592ADEB33D573894D1282398FEC044229F00ED9DF21BFA390AD567695EC0EFE814EBC92C63FCBA85EF29
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/KaTeX_Main-Regular.woff2
Preview:	wOF2......y...........y.........................?FFTM..`..J.:........H....6.$.....L.. ..}..F......G.m.4L.m.....Lfv ......J....nR.1..I.6.?.^....&..(.USn}..}........f...wa.M...xU..OR.c..z.3^Q.+.]T.1...b%W%..6q._xc...'4.k.6.w...G(X!^.9.F...h,.{.~Yr....../H.6.0K....'..h)..)........hA...z.2.K.7Z<1....JZ...=4.z.Os.......J..!....$H..!.H ....b....B....I..[;.nk....v..?....$.h.>f....0....-.$.dl..BuU..5.V}...,.=..hp......5V..ul.3....e:.N.uG....?..fP.....X..l..YS...+....p.o....;E....\......=..}BQ..a.r@......q91+1.qN\.o..+.c[.A...q...U_..........Ei.V.IHV.,...3...;....].0$lH.d.@ i..... .}..).....&p..u...8..3.... ......\|..0}(...76nN...t...A@+....&L6.....C.K,.)n.OI. n,DK.V.........u.4.){..+..VvI.ZNX..'.......e...O...7..{..S..~.o...........?d.y.l........5.=g.K.L....o5+..".....]9s......I2......1.V....g..R.CUO.:i....._:.k.@Mj....!.7w.C.x.k.......WI.I.J`..cK.A%.-..RI.H`..v.h{R.SF"J.n..5x..'.t..{..q.{8.\|.....S...vk...4..B.............t......n..J...%R.X..).0$

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://account.live.com/Resources/images/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3002), with no line terminators
Category:	downloaded
Size (bytes):	3002
Entropy (8bit):	4.7190485043580335
Encrypted:	false
SSDEEP:	48:smxvfXnxvfN+xvfxxvf17xvWxZdxvfunxvfc+xvfaxvfQ7xvWuZOxvf6xvf9+xvn:p/l1WP/oJ2lEWiMNgCFWfvgSkzWdxOU
MD5:	AB36DF9C284D54357F808AC87F4AB9C2
SHA1:	2261F05D52452A921E0F18AB024EB79FC7900E6B
SHA-256:	FD14188303495CDFCECCA4376D58CBEE2AA0E02D04586D8C1B8B49D163AEDA62
SHA-512:	1CE8722235924A5B7D9599F534CFEC635290CB3B4C1040025FAA0B98295DE54491B5613FAAD1FA3E5F8F8AA7995161D2DDFD588697FB9B7B3A6FB1A790E01EA4
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/css/embeddedfonts.css
Preview:	@font-face{font-family:'SegoeUI-Regular-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot') format('embedded-opentype');src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot?iefix') format('embedded-opentype'),url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.woff') format('woff'),url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.ttf') format('truetype'),url('https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-regular-final.svg#web') format('svg');font-style:normal;font-weight:normal}@font-face{font-family:'SegoeUI-SemiBold-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.eot') format('embedded-opentype');src:url('https://res-h3.public.cdn.office.ne

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11639), with no line terminators
Category:	downloaded
Size (bytes):	11639
Entropy (8bit):	5.192812704605868
Encrypted:	false
SSDEEP:	192:ZHqaIeeago8L9nN0hUNxiHjib9NUhXkop1R1NWS9rCsnZBSVAx8c3ODqbiQ4:4aIee5o8LdN0hUNQW5NiXkYWyrtyAp30
MD5:	68C7188A72C68095DCF664C384BE4A24
SHA1:	44759AF7DA7C068E57D2C68C914CFBB488EF44C6
SHA-256:	A7321F5898D11C794E86F016F4BE7D8355872A94081ADC22D551D5298D1A2900
SHA-512:	CEF7D483D540E7A5B4404A381D25F39FA66DAE81AA58FCE1F42DFB3E03376E31B680BB623EB81ADAE7061A25967F9D196A47E97BDA94AFCCBDEEC422B0BE07F7
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/peoplepicker.js
Preview:	var PeoplePicker=new function(){var n=this,ft=null,w=null,p=null,y='Too many results, use search.',nt='Total: {0}',k=250,u,c;this.Initialize=function(t,u){var s=$("#"+t);MissingImgUrl=u.MissingImgUrl,w=u.RemoveUserImgUrl,p=u.DeleteUserImgUrl,s.data("GetDataCommand",u.GetDataCommand),s.data("GetAddDataCommand",u.GetAddDataCommand),s.data("AddCommand",u.AddCommand),s.data("DeleteCommand",u.DeleteCommand),s.data("DeleteTooltip",u.DeleteTooltip),s.data("RemoveTooltip",u.RemoveTooltip),s.data("RemoveCommand",u.RemoveCommand),s.data("EmptyListText",u.EmptyListText),s.data("EmptySearchText",u.EmptySearchText),s.data("OnClientAfterGetData",u.OnClientAfterGetData),s.data("OnClientGetDataError",u.OnClientGetDataError),s.data("OnClientAddButtonClick",u.OnClientAddButtonClick),s.data("OnClientSelectionChanged",u.OnClientSelectionChanged),s.data("OnClientBeforeDelete",u.OnClientBeforeDelete),s.data("OnClientAfterDelete",u.OnClientAfterDelete),s.data("AllowMultiSelect",u.AllowMultiSelect),s.data("Sh

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (684)
Category:	downloaded
Size (bytes):	685
Entropy (8bit):	5.033559356693095
Encrypted:	false
SSDEEP:	12:pA7LVcO/PfNVVUragN6L03eSuET6rvLhd9cdxA1WcdWScdAzZpcDkfQk:iVcOnfNVV4NePS9T6rzhdOjAR4HDkfQk
MD5:	E2826FD92D6DCAF79021355095EC49D9
SHA1:	1572DA7F97839408214F18AF79C69611040E2084
SHA-256:	2C456C7236EE6F3541118C38AE364CF303F38926BA99C7FD65794802B172ACBD
SHA-512:	AAE0EE51EF9775A745E1B4A4607829609A54C211ED1C96303875FE6465770CBB54E267833E48C43BB7723891FF3D774F33200D6D8F5368817B085F946315EF85
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/notify-vfl4oJv2S.css
Preview:	#notify-wrapper{width:100%;height:0px;left:0;top:0;text-align:center;position:fixed;z-index:10001}#notify-wrapper .left-align{text-align:left}#notify,.notify{margin:8px;padding:8px 16px;font-size:12px;display:inline-block}.notify-msg .button-as-link{font-size:12px}.notify-portal-component{width:100%;height:0}.server-error{background-color:#f4e5ea;border:1px solid #9a0032;color:#9a0032}.server-warning{background-color:#fef5da;border:1px solid #9a6500;color:#9a6500}.server-success{background-color:#e5efe0;border:1px solid #2d8000;color:#2d8000}.server-info{background-color:#fff;border:1px solid rgba(0,0,0,0.05);color:#666}.maestro #notify-wrapper.with-top-notification{top:48px}.

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 218487
Category:	downloaded
Size (bytes):	47298
Entropy (8bit):	7.994803975186819
Encrypted:	true
SSDEEP:	768:CnWLmHts4lFwZLiBdHvxDc71L+OzR7M9zRSfHe8xvkt/M1g0qDK3ypp1pEimbNpV:AWyY+xDchJzRw9RSfHjx8t/M1g0B3ypu
MD5:	37BA99B8DF4038887A5F9DB0973AA540
SHA1:	083EAAE578C363902D5D67DD0927A5796A55AC75
SHA-256:	792583998C8A3709BAD878731C57717C5AB26FF2EC3EAFECCB0A6BCC876C46C7
SHA-512:	093A8987BCDC1AFE19BFB181FCD13FA5C2CFBE7189BC38A9EBED3EA29FA9C26DAC68888F69D9BC40EB8568728DA66A2A395546031E45B1FA5F6691EFDC6B7797
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/0ce09d6be201dc874940.Vjbt-av9zGPqb4iH55ZEtppKHIAS7YBNqMFhDsWmwmA.js.gz
Preview:	............r.H.(....'\|.1H..m..f{.\V.e.,..n.C.".$J$."@.,..............Yke&..H..$.j...[..y]...u...u.........7.........o.:=?.l......d..k.>U'.M./.#6.?.Y....E3..z.x0.....].G.h^....n>..ga/........7.._Y/i.....d..g.....s..E.l...7...FkQ..\yS..v..gu7.....)..........H....[.u...@.....~O...r.....!6....i......;....+.c.......!.v....o.+6.`Sg.u6[.g.{..V[..`....~..c....IjI....vY..F.d..nR.......q..to.4D.....zW.y.#.h.."...-..7....K...~.6{.q.... ..q\|.Mf...x...nB.......~..3e.l.:."iN.Q.%......~.....[:\|.........4.xo6.B.....~?..Oq..^.&.Y.....Q4..u...J....wh..K._GA;.......?........m.f....z....u.>..y\|..=V......J..F..x..d.o.>\.z..d.....%...~4...}....>N<./..i4.....E.p...8.oG .4.Rl>.g...%.!.].c.?W....d...E..7`o.1....%.....X...+L=.f>.k......3@\|.....S.p....&Y7z8;.=:=..;X....=.Wt.4.I..D..K..`..J..0...V...G.G/..............[..b.&i.X8H..m=x...S.].&.e....$FJ.J..@.E.dpp@G,@o../$.9..1....gS.w.....I._.~sw2.?...E.M. .4.>d3C..,\..."....dH...Y.....7..5.8F..T.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17498)
Category:	downloaded
Size (bytes):	17559
Entropy (8bit):	5.182231006632157
Encrypted:	false
SSDEEP:	384:2By/hdefcPdkCyza//deeTaMVYfaHQ1PXh+B3V5:2B+OfcPdVAG0eTaMV6aHQ1PXQBF5
MD5:	CA64747BA2A778A12107A0E5269FD845
SHA1:	124A07E77374EB75A0FB07BC0D224339E5CDA514
SHA-256:	24DBB6710AE61D8D003C50BF939561C50A14CB97268B93A19991C28B349412F8
SHA-512:	EFEFD47317A04FFF9295B660CF2801101AE7A11AB87575504304B18C6C35974B39F98CCECEEEE8C9AACD4A9F4AF36D452E4DD71424B80B9425EE50C328B3B5F2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-timing-helpers.min-vflymR0e6.js
Preview:	define("metaserver/static/js/user_centric_perf_metrics/component_visually_complete/constants",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.CONFIG=void 0,t.CONFIG={idleTimeout:500,networkTimeout:6e4}})),define("metaserver/static/js/user_centric_perf_metrics/component_visually_complete/ajax",["require","exports","metaserver/static/js/user_centric_perf_metrics/component_visually_complete/network_idle_observable"],(function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.decrementAjaxCount=t.incrementAjaxCount=void 0,t.incrementAjaxCount=(0,i.getNetworkIdleObservable)().incrementAjaxCount,t.decrementAjaxCount=(0,i.getNetworkIdleObservable)().decrementAjaxCount})),define("metaserver/static/js/user_centric_perf_metrics/component_visually_complete/network_idle_observable",["require","exports","metaserver/static/js/user_centric_perf_metrics/component_visually_complete/constants"],(function(e,t,i){"use strict";Object

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	438401
Entropy (8bit):	5.094075030788887
Encrypted:	false
SSDEEP:	6144:mUGO7Cci9VJ/2L/gj1GdNjtCHBVQMv+Qmub2tYl03fi2/8022oyMtg7WteL4NBvs:8sIo
MD5:	72D356D8554FF4117FBDE6F07705EA02
SHA1:	836201F1A406E5898BEC678FF9A9C175BB6035D1
SHA-256:	15F154B67BBB16879DB4B740572E1D07C009C99B71BDB269CAD0BF6151CA7E8C
SHA-512:	40480B109262F24293865AC460101AAE6462BE51BDC7E1015435F952B0888B6B74D614B006458D12DDA87C145BD3A108531D12A3AD5BDA032DB922498BEBF1F2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-common-8.min-vflctNW2F.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-icons/assets",["exports","../../common/index8","../../common/warning","../../common/person","../../common/arrow-up","../../common/calendar","../../common/chevron-right","../../common/chevron-down","../../common/chevron-up","../../common/clock","../../common/close","../../common/open","../../common/info","../../common/more-horizontal","../../common/search","react"],(function(e,l,t,n,o,c,r,a,i,v,m,h,f,s,d,E){"use strict";e.AccountsPictogram=l.AccountsPictogram,e.ActivityFill=l.ActivityFill,e.ActivityLine=l.ActivityLine,e.ActivityPictogram=l.ActivityPictogram,e.AddCircleFill=l.AddCircleFill,e.AddCircleLine=l.AddCircleLine,e.AddCirclePictogram=l.AddCirclePictogram,e.AddCommentLine=l.AddCommentLine,e.AddCommentPictogram=l.AddCommentPictogram,e.AddFileLine=l.AddFileLine,e.AddFileTemplateLine=l.AddFileTemplateLine,e.AddFolderLine=l.AddFolderLine,e.AddHorizontalLineLine=l.AddHorizontalLineLine,e.AddLine=l.AddLine,e.AddMediaLine=l.A

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (714)
Category:	downloaded
Size (bytes):	772
Entropy (8bit):	5.256824108353672
Encrypted:	false
SSDEEP:	12:QTpBm9HjTCThWifxTG4UKYcjKem0yF92E7qxXas+KyS5IcjKEAVQiOm:8PmFfahWifhG4ULSOrFEFxXvGSBA7Om
MD5:	60B1C153555B9F0F4B0332950A818B4A
SHA1:	55A2F64AFA82460C36B4E8D17374554F4FA34D31
SHA-256:	9A0FFFC5D5B8F5A00EA1B586C09CDBD261BED84181C296D98A2E81DCA7451228
SHA-512:	A92FAA9BBF45AE644AF4AC49B2C4B4A4D67723465AA5DA1861E145F6879BB20FC2CB4C07308999606E4681268D40763835C8029D1F78617C15491886FE84065D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-i18n-legacy.min-vflYLHBU1.js
Preview:	define("metaserver/static/js/core/format_html",["require","exports","tslib","react-intl","metaserver/static/js/core/exception","metaserver/static/js/modules/constants/page_load","metaserver/static/js/core/i18n"],(function(e,t,r,a,s,o,c){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.legacyFormatHtmlAsReact=void 0,o=r.__importStar(o);const i=(0,c.localeToBcp47LangTag)(o.PAGE_LOCALE),n=(0,a.createIntl)({messages:{},locale:i,onError:e=>{if(e.code!==a.ReactIntlErrorCode.MISSING_TRANSLATION)return(0,s.reportException)({err:e,tags:["format_html"],severity:s.SEVERITY.CRITICAL})}});t.legacyFormatHtmlAsReact=function(e,t){return n.formatMessage({id:e,defaultMessage:e,description:"nothing"},t)}}));.//# sourceMappingURL=pkg-i18n-legacy.min.js-vflBCujlE.map

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.27732984095595
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH18yG/IVVB9Ym6UAg6n:MMHdVBKW/UT+j/qyBUF6
MD5:	D8B231F53F410FF5A0A0C6DE185F7A85
SHA1:	8C15859D65DC92B1EFAF447366F38584A16A916A
SHA-256:	9C8E21D57AF635566A8F97D579F8107FDD0A4B88AE50C6B840B65BC43A6F820C
SHA-512:	99F63766EFEFC720A98C0E13EBE56B1043FDFE230BF12A469FEECE523A09FA3F6177C99F6C3C1F65B35049822E034E531753361FB1CAB7E44BBF828D19496251
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/spinner_16x16_metro.gif
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:5407fb96-701e-0024-21f3-bb3c61000000.Time:2023-07-21T16:51:44.2466961Z</Message></Error>

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4715)
Category:	downloaded
Size (bytes):	4773
Entropy (8bit):	5.065717707191547
Encrypted:	false
SSDEEP:	96:nS0uzR/HKo/tli+5OD0UXmkf62wq0HmjUlopwpio1A28ylwn7x0Y0HmvHTwHh706:nSQD+5OQkEXmjAopwpio1A28ylwn7x01
MD5:	8A06C56B45D76766C8DA5FAA08F838C5
SHA1:	B4C8917EE7207D18E58D4BC95695201C0BCE5B4B
SHA-256:	0CC08947E3EA21E30DCFC1473499A577E360AB64C08A981E657B5A2F23B878D0
SHA-512:	FB1CD38E4BE5FE8FCB65EF89245AC0C162D4E1716670CE6BAE9EA81C1E79B4286F2F1E73DC92BABD90E6A1E053AB821F15C50D263775A36C77D992EC57FD7BBF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-api_v2-flux.min-vfligbFa0.js
Preview:	define("metaserver/static/js/flux/dispatcher",["require","exports","tslib","flux","metaserver/static/js/core/assert","metaserver/static/js/core/exception"],(function(t,e,i,s,r,a){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.DispatcherClass=e.Dispatcher=void 0,s=i.__importStar(s),a=i.__importStar(a);let n=null;class c extends s.Dispatcher{dispatch(t){(0,r.assert)(null!=t.type,"Invariant error: cannot dispatch action without 'type' property."),(0,r.assert)(null===n,`Invariant error: cannot dispatch ${t.type} while also dispatching ${n}.`),n=t.type;try{"function"==typeof this.dispatch_begin&&this.dispatch_begin();try{return super.dispatch({action:t})}catch(t){return a.reportException({err:t}),console.error(t)}finally{"function"==typeof this.dispatch_end&&this.dispatch_end()}}finally{n=null}}}e.DispatcherClass=c;const h=new c;e.Dispatcher=h})),define("metaserver/static/js/flux/base_store",["require","exports","metaserver/static/js/flux/dispatcher","metaserver/static/js/c

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (477)
Category:	downloaded
Size (bytes):	528
Entropy (8bit):	5.049770571965184
Encrypted:	false
SSDEEP:	6:FHwCmSymbwptWRcVbuK08Gh7IGY8juzCRoTMSTu1n6BBdQIuzCRhqXQp1n1t7TYe:1bmSyz7FQcNSoTMR6BB7wS8MfUP45RW8
MD5:	4145AF3480090298A2C0DF493D5F62F5
SHA1:	2B414C9AC5A7BD5A4C9E58969E1EB9C338445CB6
SHA-256:	149FECD49818E493683FE75DCABA92274D9E336C5A18A6D3B3B1A38D9BC2DDB6
SHA-512:	44905520A6946AFD751FB46CFDF4A710CBEAC3A166B2B529ACCD6095B71E98B67CC58EEC8FA5F495D8FBF81521D7EB0B5BFD0A22F0042DF93A30EB770EEA95B1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/accessibility/tabbable.min-vflQUWvNI.js
Preview:	define(["require","exports"],(function(e,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.initialize_module=void 0;class t{constructor(){t.initialized\|\|this.listen()}listen(){t.initialized=!0,document.addEventListener("keydown",e=>{if(9===e.keyCode)return document.body.classList.add("tabbing")}),document.addEventListener("mousedown",e=>document.body.classList.remove("tabbing"))}}i.default=t,t.initialized=!1,i.initialize_module=function(){return new t}}));.//# sourceMappingURL=tabbable.min.js-vflhngSQ5.map

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7714)
Category:	downloaded
Size (bytes):	1066514
Entropy (8bit):	5.598473109308801
Encrypted:	false
SSDEEP:	24576:fGUX3c5h1Z4bJ5AtCMMHdD3TSZWkcSKdpPVS14akDeFpJGQ0QVtLX9BYW65pj:fGUX3MtCMkjVS1EyGQ0ev8
MD5:	39F65E43587E8C244A00FD06606DA665
SHA1:	5AFD4EEF16880410F137BD2DE17EA03236F6FD6E
SHA-256:	D521B7BEAFE2D86CE22F7A20BE980BBA510AC82CE5D798F2010BB99BEA9AEEA0
SHA-512:	0BF50A58FC0F88105750E347BEDA3F4E8E500A5BFAE22CC04F6AA4C1EB174C90DC298A78311A3747DAA271C2A1E2B1FF2F8FDDF83981CFD758837E7130110CF6
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/jsc/angularextensions.js
Preview:	!function(n,t,i){"use strict";;angular.module("angular-tour",["angular-tour.tour"]),angular.module("angular-tour.tour",[]).constant("tourConfig",{placement:"top",animation:!0,nextLabel:"Next",scrollSpeed:500,margin:28,backDrop:!1,useSourceScope:!1,containerElement:"body"}).controller("TourController",["$scope","orderedList",function(n,t){var i=this,r=i.steps=t();i.postTourCallback=angular.noop,i.postStepCallback=angular.noop,i.showStepCallback=angular.noop,i.currentStep=-1,n.$watch(function(){return i.currentStep},function(n){i.select(n)}),i.select=function(n){if(angular.isNumber(n)){i.unselectAllSteps();var t=r.get(n);t&&(t.ttOpen=!0),i.currentStep!==n&&(i.currentStep=n),i.currentStep>-1&&i.showStepCallback(),n>=r.getCount()&&i.postTourCallback(!0),i.postStepCallback()}},i.addStep=function(n){angular.isNumber(n.index)&&!isNaN(n.index)?r.set(n.index,n):r.push(n)},i.unselectAllSteps=function(){r.forEach(function(n){n.ttOpen=!1})},i.cancelTour=function(){i.unselectAllSteps(),i.postTourCa

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3275
Entropy (8bit):	7.886151392866353
Encrypted:	false
SSDEEP:	48:oAZYVtRlc5cEhL43QIa/Jjqh6SFydc3wWM1uF4TBKW2RtDglwfrzQXBdrz:5YVtROThMg9/Vqh6hdnWYTTl2DWwrsxR
MD5:	BEAA0ED7207B6D54F5BC7A8118F30E9D
SHA1:	E48803791A228C5DD8D4A2BA101DDEFEE63D5868
SHA-256:	008AED4B5DE1B7EA70A1D384E6811AD451747E37668F4F9ECC3AD68FDA892147
SHA-512:	3CA0ED2DAFAF070C9E20C540278FC2522EE6F4A306EE18BC7F8233F4739DF207CA5B9EEF46C1EE6D4A0702A39FE4EA976FC92B29C6FBF0B10E58C8E47C4701C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....XIDATx..[[l.W...sf..{..IC...i.!.K.Em!.B....U..U...j!..xh..E.A....P...P.....4..-M..c;..;.3s....wgv.^'....z.\........8....b$MD....R.& Gl.......r..(h.:>qlh..^P..=.}.,d..dfz..........\.....\....m.M...e..L3.8..76.XC...\.7.%.p..G.......)&<k........e...:.z.J.Q&3......,...G...#imY.L.T.....v..?.@<.....@N....Vm....^..e..P...[.(...Q,....C...twO/..f.....3.pi\|l;.(R5.R.I.n../..J.8.J.l...8.....m..s.sk..g..D.D...[........x...>V..0.@.m.M....j....e..z......^.......,..@.Z.m,.R...}.(...H$.gEo...WC)..\...M+]...j.(D..a.v....,.."Z...5....]Q...L..+]}.....DD..^.....P..i.J.R.D$@...J.c!...i.b4E.[O>....t...hWa:N.@....m.....i-.....G.v)..s....W..?F.../.RJ.s..(D.0'....".P...G..!.d2..}.].....WDT..+Rb..`.....+..u.x..w.}V......6.}.3.K..q...!..}@.._#&`...$....{.'...X=/_. a!.....n..DY.(..a>.t......`..."."j.M...J)....a......h../%Ik......1.zGW/.++..CM..A.._.D..n...... .T.v.^.$.@.W.

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	228581
Entropy (8bit):	5.223873821636117
Encrypted:	false
SSDEEP:	3072:H7b73vmxkXfmzDLk6Pp/en4CYjd+Lo5QIeQ0H:b33vekXKk2p/eHYILo5Qd
MD5:	84B399257C7078B6C8051DA088694690
SHA1:	1219498C3CAF8229F5B22EC8DFAC409995808ED2
SHA-256:	2E8859F136956CE2AE0C5330BF402A9CF673B6A5191E394232FA2CC6364C3C43
SHA-512:	4BB038DC7C07AD69E109A27A5ABD8FB9B22EADECA72BB8C0FB35ABE0DDC56F3FDA358064E1FE0425EDABC7303D9AC99A66A88A28D9CA58B031BF6D7A3F9DBEED
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/jsc/microsoftajaxcombined.js
Preview:	var $get,$create,$addHandler,$addHandlers,$clearHandlers,$common,CommonToolkitScripts,$AA;(function(n,t){function vt(){function ru(n,i){function l(n){if(typeof f!==h)throw Error.argument("value",String.format(t.Res.enumInvalidValue,n,this.__typeName));}var r=this,u,f,c,o,s,y;if(i){if(u=r.__lowerCaseValues,!u){r.__lowerCaseValues=u={},o=r.prototype;for(s in o)u[s.toLowerCase()]=o[s]}}else u=r.prototype;if(r.__flags){for(var a=(i?n.toLowerCase():n).split(dt),v=0,e=a.length-1;e>=0;e--)y=a[e].trim(),f=u[y],typeof f!==h&&l.call(r,n.split(dt)[e].trim()),v\|=f;return v}return c=i?n.toLowerCase():n,f=u[c.trim()],typeof f!==h&&l.call(r,n),f}function uu(n){var u=this,e,t,r,s,h,c,o;if(typeof n===f\|\|n===i)return u.__string;if(e=u.prototype,u.__flags&&n!==0){if(r=u.__sortedValues,!r){r=[];for(t in e)r.push({key:t,value:e[t]});r.sort(function(n,t){return n.value-t.value}),u.__sortedValues=r}for(s=[],h=n,t=r.length-1;t>=0;t--)if((c=r[t],o=c.value,o!==0)&&(o&n)===o&&(s.push(c.key),h-=o,h===0))break;if(

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 421028
Category:	downloaded
Size (bytes):	94627
Entropy (8bit):	7.996723628575681
Encrypted:	true
SSDEEP:	1536:9GcMPr2usOZcYUZTAasfkShhhbJck4+KdrauA/8OgxxlJgyh7/vvXInc1I1aqPuy:0cMyusOeTF1S3hbJj8vcJgxxlJgyBnvw
MD5:	5C3729B768565D111532B0E648364F99
SHA1:	5433CDEA8995CC90678D959D7F1D7B8F6DC48353
SHA-256:	E7E22C18B3B9E0568E9473AAA2CB5FE0D0FDB7AB0E8713D677545CD0A9973B06
SHA-512:	05495C756188E9C46D080879D865051525D2BD5875A74C899C02F1E127318685BBD97A41D8FD3083E921A13AE18D2C4DC1DCD48709E3E2CDE48F543EDAA0AB9C
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/ea67d264b690942c8510.zy-U6PEBZo5tZvAwyC0Mt1Ga6AOObigtU7jOeqlAl_Q.js.gz
Preview:	...........k{...(.._.......0.l..3....0.$.......$\|.1....t...e.....Q_............r...e.y..p........?t.....//.;..X..B..,.....k...o.........8p..g.2..mO~,.......]Z..5}.a..d.......::..fM.....h97......L.[g..m.e..9s..s...`k.``.W...........Ne.6../?.......T..3.....g.Ko...U+.R..........X?7...?^^BPd...~.c.Z..A...u.......1[....z/...r.v....j..ze.Y..u.U..L...z.........u.(..y.g.)p....L...a.....t..mx....."`G$\..`...t..B..pW.;M..^<....\|..'jq....H..;.8.... ..Wvw..N..60"..k.>.b.L......e..S .5$....K.4.6...>B:6....m...o...2_.l.1.m...+...@A.RW.{..z.....}......s.P.5A.&.h.-,....nF.R\|..1'`......D<6;.r.*.]$..tN.=u..M.sv{3.ck3...1r...".)(>.f6.N0ol/".........0.Z..Ts.......+.Ns:d...20+....~..X5..lD..ll....7.O1.<\|+...l...l.W$w.8.s._L.........9.K..1+b.~.e+.......vrP.........W...\O...K....g......PJ.....(u._J.%..M.3...]........ya.4W..M.......7..'%..e.,....;. ..1..).....=......].$\... &.L.Hq+...s{E...j........B=h.....{7.&.Wr........W.).#.....g...N5.9b%

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7267)
Category:	downloaded
Size (bytes):	7342
Entropy (8bit):	5.428471242007346
Encrypted:	false
SSDEEP:	96:C/LfhszPMzXC7B3j9C67qAwrfrqgrcsPHiJb5uZviXvDea5C9N534XTyli5MGbju:2LfhszPMajcbdqX1fxYWbsLIBjfTO
MD5:	0E090DB3730460D2C74897437417E9E3
SHA1:	433FFDBB9935EBBBDDF6614B16438146DAAAA31D
SHA-256:	A5CFBF731C56F3A93EE27ECB25A7C968DE213E54BA12E7AA1B51294A372885F8
SHA-512:	5BADC760961A68632424D399A86B2702B6504EFD97C02A6F0F85AC6D89B0FB022B1DA1B2F55FB74DBB9E1FA8B7509E620679281D0DEA58E58B2DE276F8988D1C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-onboarding-activation-logger.min-vflDgkNs3.js
Preview:	define("metaserver/static/js/onboarding/logging/logging",["require","exports","metaserver/static/js/clean/analytics","metaserver/static/js/clean/web_user_action_logger"],(function(_,e,s,i){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.OALogger=e.getEnumKeyStringForNumberValue=void 0,e.getEnumKeyStringForNumberValue=function(_,e){if(void 0!==e)for(const s of Object.keys(_))if(parseInt(_[s],10)===e)return s.toLowerCase()},e.OALogger={logToTeamsWeb:(_,e)=>s.TeamsWebActionsLogger.log(_,e),logToWebUserActions(_,e,s){i.WebUserActionLog.log(_,e,s)},logToProEvents(_,e,i,t,n){s.ProEventsLogger.log(_,e,i,t,n)},logToUXAnalytics(_,e,i){s.UXAnalyticsLogger.log(_,e,i)}}})),define("metaserver/static/js/onboarding/logging/events",["require","exports"],(function(_,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.OnboardingSurveyModalEvents=e.DeletedFilesEvents=e.FileRevisionsEvents=e.LVEFeatureActivationEvents=e.FileListEmptyUploadEvents=e.CampaignsToolkitSequenceEve

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.322916667824968
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV12nM8UnRG/SY1/Xg6n:MMHdVBMHgWdzR052vyc1/w6
MD5:	D0861EAB0F0EBA7290EAE5A63B622F9F
SHA1:	7242B5A12698C2C3F1DCA456DF83F6B1827CB0F2
SHA-256:	67A493EBE71E473387172D0ABE03C1936EB9787858176842FD4BCE611A746F6A
SHA-512:	060A58023C03141A907994EEAE0763E726B3DC119D5081A5BAF641A5D6F591D916A92602BA1045CF3B91F8D76AF33781943E9A42583CEA2D0CAE97FF53EA7416
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/header_bg_signup_office.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:2d9893a7-a01e-0045-5cf3-bb1f22000000.Time:2023-07-21T16:51:43.2904383Z</Message></Error>

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3361
Entropy (8bit):	7.878036271697802
Encrypted:	false
SSDEEP:	96:iP675Pk+D0h4nCz9Cx0v7C89KfN+CAfLVWu/Gu:iP6RDVnC5Ou7CTlwfLsu
MD5:	CD5A34185731B928DEAA73D238282AD6
SHA1:	ADC51D268F441C1B1BD650560434A23BFE75F881
SHA-256:	5C4CEF1338D37E798C56FDC594A933D4267848242E5128D57E0CE34D032D748E
SHA-512:	00248261793456A65DC2F1A2318030507D0B47480456F87E518B9D913EB9346611BF74003557F51C2CA0C668ADC404B2566219292C4D9CCA49FF5B08F85F3F9B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fc.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[i..G..^Uw....k.c'.1.a" ...K.J.#..`G...H..B.$@..AB........Lb......? ....q.E.D"b...w}...\}.{...9.]...3v........]U.K....y.(.!.7..... ,O.~.[..\|....+..........v..jx.v...rY..g...k...}..U....W.+R.y.......nz..gf..._.l.........l...........Y...a..H.-W..F.x....A..E.o[n..e.pd../.0........\|....!..!..\|_f...B.......u..N!u/H6@....}.z..FFFx9c[.tL..Gv......Ut.u.i..D..........(..(..A....;!..X.s..W.r.r.z...K[.<..."..{...6..J....W.].x.tv]E..z.n...c.-.U.o..[n.Yo......G...=..mI8:.I..ss.uZ..q...j.....<...n)[... ..._...SQ..:.j.....(!.s.y...r.+...tlK... .W.S.U..d7..jd)O..tlK... P..z..D."....&.(.{.".a..2..<..G?.{f.>..@......b......G..e.E.....$...R........\|. ..&R.0.P.5 [.%V.....pd.......E^.z5.0pOO....(m.q%..Q %.F...K[..~e.Z.\|i...t.fE....8s..lq>..,> q.6.D^&& .w......4-.\|.@C./..&F..T..N...a....$%..@.Ph......(.b..O..H#.$. ....%......VUoxq...3.\|.......<K]...!.s..Nq[..$...5.f..{..%

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 85632, version 1.0
Category:	downloaded
Size (bytes):	85632
Entropy (8bit):	7.9972316340835095
Encrypted:	true
SSDEEP:	1536:jiLJAZyC7996hxR3pBaFkKarzpwkrFLoY/387MX/AU4eGa2dccd7fWSNI0wItX3d:jKWB96NpB4wJrbMuAU5aDWi3d
MD5:	D0768F14362AC267F79F96EBB4D3E6C1
SHA1:	44F75583C947B15A4B4C7B9388841EBC4F2D4A61
SHA-256:	49C13FE5BCF96044A62CDA22CF8439AB12F3645DE3A2CE1C0623A2D0A75864E6
SHA-512:	D12884670C414FE143D7F5F192529A718CA81588CFD6B6ED69AA10C7344C8C1D793949B27D5F02AE7BDE930C6DA217D3C1DB7D2282CE4AB7891D5998C1F33294
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-SemiItalic-190618-Web.woff2
Preview:	wOF2......N...........N...............................j.`..v.H..s........h..,..6.$..T. .....B..f[....Je.....:.D&.U;G..%....v..v...0...b.-...r...M.x..m..=@g.;...........&..O.w.v...@....?$M4.i__K.T.".H.I.rfddf.5..Xk..y..x.......t.,..X.x......d.;L.%`...E..2........(.E.L.k..U..[j.............SK"/t^..e...;.f....CE7.B"..k.4.q.<..^..Gw.^E.7..Nn.E).@a..A.......{d.B:..&.&.C..).."7.$,.i.m."P.>....\|...-.;(...DsV.A...c....WH..h:<r...;.2Un....L.."UZ.u3.....&...)E.....Wt.Z..z7p......2..=.......F.5../.{F".\H./.E...pg...(..Zp..?..6Pp..m....}.P.;...[.v%......Y3.t.....)na.^.=;,..W.....n-...x.j.F.\......YPO.`NR.{.....}-#..;..U.V.>...q^..e....&...B^X.>l...S...^m.>A.L.K.'..8...k.../....7...P5....'....l..Wa.....^...iY....._....].F.....D86......aZ.#...;....0.F......{...6.....N'.-.".d..c... ....8...(.C.....J...U....3.B...K.H`.....O.AG.w$.........(....;.;.....8.$...U.gl.tQ:.....9..l..m.g>..F{.l]..O..E.#....x..Qq......yb[..(D....i#.6.;.........\|..

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7808), with no line terminators
Category:	downloaded
Size (bytes):	7808
Entropy (8bit):	5.229365087117069
Encrypted:	false
SSDEEP:	96:L+qs9f6jGaJDM2j/jHHe0Oy6qkmYdcCXiwLPzwL5AcP0F0mqDY3cpS7Z:CCGaG8jrjkmYdcBwLPz4OVvqsMpSd
MD5:	CFAC4D37EBEE0DEB9CA7FF514C67910B
SHA1:	DA0A3FC895086FC6094B24811EC6E494ACACC4C8
SHA-256:	6FEDAE5107F342161BA5B8DC77D5D20A77FEEC58A4417A4CB14C8BAA883D157E
SHA-512:	40DB53C62062B2527DEC3594A669F3A4B32A44F5DF4C0141281EABBCDD0518FA52414C6A862BB1E7A0932C1E9BDB3F13EC5A4BE74C53ADBA73CAC78A460A753E
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/gridview.js
Preview:	var GridViewManager={};GridViewManager._gridViewInstanceIds=[],GridViewManager._gridViewInstances=[],GridViewManager.CreateGridViewInstance=function(n,t,i){var r=n.replace(/_Grid_ListViewUpdatePanel$/i,""),u,f;return GridViewManager._gridViewInstanceIds[r]?null:(u=new GridViewInstance(r,t,i),f=GridViewManager._gridViewInstances.length,GridViewManager._gridViewInstances[f]=u,GridViewManager._gridViewInstanceIds[r]=f,u)},GridViewManager.GetGridViewInstanceByID=function(n){var t=GridViewManager._gridViewInstanceIds[n];return GridViewManager._gridViewInstances[t]},GridViewManager.GetGridViewInstance=function(n){var t=null,i,r,u;if(n){for(i=/(_Grid_ListViewUpdatePanel)\|(_LayoutUpdatePanel)$/i;n&&(!n.id\|\|!n.id.match(i));)n=n.parentElement;n&&n.id&&(r=n.id.replace(i,""),u=GridViewManager._gridViewInstanceIds[r],t=GridViewManager._gridViewInstances[u])}else t=GridViewManager._gridViewInstances[0];return t},GridViewManager.LoadInit=function(){var t,n;for(Sys.Application.remove_load(GridViewMana

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 496, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	243248
Entropy (8bit):	7.990223468157218
Encrypted:	true
SSDEEP:	6144:ASeWR+ZqR6BMpTtQ4Z4mXKoi0eClDeQneAznsfELIZQc:HjR+6nBCfEdTFnwEA
MD5:	691DD1415D36705796F813D0445A04D3
SHA1:	3AFC835067F813DB462A79A1ECC5786DE8952CCC
SHA-256:	518B19A34F870F8542707D2BADE2FD051794AD2C50B33C0EC2282F77EC5B4C0E
SHA-512:	75D563FFF5A93FA096F96DBE1F348C028B77E887237972FDA945DF7A4304D3343F6493BED9A922CD8A5D7CBC3302E6A8C018F37FDF50EDFA33B03651D55CB670
Malicious:	false
Reputation:	low
URL:	https://uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.com/p/thumb/AB-xkKhbJ-5eZjqJkfR4QswIuG92izqYLGt1vO9MVU9zXMyuB-IIhiBQzvHqqU_6fMC5FGtA83r1PzfBmbax1X3rUdvnGLadcwGZ4667XLS4HptYyv2zdDSG0a9qm9HlNb6LmfjzHVHqZbrbbOpCw9wfvG237D5GG-6XWekcNRlTQMzI34XPyXpnD0aewH1IpR8nz-iYeDEtmdJMD1E0U3zXYeKvqClh7qPODStlXeXuAGdgSc1AbcrkwxeKjc0g9Y1tsAfOxaEVgLW8OtsV6Nf71wA8pCp5KWoRoS9iITHPCc2gnvCm9nXf9PpSgQHKneIWMpjTDrZYdRmLqJlm_Z_4mTsywrvF2e6cuv7ZGMityP5VoCtBPg-_GC-Z392qNyDnukyEdr_az-qUCcD25HSM/p.png
Preview:	.PNG........IHDR.............8..=...5iCCPICC Profile..x.c``2a..... w'...(..{.l.,................v....E.!...Z.....qeRvA.... [..........@..@.h..@...x:.}..N.....E!A.@.. .!.......... .{.:..Z......$.$&g+.''...+..........300-A.!.$....r)./H..Q..K.C......+.........[..$n!.T.a......\|riQ...R@\|...s..d.l.o.....&..5'.IXOrc.,.}.]P..iV...u...4.....I\...$.....IDATx.....$.&.~j..g.....n.&........Y..y"..'ow.t7.........&A........7..AU..=<"#".#.#M...p7..\...UM.bf....(..}v5....=............6..>.7/.."....]]..U.}Q.3.bo'.9......o6...<^.7...u........D.....T.P.B...T.P.B.%7..<..2v.bc8....WQ.}....+..=s..E...rY..0gvE.e...k.nP...r....os..k....5;o...,+.u..%9R.d...O.\|...kx.x..v..r..q1^/...4D9v#.)...Jsf.\.'.M.wY...........X.....-.p.r.Zk.b....}["...a3.S..7..v.k_?r<.f................b.q..{s..{..C..P..8.9..Y.!.y..C..vc.....`.5C,.}..c..k.m`.y....{;.x.^.K..k.^#n..w........Y.5.6......d'C........k.f.....?..d'...sr.,......,...pC.^.U..eT*r\.{]Tx}>."...n....\..vY.6....S.m

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
URL:	"https://portal.microsoftonline.com/pp.l?CID=2aba11ab40ca4718992fbdfb6186c43a&pageId=Prefetch.aspx&d={B:{S:%27U%27,LT:-1,UT:5816,MT:-1},A:{ET:-1,OT:25,DT:25,CT:146,RT:184,ST:185,MT:-1,LT:-1},C:{LT:1689990685758}}"
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 64312, version 1.3801
Category:	downloaded
Size (bytes):	64312
Entropy (8bit):	7.997085385162933
Encrypted:	true
SSDEEP:	1536:ewb33uqE+oLBcBXDGQK6DrmE2B/AUPvE22Ri:ewT3uSowTG76mE2B/AUPnP
MD5:	39746FA9261B312CCCBDC84FA3868586
SHA1:	86DCF95798DB4F095A2DBA3905394EECE26C2BA6
SHA-256:	FE2B97EC6926B7B6FF62113D76B0DBDF3AE10EA8F2F7A779803B6ABC8B3E1F03
SHA-512:	8D5B9CDFB0D54AD0E1024C29900BF94BE70285997F10CBF97BB5022D1F1C3559659DFDCCC332D288835B8C9F1CD22607C4F99C18580305BB6F4DEDD396600418
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/SourceCodePro-It-1058.otf.woff2
Preview:	wOF2OTTO...8.......\.............................F...q.....~..>.`....6.$..p...... [l....Cv}..,M..Q....!.(.....{R".v.;\|...2g#c..H.r......._.,bl.,.... B...g...n..8%............./`%.ik.6..6...W.SS..t8'Xn.]........p....R....-L8.d)..~...s.3.M5S.T3...{..M<_.H.....E....cFfq%.:..q[x. ""...{0..!TR.T....@DD.D.f..jV.C]..R.....D..KK.).X<H .d ..w...Vr...=..k.yXB.....x.S.'G+..x...3.M+...r...S.u....Z.`-....p..6..&.`0.#..._.dsZ...,.W..Kh?......{.....>V<.......wt..N:i)=.4J.$...(.A...Rq..%y&e..$!m0\|..Y31.n..tA.....x8#.5....oy.SOr.@#...ZJ.b.{..}..... ..hV..K7..v.8#YeRLOV..W2..S.]..\|..H..c.C_.V;....[.Cl.8.........4..f.1..)..ZO#..$.../.vR...I.I.......w.S..~X!:....1.=.z.wW(.V..=[.{z..%C.3I.p....d..?...%1...AIP...Y.LcF.e,@.l.\.FH.....E2l..}....j$.xE...g.w...2K..\|s.y...#.7.T..]..4?.5M>..@mjB..$......k/......-:.d[Gi..N..R@.oJ.qo.bts =.8....{&.]0...D....k..BU..z[.]..b.#.O...Q$".d..H.. ".4..dB...7....'.C..A.z.o....My.....K.fE.....t.P.....>.E....eb..d.1t;.......

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7908)
Category:	downloaded
Size (bytes):	7968
Entropy (8bit):	5.407929038819316
Encrypted:	false
SSDEEP:	192:b2hq2kjUqu8vprT9srjDBpK7YgmxM32YZrRVxwOSEUpvQ9:b4qJj31vJT9s3nOYgmxVYZrRVxwOSEUq
MD5:	044C71671AAB505B5BF77A1604ED5407
SHA1:	F5459CE9C7C81A094AFB51AFEF2D01380BDB208D
SHA-256:	78CB45B81C64B1A93BB6529C2D0946BF8974D98D953C717C3DDA9D45605835BF
SHA-512:	BA471D7EB74610A21106F85915DE8960DCC372DCFCFEC85344C48946147379B06EF3C921B8FFE5EA07BAFC720D62D1ECE6EE1A7202A4645EBC0EA5574F7F433A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-icons-assets2.min-vflBExxZx.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/chevron-down",["exports","react"],(function(e,t){"use strict";var r=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)})(t);e.ChevronDownLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"m5.25 9.25 6.5 6.25 6.5-6.25",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scaling-stroke"}))})),define("metaserver/static/prod_assets_web_modules/common/close",["exports","react"],(function(e,t){"use strict";var r=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:fu

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9395)
Category:	downloaded
Size (bytes):	9447
Entropy (8bit):	5.300816382471203
Encrypted:	false
SSDEEP:	192:li4WCVt1rzoeYR/GAmpACqAJKKFQP1JXUcIUYwJGyXUfUoJD0jeQV7L1p5lUrT:lik1YeKBCqAVQdJkQIsuCZ7P5lUrT
MD5:	7C878D4293A5376FF13BAF6E259A0ABA
SHA1:	9E7780C1F94C33DB83CD90C65CCBCE780E3102E0
SHA-256:	5093B1B631954DFAE4ED12257B7B1228B7137C55EDB34773A1C3D3A106CED645
SHA-512:	8A86238E0F21133A3E6A2CA4E171F45A78AE929A33EF87AE1D83507AE3167DCED389FCDDAD88204B56559A7E8A0D28DD95A78480E56E5779FE991F73B08881EA
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-g.min-vflfIeNQp.js
Preview:	define("metaserver/static/js/clean/ui/radio",["require","exports","tslib","classnames","react","react-dom"],(function(e,t,o,n,a,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.RadioGroup=t.RadioItem=t.RadioItemVariant=void 0,n=o.__importDefault(n),a=o.__importDefault(a),r=o.__importStar(r),t.RadioItemVariant={Normal:"normal",Large:"large"};const i=Object.keys(t.RadioItemVariant).map(e=>t.RadioItemVariant[e]);class s extends a.default.Component{constructor(){super(...arguments),this._handleClick=()=>{this._isSelected()\|\|(r.findDOMNode(this.refs.input).focus(),"function"==typeof this.props._radioGroupData.onSelect&&this.props._radioGroupData.onSelect(this.props.value))},this._handleChange=()=>{"function"==typeof this.props._radioGroupData.onSelect&&this.props._radioGroupData.onSelect(this.props.value)},this._getId=()=>this.props._radioGroupData.name+"_"+this.props.value,this._isSelected=()=>this.props._radioGroupData.radioGroupValue===this.props.value}render(){const e=

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5478)
Category:	downloaded
Size (bytes):	5539
Entropy (8bit):	5.060775024773589
Encrypted:	false
SSDEEP:	96:CzQoHz9kgak+IDipTtjO1Uh+pzepVfk6vrNXH3rBGZ04:CzQapkpk+6Uh+FePcmrh3g04
MD5:	AA4B7174791BEBD489207BEA34CE0699
SHA1:	0782C9BADFBA5473F259CB78C2836D22C37427EE
SHA-256:	E7699BAFD178438ABEB2FB3C51383C55A430964AA4F420841BD4A3F25A3D5689
SHA-512:	1201C6C60E27E9863B0A53AD1BF485D995CEAA36A30B9927BDF3DEC25CAF7591C6E30698B4E35405AE2F6B8F2B825DAA724E65D625307A71DFD8464ED84FA6B8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-icon-essential.min-vflqktxdH.js
Preview:	define("metaserver/static/js/icon/icon_helper",["require","exports","metaserver/static/js/clean/filetypes","js/filepath/filepath","metaserver/static/js/icon/extension_map"],(function(e,i,_,t,p){"use strict";var a;function r(e,_=i.ICON_SIZES.SMALL){switch(_){case i.ICON_SIZES.LARGE:return`${e}_32`;case i.ICON_SIZES.XLARGE:return`${e}_64`;default:return e}}function w(e,{size:i}={}){return r((0,p.getIconNameForExtension)(e),i)}Object.defineProperty(i,"__esModule",{value:!0}),i.folder_icon=i.spectrumFolderIcon=i.file_icon=i.extension_icon=i.toSpectrumIconSize=i.ICON_SIZES=i.SpectrumIconSize=void 0,(function(e){e.Small="small",e.Large="large"})(a=i.SpectrumIconSize\|\|(i.SpectrumIconSize={})),i.ICON_SIZES={SMALL:"SMALL",LARGE:"LARGE",XLARGE:"XLARGE"},i.toSpectrumIconSize=function(e){return e===i.ICON_SIZES.XLARGE?a.Large:a.Small},i.extension_icon=w,i.file_icon=function(e,{size:i}={}){return w((0,t.file_extension)(e).toLowerCase(),{size:i})},i.spectrumFolderIcon=function({fileType:e=_.FileType

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 904810
Category:	downloaded
Size (bytes):	254348
Entropy (8bit):	7.998930340841898
Encrypted:	true
SSDEEP:	6144:vFY7KtcyodI86Np4w6jSPC8axOEnYZ6e/BBqx+RPmit:vFYm9oddop4wLC8pJDRui
MD5:	76835189F2C201501C6B3F4B7646368F
SHA1:	E581BF28363A1BD9AC67EB417BD4B2D9EC1FAF7F
SHA-256:	FE6AA0FB516E5E85D17AEC465C336EADB1C951EEF077EBE214605943025B26CD
SHA-512:	A0621020CED15DFD1D7D43E7FE908E343F568152F377A93D8D892407B219C2B384B1122131CF47153716CEEAAAA0AD8A6296615DA4D3D50D53297E21C6499B62
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/e0d8148a84ecb269e327.IeP00FobWk-c_AtiUoDfLvHTgizjKX98gEi7b6K1JTg.js.gz
Preview:	............Z..(......)MD..-Iwd...3....x&..'Z.(VK.ImL..w^..;.r..<....J58.^g.g~k.M..5j.j\..8.............]...s.........{k...z...rON.Y8..Y.M..,..8....,Mn.'.9..D....Q"...$.GgQ6)dA.^$s.N...t+....$.&\|.<tN.........<..q.../..=8.UL.A$...a.A...-}..L.o.h...............~...........g.....~.=....y......`k.R.Q...o.>.K..a.e..d%......Y.S...?./.S...ww...r ..<.E9..E9..Y..731....r....z...n...q..............@.f)..S...N...2...)D".x>]7Ko.2..?...H.....=K.^.>..Q&..y8s<?..q..bP......,..ls.7.-\..............D.8p..._...0.... .}.e.Qy...Q.qR....x=u..`..X.n"..\'.?....H.)..I....p..p...A@..e..j=.......N\ .......n/..\|.N..f...?.~...$...O.......N.....^:...Q..O......vx...1?.9.e....G....`gE....H.{.,..].a.....8\O.s.8Z.'z....3sp.[...2N.z[...Na..W7Q...}..4N/..Y.`....WB..u..v........U.Dp.<o.....,.o.M.lM.6o.S.i7...s.0.....7&T...d.ol<~..h.G.X......f7y\|yU.........D......b..x".BD.9.;`....p....I.......b.G~r.1vq......W.?/.a..E../.1+.q...8.....+.G..3..,........3..B...K9i..U

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	539647
Entropy (8bit):	5.381957482254162
Encrypted:	false
SSDEEP:	3072:F3jThwXAhlzz+y92sqKXisaFB3VcLSEaEldyp0LFDbQi2val651x9xdnyLRJ0iTp:F3Phwq22EhxdywuKGkEUZa4uUy
MD5:	221712C77C654C11F645EE71B55AEB8D
SHA1:	39DFF7EFA84FEAD485A5101247CA03CC843F0840
SHA-256:	B523D1A4A5FC029B7C456A0747D34544BF3D86329398CF5FFBF1668EB70CFFEF
SHA-512:	3571D073ECCC6271A24EFC1ADA5E9FD0ACE3E987AAEAAA6725AF6FBCD22622D66917FF4BD44A3B2181D380F1FC98DE55BDC91D33D6DA08A084FC03AD7C12598B
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/jsc/adminbootstrap.js
Preview:	var AdminApp,Admin;(function(n){'use strict';;n.app=AdminApp=angular.module("AdminSPA",["ngRoute","ngAnimate","ngCookies","ui.bootstrap","ui.router","ngSanitize","ngResource","angular-tour","kendo.directives","ngMessages","mgo-angular-wizard","ngAria","ngCsvImport","infinite-scroll","angular-momentjs","LivePerson"]).run(["$rootScope","$state","$stateParams","$window","$http","$templateCache","$timeout","ConciergeIntegrationService","HelperService",function(t,i,r,u,f,e,o,s,h){function st(){o(function(){var n=angular.element(document.querySelector('#DelayLoadAdminFooter'));n.length>0&&$('#AdminAppFooter').load("/AdminPortal/Home/adminfooter",function(){o(function(){var u=angular.element(document.querySelector('#AdminFeedbackDiv')),n,t,i,r;u.length>0&&$(u).trigger("AdminFeedbackDiv",!0),n=angular.element(document.querySelector('#WizardCatalogDiv')),n.length>0&&$(n).trigger("WizardCatalogDiv",!0),t=angular.element(document.querySelector('#ModernModalFeedbackContainerV2')),t.length>0&&$(t).

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	233846
Entropy (8bit):	5.165417157859174
Encrypted:	false
SSDEEP:	6144:OqLs/M18Czs/SZkqvssumzd7MDL6B2cyMwagzD7Lmv7MN9vdOcPH0Jq4oHqu7t5c:OqLpt
MD5:	FAD2608EAA886800DBBB5A90583D41B1
SHA1:	1223AF6E5CE5D31C91D798367D22213A42E20258
SHA-256:	648964AF1D84B6DD579756ABF4FB787478D084B4E98FBD797CFBC9583189A7F1
SHA-512:	1272550E0163F1154950115D446FFC008F715558977B038D51565F7BE94CE64FF0C155A0C006F2544457E846AC54E61F66AC4EEA35878AD4B5C3620C2B9FAE7C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-spectrum-content-icons-compatibility.min-vfl-tJgjq.js
Preview:	define("spectrum/icon_status/bundle",["require","exports"],(function(e,l){"use strict";Object.defineProperty(l,"__esModule",{value:!0}),l.ICONS=void 0,l.ICONS=JSON.parse('\n {"complete":{"attrs":{"width":"18","height":"18","viewBox":"0 0 18 18"},"dangerouslySetInnerIconHtml":"<path d=\\"M9 18A9 9 0 1 0 9 0a9 9 0 0 0 0 18z\\" fill=\\"#00A83E\\"></path><path d=\\"M7.583 10.315l5.128-5.128 1.62 1.62-6.748 6.749-1.62-1.62 1.62-1.621 1.35 1.35-1.62 1.62L3.938 9.91l1.62-1.62 2.025 2.025z\\" fill=\\"#fff\\"></path>"},"fail":{"attrs":{"width":"18","height":"18","viewBox":"0 0 18 18"},"dangerouslySetInnerIconHtml":"<path d=\\"M9 18A9 9 0 1 0 9 0a9 9 0 0 0 0 18z\\" fill=\\"#D5001F\\"></path><path d=\\"M13.91 7.773H4.09v2.454h9.82V7.773z\\" fill=\\"#fff\\"></path>"},"sync":{"attrs":{"width":"18","height":"18","viewBox":"0 0 18 18"},"dangerouslySetInnerIconHtml":"<path d=\\"M9 18A9 9 0 1 0 9 0a9 9 0 0 0 0 18z\\" fill=\\"#0061FF\\"></path><path d=\\"M8.98 3.751h-.19c.063-.002.127-.004.19-.004V2.

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	5.342168892726887
Encrypted:	false
SSDEEP:	12:1bmSyv6/rS5Ddjege8g6FaL8DzjLEFI5DDc0nlslfiV0+Qurwr7O:1bmLC/+W6F/HcFmls5uMPO
MD5:	E8C27CC72A944D004C4404B1B0FE0141
SHA1:	46BB14C225786A3C4F5C57450DB241BE53F7E75D
SHA-256:	F2EF244EC44C422C6152C8DAAC1B2F850ED0D9A41AEFC1057368C33A8A4B90F9
SHA-512:	40A6220B05020AACEA825E9B635F51716DD8633290FFAA779B4CCDE303364F687A329867BB1B5896B3717916AA2E4551D010486060CF98CB83E322EAE24AA9E4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/element_observers/observer_constants.min-vfl6MJ8xy.js
Preview:	define(["require","exports"],(function(e,E){"use strict";Object.defineProperty(E,"__esModule",{value:!0}),E.ElementInteractionEventType=E.ELEMENT_INTERACTION_EVENT=E.UXA_INTERACT_SELECTOR=E.UXA_ID_SELECTOR=E.UXA_INTERACT_ATTR=E.UXA_ID_ATTR=void 0,E.UXA_ID_ATTR="data-uxa-log",E.UXA_INTERACT_ATTR="data-uxa-interactions",E.UXA_ID_SELECTOR="[data-uxa-log]",E.UXA_INTERACT_SELECTOR="[data-uxa-interactions]",E.ELEMENT_INTERACTION_EVENT="element_interaction_event",(function(e){e.ELEMENT_HIDE="elementHide",e.ELEMENT_SHOWN="elementShown"})(E.ElementInteractionEventType\|\|(E.ElementInteractionEventType={}))}));.//# sourceMappingURL=observer_constants.min.js-vflfCai8k.map

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11690)
Category:	downloaded
Size (bytes):	11742
Entropy (8bit):	5.327747958664406
Encrypted:	false
SSDEEP:	192:bh+mkR8CsHBziiFK72kurn53y5O49cPCb8s3d+r5Zv3xYl3:bhFoXOBeiFK72DdUOGcPC4s3d+9ZPxQ
MD5:	E8906635D1240735E1F5EB49647AB3C2
SHA1:	0DDA42BC88F234B66173918F1CCB5FEF0427515D
SHA-256:	2CC1E9ED4BD885032D33C378827E89D8CB6166A668622CF75D62553E3F570601
SHA-512:	4F7AEA7AE2E4C35D9BBB967AB56AE361BFB8C23A2F3572B58B7E23D53937B562AB9BC4CD069E879795D2F329E4C2EC2BAE34C3396E3923200304CA1689A7E257
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-i.min-vfl6JBmNd.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/layer",["exports","react","react-dom","../dig-foundations","../../common/index","../../common/index.esm4","../../common/_commonjsHelpers"],(function(e,t,n,o,r,a,i){"use strict";e.ELEVATED_BACKDROP_INDEX=a.ELEVATED_BACKDROP_INDEX,e.ELEVATED_BASE_INDEX=a.ELEVATED_BASE_INDEX,e.Layer=a.Layer,e.LayerContext=a.LayerContext,e.MODAL_BASE_INDEX=a.MODAL_BASE_INDEX})),define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/overlay",["exports","../../common/index","react","../../common/floating-ui.react-dom.esm","../../common/index.esm4","../../common/floating-ui.dom.browser.min","../../common/_commonjsHelpers","react-dom","../dig-foundations"],(function(e,t,n,o,r,a,i,s,c){"use strict";var l=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var o=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,o.get?o:{enumerable

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2377)
Category:	downloaded
Size (bytes):	2432
Entropy (8bit):	5.139136261950352
Encrypted:	false
SSDEEP:	48:rLZ5erNRHD8XMFsZCVErtFREHdVWCNQijsFZoIzVFZpr9UyG3Sx0EmN:p5ejo8skVE5FRlCNt4XGyG3UNmN
MD5:	A0FCAD688B9BA56E2E4A003E08F5C001
SHA1:	2F2B915FB7765BF67C5E20781080A8752BB9FED6
SHA-256:	FB8DC117A76F0FB9833C686807AD8269478FCDD25F7653B77F9569E4FF957573
SHA-512:	34BA04E7540E9E0B111EC475E272829EF13D177950F936512023BAF49BCD0A62EFDC41BCCBFC82BF394F0DD4A615B5B54AABE25A804AFBE0EC42E3910FA795C1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-loadable.min-vfloPytaI.js
Preview:	define("metaserver/static/js/api_v2/team_client",["require","exports","metaserver/static/js/api_v2/types","metaserver/static/js/api_v2/client_base","metaserver/static/js/clean/viewer"],(function(e,t,a,r,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TeamApiV2Client=void 0;class s extends r.ApiV2ClientBase{constructor(e){super(e)}_headers(e){const t=o.Viewer.get_viewer().get_user_by_id(e.subjectUserId);return Object.assign({[a.ApiV2HeaderNames.DropboxUid]:String(t.id)},e.headers)}}t.TeamApiV2Client=s})),define("metaserver/static/js/async/loadable",["require","exports","tslib","react","metaserver/static/js/core/cancelable_promise","metaserver/static/js/core/exception"],(function(e,t,a,r,o,s){"use strict";var i;Object.defineProperty(t,"__esModule",{value:!0}),t.Loadable=t.LoadState=void 0,r=a.__importDefault(r),(function(e){e[e.Default=0]="Default",e[e.Loaded=1]="Loaded",e[e.Error=2]="Error"})(i=t.LoadState\|\|(t.LoadState={})),t.Loadable=function(e){const{loader:t,loadi

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59785)
Category:	downloaded
Size (bytes):	59846
Entropy (8bit):	5.5035708603861675
Encrypted:	false
SSDEEP:	1536:y3GOMHWxEv8G2zJb/nx2iWARGP57+xk1VFldi:yWOMHmE8Bzt/nAMwVl4
MD5:	1C84DA80ADCAB71ADC7AB609D7B443B2
SHA1:	27CBF05B83E75F3F32C577AF2A9DEF062B7ED928
SHA-256:	75BCECF6692C4B2A196059753680669EE00CBCAA943AB327DECBAFFF495077A2
SHA-512:	17C56044C7309A589DB2A10E1DB831CB1BFAE7D94D4087C598CE9AA66133A6E455188ACD05FF6E5564793D9BE020018832FC6C7B54FFBC30F11CB3F3E41F483A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-analytics.min-vflHITagK.js
Preview:	define("typescript/dropbox/proto/hql_events/ux_analytics/ux_analytics_events_pb",["require","exports","@bufbuild/protobuf","../extensions_pb"],(function(e,t,n,a){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.UXAnalyticsScrollPage=t.UXAnalyticsDismissModal=t.UXAnalyticsShownModal=t.UXAnalyticsHeartbeatPage=t.UXAnalyticsDismissPage=t.UXAnalyticsSelectElement=t.UXAnalyticsSelectLinkNoSessionStorage=t.UXAnalyticsSelectLink=t.UXAnalyticsShownPage=t.ElementPositionFields=t.TimeAndLocationFields=t.UXACommonFields=void 0;class i extends n.Message{constructor(e){super(),this.urlPii="",this.orgReferrerPii="",this.httpReferrerPii="",this.previousUrlPii="",this.requestId="",this.visitId="",this.requestSeq=n.protoInt64.zero,this.uxaV=0,this.instanceEventCount=n.protoInt64.zero,this.instanceInitTs=n.protoInt64.zero,this.spaSource="",this.hashFragmentPii="",this.variants="",this.adobeTargetVariants="",this.warpVariants="",this.cmsPageUuid="",this.paramAd="",this.paramCamp="",this.pa

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (400)
Category:	downloaded
Size (bytes):	65376
Entropy (8bit):	4.934448685088616
Encrypted:	false
SSDEEP:	384:VhTkZle3HN2N70QZ7y767lii7o78LD1Inf1kE2UdlFjMURnxnD7PIQFvFI:PkZlu2l06emllwJa9UfFjp3D9FvFI
MD5:	272E06FAD33874AC43A2B18C3CEE703E
SHA1:	B1252C3CA7A0151AEE2FABD3185B97A02DF89E8F
SHA-256:	75876E70617EB36DDD8039FB7CE7F60CE6133553224068A2FBF70701002441FE
SHA-512:	1FEE8E7DC2A533AF47B0D45E601C1423F397E4370C6387C0436A6D77DE8920FC80A5E87615F5BEE0D5D9F2E58633032B875E64A46CF32F091245666C6998FCA5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/spectrum/index.web-vflJy4G-t.css
Preview:	/! @generated -- DO NOT MODIFY /../* -- account_menu/index.web.css */..mc-account-menu-item {. width: 100%;. box-sizing: inherit;. padding: 4px 16px;. margin: 16px 0 0;. font-family: Atlas Grotesk, AtlasGrotesk, sans-serif;. font-size: 14px;. line-height: 24px;. font-weight: 400;. text-align: left;. color: inherit;. cursor: pointer;. outline: none;. background-color: transparent;. border: none;. text-decoration: none;. display: block;.}..mc-account-menu-item:hover {. text-decoration: none;.}..mc-account-menu-item-disabled,..mc-account-menu-item:disabled {. background-color: transparent;. cursor: auto;.}..mc-account-menu-title {. width: 100%;. box-sizing: inherit;. display: -ms-flexbox;. display: flex;. -ms-flex-align: center;. align-items: center;. margin: 0 0 16px;. padding: 16px;. text-align: left;. font-family: Atlas Grotesk, AtlasGrotesk, sans-serif;. font-size: 14px;. line-height: 24px;.

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24362)
Category:	downloaded
Size (bytes):	24424
Entropy (8bit):	5.434335502385363
Encrypted:	false
SSDEEP:	384:YCBct58kju+F9a8Q8iQJiQwQbQxiQlQXQYqDpq8U8yNOyEerEHa0SUgLbqzWG88i:YCMeWu+F9tQHQUQwQbQMQlQXQYqtq8U5
MD5:	FCB01D6DB8ED276690CAA3181EC1772D
SHA1:	4E515308E3D361B3C663A3815CE847D01B024227
SHA-256:	174BCB9DF1C0E10381F5F07DB948133D62B16FFFBE2260A92B4B89AE471B61D7
SHA-512:	FA697504A55BB9EE749F24735EFF9774C16F8C7D66497A84F46036DFEAB8A00F220D2CD84BB675337C11E647488B60BBEACC07EDDED649D5DA4226732B4DF793
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-browse-and-home.min-vfl_LAdbb.js
Preview:	define("metaserver/static/js/clean/bem",["require","exports"],(function(e,t){"use strict";function n(e){function t(t,n){return e+(t?`__${t}`:"")+(n?`--${n}`:"")}return Object.assign(t,{mod:t.bind(null,null)})}Object.defineProperty(t,"__esModule",{value:!0}),t.bemStyles=t.bem=void 0,t.bem=n,t.bemStyles=function(e,t=[]){const a=n(e),r={};return t.forEach(e=>{const[t,n,...i]=e.split("_");if(i.length)throw new Error("Cannot define style keys with more then an element + modifer");r[e]=a(t,n)}),r}})),define("metaserver/static/js/icon/folder_icon",["require","exports","tslib","react","@dropbox/dig-icons","typescript/libraries/spectrum-content-icon-compatibility/src/index","metaserver/static/js/plusplus/icons","metaserver/static/js/sync_everything/ui/icons"],(function(e,t,n,a,r,i,s,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TeamFolderIcon=t.SharedFolderIcon=t.SimpleFolderIcon=t.FolderIcon=t.getDigIcon=t.convertLegacyFolderIconToSpectrum=t.isLegacyFolderIcon=void 0,a=n._

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5082)
Category:	downloaded
Size (bytes):	5083
Entropy (8bit):	4.931498303456814
Encrypted:	false
SSDEEP:	48:sal1qQzFHzjzjGQH7awKT0j5L1QkKvk+yvMdRIRCrHfZ2PMRpe6nMOqOxpOq92Oc:tBfySNKY6kSQwVr/Z2A6Oz9Q3
MD5:	0E80CBB2EF9225FDC2B4DEFA7D321901
SHA1:	BD0862DEAD0CDAD41CC33D88856225717C6B173E
SHA-256:	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
SHA-512:	5BED798924D325326B30C5089EF51E7086D5281B113EDC519A58632528FB95B082ED723813F4C1F4E73D7D05F0DADB70B2BDD478DEFCB5124A2E9A7020271C09
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_paper_atlas_grotesk-vflDoDLsu.css
Preview:	@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflugmAly.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflWr14lv.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflYSEsbG.ttf") format("truetype");font-weight:100;font-style:normal}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflP-manv.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflmKWqdQ.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflHYkDrv.ttf") format("truetype");font-weight:100;font-style:italic}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Light-Web-vflvAXMid.woff2") format("woff2"),url("

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3275
Entropy (8bit):	7.886151392866353
Encrypted:	false
SSDEEP:	48:oAZYVtRlc5cEhL43QIa/Jjqh6SFydc3wWM1uF4TBKW2RtDglwfrzQXBdrz:5YVtROThMg9/Vqh6hdnWYTTl2DWwrsxR
MD5:	BEAA0ED7207B6D54F5BC7A8118F30E9D
SHA1:	E48803791A228C5DD8D4A2BA101DDEFEE63D5868
SHA-256:	008AED4B5DE1B7EA70A1D384E6811AD451747E37668F4F9ECC3AD68FDA892147
SHA-512:	3CA0ED2DAFAF070C9E20C540278FC2522EE6F4A306EE18BC7F8233F4739DF207CA5B9EEF46C1EE6D4A0702A39FE4EA976FC92B29C6FBF0B10E58C8E47C4701C7
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fb.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....XIDATx..[[l.W...sf..{..IC...i.!.K.Em!.B....U..U...j!..xh..E.A....P...P.....4..-M..c;..;.3s....wgv.^'....z.\........8....b$MD....R.& Gl.......r..(h.:>qlh..^P..=.}.,d..dfz..........\.....\....m.M...e..L3.8..76.XC...\.7.%.p..G.......)&<k........e...:.z.J.Q&3......,...G...#imY.L.T.....v..?.@<.....@N....Vm....^..e..P...[.(...Q,....C...twO/..f.....3.pi\|l;.(R5.R.I.n../..J.8.J.l...8.....m..s.sk..g..D.D...[........x...>V..0.@.m.M....j....e..z......^.......,..@.Z.m,.R...}.(...H$.gEo...WC)..\...M+]...j.(D..a.v....,.."Z...5....]Q...L..+]}.....DD..^.....P..i.J.R.D$@...J.c!...i.b4E.[O>....t...hWa:N.@....m.....i-.....G.v)..s....W..?F.../.RJ.s..(D.0'....".P...G..!.d2..}.].....WDT..+Rb..`.....+..u.x..w.}V......6.}.3.K..q...!..}@.._#&`...$....{.'...X=/_. a!.....n..DY.(..a>.t......`..."."j.M...J)....a......h../%Ik......1.zGW/.++..CM..A.._.D..n...... .T.v.^.$.@.W.

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 18334
Category:	downloaded
Size (bytes):	4574
Entropy (8bit):	7.959832911716927
Encrypted:	false
SSDEEP:	96:/oXSWQ1gzoWJE93zNTwtLqCsHKqDykE+H62yHig:/oXSWQKzh695TWO7l3Rg
MD5:	2E87EF19236C2EE364FCF6D7E3DFFC35
SHA1:	F7A3285175D22EAB5D8889BDD52D9D2682D01CBB
SHA-256:	E4FE4E9395029A60E4AEE7BAC601C30F560E0E3B2CFD762A1AD9AC3C27B004C8
SHA-512:	0430146A3D444177A14E3C8406F0C60845E81BFBF0F8CB17C3715EA939F927EA6905B6AAD9C033A9D4C90B97D13CB2FFDC2132132CB726B431333A0B6F2704CA
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/b12f522ce0ee55757f5e.2dcJbNyH591tHPSv0DWyEHi4jMDBGtqFibbP5rsRf_I.js.gz
Preview:	...........\.r.....t.\d.E.N.8.p..[.=..Z..9..R..."9d.F..>.>.>....$;..?&......C...d.....z.W........O.....z......{U.'.H........>....F/..rh.b:...Y..F...pl...h..o.=...m...\gZ..f...Z..k2.s..1.Ug.U..5.n.....<......./<k..6{$..j.z...J.../=`z.x..>...dcF..[.U.v.:..G..t.H..h..*{.f.woU-....T...........-x...\|..^.\|x.ac\|..T..<..~....C\|}.jS....E.cCij@_.q..\.\|"&....'...h..h..!.Ue....Z3.Z.I....?..t'..E.[.........Z}..S.z..$.u-.<.l.h...s..?X.X...8N...8R.Cu.k:...<3....."S6".7.yI....,......N..1...'..rDU.de.+#a...G..M.~...4h...y.Xn{z...[<B....).Y...f.<RJ.)1M..<6.C.A..q.....l............c.).^..Bn......,..7d!......"6r.G.FzN.!e.N`!3...p.F..J......~~..@F.+s.E2r.2.GIed .\|K$..[.x.<...SoL#..S..v..7y.>SV.J.c...H.%......Zg%O...,.7...~.kR..'..9.b..\|......s]......tx........K...rH}.P..a.Qo.".k.&U...'.!J...H.f.....wuU=..L1.a......w(...Q._.G.tj[.u.}h......?..7.=z..]T.j.o.!z./.2.+.-.;......'E..lI..Gq......0.8N.0.....T;.)`c5..'c.P....8.PV...,.5m....iD.so8..j{..b.

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/js/langpack/icu-en.json?19558.0
Preview:	{}

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3037
Entropy (8bit):	7.91875067094988
Encrypted:	false
SSDEEP:	48:ozf5ipgAwSJel7pU7/2ZsofMqeJ71UFDkP4KfD3xJyAsNuVg2o:0qK7pUbWfLzW4QJVg2o
MD5:	C4CE23F7313E8E2319F10E4D8AEB20D1
SHA1:	EBE18FA8C318E3BA6D54636FCA980996B183172A
SHA-256:	E2D2BC5EF69F49E711E2147DA9D5A5D67F478312D30D78AE486B0E1763AF0430
SHA-512:	98E07B9E4D7C40E245BF39071A879E6E094AEB5F2B3B264E0ACA1730B58B4CC8B84664A1F24174966FACE6642033E592F3A58F3C956B346DCE98A8D745DD0E48
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....jIDATx..]...u....G.t.F3.lF.F+...z..uH.IX....b..,!^...1.].....0..<..$.iE...."...`0.b.<..M...H..dY.W..vF.QU..<T.LWwUu.L......{...O.s...&...'~...G.L#r..W"q'..>......lV..N<.s.U..ob{..\|C..k}!.....?.....?,..j......z....}v\.-F\...../._.,..b...nn?..G.E..P.....'gBV..M.T.}...n..(.!..\|.+..z...g...6.......c^....5..........c..`...C......Gq...Xw.8{.?4.6..".{j..P..u..h..c....}.^....B.......q.5.Duk[..C........i..3.#..<.......D..;c+.Y9..1.....[.u`...`.........W.^>....m-X..8vy.g=?..WI...`...1.Ml.3.v.!.s...@..g..!#....+m.^`.....S.....Z.~....~....~FJ...%?.....@...?.b....G.C..:...W.ucM..?6W9st..s..D9#........W..Pu.....5pTU..g..\|.....p.....x@A..4=....(........U.m..........?..0F.Y-....P..........Z..S...7.BW.3wo........A..=..1.y<...;.....R...,J..b.........R.f..A.....>...Pv..C...g.....z.vF...3P..V./3^Z%...F.]~._..F..... .(R@UA..P..<...jz,hT....Y)......-.d.RvQ.a?..

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7311)
Category:	downloaded
Size (bytes):	7371
Entropy (8bit):	5.394406119224433
Encrypted:	false
SSDEEP:	192:b+zU9NafmwijSnS78S8w4myu86gaW6vPhDEjrA3lRW9mW05v:buU9NafmljSSISX4my16gaWEZDEnA3lx
MD5:	974F262F184EE736D152F5CD991CC9A8
SHA1:	9DF1BD32359116BBD134E292AD1445A7BFF4931B
SHA-256:	26B9EDD7FEC2243A3D2F26AEC0E54978C7BA1C4CDBA0F3952E0A63E34DB75577
SHA-512:	14126DDAC26D79EB8FB16176B323202C3E34992CDB61E9D42F49F79ACD84A5971F1E6B7A612C22B43AF17C1F959710673ED04B6A7FE9565D02525D06DBF5BBC6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-time-tracking.min-vfll08mLx.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/chevron-right",["exports","react"],(function(e,t){"use strict";var r=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)})(t);e.CheckmarkLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"M5.5 11.5 10 16l8.25-8.25",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scaling-stroke"})),e.ChevronLeftLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"m14.75 5.75-6.25 6.5 6.25 6.5",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scaling-stroke"})),e.ChevronRightLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"m9.25 5.7

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2091)
Category:	downloaded
Size (bytes):	2155
Entropy (8bit):	5.230868053254922
Encrypted:	false
SSDEEP:	48:1aY/95gtP+7YLE2OpfaURsF5GR2RB4JQqJb6Z4JQqxDXE4bE8YQThnWJ:Z/95gtP+7YgfaURs1bRqRsRqjA8n9nE
MD5:	66F6A047FDCAB066EA70ED8EE1031417
SHA1:	CD86689A69226A05B0AECC2CA7BCBB5FAD4DBACE
SHA-256:	B0FFEFEE74EF21C76A903990FE14CFF784C73D193CC9778B6ADE57B445A4C9B2
SHA-512:	7413B64D39B30F2F88F206260BE6C8F96F5FD0A43FB9F26E92C3B07B6A9C54615B3F5CCCD7677FCD78D31D0B909D070D963F8F9041170943A479BB3852DD7BCC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/element_observers/intersection_observer.min-vflZvagR_.js
Preview:	define(["require","exports","metaserver/static/js/ux_analytics/dispatch_custom_event","metaserver/static/js/ux_analytics/element_observers/observer_constants","metaserver/static/js/ux_analytics/element_observers/observer_constants"],(function(e,t,n,s,r){"use strict";var a;Object.defineProperty(t,"__esModule",{value:!0}),t.createIntersectionObserverManager=t.ElementStatus=void 0,(function(e){e.VIEWING="VIEWING",e.VIEWED="VIEWED"})(a=t.ElementStatus\|\|(t.ElementStatus={})),t.createIntersectionObserverManager=function(e=.5){const t=new Map,o=new IntersectionObserver((function(t){t.forEach(t=>{const n=t.target;t.intersectionRatio>=e&&i(n,a.VIEWING),t.intersectionRatio<e&&i(n,a.VIEWED)})}),{threshold:e});function i(e,o){const i=e.getAttribute(s.UXA_ID_ATTR),E=t.get(i);if(E)switch(o){case a.VIEWING:E.status===a.VIEWED&&(E.status=a.VIEWING,E.lastViewStarted=performance.now(),(0,n.dispatchCustomEvent)(r.ELEMENT_INTERACTION_EVENT,{detail:{eventType:s.ElementInteractionEventType.ELEMENT_SHOWN,ext

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7184
Entropy (8bit):	4.491409940008751
Encrypted:	false
SSDEEP:	192:rpy1QmMyKEXwTAUTXN1HSMV7xTCBIzZc/KFlSESZies:rvMcnTbDTCazVSUh
MD5:	B9F4589659563B0E18C8346229C06FC5
SHA1:	A14FB850193E8CE07638F6895AD7B172C2D2E6F8
SHA-256:	98CCD3ED8357751AFFFDA2FC244C2F9C2A6F58BD1FBA5008B0678D2F5C4573C3
SHA-512:	FBDA40420D6B18DE8D19268311A8AAAC03D341D1AC9C6967194D38647371898E88BE9E03780ADD91828686A24DD16F29143E4CA0221EEC20B3ED019AAC98BFF8
Malicious:	false
Reputation:	low
URL:	https://account.live.com/Resources/images/AppCentipede/AppCentipede_Microsoft_white_ufRYlllWOw4YyDRiKcBvxQ2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="266px" height="32px" viewBox="0 0 266 32" xml:space="preserve">..<path opacity="0.6" fill="#FFFFFF" enable-background="new " d="M51.627,12.316c-0.396,0-0.822,0.045-1.28,0.144...c-3.198,0.737-3.506,4.297-3.506,4.297s-3.629,0.123-3.629,3.438c0,1.903,0.984,3.806,3.752,3.806c0.922,0,14.515,0,14.515,0...C63.262,24,64,22.465,64,21.115c0-2.762-2.522-3.008-2.522-3.008c0.061-2.026-1.045-3.253-2.215-3.744...c-0.599-0.261-1.175-0.352-1.687-0.352c-1.17,0-2.003,0.475-2.003,0.475C54.904,13.509,53.673,12.316,51.627,12.316z M51.795,8...c-2.177,0-3.959,1.264-4.892,2.988c0,0-0.905-0.564-2.197-0.564c-0.613,0-1.314,0.127-2.048,0.502...c-1.599,0.86-2.583,2.762-2.398,4.604c0,0-3.26,0.246-3.26,3.744c0,1.903,1.723,3.622,3.629,3.622c2.398,0,2.398,0,2.398,0...c-0.615-0.92-0.738-1.842-0.738-2.578c0-3.684,3.875-4.235,3.875-4.235s0.492-3.49

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (989)
Category:	downloaded
Size (bytes):	1064
Entropy (8bit):	5.008429331561416
Encrypted:	false
SSDEEP:	24:1bmvDtdPpgx53AzVIUrG8Sme4ucqgm0W5:1aRwP3AzVIqS7Ncrmh5
MD5:	70B8695BE752F1847CD18ED5D798DC6E
SHA1:	8D6FEA7C736462A2428FFB455F31D0F42AE55F61
SHA-256:	62121B1110EC337F9AF7F559A77C4B12FBBCC111FA730E592E54D7B529EC0981
SHA-512:	A82F75A4700841186DDBADDD53968F6A5C811797F2F941146BFBD23D4CCF3970039F55FDA2CA26FDF829BCAD24BEB7DE2130233B28D9C77CFD14853777AEA13F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/cloud_docs/paper/cloud_doc_notifications_dropdown.min-vflcLhpW-.js
Preview:	define(["require","exports","tslib","react","metaserver/static/js/user_notifications/dropdown","metaserver/static/js/components/ui/css"],(function(o,t,e,i,s,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.CloudDocNotificationsDropdown=void 0,i=e.__importDefault(i);class r extends i.default.Component{render(){const o={position:"absolute",display:this.props.visible?"block":"none",top:this.props.top+"px",right:this.props.right+"px",opacity:this.props.hideDropboxNotificationBell?0:1,pointerEvents:this.props.hideDropboxNotificationBell?"none":"auto"};return i.default.createElement("div",{style:o},i.default.createElement(s.UserNotificationsDropdown,{isPagelet:!0,handleNotificationCountChange:this.props.handleNotificationCountChange,shouldOpenDropdown:this.props.shouldOpenDropdown}))}}r.displayName="NotificationsDropdownComponent",t.CloudDocNotificationsDropdown=(0,n.requireCssWithComponent)(r,["/static/metaserver/static/css/components/button-vfl7d2xHj.css"])}));.//# source

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
URL:	"https://portal.microsoftonline.com/pp.l?CID=96d70c7e891f475890f823fbbc55cda5&pageId=Prefetch.aspx&d={B:{S:%27L%27,LT:12300,UT:-1,MT:-1},A:{ET:-1,OT:30,DT:93,CT:215,RT:252,ST:254,MT:-1,LT:12613},C:{LT:1689990677377}}"
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18459)
Category:	downloaded
Size (bytes):	18525
Entropy (8bit):	5.368024181510639
Encrypted:	false
SSDEEP:	384:QF1pIde0jjndXwbyOT2z6cZSqtd86E7XDHN1KHiJU3Oo4aPU9bGzTAzekwQ+u+/O:QfT03ndXwbyOT2z6cZSKd86EjDHN1KH6
MD5:	588C7E191F2F531E44F9079F84544BD6
SHA1:	2E0BADF161C5B397D3D02D1DA8879DEBB0C9072E
SHA-256:	96569375C4C9CB0F32E7BE752507B19A0280EFFDB3097CA24A3E21EF7FC0150B
SHA-512:	E9CDA559D14AC1204C78ADF6BE01267BD40E3F3C35105CAA58AE905A8753172B11357B9661034F0E85A43AB915DC10D20E9ED18D7ED8CA5EE4991A087F1300CF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-exception-reporting.min-vflWIx-GR.js
Preview:	define("metaserver/static/js/core/assert",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.assert=t.overrideEnvironmentForTesting=void 0;let n="production";t.overrideEnvironmentForTesting=function(e){n=e},t.assert=function(e,t,r={}){if(e)return;"production"!==n&&alert(`Assertion Error: ${t}`);const o=new Error(`Assertion Error: ${t}`),{tags:i=[],exc_extra:s=null}=r;throw o.assertOptions={tags:i.concat("module:exception","assert"),exc_extra:s},o.isAssertion=!0,o}})),define("js/common/exception_tag_registry",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.clear_all_tags=t.unregister_tag=t.register_tag=t.get_registered_tags=void 0;let n=new Set;if(window.ensemble){const e=window;e.REGISTERED_EXCEPTION_TAGS\|\|(e.REGISTERED_EXCEPTION_TAGS=new Set),n=e.REGISTERED_EXCEPTION_TAGS}t.get_registered_tags=function(){const e=[];return n.forEach(t=>e.push(t)),e},t.register_tag=function(e){n.add(e)

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (947)
Category:	downloaded
Size (bytes):	1021
Entropy (8bit):	5.000851501493354
Encrypted:	false
SSDEEP:	24:8rBmAsGFaFTtyfdHF5Maea4OZreA8b+De8f1kmXpjO:1HGWtyvaShZ4b+K8am5O
MD5:	B5767DE546B420B3F6F6BF125DAF96F8
SHA1:	8D74912F01084176BD24654000FBAFC88B69093C
SHA-256:	DF4056FEC8713C927959855F3D678CEF555A2C1BD5CBB187336FDE51AAA02355
SHA-512:	5EB0D946A908B49C8A9330886B8A810EBF0323252501E9C1B56AA3040FCB862B4901752DB5C1FF16773EE8B4F43DC666C62057DF6CBF2CF9DC29B7F906D5EB9D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-referrer-cleansing-redirect.min-vfltXZ95U.js
Preview:	define("metaserver/static/js/clean/referrer_cleansing_redirect",["require","exports","tslib","sjcl","metaserver/static/js/core/browser","js/browser/cookies","metaserver/static/js/core/uri"],(function(e,r,t,c,s,i,n){"use strict";Object.defineProperty(r,"__esModule",{value:!0}),r.safe_open_tab_and_redirect=r.redirect=r.get_redirect_uri=void 0,c=t.__importStar(c),s=t.__importStar(s);const o=function(e){const r=c.codec.utf8String.toBits(i.Cookies.read("__Host-js_csrf")),t=new c.misc.hmac(r).encrypt(e);return c.codec.base64.fromBits(t)};function a(e){const r=n.URI.parse(e).getScheme();if(r&&!["http","https"].includes(r))return"#";const t=new n.URI({scheme:"https",authority:"www.dropbox.com",path:"/referrer_cleansing_redirect"});return t.setQuery({url:e,hmac:o(e)}),t}function _(e,r=window,t=!1){t&&(r.opener=null),s.redirect(a(e),r)}r.get_redirect_uri=a,r.redirect=_,r.safe_open_tab_and_redirect=function(e){_(e,s.unsafe_open_tab(""),!0)}}));.//# sourceMappingURL=pkg-referrer-cleansing-redirect

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57834)
Category:	downloaded
Size (bytes):	57902
Entropy (8bit):	5.649932585827889
Encrypted:	false
SSDEEP:	768:l1gLwWgOv9HhN6Xez5xnUQpAnArhEL085PMKVLzzB2aTsgxv:7OlT6OjPH8nLHB2aTsgR
MD5:	6EE17B6D90D48F2A515EF8EA25B4E6CF
SHA1:	4711AF8AB28D80264F261877BDAD3A5D18507054
SHA-256:	FF93D519F5BBFA2F63CD605C54E64C0FA2110EC1BFC43F4532AF446AC77492BA
SHA-512:	868CCE38AB4B81837174465BCBE6FC1E64AD42A102B42C311849ABF03E87C9D93CC69C9725778D0E3F06FFE1673A95B7F845FD649D31A1EEF15382B0A011DA26
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-coreui-additional.min-vflbuF7bZ.js
Preview:	define("metaserver/static/js/clean/em_string",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Emstring=void 0;class r{constructor(e){if(!(this instanceof r))return new r(e);this.s=e,this.info=this.widthInfo(),this.length=e.length?this.info[this.s.length-1]:0}static initClass(){this.ACCURACY=2,this.CODEPOINT_TO_WIDTH={32:38,33:25,34:42,35:67,36:58,37:92,38:75,39:25,40:33,41:33,42:58,43:58,44:25,45:33,46:25,47:42,48:58,49:58,50:58,51:58,52:58,53:58,54:58,55:58,56:58,57:58,58:25,59:25,60:58,61:58,62:58,63:50,64:100,65:67,66:67,67:67,68:75,69:58,70:58,71:75,72:83,73:33,74:25,75:67,76:58,77:100,78:83,79:83,80:67,81:83,82:67,83:58,84:58,85:75,86:67,87:100,88:67,89:58,90:58,91:33,92:42,93:33,94:58,95:50,96:67,97:58,98:67,99:50,100:67,101:58,102:33,103:58,104:67,105:25,106:25,107:58,108:25,109:100,110:67,111:67,112:67,113:67,114:42,115:50,116:42,117:67,118:58,119:83,120:58,121:58,122:50,123:42,124:58,125:42,126:58,161:25,162:58,163:58,164:58

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	4.732461163164896
Encrypted:	false
SSDEEP:	96:Qf/OU3Ni9W0UyKVkV3AnRP+TwVeYRxXobRt4CuVXxSozuIuJj5YQyHzLr:q/OF9W0UyKqVwn4wVeYRpobL4CuVBSo9
MD5:	E0C60341169BDF51CA0D658DFB51DA7C
SHA1:	0C92136E9D25306F2A3356EAAA499A86004ABED4
SHA-256:	61D6F2E3A46A68DDA5DD71BA05EB36BA0F7FC4FF84691BB169E77A707F6515F3
SHA-512:	7F2D447D1790DD479F6F94927E669D981485CF2ABD37B50C1B29131F6C05D2474B6541BFD7B9E5BCC61D8ED7085E78F3E4B033D10BACB2EF22F893E78E301F43
Malicious:	false
Reputation:	low
URL:	https://account.live.com/Resources/images/Microsoft_Logotype_White_4MYDQRab31HKDWWN-1HafA2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="47px" height="9px" viewBox="0 0 47 9" xml:space="preserve">..<style type="text/css">....st0{fill:#008A00;}....st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#008A00;}....st3{fill:#0078D7;}....st4{fill:#094AB2;}....st5{fill-rule:evenodd;clip-rule:evenodd;fill:#094AB2;}....st6{fill:#DC3C00;}....st7{fill-rule:evenodd;clip-rule:evenodd;fill:#DC3C00;}....st8{fill:#107C10;}....st9{fill-rule:evenodd;clip-rule:evenodd;fill:#107C10;}....st10{fill:#D24726;}....st11{fill:#FFB800;}....st12{fill-rule:evenodd;clip-rule:evenodd;fill:#434856;}....st13{fill-rule:evenodd;clip-rule:evenodd;fill:#FFB800;}....st14{fill:#2A3282;}....st15{fill:#249DD1;}....st16{fill:#A0D5EB;}....st17{fill:#FFFFFF;}....st18{fill:#666666;}....st19{fill:#00ADF1;}....st20{fill:#00AFF0;}....st21{fill-r

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44509)
Category:	downloaded
Size (bytes):	44568
Entropy (8bit):	5.637029215444601
Encrypted:	false
SSDEEP:	768:GtAPOtRq9yLtfhlmgxhM//4AKHGcZ0jvxuug6wX0P5ve4s7:GtAo8bx8k5GJ
MD5:	68CEC013F251E9C6E88C1F5A9F7B7E28
SHA1:	A017F06D97DAC41EEEB7DA9424D5229C255D4E8E
SHA-256:	01D39C0FBD22795D9CE199E3B0E2E5038C1CC2CD339BC01783A9DCE4B853692C
SHA-512:	BCAD2A56F7B214ED4886AFF6D0D0B03F4A2AC888096121E159AFAD67BC278617B0513ADDDADE57FE952D569432FCDFF512AA7BEC36D69D30DA2473297C7D6C1D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-embedded_app.min-vflaM7AE_.js
Preview:	define("metaserver/static/js/accessibility/utils",["require","exports"],(function(_,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.accessibleBrandedColorPalette=e.accessibleColorPalette=void 0,e.accessibleColorPalette=["#006AFF","#0073E1","#007BC3","#007F9B","#008578","#008750","#008928","#008800","#0573EB","#0579C3","#0580A0","#05857D","#058655","#058932","#05890A","#0A71F0","#0A78CD","#0A7FAA","#0A8487","#0A855F","#0A8737","#0A880F","#0F6EF5","#0F76D7","#0F7DB4","#0F818C","#0F8669","#0F8741","#0F8819","#146DFF","#1475DC","#147BBE","#14819B","#148473","#14864B","#148723","#1969FF","#1972E1","#1979C3","#1980A0","#198278","#198550","#198728","#198700","#1E70E6","#1E79C8","#1E7FA5","#1E837D","#1E8555","#1E8832","#1E880A","#236EEB","#2376D2","#237CAF","#238187","#23845F","#23883C","#238914","#286DF5","#2876D7","#287CB4","#28808C","#288469","#288541","#288619","#2D6AFA","#2D73DC","#2D7BB9","#2D8096","#2D836E","#2D8446","#2D8823","#3267FF","#3271E1","#3279C3","#327D9B","

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 508079
Category:	downloaded
Size (bytes):	130252
Entropy (8bit):	7.997913339565563
Encrypted:	true
SSDEEP:	3072:JNgZApEjFHyie7iDpylNUyPxBYbXxq7lobybUL:JSZVxBDpyYyPrC0lobybUL
MD5:	CEB026A4B90600DDE7F1A4CF077D0125
SHA1:	F703E82F76BDECD83283DC7732517990575A14CB
SHA-256:	E1FF8045C394402BEDD270E0B7DFAEE0DD76864DE3D3B086B728D2772BD08C69
SHA-512:	CF7E9B556FFCF72C529299B1FF838B573A3493D221F8586AB4DECB4D050275871FD94E924342178132400294B2A8715E8314DECAB5AEC5F2A141D603BD6A06C7
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/493371368d24a7dd558c.kZEJL0_iTh7LJAa5DQuPA7IwgSVAB6-F2gm4NhZnoIE.js.gz
Preview:	............v.H.0..O..\|.C...(K.P..'..V.,y,.{..i.@D.D....(.-3k.3?..._..Y+Y.S...(..y....B.(J..9..."..].].^...a.$.........7....`.r.'?.]^..-....Vg:...O..?e...Tb..#.fq.1.0..Yp.$.L...<.a....d^N..~....$...w.....g. ......[w.._. ..l...}.@.\|..=..e.`.1.....=Y_.....P0........d"...S.I..Y..S'.....(...n.\|0._.?cN.Q.v..z).gi.....;........!..(../...&.11...F1.n.K.....-/............{(.._(7../[..........>n..q....:..?.t.j..$..my...s..X....2..V..O.......$....t..... .A.X....w...A..N.........>[.>.z....k..S-.-o....../.z....i..A..zO.^...1.z.,..a.1D5...y.+A..q.!].;.}.Y.d...-?:y.u.....~.=}.:.t.........l..<k}../...<..c\|y.K.&..r?..h..p.7...........3..5..pq.b...;d,....m...w....?..Y<....!.....%.\|4.I.\|....9..kcs......%..8I2vVL.....LSv.0...QK).f.rA:.(.\7..}..\...8o...6Z.%.6w..,h.4...{.\|A..$..?H&.$....d..j.8].........D/y.a......$......;.7.J.(...{?8.Z=,.tvu......fo......%q.&Q..f.e....(.r.........7.!.}..M....[wLA.}/...~.?......#\|}...>.;1..*;..?.m.l..f[...y.."..

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37475)
Category:	downloaded
Size (bytes):	38792
Entropy (8bit):	5.25457376551356
Encrypted:	false
SSDEEP:	768:aIEaVtKEXmlvN6RUBp8IRGnFCdUginscCP6c9nfwMa3lUYXowydUxdMrC9j4nHzu:5zEpPDRDO9bqCiV0
MD5:	D8C8BE2803E9A4B3670C919F65AF49E5
SHA1:	8E1B5A90C78BDFE828527B91C38EE74BB5CAAE5D
SHA-256:	6048062B301A2B776EDFE8A83905B1C27D9CBA0E38DAFF52EFD55CB604120030
SHA-512:	7CC49389BE59565DBC2E030A72EC8173595F570E721BE355FCFF4B00B3DF610951AD8D0744C3A1B40D0A3F21F6FC591F85BC65A2412FD436EADCC8D30D13DD62
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-modules-unneeded-for-home.min-vfl2Mi-KA.js
Preview:	define("metaserver/static/js/clean/downloads",["require","exports","tslib","metaserver/static/js/api_v2/user_client","js/filepath/filepath","metaserver/static/js/metrics/index","metaserver/static/js/clean/ui/snackbar","metaserver/static/js/core/browser_detection","metaserver/static/js/core/assert","metaserver/static/js/core/html","metaserver/static/js/core/i18n","metaserver/static/js/core/notify","metaserver/static/js/core/uri"],(function(t,e,s,o,i,n,r,a,l,d,c,u,p){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.get_zip=e.getZipDownloadUrl=e.showGetZipUrlErrorSnackbar=e.zip_batch_by_ns_id=e.get_blockserver_link=e.get=void 0,i=s.__importStar(i),a=s.__importStar(a);const h=["dl-web.dropbox.com","dl.dropboxusercontent.com"],_=c.intl.formatMessage({id:"L64bdq",defaultMessage:"There was an error downloading your file."});let m=!1,f={};function b({source:t,type:e}){(0,n.getMetricsReporter)().createStats({ns:"web_file_actions",name:"download/failed"},{source:t,type:e}).record(

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7122
Category:	downloaded
Size (bytes):	3270
Entropy (8bit):	7.925553397072708
Encrypted:	false
SSDEEP:	48:XH9M45L5YmrTohjY3TNmqSXx3Y/TP9C4GjaT/mpQonq2MR3n3CmPy2AdKDAFjmqa:NLlYk93T8quSYMepzq2MYmPyc0FjifL
MD5:	E3DAFF1FE313D7FE9EA9E2703C6199CE
SHA1:	63C4AA567698F140EFE36D8D839CA7F5C7B3F3E8
SHA-256:	3E3A96EA1B6111EBCC08D0939ACBA1A2E4A23DA1ED6DC4D0593AEDB8D5BAE661
SHA-512:	66068DC9BC53EA1876D0849A1400FD0EC15D08D7FA7032BCFB4BB5D6547FE5BD3BA697F132200DB47735DD73EA03705D17A8C01F555DE79CDAA66ADEEB39B4D5
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/runtime_dc532339fcdb216ed9ee.G8ZQTZCS_VpPrXjqiUUTEAGGtIO7JBuw30s2EAFX5x8.js.gz
Preview:	...........Y.S.:.....o.#..)p:g.Q.."....I.....m......E...3.\|.ah.k=ke%y....3?..T\|Y.sI>.\...P.#.....V.+..Q...\|.Bj....... )........6....1.L...E.).....Yx.D1M..Q...B$no....v .Y:...h.+<a..-....0..K._ 3Oo...X....l.pI.`.V..t.{,/...[(.P..OyVp^_o.cBY...0/....7..Bb......p.l..C..&w.b.....T.?.u.7.m\|;.;+...o}pC..+....D\|aR..>..dw....j.<.R.....W..\|1R....$Y..)-..B.!..h...(s-.Q\..i.>.Q.....^f......(.Um.e>.P.\|..p.....H...`..#.Us$Q{3.....n...2.xZ,s......@"..~....gJ...i.@....6!.%.~Hh.YH..3F1.,..\|!qC...Y."i.4......`._>..D.Q..m.H.c.o.>...N(.Q..QYX~..5.+.._(.....:<...IY..H(L...ea......o..r..4$Q..$0.....C....I.dQ..".i.:.9"8.2...tU..^...C...K..Tp......PB...4.'87...j.C.E.gh...K._.........V....{=D......E.0..u..OgN..O?...........>0..S.....*l}..O.o^N(...$,C..L....ZW...,\|.j#.A.fP.~..]e.C...._.__..#H.......%RreK.M.iE.5.A=S.f..eJ8M..@.....:....L.R..(O...K4<CS...?.."P$.......;v.....D..X...~.1.;J.'....S.\|.........#J.`.6....Wp M^_.'..x.t.+M...B...EK../.1._.O.._...e...

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2188)
Category:	downloaded
Size (bytes):	2237
Entropy (8bit):	5.246892423218319
Encrypted:	false
SSDEEP:	48:1hnSbgjv3NuzO42sQvg6kMmHXY9MQKO6uCdn:HQYcJ2s33Y+X5
MD5:	169422D0058F77E9777B724869D37613
SHA1:	D5412C77CA32CC32A656C49EFD4641F18B6AC702
SHA-256:	F03ECFA54B3ECF591A619F06F961A9DCFD0E6351F8E0DAD8B1F29FCE4BA6F5B5
SHA-512:	59FF49E42B16697E9823A8BCE521E4CB8AF5F3AFF9FDA14903B6D0DC50E555B3B5AD158D2DE3774B88864F794B245F2C896CCB659CB14D9E006708E6D24CB6EE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/prod_assets_web_modules/common/index.esm-vflFpQi0A.js
Preview:	define(["exports","react","./index"],(function(e,i,t){"use strict";function a(e){if(e&&e.__esModule)return e;var i=Object.create(null);return e&&Object.keys(e).forEach((function(t){if("default"!==t){var a=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(i,t,a.get?a:{enumerable:!0,get:function(){return e[t]}})}})),i.default=e,Object.freeze(i)}var r=a(i),n=({className:e,children:i,...a})=>{const n=t.classNames114("dig-Label",e);return r.createElement("label",{className:n,...a},i)},s=r.forwardRef((({children:e,className:i,href:a,onClick:n,inverse:s=!1,hasNoUnderline:d=!1,isBold:l=!1,variant:c="primary",...o},m)=>{const g=t.classNames114("dig-Link",i,{"dig-Link--primary":"primary"===c,"dig-Link--hasNoUnderline":d,"dig-Link--isBold":l,"dig-Link--inverse":s}),f={onClick:n};switch(typeof a){case"string":f.href=a;break;case"function":f.href="#",f.onClick=e=>{e.preventDefault(),a(e),n&&n(e)}}return r.createElement("a",{className:g,ref:m,...f,...o},e)}));s.displayName="Link";var d=[["m

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (560)
Category:	downloaded
Size (bytes):	614
Entropy (8bit):	5.067451670582602
Encrypted:	false
SSDEEP:	12:QTPLmyTsOTaXY/BY1X5XqhDDMKGaG8G2A13AMktQ2jPu+:8PLmqs2aI/BY1X5XqhfMKvJ4i3h
MD5:	89A81EB784A7B7D90BF9ED9B6FC6BFAF
SHA1:	4742E4685FB509FFE4739ADE902C375FFDDE3020
SHA-256:	BECE4D693EBBB13317B704A7BCF009D08556B36D7013A56BBC92AFDD001DD8E5
SHA-512:	C5E9848790D88DFE0854AC074FBC498D23620BE8F0E45D4D644A1E9E92C579AAB9A4078BA53FF3A327DA0965C0FFEF41D903E5D41157EDBA18EB0D094DAB550C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-sign-in.min-vfliaget4.js
Preview:	define("metaserver/static/js/sign_in/utils",["require","exports","tslib","metaserver/static/js/core/browser","metaserver/static/js/core/uri"],(function(e,t,n,r,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getSignInAndContinueUrl=void 0,r=n.__importStar(r),t.getSignInAndContinueUrl=function(e={}){const t=Object.assign(Object.assign({},e.additionalQuery),{cont:e.cont?e.cont:r.get_href()});return e.register_cont&&(t.register_cont=e.register_cont),e.signupTag&&(t.signup_tag=e.signupTag),new i.URI({path:"/login",query:t}).toString()}}));.//# sourceMappingURL=pkg-sign-in.min.js-vflzTKQoo.map

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30690)
Category:	downloaded
Size (bytes):	30745
Entropy (8bit):	5.216307937746292
Encrypted:	false
SSDEEP:	768:UpQfskEq3LqhHsmTeDV2h/zk2zirYOASDce/:UOg7vYwC
MD5:	1BDAF7559222D2169DB1600E32E9BEAC
SHA1:	D897BE265F0B55DB65604E822AFF5B2508A80957
SHA-256:	D170F78CA49BF2EF248FAC921D3234CB238EAF86D04A1A3E6B405263C3B54D7A
SHA-512:	48D4AF5CACD274EFFC8F87260F84A16854E869FE71CDA80185DBF6150F9BDF95FE95B38C5407AE996FE4D95E33D81E9D06DD410BD971E54E144EAD852206FE93
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-base.min-vflG9r3VZ.js
Preview:	define("spectrum/checkbox/index",["require","exports","tslib","spectrum/checkbox/checkbox"],(function(e,t,r,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),r.__exportStar(o,t)})),define("spectrum/checkbox/checkbox",["require","exports","tslib","classnames","spectrum/util/debounce","react"],(function(e,t,r,o,n,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Checkbox=void 0,o=r.__importDefault(o),i=r.__importStar(i);class s extends i.PureComponent{constructor(e){super(e),this.triggerChange=(e,t,r)=>{!this.props.disabled&&this.props.onChange&&this.props.onChange(e,t,r)},this.handleChange=e=>{let t=e.currentTarget.checked?"checked":"unchecked";"mixed"===this.props.checked&&(t="unchecked"),this.debouncedTriggerChange(t,{shiftKey:!1},{target:e.currentTarget})},this.handleClick=e=>{let t="unchecked";"unchecked"===this.props.checked&&(t="checked"),this.input&&(this.input.focus(),this.debouncedTriggerChange(t,{shiftKey:e.shiftKey},{target:this.input}))},this.

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 514
Category:	downloaded
Size (bytes):	344
Entropy (8bit):	7.327005404969611
Encrypted:	false
SSDEEP:	6:Xt7Rit1qjRNdQgOBf7weyQ7nyq0DtAyNIUC1DA2NQ9VKQYNx0OkK8/:XnitYNdQX7ByQ7yq0DtAeIL10b9oDx0B
MD5:	CAE3D7603B384599618FB478A310F5CA
SHA1:	5283F0DA98B1C7DC8B96923BF980265DA3BFB769
SHA-256:	B616FC90E9C20B862B005BD9C3E1A68288E86CB67EDC727B122347214188DFCE
SHA-512:	D981E7A83974E1DFE1EABE339DC662999C63519AFC74C3B99865F4ADDECE7FF63BA4E246606ADD00374217B9537A9E29E4326B13D6A089E8E42CC6E9C7FC97B3
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_admin~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~paper_graphql~paper_influence~887f98f3.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.vn64oJWFEA7wxU-bxq9IMHUDOT746y1nS0QLwk8PHbw.css.gz
Preview:	..........eP.N.0...+@\.j.<.......r......Q..$..J..3...O..Z%I(.j..Zu.r%....v..-.z.Y..xz.<...E~.I..."s.l,)\|.F..y..2..{.2... !...}8.\|r0Tk4$. .6.e.Do.....m.h..a..R...QS......Z.K..v@ 5O....h..g.#....h..pl..=L..ecKM.7_..K..zyw....N.....^.5..R.ry...\...SW....zF.....vM..a..Sa.p..J.(.OY.VyV.>B.l(dQ.....h..N.2.-VI.I..f..].T/...]\....

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (447)
Category:	downloaded
Size (bytes):	511
Entropy (8bit):	4.893974168781742
Encrypted:	false
SSDEEP:	12:1bm6TtDKuTtDK/6+RZX52N2cF9V/DRbGMhF8:1bmCtDtKRZp2N2cF9V/Nbbk
MD5:	BD4CC84F5B4B9381AE75D717F51F54DC
SHA1:	CC5C003BC2731E49128DD1676241013343529116
SHA-256:	EFD70C927426409576268A0B3C6C5268619ECC2B97FBCD323F8104E331A3CDCB
SHA-512:	9A8737C990C07ED4C97ADB989DD1840AF46A1106B332A9D0458F15C1531D3D5B9AC748A61A57257A8DDD0655B5343F7CA068A8897EF4DAAC77B98DB65256E06F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/element_observers/interaction_observers.min-vflvUzIT1.js
Preview:	define(["require","exports","metaserver/static/js/ux_analytics/element_observers/mutation_observer","metaserver/static/js/ux_analytics/element_observers/intersection_observer"],(function(e,t,r,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.setUpElementShown=void 0,t.setUpElementShown=function(){const e=(0,r.createMutationObserverManager)(),t=(0,s.createIntersectionObserverManager)();e.registerElementMutationListener(t)}}));.//# sourceMappingURL=interaction_observers.min.js-vflckiRCN.map

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26186)
Category:	downloaded
Size (bytes):	26248
Entropy (8bit):	5.383079984062196
Encrypted:	false
SSDEEP:	768:UqRoUIel1Uj+xzI+qRcivQCBZUPPiFBEpm1:HPE+6vQCjp1
MD5:	33E99554EF9E4887EE7A6B70125F3ABC
SHA1:	2B701FBCFFABF766CFCB6CFA3CDCCB7AF1ED1EAF
SHA-256:	CCF0EA1AAB80B38932572A2E8039C04221D7045679E81E844FA5426EB01F7137
SHA-512:	A805AD139008EE2827D8F0C7AD57FB902A1B989C82633649B0B3D124092EC006B6D51F792A4E35C655A496C68920338C953ADA69DE3918B2713F9004E38FE920
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-browse-uncommon.min-vflM-mVVO.js
Preview:	define("metaserver/static/js/clean/base64",["require","exports"],(function(e,t){"use strict";function r(e){const t=[];let r=0,s=0,i=0,n=0,o=0;for(e+="";r<e.length;)i=e.charCodeAt(r),i<128?(t[s++]=String.fromCharCode(i),r++):i>191&&i<224?(n=e.charCodeAt(r+1),t[s++]=String.fromCharCode((31&i)<<6\|63&n),r+=2):(n=e.charCodeAt(r+1),o=e.charCodeAt(r+2),t[s++]=String.fromCharCode((15&i)<<12\|(63&n)<<6\|63&o),r+=3);return t.join("")}Object.defineProperty(t,"__esModule",{value:!0}),t.decode=t.encode=void 0,t.encode=function(e){const t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";let r=void 0,s=void 0,i=void 0,n=void 0,o=void 0,a=void 0,_=void 0,l=void 0,u=0,c=0,d="";const m=[];if(!e)return e;for(;r=e.charCodeAt(u++),s=e.charCodeAt(u++),i=e.charCodeAt(u++),l=r<<16\|s<<8\|i,n=l>>18&63,o=l>>12&63,a=l>>6&63,_=63&l,m[c++]=t.charAt(n)+t.charAt(o)+t.charAt(a)+t.charAt(_),u<e.length;);d=m.join("");const g=e.length%3;return(g?d.slice(0,g-3):d)+"===".slice(g\|\|3)},t.decode=function(e,t){

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55832
Category:	downloaded
Size (bytes):	16931
Entropy (8bit):	7.98696405989488
Encrypted:	false
SSDEEP:	384:bHftw2mjhirBlxeYC1IOuP3f7m4xTLIFOVjDAs1gs+sv:b/ejhKxeD1I/P6kgFOKsv+sv
MD5:	885FAB9B547D52351937036DAE92ADEA
SHA1:	8DFC68C2F3F76090B4EA950B71F1B9B7C5C20319
SHA-256:	3AEF3D5A55AB5B59DCCE56A8F15CE83F9C1BB2A78A8D8438E5C167E1EDF2996F
SHA-512:	E69071B9E156AB496FD2BD7F747A7FD17DB992508B1553FCB0AB2A537B2381862138B0C4F2B420728CF7FFAAC9668371460331DF4BAE2AA8669DF99FD6A75615
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/accountcorepackage_Vb1PddtJLvvTQ36LqurOdQ2.js?v=1
Preview:	...........}y.........W..mFJ&.HCt...fO.e........(......z.. ;..{..........9.G.,.#.....^..-33...M....;Q0u19.%~6O.f.X...(N...?.~r.Xd.f.....;.}o.hv..".g....`dn.....].......;.nC.N.i\|..dY...o.. ....C7.N..:..E5y.2..o..o.v:..M...0MM#... .5..1,.k.........X.j.P...Y..go....3S....kk.\...w6O...3?....i@CQ.M.Q....m@.};..q6y....h..y....e....S...&......o...W0..3\9]F7..#..{..}....}\|.../...\......,{...&.5n.0.4.Wq.5.M...l........+.?.%O3.\|.I....).....\|.f3SMP.@...E...'.D.k...7.......9.6.+..kw.3...5!Q.b..z..3r=.;...`<...."... U.........3..j.......w.<Db.!.P.>..9{0W..,p..i......)j9...-cG.....{.....RNm._b.C.:....y..~.\.l.O.{q4..........<.`y.....V..,.2P~[d..z.9.S.G.......}N...9...O..b.O.....Gq.....7..H,.t..L%..g.8.....8...i.7..GTj...i@M.....ZE<:.....KX.S .......\.1]..&~T.j.k.Y...ue.N...z.......<..@..t......Y......@.O...<.D....c@XX.i.iST.!....V+4.....)..(.-..A..R'...!<ck.l.s.-..ZC`{....%.VR.b.,'6.1s.AD........m....%uWs....y....4..1.n.........s#..N.#./..,...

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37765)
Category:	downloaded
Size (bytes):	38876
Entropy (8bit):	5.1362587699320645
Encrypted:	false
SSDEEP:	768:Rgs3H3lvHi5NV67ScgnEFEL7jRadvh85N86IWB/YUlXiA0v4wDVCkb:hmqFEL7Qvh85N86IWB/YUlXiA0v4wDH
MD5:	3585228EBE97A37D80348F5922BC3674
SHA1:	9E562494492C6E70A51B642219DF46459F5CD468
SHA-256:	B4464649130F6A7A57B36E5DBAF7FB94D2BBDD63AC899D1DFD5B1AEADCF5260C
SHA-512:	37B3D061455FFDA259CC48DA48B1021BB80C2E59FE419E67CECE7E4170BE08BE9408BEDEC12BD459C21B321C67417512F01BCFD9DDD737953B359FEA97BA1A25
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-account.min-vflNYUijr.js
Preview:	define("metaserver/static/js/account/change_email_modals",["require","exports","tslib","react","ts-key-enum","metaserver/static/js/account/email_verify_reasons","metaserver/static/js/account/set_password_modal","metaserver/static/js/clean/form","metaserver/static/js/clean/ui/input_dig","metaserver/static/js/components/ui/modal_controller","metaserver/static/js/clean/ui/modal_dig","metaserver/static/js/clean/viewer","metaserver/static/js/core/i18n","metaserver/static/js/core/notify","styled-components"],(function(e,t,a,s,i,r,o,n,l,m,d,u,c,f,h){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.ChangeEmailModal=t.ChangeEmailWarningModal=void 0,s=a.__importDefault(s),n=a.__importStar(n),l=a.__importStar(l),m=a.__importStar(m),h=a.__importDefault(h);const g=l.text,p=l.password,_=[r.EmailVerificationReasons.ADD_COMMENT,r.EmailVerificationReasons.SUBSCRIBE_TO_COMMENTS,r.EmailVerificationReasons.SHARE_FILEVIEWER],v=h.default.div`. .change-email-input {. width: 100%;. }.`;cla

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 328009
Category:	downloaded
Size (bytes):	79623
Entropy (8bit):	7.996989464842374
Encrypted:	true
SSDEEP:	1536:+eg+iFC2SddTmXPmw/qAxEX1MJ0L9rqPKpW3nYdxqW/+ylGiU:+eg+iFgdGew/qAuX1MJ0xUJ3YeWWQGiU
MD5:	831AAE6DBF6C84F3C6178B1B606257F3
SHA1:	818006C91EC3086404FE74AFDA915974079C0EA6
SHA-256:	8476D9A95308806720507AA511630A7BDEECF525F730497148C0A0B89275FEE1
SHA-512:	272FD2BC415F51A122954B5E2E88B875387DF7E6707FF6D9A2EFF6C44D496CD28534E97E68A447BC6DDE819873F949F12A0FD5B52CDABBD1532B84C8BD88A2B4
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/51ad636d17314c9fbda6.-4AanJk8XBB8Xq-UvkkSlFpQHmXs-lIik_lOJMsVMYg.js.gz
Preview:	............r..(._O.h.z....N.8.V.:..q...c'..9).%R.;..&);jGS..........(.$w....@..l...S.w,..X....7.7^..7........W'G.........?_\].W......Vg6.'.O..3{.FW...F......a.s....1...#....x`'.{..$..3o$$......F...mms{{.7.......k%.....0.8.....(.j..X..+7>....6..k.:.=..[{I'...{..c.}..s?._..S..?.Y.e.nGa...z.O:.;...\|.?.'c..hu..%M.5.g.fV.u[..d..u.3...A..I..Z.ZV.w.j.W..a.w.q2..~$~.}..i9...x.y..u.\|r>.?}.._\|..}.7.t.%>t.bpC(c........Z.~.C..T.?..P..`y'..........-...]Y...x.5.co..........b.E..x...>->.y.f.i.......~....?.?......N&...4...U.+u..q....[{...T..-.7?...~.x..q.....o..l........Z.%...._`k.......2...{.0H.`.....}...Kks{g......Z..<.b...kG........E(.~..lY!..BT.........x./....~../..v....n.V9h.>...R.g-X.f..;....=L.h.j6b...t^..A........[.[/...nk....7......`.......<..`...^.f......~...9u/..6..4........J.C[w.S..Fu..=...U.Wh.u..A.\|..n.k...l.]..]..K&.p..~9...a.v..u..&.......:.G.,k..m.....B}M.=G.{.kv...&...dc...r...U.....9....w.Q.r6t.....Vr...t...R.

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	385550
Entropy (8bit):	4.82683884303191
Encrypted:	false
SSDEEP:	6144:v60BFwOq0lY5WNNehgz132b9WL/3V4Y+l7LxcEc+PyrkKhvDSfuwRF85UVYZH+V6:v/xjf
MD5:	E35137D9A4939C29CFDACE16742D83B5
SHA1:	990B13D482DAD30B732FB522B9553DD7B53735C9
SHA-256:	9E82E58838A685064FCC9F35C7CF0DEEBD3AB4E80B5109F85BB028F28CD49205
SHA-512:	6D013E0489C58C0A79F0EFC986304C35D5C5247173B9AFF7A5070E6F140064B13E22961E0B4777168EC69E3254B36507157204A1191D98F1A2BC2DCCE1DE0F63
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dropbox-api-v2-client.min-vfl41E32a.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/api-v2-client",["exports"],(function(e){"use strict";var t="app",r="user",i="team",a="dropboxapi.com",n="dropbox.com",s={api:"api",notify:"bolt",content:"api-content"},u={accountAppleLogin:function(e){return this.request("account/apple_login",e,"app","api","rpc","private:account_info.read")},accountAppleSignup:function(e){return this.request("account/apple_signup",e,"app","api","rpc","private:account_info.write")},accountChangeName:function(e){return this.request("account/change_name",e,"user","api","rpc","account_info.write")},accountCheckPasswordlessState:function(e){return this.request("account/check_passwordless_state",e,"app","api","rpc","private:account_info.read")},accountCheckUserWithEmailExists:function(e){return this.request("account/check_user_with_email_exists",e,"app","api","rpc","private:account_info.read")},accountCompleteRegistration:function(e){return this.request("account/complete_registration",e,"app","api","

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3697
Category:	downloaded
Size (bytes):	1398
Entropy (8bit):	7.829718194504985
Encrypted:	false
SSDEEP:	24:X5kZ9AxVEW8oJVpAwYQnPkUr0czm/G2vnVk5U1653pJRkluWpNGaCZxvMcT58u:XCAxV9Jb2whcUg/HVGD5ZjfY2lNZ
MD5:	56B677A22D18F69E10BCF63359A75242
SHA1:	B933D49E41DA4039DEEEAEE0E35E564AE088F1F7
SHA-256:	BA517752BA646B22CDD862901D0CFEB2E5E9934CFBE1DBF43A332FB40A8E9E8E
SHA-512:	325DED3E99FB55E9F1CC78894C04ADBC08D22C09640B7C4908959060C323C423013BF236C0CFD210A44EEEBB7244713D50E73A0B7D249E0F656FF6840FCD7D8D
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_admin~paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~pap~98bcc4eb.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.P8g-ahw-OP17UflU4vPd6dqc_PiHjZGoAEn-_cwbCW0.css.gz
Preview:	...........W[..6.~.0Z.......Il.......Y..5..Ir.5N..(..qr...y.$.....iv.......Y..i.wI..o..Y%..>..../......@.:......I...a...).5.j......ELl?H..,...m.\.. .Z..Vvu`....&..v..49.@.,x...OK.a..$T#FqZ!...Y....:....`..R'....vQX.`m...I..L.&2-...:'%#.tG.v..x`......x?yw...\|o...[.9...../l0.-..3..Km...8I.{.H.....h]]......^...7.....)P;T.a.~.8U.m@!9mI...90...../T...9$.D=.A.NA....dS..,....-ns{.oc.l<.R.@...$.{p.7..]....c......f...x....8x.g....r..7..1..%.r.$....26..N?.m.&7..E.........c.7...i....P.u......^.v....j@....(..Z(.....`.&.....=.c. p#...7=Z...>....dJUP.F.....dgr.`..M=.H.#.?.#X.w.Y........MJ.... ....E..j0w......]Zm{..-.W.....e.c.z.H.ax.pRR.t.w..m......\|..)-...;...W...u.h....u..SI.....}^..F.?..r}...O....5S..J.P.7.z.......=.A....{>((8..a`.....Hz..b..@.L...g.6......./.+.....9P..U.Ew1....j.A.`...0.d! ..H.P...fF.;.H%f.:.Q.@...U .=..J.}....o.).@K.(..5g...h..5.I4.-..D..-......... .......xO..8.;.a{y....".T.u'BBq.~......u..>....<...h.@..h\..\|?...,.+..oD.#..;.

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (52749)
Category:	downloaded
Size (bytes):	52802
Entropy (8bit):	5.379361895681224
Encrypted:	false
SSDEEP:	768:EZoDLd4QM0H7skWcjfKD1UM83jM4cf75wGTK8PvEU5pSMKBpl0mRHBozI3mGUti/:tLA0mqNHBozI3mQl/vvD
MD5:	A0DBDF7367D16C2CACD396248D2DD0EE
SHA1:	01EDF4AF38CA587DEB7429BF620F3DD3836D6CA2
SHA-256:	D68AA8AA4B5C2655901CC52940499D178E5354F13A385ACD4430061CEFB0F377
SHA-512:	3CF16D8A206446399B868881B98508EA1E3849CCB8F280B01B7DE1593DA611D39DCCF7E7FD2A92F231AC76FADE42AA510F119DF92B48E65CF7DC29D1EF325BB2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-api_v2.min-vfloNvfc2.js
Preview:	function q(e){throw e}define("metaserver/static/js/deprecated_ajax/ajax",["require","exports","tslib","@dropbox/ttvc","metaserver/static/js/user_centric_perf_metrics/component_visually_complete/ajax","metaserver/static/js/deprecated_ajax/job_progress","metaserver/static/js/deprecated_ajax/util","metaserver/static/js/core/persistence/storage","metaserver/static/js/modules/constants/ajax_strings","metaserver/static/js/modules/constants/page_load","metaserver/static/js/modules/constants/request","metaserver/static/js/core/browser","metaserver/static/js/core/assert","metaserver/static/js/core/attribution_header","metaserver/static/js/core/transport/fetch_utils","metaserver/static/js/core/html","metaserver/static/js/core/notify","metaserver/static/js/core/uri","metaserver/static/js/clean/csrf","metaserver/static/js/clean/viewer"],(function(e,t,r,s,n,o,i,a,c,l,u,h,d,p,f,m,_,g,b,j){"use strict";function v(e){return e}Object.defineProperty(t,"__esModule",{value:!0}),t.SilentBackgroundBeaconReq

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1312)
Category:	downloaded
Size (bytes):	1368
Entropy (8bit):	5.162663476219639
Encrypted:	false
SSDEEP:	24:1bmqDKPcFC6QMV49Ts51iOqepNWAtKRvN7K6QEWRR19h/RLJMnLVjJ47:1aLUHCsT9EoKpzWB/WK
MD5:	9D713D8E754325A6083C11280F9E25DC
SHA1:	B15D602B03041873BDD208E47E5C03CCA8B2539B
SHA-256:	63BD8DC5F3BF84522F65119AAE07FA782E755226C012F2E767F87E3F2C38E444
SHA-512:	3DE049B3B93CC227144D15BEAF5B8734632F8BDE7409484E387B2388247122335E396600DE3214359B772F955A7F8AAAAE876F5EEA1C7005055373BD5117C9BB
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/core/toast/toast_on_init.min-vflnXE9jn.js
Preview:	define(["require","exports","tslib","metaserver/static/js/core/notify","metaserver/static/js/core/html","js/browser/cookies","metaserver/static/js/css/css","metaserver/static/js/security/csrf_hmac","metaserver/static/js/clean/csrf"],(function(e,t,s,o,i,r,n,a,c){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.decodeToastCookie=t.showToastFromCookie=void 0;function u(e,t){return s.__awaiter(this,void 0,void 0,(function(){const s=yield(0,a.readHmacCookieToken)(e,t);if(null==s)return null;if(s.startsWith("er:"))return[!0,s.substring(3)];if(s.startsWith("ok:"))return[!1,s.substring(3)];throw new Error("unrecognized format of message in toast cookie")}))}t.showToastFromCookie=function(){var t;return s.__awaiter(this,void 0,void 0,(function(){const a=r.Cookies.read("toast");if(a){const d=yield u(a,null!==(t=(0,c.readCsrfToken)())&&void 0!==t?t:void 0);if(null!=d){const t=(0,n.require_css)("/static/metaserver/static/css/notify-vfl4oJv2S.css"),[a,c]=d,{default:u}=yield new Pro

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1477)
Category:	downloaded
Size (bytes):	1537
Entropy (8bit):	5.129790865728352
Encrypted:	false
SSDEEP:	48:1aYVs1HZz7GbnnFZFaO/lfhmh0h7zJ/hIwIzQbtn6u:ZOpZz0FZFaO/58upzjbx
MD5:	903FCB211CBC675701B95CD091A915C7
SHA1:	061604C90D8E42ED23C72B06DED11AC1C35A7B37
SHA-256:	AD1010EC6ADC4734354C89B012FE48E5802F1E023ADDEB2D7138A8CA840CAE72
SHA-512:	53D33BCF88FB77DD36CA0466D6DE81C720A172C263AB33DBC13B76299E20675C2E1CFB0AF9E42CC210A15DF06D7CA69EBFDA550F8E78CE3504C098CAA63039BE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/element_observers/mutation_observer.min-vflkD_LIR.js
Preview:	define(["require","exports","metaserver/static/js/ux_analytics/element_observers/observer_constants"],(function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.createMutationObserverManager=void 0,t.createMutationObserverManager=function(e=document.body,t=n.UXA_INTERACT_SELECTOR){const r=new Set;let i=null,s=o();const u=new MutationObserver((function(){if(null!==i)return;i=requestAnimationFrame(()=>{const e=o(),t=c(e,s);a(c(s,e)),(function(e){r.forEach(t=>{t.addElements(e)})})(t),s=e,i=null})}));function o(){return Array.from(e.querySelectorAll(t)).filter(e=>e instanceof HTMLElement).map(e=>e).filter(e=>l(e))}function l(e){var t;if(!e.hasAttribute(n.UXA_ID_ATTR)\|\|!e.hasAttribute(n.UXA_INTERACT_ATTR))return!1;const r=null===(t=e.getAttribute(n.UXA_INTERACT_ATTR))\|\|void 0===t?void 0:t.trim().split(/\s+/);return!(r&&r.indexOf("shown")<0)}function a(e){r.forEach(t=>{t.removeElements(e)})}function c(e,t){return e.filter(e=>t.indexOf(e)<0)}function f(){u.observe(e,{chi

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129350
Entropy (8bit):	5.261182324318669
Encrypted:	false
SSDEEP:	1536:YiMhhynFlCjUN7Vp7ZxfHfJw0e7fVhZwV6wtU+jlvW3bpaWxJS5K6A5S2:YiMhhynpp7xwbcRBOrLSWI2
MD5:	A97E3D0C20E9CED1A06B873A1E84FAB8
SHA1:	EA23C901FDC6330B7AC02ACE9C7283D303FF1F5A
SHA-256:	21CFB3E869798AF28F36870E4E5E1B906460722A82C052C0EB842012EA1D34C9
SHA-512:	1F003FC840C56D710904F60AB4583067F4A78BD5360F1CEB0AFD36E4DE0FB02801AD2195CDB2CF917E03F9D70AC64C50B2535C5D99A4678A07DC25DB1BCE0E04
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-react.min-vflqX49DC.js
Preview:	"use strict";(function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t(require("react")):"function"==typeof define&&define.amd?define("metaserver/static/prod_assets_web_modules/react-dom",["react"],t):e.ReactDOM=t(e.React)})(this,(function(e){function t(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function n(){if(nl)for(var e in rl){var n=rl[e],l=nl.indexOf(e);if(!(-1<l))throw Error(t(96,e));if(!ll[l]){if(!n.extractEvents)throw Error(t(97,e));for(var i in ll[l]=n,l=n.eventTypes){var a=void 0,o=l[i],u=n,c=i;if(il.hasOwnProperty(c))throw Error(t(99,c));il[c]=o;var s=o.phasedRegistrationNames;if(s){for(a in s)s.hasOwnProperty(a)&&r(s[a],u,c);a=!0}else o.registrationName?(r(o.registrationName,u,c),a=!0):a=!1

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 86404, version 1.0
Category:	downloaded
Size (bytes):	86404
Entropy (8bit):	7.997550567294311
Encrypted:	true
SSDEEP:	1536:U3aZ6VW9x6OoobSWd6pDFWSV454Po+5+FD7cOkzUPFMKsu:H6VW/2hVFRV4Avo0OPNMKsu
MD5:	6FF72A8066505BF68A02551C27EF4E49
SHA1:	5F7BEEC0EE4C210DB8E9339A8B98745B3F223AC6
SHA-256:	C9B2E1944C0C69D696B74B0E42396F0ABFACEB74FFBF21E5276ECA6F1484E95B
SHA-512:	B5A8F48E4219717BBA707F7EEE054E6182082F73960F217840C93312885B57C55AF25C250CA42DF9FE6130AA25A2A4583D97F61A1E4D0AEDBBB667BD0BD2BC1C
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-MediumItalic-190618-Web.woff2
Preview:	wOF2......Q...........Q"...........................x..d.`....<..s.....D.....4..6.$..d. ........Z[.x...2...$...j.S..+..k........&.u..c.C..?C.........c...v..........."rsw..v..S.J......F1....$.<.kZ1..n./.]65.....WJ..4....T.n.F..GDC......9H.....Z..l)...~Pf.h.!r.Dhx..C..-...\.<.$b..rWT>le.vI.J...3..q.==.T...RJ .8+.....\|.^.j~..W)..B2......Vr..YSE...b...HB...?..r-...R..w.$]I..~t.+..g&.Ig.Qq.Rj.[.T...}..djkB?.I..f....1.d..h.rd_..]7_xJH.^.}........ ..,l..`x...l.YY.mU.=.8.......$I...\|....2m.g~wL}....u........H.#..._.I.T...P.&3.bxcWY.. _.8...<.._...r..f)..SY.,...9uR....B.BDa}L..z.8cV..n...[.....~{Xn...\]..mS..T....7.....n..,..w.TE$H.'.@&}.w8<..ED.f\|..y(.........d*Lg.....(.UUu...n....8v..v....=..q.....:., ..........'....a.....+.~.,..D0.j1.F.&C.0.+/T4.;s.=. .._.Z.......96.Z.[.(.fl.`..1F.............W.z..........fL...i.=.....1.@0jbb....0.3.."...o......~g.....?.%5.``.Q...i..E.`.a<...h...OI..@.&..?....~.....q.`..g..FFZFZFZZZZJJJJJ".H$..D".....y...{.ut:...D.

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41478), with NEL line terminators
Category:	downloaded
Size (bytes):	87467
Entropy (8bit):	5.340257233567569
Encrypted:	false
SSDEEP:	1536:AM04QbGvT3vmk2r1nuEkK9h/5mv643Zgtw7yUh5WNgu0VoWq:HsbGvT3vY1nuKR
MD5:	6DAC7CEC2F8EB2CC4F14A0B435000637
SHA1:	77F1BEDDB86009DC6E039BC75D9E4C9DAA14264F
SHA-256:	4322E0AD921CA5A46FE06023B52BC159B50C5570FC4F7F74BA417CF497F4C021
SHA-512:	95FD4DCEA6450BD29DA24C4B9C3F96EDB02C22F9BE7DFE6C2C9D9BC2D164402FA34C7E1D69ECBAEB2656D6EB283D8D225B2E2ABA585BD7B11B1E6F76DB6887D8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-i18n.min-vflbax87C.js
Preview:	define("metaserver/static/js/datetime/datetime",["require","exports","tslib","metaserver/static/js/modules/constants/time","metaserver/static/js/core/assert","metaserver/static/js/core/i18n","typescript/libraries/dbx-i18n/src/index"],(function(e,t,r,n,a,o,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getMonths=t.daysAfterToday=t.increment_date=t.applyTimezoneOffset=t.agoFromDate=t.ago=t.getTimeBands=t.format_time_ago=t.format_time_remaining=t.format_time=t.format_date_timezone_offset=t.get_utc_offset_date=t.format_date_utc=t.format_date=t.localized_time_format=t.localized_datetime_format=t.localized_date_format=void 0,n=r.__importStar(n),t.localized_date_format=n.DATE_FORMAT,t.localized_datetime_format=n.DATETIME_FORMAT,t.localized_time_format=n.TIME_FORMAT;function s(e,t){const r=[o.intl.formatMessage({id:"EBx+nl",defaultMessage:"am"}),o.intl.formatMessage({id:"5qHjxe",defaultMessage:"pm"})];return t.replace(/'[^']*'\|y+\|M+\|d+\|h+\|k+\|K+\|H+\|m+\|s+\|S+\|a+/g,(function(t)

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2478)
Category:	downloaded
Size (bytes):	2547
Entropy (8bit):	5.132118727832554
Encrypted:	false
SSDEEP:	48:1aiIVxjn6XMOC5kg9+0GDe12T98FaCXLm93AtWq9VaPZ8r2sZorV:r8Oc9KgI0GlmgCXLm1A9LJ+V
MD5:	461D0AA9FD8C5D015AFEA3908B04BD77
SHA1:	42C6919C0CE11DE15D55C496BAED101E20DE5B2B
SHA-256:	3C70847B1494CA71FE5F08FD8C7030C76AF9660B70337F014276703EA3ACBBB4
SHA-512:	A3763C807007E7D71EE46D5ACB29A9073D1CFEAFE110CFC8258BBC17098C9086EEEB83D2765EF87085FB5918F1A21A52FC9F2FF238FA0DDB5E2137B87118DFBD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/cloud_docs/shared_components/cloud_doc_signin_component.min-vflRh0Kqf.js
Preview:	define(["require","exports","tslib","react","react-dom","metaserver/static/js/core/browser","metaserver/static/js/core/i18n","metaserver/static/js/clean/ui/snackbar","metaserver/static/js/components/ui/css","metaserver/static/js/sign_in/button","metaserver/static/js/cloud_docs/event_logging","metaserver/static/js/cloud_docs/types","metaserver/static/js/cloud_docs/constants","metaserver/static/js/cloud_docs/shared_components/routing"],(function(e,t,n,o,s,i,a,r,c,l,d,u,m,g){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.showCloudDocSignInComponent=t.signInHandler=t.CloudDocSigninComponent=void 0,o=n.__importDefault(o),s=n.__importDefault(s),i=n.__importStar(i);const p=e=>{const{onSigninClicked:t,title:n,cont_url:s}=e;return o.default.useEffect(()=>{(0,d.logLoggedOutUXSnackBarAction)(u.PromptActionTypes.Impression,e.fileExtension,e.loggedOutUXPaperVariant)}),o.default.createElement("div",{className:"cloud-doc-signin-title-bar"},o.default.createElement("span",{className:"c

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	7.471761176000909
Encrypted:	false
SSDEEP:	12:6v/7iby0CDdAfPcBsKDs0TkF4yEiwWh9j3xYC8tqYAME1:py0KahKDtTkFjGWh9CCiqYAMG
MD5:	EC2E6E18A914B2BAE990F7CC9F8CD4DD
SHA1:	33E2B67E19BB8C21E4C36902316E0B00F7FA6017
SHA-256:	C0BCE318A2ABA982ED09E4C18146D93CB202B71AF00FC0764FF794742D83853C
SHA-512:	5727FFEDC630901DB996A97AE7964793E780B3663D37AB5ED0FAD7FEBC9EFF5F198C55D98E21F6DDA8AA934E6883CCE1E6DC4868C5E31057852C75C6B6E2800B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/favicon/favicon-32.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx..GCQ...2Z.BP...JH...Z(.B.-@IK.B...& ....@...d..A..%v:.c0.k.}....w...{..C9.4a....F.\6.d...K..(...K3l........0...o.I@M.=.v=..B.'.^.8.!..f~!..z]..V..l..CD...4.i...&.5.....1...\|Gq...^..`......3.......x.....Q...Q....8......E$.u3..~j.A-z...n.qG...\9......C(..j.#.o..C.z.w],...-.t..v..^.F.....S.z.....7...ly.":..4...]}...e4......../.... ..../........P..3.."9.H:...te...b..)x...lt3.7.XA...byo.w..2F.....W....}...:..)..TQ5.....IEND.B`.

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	117891
Entropy (8bit):	4.35190250889669
Encrypted:	false
SSDEEP:	3072:bcfg/X1uM9xnUKVIJ1sg9MHNKz52cDL53JdN2:wfg/X1uM9xnUKVIJ1sg9MHNKz52cDL54
MD5:	81A542D14C4D071066B66BDE466443CA
SHA1:	CCA1F346B513F68EEED21188F03E1BFAA17FB89C
SHA-256:	E4B4809716351627A31505039F271B5208DA09182D83A46A5869DECEFFE4ACB9
SHA-512:	394EE14C30E757F789FB893CA5CF17B17694D0A1041D0E18E9652D0D58C3768A17D5276586A4C5F13AD88C62A7D53D3E98C6E9C6933AC9E33C66FDDACE620CBE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-common-3.min-vflgaVC0U.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/index3",["exports","./index","react"],(function(C,e,l){"use strict";var V=(function(C){if(C&&C.__esModule)return C;var e=Object.create(null);return C&&Object.keys(C).forEach((function(l){if("default"!==l){var V=Object.getOwnPropertyDescriptor(C,l);Object.defineProperty(e,l,V.get?V:{enumerable:!0,get:function(){return C[l]}})}})),e.default=C,Object.freeze(e)})(l);const r=({className:C,size:l,src:r,...a})=>{const H=e.classNames114("dig-GlyphLogo",C);return V.createElement(r,{className:H,width:l,height:l,focusable:"false",...a})};r.displayName="GlyphLogo";const a=({className:C,size:l,src:r,...a})=>{const H=e.classNames114("dig-WordmarkLogo",C);return V.createElement(r,{className:H,height:l,focusable:"false",...a})};a.displayName="WordmarkLogo";const H=C=>V.createElement("svg",{viewBox:"0 0 64 64",fill:"none",...C},V.createElement("path",{d:"M37.4709 26.6373C37.4709 28.7119 37.1001 30.5043 36.3821 32.0088C34.7517 28.5943 31.338 26.73

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18633)
Category:	downloaded
Size (bytes):	18711
Entropy (8bit):	5.314577456952933
Encrypted:	false
SSDEEP:	384:K9Vk9fd6/CJlIF4W1230m/Y9mI0Gmb+vo:K9VwfdcCJlI+Gmg556D
MD5:	592CFC767ED66A8B57E2DF38AB94732E
SHA1:	B0B4CC500221EB662495BD666459B8243BEFC90D
SHA-256:	8A88401FA3576C1D3A0324679832804C9726D5C86553D4AF9C0AF553E51E0E9F
SHA-512:	CE5CE798007BC5E6319D0D79F9474BDD7F8FE9772F947A7372C4236CDBD86882C6CDF7B69009CD3C29683D8D7E6BB1158484A74F58615AA73A9A79963D0105B5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-legacy-bh.min-vflWSz8dn.js
Preview:	define("metaserver/static/js/sharing/request_access",["require","exports","tslib","react","classnames","@dropbox/dig-components/buttons","@dropbox/dig-components/typography","@dropbox/dig-components/text_fields","metaserver/static/js/components/ui/css","metaserver/static/js/sharing/api/client","metaserver/static/js/clean/viewer","metaserver/static/js/clean/web_timing_logger","metaserver/static/js/core/browser","metaserver/static/js/core/i18n","metaserver/static/js/core/uri","metaserver/static/js/api_v2/user_client","metaserver/static/js/core/notify","metaserver/static/js/sharing/components/team_card","metaserver/static/js/teams/ui/team_discovery/data/logger","metaserver/static/js/dig-illustrations/spot/paper-airplane","metaserver/static/js/dig-illustrations/spot/give-key","metaserver/static/js/dig-illustrations/spot/target-miss","@dropbox/dig-icons","@dropbox/dig-icons/assets","metaserver/static/js/logging/hive/schemas/sharing-request_access_user_events","metaserver/static/js/logging/t

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 496, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	243248
Entropy (8bit):	7.990223468157218
Encrypted:	true
SSDEEP:	6144:ASeWR+ZqR6BMpTtQ4Z4mXKoi0eClDeQneAznsfELIZQc:HjR+6nBCfEdTFnwEA
MD5:	691DD1415D36705796F813D0445A04D3
SHA1:	3AFC835067F813DB462A79A1ECC5786DE8952CCC
SHA-256:	518B19A34F870F8542707D2BADE2FD051794AD2C50B33C0EC2282F77EC5B4C0E
SHA-512:	75D563FFF5A93FA096F96DBE1F348C028B77E887237972FDA945DF7A4304D3343F6493BED9A922CD8A5D7CBC3302E6A8C018F37FDF50EDFA33B03651D55CB670
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8..=...5iCCPICC Profile..x.c``2a..... w'...(..{.l.,................v....E.!...Z.....qeRvA.... [..........@..@.h..@...x:.}..N.....E!A.@.. .!.......... .{.:..Z......$.$&g+.''...+..........300-A.!.$....r)./H..Q..K.C......+.........[..$n!.T.a......\|riQ...R@\|...s..d.l.o.....&..5'.IXOrc.,.}.]P..iV...u...4.....I\...$.....IDATx.....$.&.~j..g.....n.&........Y..y"..'ow.t7.........&A........7..AU..=<"#".#.#M...p7..\...UM.bf....(..}v5....=............6..>.7/.."....]]..U.}Q.3.bo'.9......o6...<^.7...u........D.....T.P.B...T.P.B.%7..<..2v.bc8....WQ.}....+..=s..E...rY..0gvE.e...k.nP...r....os..k....5;o...,+.u..%9R.d...O.\|...kx.x..v..r..q1^/...4D9v#.)...Jsf.\.'.M.wY...........X.....-.p.r.Zk.b....}["...a3.S..7..v.k_?r<.f................b.q..{s..{..C..P..8.9..Y.!.y..C..vc.....`.5C,.}..c..k.m`.y....{;.x.^.K..k.^#n..w........Y.5.6......d'C........k.f.....?..d'...sr.,......,...pC.^.U..eT*r\.{]Tx}>."...n....\..vY.6....S.m

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 91504
Category:	downloaded
Size (bytes):	27787
Entropy (8bit):	7.991811890869751
Encrypted:	true
SSDEEP:	768:3CrSCfah592aNOL4SnVGNpDiG72kKs3MEKyHfGc5YcAP:3sah5925L4LFiBV5FSYp
MD5:	1F440F98E8C90C270C5CAC0A7E629031
SHA1:	034ADE232E7BFAAFA13B3FB2CB8A4F06ED7BF218
SHA-256:	ACFFE995DF3469303490665A9B881B757CA5229B6E3F54F9429B72E5552A9F4C
SHA-512:	B9EE5479DE338F0B72E935D6A2944BE57FFFD8CA77E47867DD80C01DBB22D04043353CEB5BA4AF5526B0670DAEF809B79AE16309D5FC9481144EF666AEC86D03
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/544eb0bcacbf47681dcb.UBYHq28Ln5Hi8t6eUSEEz2fCkP8WJ0HWYEUftmX8eYE.js.gz
Preview:	...........ko.. .]...I..%;q.),..v.W%v.v..H...%1.H.....{...`>.`z0.....1..t.0.n4....%...._.....(.J.sn..9....^{..c?..........G;{;O_......o..?9;.?..$..Y.....t.9.. ...........>.......g.7.._.P...K..&T.8.?...\|G"..p.....u.y..P.Y.Fs.{N...A....k=...F..Dz+..Fd....,..^F@b.[F...h.....L....;.J...`@...........R......LK....Fd@"R.:.W...J!...z....a..[...B..B...4.,..^.. :.H9.A.xN&1-o.i....l..6......r.. W.._../../7E).(O...<....qQ.Y.G't.2..r....\|..7rNO.t6.&?...Ny-..p.76.i....G.$..c...;...w.$=s.d.g;.9..l.cV6.i.....].v...q.....r....a.......PQ.T^.`.".=-.5Pl..@FK...w....l..6pQ...j...5DuA....#....^.p...i...6.T..1.h.J......>}....=;}.s....h...........x...=..v..8:...Nv_...:.v^.. ............E.x...1..A.@.!>.}.f...9.u.....(B.}.L{.....^w...<8....?;8=.?9.....H....x...@$.MO....h..g.s..v.z..`......Z..C.........o...h{;.v.#.<.\|}.b....J<..O.<E......<:a..9..vNw0+...=. .>.v.....wO......==.A.....<x......+G...........s\|p.%..9..G.!.8......@..y.......>..V.."....@.l. .dx6

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 22961
Category:	downloaded
Size (bytes):	5564
Entropy (8bit):	7.96911120289624
Encrypted:	false
SSDEEP:	96:26I4XZXVk41B1hFdJqnP/x0rTuwfifl0h3yajulA2TxxBM0iUGR+MrBN6Fz+w:26Zlpvv7J6P/TwfifK5yb9vM0iUGdrnY
MD5:	B59E39F9921CAFCA149EB9685B51F656
SHA1:	CE99E1B2CA50537D61B5F6004EA2D0F528725979
SHA-256:	72DE626A972E4867B3D7A5E1E3A08812FD74C25FAD1132E934AD3565FFD5AD78
SHA-512:	BA49F13506CD1648109B8684132794F7749129432DC0F89B2CB3869FC39D4DF107F08E0EF69958DDD993C8C09ED3060D35C193922BD5433897CE2B0583EB6559
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1
Preview:	...........<k..8...+.....pg..`.bd3...f..6..;.F...&2...4...W.DR...d..[.EV...".{..9.g_....B.y).%<$..itOF#2._..M!..b..".K..g.>.../..BG9...r#........Q.k......;g...J.Z..\|..].I."HSq..)Et.e../0...;....6."...Y.N.<%c.C.Iy...B..&)_....K.y.H....bN.......UUQE.. .7,_.M.4.....V...s"...A.fF.......6O..yV..2....A./..57..)...j...EJ....= ..j........X..&+/o)..pq.d....;..Qv./..........1. j..)#f"%S.B.x...F.H.1$..WQ\|.l.x.T.......5.%}.......2%@D...D@..A&)...u.$et...M.........<U0O..8.Y.C2?_.x.?...t..U..;.YD.P...zN...X.,-...A..().2..Y.M..E....J..K....S...W.> (a.e.`.j..A.......m..%e..l.Al.O.....-..~..$.D.d.....}..^.s.J...V...Q,....&/V.%..!.?.bOj.3..-3d0...........;....5.=.T-.5LF.- j...-d\....."..hD.K...D...q... ....K$..'jU.....h2Lk..!.wk....$...,...;..p.G<j..U.mq..s..`........K..f......88o..kp.M7z@.kZ...W#a....Jn..7.7..WW.)..A.,q."..\|.@........=s..3..1.D.Z.-=U.l..Ll.r,6..6;..I... .".[..9...5.B#..V.....6.<..F=.A.x./7.P.6%....V.6.Ab.}4.O;.....e&........ACU.\

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6211), with no line terminators
Category:	downloaded
Size (bytes):	6211
Entropy (8bit):	5.3158609905293925
Encrypted:	false
SSDEEP:	192:A+WIcvKEXdcG/e9wbhThrdCdOc+34lR7WeA2LBjN4V44my7L9n:zWIcvXdcG/e9wbhThrdCwR34lR7WeA2I
MD5:	8C897EE3F367AA947878162E2BC8AC94
SHA1:	59283273B67F5EA8A828C7E6E96D10171105E0BA
SHA-256:	CA25FA24DBC81BF352C0D983707B22998F14B6FEE08B128F81FE52D6B54C3CAB
SHA-512:	D3CD37FD1D6AEF195F7179BA4CB34FE4EEA662BAAA65BB13CC8A58538D42FA2F3627FBF0BADD710BC6BFB24F2A9EA64BCEE8D0CDEE56A821F5CFDC9383500FBC
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/productkeycontrol.js
Preview:	window.O365=window.O365\|\|{},O365.ProductKeyControl=function(n,t,i){var r={Empty:{imgSrc:null,imgAlt:null},Incomplete:{imgSrc:null,imgAlt:null},Complete:{imgSrc:null,imgAlt:null},Validating:{imgSrc:'https://res-h3.public.cdn.office.net/admincenter/admin-content/webcontrols/images/spinner_16x16.gif',imgAlt:'Validating product key'},Valid:{imgSrc:'https://res-h3.public.cdn.office.net/admincenter/admin-content/images/greencheck_default_16x16_metro.png',imgAlt:'Valid product key'},Invalid:{imgSrc:'https://res-h3.public.cdn.office.net/admincenter/admin-content/images/alert_high_default_16x16_metro.png',imgAlt:'Invalid product key'}},ut=function(n){var y="ValFieldError",e=!0,f="",o,s=$(n),w=s.parent(),h=s.attr("id"),i=h+"_v",u=i+"_val",c=i+"_err",r=i+"_err_ClientState",l=i+"_f",a=document.createElement("div"),v,t;a.innerHTML="<span id='"+u+"' style='display:none;'></span><input type='hidden' name='"+r+"' id='"+r+"' />",w[0].appendChild(a),v=$("#"+u),t=v[0],t.enabled=!0,t.controltovalidate=h,t

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3352
Entropy (8bit):	7.873239198854956
Encrypted:	false
SSDEEP:	96:22xh1Jm3gNpDxda7ajnVfAptPHdsWN4lhYGNGGmb:227aADvJVfwP9xNeCGGL
MD5:	B735B5F2FD640F4E93BBFA17772E4790
SHA1:	D8DAE0623C2A479E077764CEA5D81ACBC16698B8
SHA-256:	A42BF0B91B66F18474C243AEC9BAEC010A86E5D4D99AF841C9E762505B0D0C4B
SHA-512:	24544808FB2A0279FBF151A8CFE53B367241425DF16AD4406C92CFEAC5018A9F6F0CAEC649B50524548DE782B0DE549A5B450D9FBB6D672FBA809CDF5726CF2C
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3ff.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[Yl$.y....{x..x.Z+.*..-A..u ..`..,...8@...C.. @.$.O~0......!.. q`.zH..0..6\|..%.:.$...]r..p...CO..p..3...@.{........!...8{..A.5".C@M.......?/.S;....V..f'.HA?2.).g&.e...xs.BD....n..V..B.V...I...S...I..s..).D>...vA2.;...N..aa....._...Dj...9.........HX.]L..0...^..'...$p,..g'_....C..LZ4Z-.i./X..C.....%.&P...O..].K.~^...x..o..w...:...c....S....}..>.C.03.z..;..'/?....g.ZZE..n...1..X..r...~.....Ji..5<....x^..K.`H.. "\.... H.>+..3..4....b~z2..\.^..k.?.0...m.....oX.p(.B2a......[.x....g.I5?....!.).....mx...b.H!.,..KD..H.t..... $L...9..F.1....q...{......'.@....8..iC.k\...q.>.!o..m.Z...H.,..&._....Q....j....D.$.y.a..C.pq.....h..d..\._.Q...C...@(.... ..(..4.8_x...>.I..."l.6Won}..BH.....\|....!1.g'...<055M.659.\|..%.).....E..5.u.`\|...]` ...f&.......e.......0.).C.&...........s......0E?..i..x.U .3... H..B(S.J=4L...m.n.;..>.C..pX'....w1t.].0.....P.R.".

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14503)
Category:	downloaded
Size (bytes):	14504
Entropy (8bit):	5.06682650134273
Encrypted:	false
SSDEEP:	192:JgbNRAEu8KyIrMyqSyhimipupm2OSFQsGeR+5ZJ0Fj5z:JyABlgimipupm2OSFQsGeR+5ZJ0Fj5z
MD5:	33FFCCE7AEAEC3B59B39E7E3A51820EC
SHA1:	854F8907FDC0961CA219F657BCE7F4C06C0DD6D3
SHA-256:	BEE12B4971E3F9CFB2BE2DC75C1E1217BBFF1F7A68FAB998DFE31296B34B90B4
SHA-512:	A77E9D8F05012F737005A687A9161537A40018F429BC642AE40F3823BE159BE4615475E5980CE86FF1771DDF2B5C74D22B5F1A1A79D35392339CC5758A3B6F79
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_layout-vflM__M56.css
Preview:	@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflyEJFZg.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflJ3txfq.ttf") format("truetype");font-weight:400;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflyja8tN.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflbI0jjP.ttf") format("truetype");font-weight:500;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrot

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 304
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	7.043988199112678
Encrypted:	false
SSDEEP:	6:XthC8T6K3qRz/47IoxMksl7LYXtAnlKCBkIWYsl:XTF6LhQ7I2oI9cF7WYsl
MD5:	EE8BEA59B813CB11CA3230A9B91658F7
SHA1:	DCB46D05AED50148140714BFE8311E6CB35C11CB
SHA-256:	E51A6DF8B59C668D94DAD68D94A19D05FAD933E09FE5D4576D954FF7B4243F5D
SHA-512:	10EF5FE581877B672160FCD336BCCDEEAE30C1DE29C099B1C6E2D6F281CB07A71E5A39B54D05738AAFA2F543D509E0BCB1E48741395CA5365CD09D728AF262C1
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_pifs~paper_view_only.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.PsX3DrpPtPRgtmZz0vfnDHPUBj6lKaziWNK1ykQH5Wk.css.gz
Preview:	..........=..N.0.D...$n..:.8i"..\.8[.z.Z$^k.@.*.N.).}3..By.zDU....<..o=....h n3.f..3.....p.ilE.)..)...v..c....Om)....~@.oQ...b..y\O.......Zm..w.&.\|.1..........F.."..........i1.w7\|...(.....;.M%.voDS.u..3.....e.P7....Q........0...

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.236947254176413
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1gIhAIDJL9Rc6YFdU1g6n:MMHdVBKW/UTDWU9Cp6
MD5:	7A954D5D4615A887BFDA09EF94679424
SHA1:	CFEE769132919B652A0D4AB1539F5A814B7395A9
SHA-256:	F9957A22AF85A8431C79FFE3F88B97D7C1AACC116FC03AF7043D2A019C51E577
SHA-512:	8143DF09CF6ED05171CADAA4D2A1E0E598C7660A95AC97A7243771D3CEEF7CF12F3009B1A21E1D5B66BC4B06C0E6EB5DBFED0205BEC5A9E5820DF3DFD733668E
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/scrollbar/arrow_staticdown_16.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:336a099d-e01e-0026-01f3-bb82d9000000.Time:2023-07-21T16:51:45.1238112Z</Message></Error>

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	1302640
Entropy (8bit):	5.368017151100688
Encrypted:	false
SSDEEP:	24576:VCSqVj7h9pHC1aL9UkQ0udibB6SR0iFnTghQo4gpVjWp4jrRBouNHuni7gznlodD:wSqVj7h9pHC1aL9UkQ0udibB6SR0iFn0
MD5:	60E0E0743F2C2DF4CA2C2A9E575CFF9C
SHA1:	9B0C58B463E92BB856B910DCAFB758F420378ABB
SHA-256:	905A3FAD50DF5F76E744598D99EF98898827A4A7F86558322C7901AAE4D09BCF
SHA-512:	5DB1CF9B14CF495C263F0C860742B246F5BC032699C3BE69EC6965DBE5E361F7817C4AC8F721EE577B1C425D1D939FBD136815D5523EF562709056DB0DEC7FB2
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/app-bundle-c3bf1e5fe54212182a26.js
Preview:	/! For license information please see app-bundle-c3bf1e5fe54212182a26.js.LICENSE.txt /.!function(e){function t(t){for(var i,r,s=t[0],c=t[1],u=t[2],d=t[3]\|\|[],p=0,h=[];p<s.length;p++)r=s[p],Object.prototype.hasOwnProperty.call(o,r)&&o[r]&&h.push(o[r][0]),o[r]=0;for(i in c)Object.prototype.hasOwnProperty.call(c,i)&&(e[i]=c[i]);for(f&&f(t),l.push.apply(l,d);h.length;)h.shift()();return a.push.apply(a,u\|\|[]),n()}function n(){for(var e,t=0;t<a.length;t++){for(var n=a[t],i=!0,r=1;r<n.length;r++)0!==o[n[r]]&&(i=!1);i&&(a.splice(t--,1),e=c(c.s=n[0]))}return 0===a.length&&(l.forEach((function(e){if(void 0===o[e]){o[e]=null;var t=document.createElement("link");t.crossOrigin="anonymous",c.nc&&t.setAttribute("nonce",c.nc),t.rel="prefetch",t.as="script",t.href=s(e),document.head.appendChild(t)}})),l.length=0),e}var i={},r={108:0},o={108:0},a=[],l=[];function s(e){return c.p+""+({10:"officehome-async-styles",16:"vendors~action-context-menu-rc~app-gallery-rc~app-host-component~appbar~cc~cc-rc~copd-

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.288637093439815
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1cukIDP66YwAg6n:MMHdVBMHgWdzR05cukIDPCwF6
MD5:	717FA9C43EA863EAC4046B7D928D0ADF
SHA1:	ECDE0D4BC6E2882CAB1DF68BFC86D7FECC76EB3F
SHA-256:	913B51F2BFD9CC9BF7065CDE92579C5DE8D9C81D441B4D0732075031D28A6608
SHA-512:	090108B2FB2FAB6FD610B9CBF91E442013D0C03A9EB4722BEAA1C38670B870BE18ADC8814541AF530CDDBC3796B19B351C6ED575DBB3BA729706F2A58DDF37C1
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/pagelayout_white_panel.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:b363aaee-201e-0029-0ff3-bbf4b5000000.Time:2023-07-21T16:51:43.3618441Z</Message></Error>

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 76848, version 2.2490
Category:	downloaded
Size (bytes):	76848
Entropy (8bit):	7.9975204464424285
Encrypted:	true
SSDEEP:	1536:2H6P1MhLunbIBae4NZy0m7ShldxYtdnumnSbFd/jhsRtjIG5SYA/c1JLDY:xa8nbmn4m72Ld2txucafjhktjj5SYJLs
MD5:	7B64AE005DCD81A935C942003BC42592
SHA1:	BCCD94576804EDD18F26BC7661D3F85B6B3EFC73
SHA-256:	8E89E4C4CBC9F5B62D5CC9939383F42998F58FCD22FA2D0F07A15EBCC11BE892
SHA-512:	DA3997372DA50B62FA1227CBD416019D17C40C4C811A85ABAB667DE3CCC7CCF071801B0AEC893128A819077A9AA8B0CD23BAC07A89D86D8CE5E4342BAE61F4A1
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/SourceCodePro-Regular-2038.otf.woff2
Preview:	wOF2OTTO..,0.......l..+..........................F...S..j..\..J.`..f.6.$..B....N. [~....2.....`..ADT=...m..of..:.6^HZ..s..\|{........"............,.6g7d....QD...~m.@. p..T...s...:.3N>...H...P.[.n...Z...!Q2.lK.]..Bn.A..UL...H.!..t..........{.-...........Z{@ff...".H...Z..D..<._T.(..\|%QH..v.g....i..?.'.vl-.$.3v2R...C#..ol.R.Z...9.2b"...-..w.....7q..s.....F.B....K..=...e.S..Z...N..<.W].....N.[..@f.1.V.N..r..D...K..r.P.E....o...DNwKD%.w....g.....@....z'o...,....>G8..Fx...^.ff%?...j........2?P.0.=...^8..L......p'.'.;f......{a/........p."........(..JnaP,...>..<.d..\|VL......\IA.......\L..rj.l.....9...Z...._a.!.adE.K..S.....D......1..5==....R...I.B...]+....u...y...R....a...P........{..U...f.........../.]@..c......<..7L...n..b.u..q.,...E.../9...tS^.L....^.......\.. +vu..S4..c...t..x~...#7."....M..RCR..OU..u.F...3...6<^[...N...Ui..X.9d.B.RH).8&.A.dYDf..'nJ.@..{....{n...M..ga.P.#...:...[..D... *.....3q...\.Y9v..4-W.jek[..ll.......w...c.m._Y.i..". ..""..bn.G

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 534411
Category:	downloaded
Size (bytes):	117778
Entropy (8bit):	7.9973487449292815
Encrypted:	true
SSDEEP:	3072:2PflmKb4nWfhfyAQhbbCxcVSixwgy7ZAl:2Pflzn1shbbCxcTxwNA
MD5:	8AB414D6DA3D21234F27B48A0F9AF76E
SHA1:	9CF834F06799CD98D25E071F959A28E87D3AE7C5
SHA-256:	C963B50F224CBDF432AF0635A3F00A2AB5D6C55ADA9977F1A8AD76775355C516
SHA-512:	76CA7BF3479953808506D413334767D4B0AE69D5C24017B5569C42B60E9395ECCB00D196CE7EA4C115B4A6C6FFA9942D87A38FB696473012B56F9BB8ECD9E754
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/5c96e38211ab10ca7147.h3rhOr2LNO3D_82clEFt9El5YEWuTRA2E8rTrrtWqOo.js.gz
Preview:	............v.:.0._O!k.s..Z.\|K".v.c+;..[...}2Y^....H....x;..y.........<.T.B. x....^......B.n(.............!.cxp.......Ai...?}..yto}...3.^.@#..o.c.'...M...z.."^....9.GI.......uL.XT....J..$......z....V...yjt.oz.s..{.o.'v.....d..... ........i]_..8..'..<}u...Zga...a3..V.v".g.v\|.gs.v\..c;......d`u..=....s.....E..4....}<q...:.~.... ....L.o...>y..;...F.>..~L.8.....Z...g.z.......of.,....Q0..RP.^>D^a..gR..@Z.A...^,.v>.b1Z...M.H?#o,.\|w.............>.}...I=..)P.j...-'....{w...p..HC..{.1.m/`bcA..d.4..Y^..~.....}.&.fA.G.....}6.a....8.......l.k.f..$x..o...q...Q...].yQ\|..iR\|.3e.......".J%..G?q..._.o..4..SF.rFg\|.............z.......m.....8...^......{l..n..6...-.....G....Eu....5..i.8.{..)..m.5E...\....X.q..\|L..#....1..1...S...(.f8A...OH.6..ns....M.....?..H.y..i3..`..2.....of.s......m....fp...........7.p....#n..Fw..1.I..Bl-../.\|6.....h.#(i.".0.,...\|d<..2u.I....c8...N.Uj9..LX4..cj..+A...{.?.s.:...G...h....M&.<.. .G.d...n.....J..'..........6.q.Av...i..9

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 42218
Category:	downloaded
Size (bytes):	11110
Entropy (8bit):	7.979491976023915
Encrypted:	false
SSDEEP:	192:K/LZY5P8B/FnU8RytydtUeo5ADvyzJDyDOjVWXeQ83l+e/UUsKIxh9tBTaQe:mZuwNnU8RRyllyChzQ83lz/DsKuBTW
MD5:	A57961C37A5A1F19731803911EBF9A9D
SHA1:	5B3A7941F68101FC7513EB0A466D727169D8A2CE
SHA-256:	43B3944A8BFE14FFE132DCBAFDA8927B862973054A9E36480DE9D5964193B141
SHA-512:	6459306A22520CB03F944438B34DDB5244D4DDBF76A68278AD783B28D23352C083A797A7D0BF1D2EDB2B9E7E5C4310FE51FD8465CE00BB2ADC596B6AF5A7FA3C
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/32b2c3f54e63e752572e.VMxDU3TeZKfX-lzEjMstleWBFHlXnMK-2oRoVGo7L3w.js.gz
Preview:	...........}io.J..w....0.7.....8..L<.}c......E.,....bG.V~.....".K.9..l.R]]{U.................qr<8.t.....Z.....nN.x...M..S...?L..:.vk<u.fo..N.A....t1.N..t....e..7....`@...M}..O.....Zg........^...1/..-..^.FZ..'_.\\|..Q.......ZOs]....O.pnt;.u>F...5..+luu...vt#..7u..v....lt..W.-tc.....n.?..yJ.......1...w.bW7.,y..l......a.D..........J.^. .~.?.....Wc;.K; ~....N.$.9.<..\...s.9...".....1.M...z$Hb}..>.....8...+'"$x...mB...9.....v...;!.S.....i..%..I..B.$W..-.yD.4...<1.Q...lJj...!d.).....t._..>.."8....Z.>..0.%#.c....U...vi.8y.!..../i.D.b1..\.........';p}..Ze8,X..0.......pr.......wJ......a.u..[H>......#.mb....V...'.0...=.<L.....L-]..{....>.......!....E.].U V..z.C&>qE'....b.../.?)..lR@..m...H.......F...Ip......U8GI..1.cx..>.=X.9!...s..@.ahG...[..z..8.0{y.P..L.....F(T.Y.....y..!..Q.....=...X..c.a..u.lO.!#b.....^.....PT.U........'..aKs..`...'.'.Z.x.Y.....v..=.1.x...\|S>.Sc.F0..3F..qJ....`..~$.}IB....9..z....^p.......\/...;k<..x.!d.6*.H

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78156, version 1.0
Category:	downloaded
Size (bytes):	78156
Entropy (8bit):	7.997212603610092
Encrypted:	true
SSDEEP:	1536:Jv7ad/dUazCgOy4RPiKgKeBcxQMwtm9SdHf9BqREzL:Jq/Tz5OyOP9gKGc+LcO/9B/X
MD5:	9C03B55DB2514E78544FC6EF3688CB3D
SHA1:	BE95C3384839101A823BF888C08E1B5F228D2C1F
SHA-256:	3820C628FA5191F2A8405E9B1411A48B38AD38D8DAA051E7CA1D7FAEE29793F7
SHA-512:	76E7E5759F13B6C802AE892D3356968D11B976C96572190D95BDAAF20F848150DEFB1AF72C9E112D1A7FD17FCFC23B6BA13D4DA17E180602D2F09217BAA2634F
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Regular-190618-Web.woff2
Preview:	wOF2......1L.......p..0............................^..d.`.......s.....P.....4..6.$..d. ..<.....l[.I..J......Tt..5.9.t..}......D..t..g1....z-..A.m. ............nY<k...t.].r.A.cTr....f.T...E...$.)f.......Z...(..MG%b.]. .b..Pe.9..E..,.>././163.A..X1jTK..z.j.u,.[.M.....7.....7.. ...=..l.8...#>..H-...5U..3UK4e.t..bMS..s.......68q...Gpm..........:..w.(a:....^...A..F\|..2....n.,..k....h.I...<(..t%...1{..[~...n.{..J..Y..W......\|?}.!......7.....s...>.w&.....4..#..Xy.....V...2...1.8RD...W1....T;.D3\.J.N.dn.....~uy..k.}..,=H.r(U2.+L.V....C~.?uS....Rq.Q....3.W..t....2)?.Z.r.U..y....].....5N..A..Y.1s.E^aX.'.b..$(.....d>.,Y.O.Qv..o.b..T2..kG)-.S.....3.i.-2!.y^.l.....43+..f*Y......}A!MTu1.8...s).W\|..._....{...$........v..J.Q.....j)h.Yj.......F..{.....aB..."J.g.?SV%.eF..'....g...=.ff...'.r).&.........D.7...M...9.....f,F."..X..K. ...Y.....Y.n.5...5...<.TsJ.j..YB.g..xL....YfN'z.....%LD14[3z.!hh.\|,nl......z......m.>=s.[X3f.c..3..1)....I!.c...x..R..-u..A.D

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 95910
Category:	downloaded
Size (bytes):	17755
Entropy (8bit):	7.985805274338916
Encrypted:	false
SSDEEP:	384:7P/snh9IWQT5yz/+u+ZoU9a5pXAeTHNxDyG6d1zC9pvFe5:j/HWWyqu+ZoU9atAeTHzeGgv5
MD5:	5E5918E943A26D2E4037BD7418076110
SHA1:	06B96FC7B61F3EF879A3D37536AE28BC47B0CF48
SHA-256:	1F0A2E09C97C138320FBA7E9291D31247912914223FBFE953917005BAC107A88
SHA-512:	DB49B108F7EBF7431ACB9215605C2D39813F2E7DE7A982632F1C69BE6F77FFC8217D1A7D94661F93DA1D17C1F6C6295852387413CC5B780B4829BAD1975CCF3D
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1
Preview:	...........}is.F..w...\.XY..-J.....Y.K..V.."!.k.`..e.....s_=.(...D.D...\===3}\|......H..U...~.&..y._U.^.."..<..gi.P.2(.2.>..0......n....g./.w?...N..........N_....<zt.H..I...^Fe<..,. .f..q.,.w.DipU..Z........iRVP.2N..).+..YTT....~.\.l..M2(=...U2..(.Sl)\|..8Xg..n..l.._.....)(.nV...".....Z.v..9..XKZ.......O...^...%..h.j..&e.,...FHd..f...n.5o..O.].0n..C..:h.\|=.B......@!9...N..A.y..ez.\.QF.\T...].q..........A.\ACh.:A\V.j..dn)........Z.TusYv/.."Zu.,...p......G...^..9.=./...i.q...z.apq.T0...4.=zt...%...{...R.l..<....f....;d~..6X.EI..e.%...R.#...@f....7.v>K"2Q.\|.&.Cg..6..B.{...>.d.G.$.."..h."_S.d.f.Vg...6..4Y&..R.Q.#@.......`..+.7..Z./a..:.<!./..$.$..f...; .2N.G.!!...h].-.....$)7..dO.........0d.F.JH....SX.k.<.'.G.....2.....L.J..*.d1].\|...${D.Dw.R}Y........gw3.._....~........<8{.._./O^.{....^'....../..x..-pc`....'........g.O..w....9{}z.i.o_........P..w......^..H.....9A.....W.........<....-.....3................@./....?..ZN.....VH.N.._..W.

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33348)
Category:	downloaded
Size (bytes):	33404
Entropy (8bit):	5.226285705195057
Encrypted:	false
SSDEEP:	768:RfZYuwHcMkgI0nOW7huJh6zNthp7s2IVN7Gh76CVQzySI4qx/B4P:rYu0oeRNv9cCh76CFrx/B4P
MD5:	CB14FFF14534982C3C65A5003D528F13
SHA1:	F72F77624901CD27A1EEE457F37500BAB1FD87BE
SHA-256:	F99F08E114887EB8644DCED900457779F96ACE06DD7A9A5511C47B4F43A98CF9
SHA-512:	A995A2B3B58E4140007AB3DFCE7F3A41DA803F6B55DA8111218F99E7FA64F9C54EEE20A6C86932FCFC77A25A2FECB5E307743DBD2D02EE6A69A9C08CBFBD4477
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-modal.min-vflyxT_8U.js
Preview:	define("metaserver/static/js/clean/ux_analytics_modal_tracking",["require","exports","tslib","react"],(function(e,t,o,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.UXAnalyticsModalTracking=void 0,n=o.__importDefault(n);t.UXAnalyticsModalTracking=function(e){return n.default.createElement("span",{className:"uxa-modal uxa-modal-tracking-span",id:e.id,style:{display:"none"}})}})),define("metaserver/static/js/logging/hive/schemas/web-modal-activity",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.WebModalActivityRow=t.FolderType=t.ModalEventName=t.ModalName=void 0,(function(e){e.MOVE="move",e.COPY="copy",e.NEW_FOLDER="new_folder",e.UPLOAD="upload",e.SEARCH_FILTER="search_filter",e.KEYBOARD_SHORTCUTS="keyboard_shortcuts",e.EXPORT_LEGAL_HOLD="export_legal_hold",e.FOLDER_OVERVIEW_PIN_TO="folder_overview_pin_to",e.CLOUD_DOCS_CREATE="cloud_docs_create",e.DELETED_FILES_FILTER="deleted_files_filter",e.HOME_NEW_FOLDER="home_

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24272)
Category:	downloaded
Size (bytes):	24328
Entropy (8bit):	5.30906512783915
Encrypted:	false
SSDEEP:	384:zF7KalAN8lYMxUdoRz8MGO5OvO8OaOpOWOLObOrODOpOIO12RTjkzM6IA3ObRRPK:zF7KabSU8fO5OvO8OaOpOWOLObOrODOC
MD5:	1AF9C50C8357FE86C1CF0FCC0A6AF7AC
SHA1:	3BDC2CD223894AE4E3D16A8203627332F4AD5CC3
SHA-256:	E90F2149FD9A6117E6B93572C657A256037231D49B32A3BCAA67BB5F1A924B1C
SHA-512:	03A8CD6B29C086EBA2C32E01E5D4C104D53BEE06FFFD17AFBA07BC5E80918CA70071E1FBFD6751BF2D92EEACA50DE7304EFE3D4A0C8BC4CC439DBB9727F0C70D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-uuid.min-vflGvnFDI.js
Preview:	define("metaserver/static/js/edison/ui/spa_product_name",["require","exports","@dropbox/ttvc","metaserver/static/js/core/exception"],(function(e,t,r,n){"use strict";let s;Object.defineProperty(t,"__esModule",{value:!0}),t.setSpaProductName=t.getSpaProductName=t.startNavigation=void 0;t.startNavigation=function(){s=void 0,(0,r.start)()};t.getSpaProductName=()=>s;t.setSpaProductName=e=>{void 0!==s?(0,n.reportStack)(`setSpaProductName: SPA_PRODUCT_NAME already set! Tried to set product to "${e}", but was already set to "${s}"`,{severity:n.SEVERITY.NONCRITICAL,tags:["user_centric_perf"]}):s=e}})),define("metaserver/static/js/pap/analytics_client",["require","exports","tslib","metaserver/static/js/clean/viewer","metaserver/static/js/clean/active_user","metaserver/static/js/modules/constants/auth","metaserver/static/js/api_v2/noauth_client","metaserver/static/js/api_v2/transport/beacon","js/pap-client/index","js/pap-events/experimentation/exposure_stormcrow"],(function(e,t,r,n,s,i,o,a,c,d){"

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.547137089637331
Encrypted:	false
SSDEEP:	12:hYYLDZlXLDDNolXuFDDNobLs8K5eX4i/JVWXt6oQL:hYiZlXjil+xibLs8K5tIVWXtI
MD5:	7B315D950DA2C78A9982857E93D2319D
SHA1:	C59DF20162C8A959C3AA35A327CE6A93E520BB65
SHA-256:	F28CCD20DB510F849331C56C41AF7762E9C93A7D6C8E186856AA2B7DAF51868B
SHA-512:	CFD1F33773CB572232ECF4E681F3A6384BC4652EF300F600708C8E99BCB8CC2923A8C11D9230EE3164C16DE0985EA7ED89FCE95043B4FFAD741729B4744ACE0A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/cloud_docs/thirdpartycookie/post.html
Preview:	<!DOCTYPE html>.<html>. <head></head>. <body>. <script>. if (window.parent) {. if (/thirdparty=yes/.test(document.cookie)) {. window.parent.postMessage('static/thirdpartycookie:supported', '');. } else {. window.parent.postMessage('static/thirdpartycookie:not_supported', '');. }. }. document.cookie = 'thirdparty=; expires=Thu, 01 Jan 1970 00:00:01 GMT;';. </script>. </body>.</html>.

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (871)
Category:	downloaded
Size (bytes):	920
Entropy (8bit):	5.130517983973322
Encrypted:	false
SSDEEP:	24:1bmvCTEr43zDdDrRlgJF0F5pgW65CX9KiicwK/O1/J1OV:1azc9wJF85pgWLXcKGhGV
MD5:	393F2F599FB748D641AC31B3856E3A7A
SHA1:	C1909CCC8F6D5942BF260B4ACCE40167ED62569A
SHA-256:	BE2FBECB47EF49ACDBACE412AF78DA3B6A5C03FD572B89E848CF6D2491B1ED72
SHA-512:	D591141AED74BFDCBAC45B5FBAC652F9F9011E8351801A2E118E03471C1450D2AD6F8C064CFE8E22445825B560D25A8C9C577B1141F08B9C64E22805BDB54A06
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/sign_in/button.min-vflOT8vWZ.js
Preview:	define(["require","exports","tslib","react","metaserver/static/js/sign_in/utils","metaserver/static/js/core/i18n","@dropbox/dig-components/buttons","classnames"],(function(t,n,e,i,r,o,s,a){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.SignInButton=void 0,i=e.__importDefault(i),a=e.__importDefault(a);n.SignInButton=t=>{var{isPrimaryButton:n,title:u,icon:l,cont_url:c,variant:_}=t,d=e.__rest(t,["isPrimaryButton","title","icon","cont_url","variant"]);const g=c?{cont:c,register_cont:c}:void 0,m=(0,r.getSignInAndContinueUrl)(g);let f=n?"primary":"outline";return f=_\|\|f,i.default.createElement(s.Button,Object.assign({className:(0,a.default)("sign-in-link","control__button",{"control__button--collapsed":!!l}),variant:f,href:m},d),l\|\|u\|\|o.intl.formatMessage({id:"qviKxB",defaultMessage:"Sign in"}))},n.SignInButton.defaultProps={isPrimaryButton:!0}}));.//# sourceMappingURL=button.min.js-vflUD9JrS.map

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	366
Entropy (8bit):	5.089651212194186
Encrypted:	false
SSDEEP:	6:U2ycV6jI4siXvXJ+5t1UcA2xkN7w23biE1H5ouSLn8hrK9IVKDd/xWJrr0Q82aQY:U2eAi/ZOTUQxkNP371H5ouSA0CVKR/x3
MD5:	FA1685DBAB8EF8CDD9A62CA601084331
SHA1:	39B69AA899688F89EB1477B239940EC596155D27
SHA-256:	4485F8113426CB339254240324609F634AB3B73582ADC644D8B1E8ABBC293848
SHA-512:	BC1BCB8875076560FA369619CBAAD44B18F3E34AA0C6DC07EA26129F7C9EFFA9012FE492E8B877006F74B3720E6D55BAA8E764407B2DA0F5DB0FAEBDFB91A9BE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/icons-vfl-haF26.css
Preview:	/ @generated -- This file is automatically synced from dig-icons@2.12.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./..

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 87400, version 1.0
Category:	downloaded
Size (bytes):	87400
Entropy (8bit):	7.997700712809817
Encrypted:	true
SSDEEP:	1536:GX+MnPUc8H5+X/ZjDP7/ltyFmPevNjEad99aF1O8FMBjFUY/CImb:q/ZjbTnGmPINjEq99a7O8FMBhUPImb
MD5:	EE4A8E042003216A751B343365276DEB
SHA1:	17C4E71EA77FE2A716A547464092B0979F4861E2
SHA-256:	440DF30B344DC7F6D13B5ABB6D317F896B39905833021003BDC4B0C37D049D14
SHA-512:	EDDF91BC69A3C87FA11C3685BF4CA671EB14100A6B863E9AE4A719C290EFE667B296B970220334D54DE796635E644424EC26846A29E1AF5770A0484A53583BC2
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-BoldItalic-190618-Web.woff2
Preview:	wOF2......Uh.........U............................@..d.`....>..s........`..4..6.$..d. ..o.....T[C..._...m5.SW.i.s.I......Zwh6.G<.8..........:.r..FT..ft..uD...........Dlz:..r.<..$....6.u..X..5...$...+.CIk.....E...R4kRm....".U......."o...q..~...01G<.1...,.r....Yc^tp..a~...:.Z..JU.1..,...BU..{...,S.&\.^..I..L.G...9...dhQ9...q..cd.Y..qRi.....O..vJ....=`.vb.swd..(.~!J....)\|.ir...]....#..".U.~.....m.1..Q.Ec.u.B.L...?,.......r....(E..cd..]l`8.dP..Q./.:.I...vbv.*[..g.c..N.]/gi..p`.>P.~Q.......^.}..5.EB,.!.xA.....S....=.{x.6......$]j...I.F.\|..I.n..+tLy..i.b.'.....{6..iE=~......x1fP..n.'..E....;..Y....B.{\|...Y@v1.....>.d.....t{.j.,Q.8R...1+.s.'c..{....a:.........A.....<./.\|.......j.\..+j.T;D.h...p...t'..,.%.d..8.. .e'.....K....m.... [%L...e...h.....a.8!....D....n...j9.r..^.{.../ ...#......v:@.W..'rS...X..\|.....1......x....7...1Q.5....o..O..NE:W.q...&F.baTa.F.2..:.`........s......}.3...4..`.......g..... . ...X..B^.;..n.n..I...aT.y...?.I'.%&6

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65522), with no line terminators
Category:	downloaded
Size (bytes):	697703
Entropy (8bit):	5.3588196236119705
Encrypted:	false
SSDEEP:	6144:gwYoazytTXrc0MwxDRJyruJ+jG39HE13TDcc3FTGxFI:vYlwVqChEniY
MD5:	7ABC800F5630928B6F8EE0959F5198A5
SHA1:	7DD8CD2C51B3092C6589D5C2C720686A4AC66BED
SHA-256:	3F24F63F431656DE646E816D64AEB860E35DFC7A00AD5388C44A1AA8D0B9CA4D
SHA-512:	F568D47F6AC27CD19719E3B2ADD72127CBE4B028CB3AD1266C6EF0BAC6BC4AD2081A3C8FCA63A0BE0F23082F63CD50D61024ED61AA39CEF5528C159A69CFF10E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-sharing.min-vfleryAD1.js
Preview:	define("js/pap-events/organize_around_people/click_create_group_suggestion",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Click_CreateGroupSuggestion=void 0,t.PAP_Click_CreateGroupSuggestion=function(e){return{class:"organize_around_people",action:"click",object:"create_group_suggestion",properties:e}}})),define("js/pap-events/organize_around_people/click_match_group_suggestion",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Click_MatchGroupSuggestion=void 0,t.PAP_Click_MatchGroupSuggestion=function(e){return{class:"organize_around_people",action:"click",object:"match_group_suggestion",properties:e}}})),define("js/pap-events/organize_around_people/shown_create_group_suggestion",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Shown_CreateGroupSuggestion=void 0,t.PAP_Shown_CreateGroupSuggestion=function(e){return{cla

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6402)
Category:	downloaded
Size (bytes):	6462
Entropy (8bit):	5.208112313491172
Encrypted:	false
SSDEEP:	96:ZbQsyz1u9NF4puqBtvj1XtBuDX6XDVHO48gRPxlCGH57Jo1WIWX:Zb981u9Nq3vxXQX6XDVIgRPvC6BQWX
MD5:	366135258D88094335B84189917B384F
SHA1:	0F1EFAECDA22B274FC2FD415DFD4198CDA0B6477
SHA-256:	35A927082928D74750A8F03C5343D21F7A847A17CAD64F5D21AB0690095EDF55
SHA-512:	129D99F692158A83BAE764ED895ED9FF8DCB3DE369B5BB21F85A3EFFC846B9CA8194C3187FA729E6C071CD69B78F7E3252FCF3905266D8A54C112527139BCB81
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-security.min-vflNmE1JY.js
Preview:	define("typescript/dropbox/proto/js_init_data/login_form/login_form_pb",["require","exports","@bufbuild/protobuf"],(function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.EncryptionOptions=void 0;class n extends r.Message{constructor(e){super(),this.key="",this.version=r.protoInt64.zero,this.type="",this.plaintextFallback=!1,this.timestamp=0,r.proto3.util.initPartial(e,this)}static fromBinary(e,t){return(new n).fromBinary(e,t)}static fromJson(e,t){return(new n).fromJson(e,t)}static fromJsonString(e,t){return(new n).fromJsonString(e,t)}static equals(e,t){return r.proto3.util.equals(n,e,t)}}t.EncryptionOptions=n,n.runtime=r.proto3,n.typeName="login_form.EncryptionOptions",n.fields=r.proto3.util.newFieldList(()=>[{no:1,name:"key",kind:"scalar",T:9},{no:2,name:"version",kind:"scalar",T:3},{no:3,name:"type",kind:"scalar",T:9},{no:4,name:"plaintext_fallback",kind:"scalar",T:8},{no:5,name:"timestamp",kind:"scalar",T:2}])})),define("metaserver/static/js/security/crypto

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	356
Entropy (8bit):	5.3158041486539815
Encrypted:	false
SSDEEP:	6:FJtKSDLTmSyCAFwptRcVMRGdf0fe2oEd0jQBIZv/0CepMS7gIyvPqX8EV:h7XTmSyOZcczZd0jQB+v/91IKqX88
MD5:	E65841349DBB384CD62D65B4DFCCB804
SHA1:	B51D1CD5A4CDF7054B34C517CFAD6A25051A5E42
SHA-256:	E866A6ABA53442429F25AEB09D84C52D8B37DDF63E3879A0F59BDF62AB542A62
SHA-512:	617C7D3E37AEE017FA5E3B73BF181423F5704207A580452F7A38598E719691AE8032B9BD53F146E5275D67CE20069963D0CAC1D20100332FB348F39C65F0397E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-spectrum-uuid.min-vfl5lhBNJ.js
Preview:	define("spectrum/util/uuid_generator",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.generateUUID=void 0,t.generateUUID=function(e){const t=()=>Math.floor(65536*(1+Math.random())).toString(16).substring(1);return`${e}-${t()+t()+t()+t()}`}}));.//# sourceMappingURL=pkg-spectrum-uuid.min.js-vflOK_SM2.map

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7184
Entropy (8bit):	4.460691512177475
Encrypted:	false
SSDEEP:	192:rjzy1QmQ1KEXDTAUTXN1HVMq7xTCBIzZc/KFlSBSZiP:rIMHnTbFTCazwSUP
MD5:	1C5793A1E338BBA7F331017F7FFAD0E5
SHA1:	718FA916EF81F8689CAE3AF73229FA4DE727165A
SHA-256:	BA80F664BB6CB89C48C2D50BAF1E5897940ED44946E902D52DD09B967616CE20
SHA-512:	E736A604C8C872005B2858EAA2B51BB4C9CAF91D61DDA46AF54E5617789E916BA4DF433085296DEE1D87496EC5F9C148EC30D26203B8D4D423366CCFC761C30F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="266px" height="32px" viewBox="0 0 266 32" xml:space="preserve">..<rect x="117" y="0.079" fill="#F25022" width="15" height="14.921"/>..<polygon fill="#7FBA00" points="149,15 134,15 134.031,0.079 148.847,0.079 "/>..<rect x="117" y="17.021" fill="#00A4EF" width="15" height="14.906"/>..<rect x="134" y="17.021" fill="#FFB900" width="15" height="14.979"/>..<path opacity="0.3" fill="#333339" enable-background="new " d="M51.627,12.316c-0.396,0-0.822,0.045-1.28,0.144...c-3.198,0.737-3.506,4.297-3.506,4.297s-3.629,0.123-3.629,3.438c0,1.903,0.984,3.806,3.752,3.806c0.922,0,14.515,0,14.515,0...C63.262,24,64,22.465,64,21.115c0-2.762-2.522-3.008-2.522-3.008c0.061-2.026-1.045-3.253-2.215-3.744...c-0.599-0.261-1.175-0.352-1.687-0.352c-1.17,0-2.003,0.475-2.003,0.475C54.904,13.509,53.673,12.316,51.627,12.316z M51.795,8...c-2.177,0

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.2384375592679815
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1A6HUFcYiIczAg6n:MMHdVBKW/UTqsUNq6
MD5:	244B54A9AEBA01399EDE11803C240EB0
SHA1:	1D5E291CEA9CBAA0039F8DCFDB40E6FF3049B0BE
SHA-256:	516DFFD2F6DE031693FB88C8E5F344286CE49D225B3ED5B3D7A747593CFCDAFB
SHA-512:	EEAEB0FB2DE1635BC06F6252545C2C1AE87BE23245136AB0ED68FC188EF5E1D9670779352041A4DBE5C7C28F798F1B8D03883824244CFBF7890D9FB4EB435EA1
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/spinner_24x24_metro.gif
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:e23c1bb4-401e-0000-51f3-bbcac1000000.Time:2023-07-21T16:51:44.6149880Z</Message></Error>

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7184
Entropy (8bit):	4.460691512177475
Encrypted:	false
SSDEEP:	192:rjzy1QmQ1KEXDTAUTXN1HVMq7xTCBIzZc/KFlSBSZiP:rIMHnTbFTCazwSUP
MD5:	1C5793A1E338BBA7F331017F7FFAD0E5
SHA1:	718FA916EF81F8689CAE3AF73229FA4DE727165A
SHA-256:	BA80F664BB6CB89C48C2D50BAF1E5897940ED44946E902D52DD09B967616CE20
SHA-512:	E736A604C8C872005B2858EAA2B51BB4C9CAF91D61DDA46AF54E5617789E916BA4DF433085296DEE1D87496EC5F9C148EC30D26203B8D4D423366CCFC761C30F
Malicious:	false
Reputation:	low
URL:	https://account.live.com/Resources/images/AppCentipede/AppCentipede_Microsoft_HFeToeM4u6fzMQF_f_rQ5Q2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="266px" height="32px" viewBox="0 0 266 32" xml:space="preserve">..<rect x="117" y="0.079" fill="#F25022" width="15" height="14.921"/>..<polygon fill="#7FBA00" points="149,15 134,15 134.031,0.079 148.847,0.079 "/>..<rect x="117" y="17.021" fill="#00A4EF" width="15" height="14.906"/>..<rect x="134" y="17.021" fill="#FFB900" width="15" height="14.979"/>..<path opacity="0.3" fill="#333339" enable-background="new " d="M51.627,12.316c-0.396,0-0.822,0.045-1.28,0.144...c-3.198,0.737-3.506,4.297-3.506,4.297s-3.629,0.123-3.629,3.438c0,1.903,0.984,3.806,3.752,3.806c0.922,0,14.515,0,14.515,0...C63.262,24,64,22.465,64,21.115c0-2.762-2.522-3.008-2.522-3.008c0.061-2.026-1.045-3.253-2.215-3.744...c-0.599-0.261-1.175-0.352-1.687-0.352c-1.17,0-2.003,0.475-2.003,0.475C54.904,13.509,53.673,12.316,51.627,12.316z M51.795,8...c-2.177,0

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21154), with no line terminators
Category:	downloaded
Size (bytes):	21168
Entropy (8bit):	5.248539515269941
Encrypted:	false
SSDEEP:	192:bkzWdxMSkiRYUXVTebI38CI2hpE++Gv30v5z6X/PfGIR2Mh4fZqZXY+iSvkDDx9g:bkCdxMSkiRYUXV80DhpnMUAMq6XpJ
MD5:	AE56D659C1CC69B972F3D7B2B38C425F
SHA1:	19F9ADC9A3604225404AD9795E235D23F09693FB
SHA-256:	DB5AB466F75DD7BF3DB635C5E2187FD07FE0EC437E8C75AF7D5DA0B7CC556285
SHA-512:	160298C9AA2E89A2794C5166FBE643755A90A9AA27DABAA0039F6BA2C1FAEEDDF61A86E49778EE314FBBEEA077D8A03F744D7E9C7878C2F46854A300D2EABE1F
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/content/css/signup16.css
Preview:	@font-face{font-family:'SegoeUI-SemiLight-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot');src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot?iefix') format('embedded-opentype'),url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.woff') format('woff'),url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.ttf') format('truetype'),url('https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semilight-final.svg#web') format('svg');font-style:normal;font-weight:normal}html,body{height:100%}body{font-family:'SegoeUI-Regular-final','Segoe UI','Segoe WP',Tahoma,Arial,sans-serif}.hiddenImportant{display:none!important}.hidden{display:none}a{color:#da3b01;text-decoration:none}a:hover{color:#b22a0f}.container{min-height:10

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTA0LjAuNTExMi44MRIXCQAN2QFhT6lEEgUN0VtRUhIFDVd69_0=?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33841)
Category:	downloaded
Size (bytes):	33898
Entropy (8bit):	5.383635918830148
Encrypted:	false
SSDEEP:	768:Asu1I/2d1dg+hUeoB6fxqYTtzgtl3fVHoZB0rZTO2VW:bu1IG6+hvoB65d1JB
MD5:	0A0B9979A71AAB31D8824B754B778109
SHA1:	AF4AD09861885BE48503007A56C988FE0E099BA7
SHA-256:	9ED177EA5A738D5C1BEB51DD791D1F3971BB6EC61005860F32D1DCE0CAE5EEF5
SHA-512:	2B518B28B23AC61DFEE9D0DE2AA55EEEBD2296B76C80E1B5C5F5EDC7277F43B061BF04DEFC7F58491451EF7F67A55B192F3E76AF92957EE1D68EB5AD5365B1E7
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-extensions.min-vflCguZea.js
Preview:	define("metaserver/static/js/cloud_docs/constants",["require","exports","js/filepath/filepath","metaserver/static/js/clean/static_urls","metaserver/static/js/core/i18n"],(function(e,t,a,s,o){"use strict";var i,n,r;Object.defineProperty(t,"__esModule",{value:!0}),t.CLOUD_DOCS_PASS_LOG_DELAY_MS=t.CLOUD_DOCS_STORMCROW_LOGGED_OUT_UX_PAPER=t.CLOUD_DOCS_LOGGED_OUT_UX_COOKIE_PERIOD=t.CLOUD_DOCS_LOGGED_OUT_UX_COOKIE_NAME=t.CLOUD_DOCS_AMP_NAMESPACE=t.ActionSourceValue=t.isPointerByExtension=t.isDocsendSupportedFile=t.isHellosignFileByExtension=t.getMicrosoftFileTypeByPath=t.isMicrosoftFileByExtension=t.getGoogleFileTypeByPath=t.isGoogleFileByExtension=t.isCloudBasedFileByExtension=t.canonicalizeFileExt=t.isCloudDocByExtension=t.MAX_DOCSEND_IMAGE_FILE_SIZE=t.MAX_DOCSEND_DOCUMENT_FILE_SIZE=t.DOCSEND_FILE_EXTS=t.DOCSEND_IMAGE_FILE_EXTS=t.DOCSEND_DOCUMENT_FILE_EXTS=t.HELLOSIGN_FILE_EXTS=t.MICROSOFT_FILE_EXTS=t.GOOGLE_FILE_EXTS=t.CLOUD_BASED_FILE_EXTS=t.POINTER_EXTS=t.DSS_TYPE_TO_SUPPORTED_EXTS=t.GO

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 22415
Category:	downloaded
Size (bytes):	7053
Entropy (8bit):	7.9703240404773315
Encrypted:	false
SSDEEP:	192:37hQtxnAMNy1AAARhhX5KvQdksb/iZxDRY02Mb:3dQtx8AZhpbRb/iZxDRj2I
MD5:	709086EA149A74C4AD4B457920C87DED
SHA1:	B6D654BC2CEECE98DB625FB285F14798B01D5F4C
SHA-256:	1C353A67AC77BCE07ED4DC896D9CDC6F27282DBFD4F8B1711ACB27F632626101
SHA-512:	9A2995C7BF02E7FF7E7BB911B9CC71240B4E920395550856BCC2AF555FFF3A551FC269626ED18907DDFE5CED2354A016D5FD601FCA966A33EB4003CF81AD0652
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/c34bb5d45fc66a39ca35.HaFmluvjFc8mm41OtrDeAfTrAvWXHKYT4YGXIBlSWLA.js.gz
Preview:	...........<is....+d.....\|.......\|$3..S.$$1............./....VeF4.6.}w.A.!.......g.G..............~....?nn.7..}sc%4a..G<.......7.p.Z.d...lx.,.e.c..I.39...\|..l...\pxA>.X.>K?. ..E&.4...:..{.q.....".w.!.~:.I..C..\|.g..e..4I..r...Jv..1.......c2I....~...&SgW0...-.....9..2)..p....=J.n.g4`..2in~.cf;..ik7r.0M"..7..!.......h...,..hJ.R...R3Bm.... ...i.Ih....EL..4.xW...i.+..@^.i....H.....e..Y..........$A8.'..d.vD.4..B}..iv.X......T.j....6J....k.._Q...!!>~......u.!>\.T...kx.i.'...'..!-.D....2:..........idp....Y..4..a.M.....A.{k..n3..aL;.q..#X......_.......?.../f.5.:dP.....D..A..c.n..-.. .W.]...d&...P1........N!2...p.!..\;v....g..1;...X..d.....E......9.,......H...A.Qv..X#)..[_.4.@....5..)..\r..0W.5..Mv..GR+..t..Z.......w.g.A".{.@j.........E. ..1.#...1....6R....r-RH..L.dT.p..A... .=..j#&!..g...\|.@N.@..8t-K..N..`...M$.....w...Y.%X.Y1.qL..4..a.....g...l..<.._`s.jz_..\)...vPz.k.W.3r.>8N}....pL.^..J. v.............OR..1o.......5.G....L...O%..*.~.}.cM

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1368)
Category:	downloaded
Size (bytes):	1433
Entropy (8bit):	5.010808468847545
Encrypted:	false
SSDEEP:	24:8WGpmkw/KS/K1ntwkozs4GnCsiQgGsd825hViXom1ZIuHv0yJh8yJlyJLZyJngut:zbkxTTe8257cFZ
MD5:	B8D8F7E55EA520FE9139FD383431D710
SHA1:	1DEDDC6653BECA05B969A2CF93FD632EABF0DAE1
SHA-256:	77131597BC899A14A87F401898774383E7A2F83ED42027EE431F04618AB325B7
SHA-512:	A84E4E0754E5FB5D6EDAEAC13853A93F94D00327CB19A5A84952563E69FE94330A76EB79392008681E326E5AD17F80B10060F55D4B3347CA0A86187FE5620033
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-sharing-sync-login.min-vfluNj35V.js
Preview:	define("metaserver/static/js/sharing/components/shared_content_icon",["require","exports","tslib","react","typescript/libraries/spectrum-content-icon-compatibility/src/index","typescript/libraries/spectrum-content-icon-compatibility/src/index"],(function(e,t,r,n,o,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.SharedContentIcon=void 0,n=r.__importDefault(n);class i extends n.default.Component{render(){const{className:e,variant:t}=this.props;return this.props.isFolder?n.default.createElement(s.IconContent,{className:e,name:a(t)}):n.default.createElement(o.FileIcon,{className:e,path:this.props.contentName,variant:t})}}function a(e){return"large"===e?"folder_shared-large":"folder_shared-small"}t.SharedContentIcon=i,i.displayName="SharedContentIcon"})),define("js/browser/externally_hosted_script",["require","exports","tslib"],(function(e,t,r){"use strict";function n(e,t){const r=document.createElement("script");return r.setAttribute("src",e),r.setAttribute("nonce",t),do

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	259584
Entropy (8bit):	5.071812306917431
Encrypted:	false
SSDEEP:	6144:yeLfh6nxcr8uVgTdp2YmD1BFEFy41tE/2VX82KLHIPf2hAC1+Rx:yGxYmDTmFyGsDMPfOAC8Rx
MD5:	61F46098504166008495633ECD1CF14B
SHA1:	1A2E92B644346D88E12A34CDE7F9662E24153EC5
SHA-256:	4CC76D1027E2AE7347B941502F52BC9A1F00A7978634E42C9676B69AAA2B1B3D
SHA-512:	BA25DFC06BE7D1E5A05AA51435CA10B796DB5CEBD34ECFC3AAA5456B9387644D36C2DB38051AFE2318918103D683A2AC27D2AD4ABCF733FC0CED5DBC20DEA44F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/prod_assets_web_modules/jquery-vflYfRgmF.js
Preview:	/!. jQuery JavaScript Library v2.2.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:23Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..}

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	dropped
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1422)
Category:	downloaded
Size (bytes):	1474
Entropy (8bit):	5.09035587818912
Encrypted:	false
SSDEEP:	24:1bmq2euHhaAq55A8Ffx1eMW/68XXWwVV6wj6/4Fzi88f:1aDI5T4S8XGmV/k+2N
MD5:	C2FF7386FD53FA805130D74C7ACF01C9
SHA1:	4E784B6BA19EE8B92789719D66280C8FC7662269
SHA-256:	03EFEDADEE1AFA357EBF28DC1614BCEDF337E4F46A6EC332AE96783F28250E6A
SHA-512:	45435B7C20ADD36A89689CF989C98D5D1D3BC11B8E3A33994040E55BE9F77990AD81A55EC5F3ECC8237F1C028751E35177C41F043B128323E27A53FD6DBB3732
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/security/csrf_hmac.min-vflwv9zhv.js
Preview:	define(["require","exports","tslib","metaserver/static/js/security/crypto","metaserver/static/js/security/util","metaserver/static/js/clean/csrf","metaserver/static/js/core/uri"],(function(e,t,r,n,o,i,s){"use strict";function c(e){return r.__awaiter(this,void 0,void 0,(function(){const t=encodeURIComponent(e),r=(0,o.stringToBytes)(t),s=(0,i.readCsrfToken)();if(""===s\|\|null===s)throw new Error("Missing CSRF token");const c=(0,o.stringToBytes)(s),d=yield(0,n.hmacMessage)(c,r);return btoa((0,o.bytesToString)(d))}))}function d(e,t,n){return r.__awaiter(this,void 0,void 0,(function(){const r=s.URI.parse(e),o=yield c(n);return r.updateQuery({[t]:o}),r.toString()}))}Object.defineProperty(t,"__esModule",{value:!0}),t.readHmacCookieToken=t.addHeaderRedirectToken=t.addUrltoken=t.csrfHmacUrltoken=void 0,t.csrfHmacUrltoken=c,t.addUrltoken=d,t.addHeaderRedirectToken=function(e){return r.__awaiter(this,void 0,void 0,(function*(){return yield d(e,"rtoken","header_redirect")}))},t.readHmacCookieToke

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	221105
Entropy (8bit):	5.329060562937855
Encrypted:	false
SSDEEP:	3072:a1pjBp+oj1IquEPMzKcUkW3byHTsrMyqhCaA9CajojcBzH:a1plpVOqNcUh3mTs4yqhCaYCajojcBzH
MD5:	65CCCB473E66C8D631C7A8567DB36AD8
SHA1:	1183205010CC873957632DC6569E7BDC804A9C30
SHA-256:	BB87146C5E5087969225DD4FE80AE1B8705C27CF335757AC7FBDE8BA23D8B34C
SHA-512:	C9F52D8A2A1387239ED347880560D95876201A5D49FEB9C1EBD2EE8C0451F86FEB9A2E58B7DFA2F0A8AC5C955DEBEAB892ABA3955DB7E243DC1CECF074E23175
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-maestro-nav.min-vflZczLRz.js
Preview:	define("metaserver/static/js/upsell/prompt_event_emitter",["require","exports","tslib","eventemitter3"],(function(e,a,i,n){"use strict";Object.defineProperty(a,"__esModule",{value:!0}),a.Events=a.eventEmitter=a.BufferedEventEmitter=a.promptBufferedEventEmitter=void 0,n=i.__importDefault(n);const t=["HOME_INLINE_CONTENT"];function s(e){return`ON_${e}_LOADED`}const o={ON_HA_LOADED:"ON_HA_LOADED",REACT_HA_DID_UPDATE:"REACT_HA_DID_UPDATE",ON_PROMPT_INITIALIZED:"ON_PROMPT_INITIALIZED",ON_PROMPT_SHOWN:"ON_PROMPT_SHOWN",ON_PROMPT_DISMISSED:"ON_PROMPT_DISMISSED",ON_PROMPT_PROPS_SET:"ON_PROMPT_PROPS_SET"};a.Events=o;for(const e of t){const a=s(e);o[a]=a}const r=new n.default;a.eventEmitter=r;class l extends n.default{constructor(){super(),this.allEventBuffers={},this.delegatedEvents={}}on(e,a){super.on(e,a);const i=this.allEventBuffers[e.toString()];return void 0!==i&&i.forEach(a=>{super.emit(e,a)}),this}emit(e,a){return e=e.toString(),void 0===this.allEventBuffers[e]&&(this.allEventBuffers[e]=

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 22965
Category:	downloaded
Size (bytes):	7410
Entropy (8bit):	7.97755830522829
Encrypted:	false
SSDEEP:	192:BlEaK65K3tmEpb5IndCp/dDgg2zUZzZ4YXRTd2mq5+B2N:BlEaNunbW0Zd0VUJSr5+2
MD5:	73812C68911F25D2B749DBF6BBE666C2
SHA1:	48EF93F8BE833BBD0E0FDF903A375BAD7EE72F0B
SHA-256:	CF6AC1733E0E8C1AD3B7CBA1F170D057F10A2D4058CD44CB8A03319FB414903A
SHA-512:	46F312446A167651C108C61260EC8233EB2F260923090B3E58AB2EDBC002869710764C5C2F3B4FD1DA446A51E18A15D532DACDA60CC0E389BD2946077A514E71
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/b7447ec7a5639b81bb9e.5B1z69DJcJdOytocwBFk4mleBWMQRi8eATiNFmXWFrY.js.gz
Preview:	...........<iw.8...+h.F!MR&)Y.EQ.;.vzrM....h.h.....G.....[..$(Q...//...P(....(..7.....N....~..^<?......x~.?.b.:..e...3....I..eB....y.g$...yz..=..]/.%I./.:I..<.\.q3[......R. ..EN..4?&...,t.y.r.;..x.E4.231.~..)Q.,.f..i.[..u...R..Os.\.aH..^......VbzI:_RS.i.d.&.7)I:....).9.R..$.i..\...<.....2.g.rxp..w..\.Y.E4#1`..y..........Ds...nF......l...)..O....[y.F..g..6t Y..J....:.L_C.Wo?...............G..nyi../.a.O>\|8........}.....b..~..z.....~.%.w8......~p.$....^...LhF.....a...e.Kb...`..z.z.........n.Ek.....Y'./...n.mq.9..w.n3..W.\|=......a.9....&...!<(.P...F:N\.w..t....c.u.z...[%...T..B.@..=...)H..A\|E^$.M4.U.-X.........`..}...-.'...>...EJ..\|.@.06.)....c..Z.5.f..r.x.5c.Ze.(U@.....$.u....A.T.8.. ..z ...%8.........%.S`.tIfQ...@xc&.a......&q.\.pwA.@..K.i....#.......HG..c.+....Bt..W..&..l..K:V.4.D0cF.-2...........9Q7..S1-..^...j..QL...2c..Q..D^%...U..D..\92.W+...`.4.S.=.E.y..P.9..T.D.R........y.....5.<M...:.l.......g@...s...a./..W.P.t...-[.....R.d..

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6631.16/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	145894
Entropy (8bit):	5.152905228782834
Encrypted:	false
SSDEEP:	768:6MtO/aaNm0VmnZ0BYWEBAIl/iAc7e43Y6pAp1T9B8RQw0+gKGjXRSnIsZh2IdYyP:TSZmjBnrgpweySOGeK6IFW9v609TDY
MD5:	740F9F173F30C38774B3B949AAF723C3
SHA1:	04A4071A514D190273A5AD2B5E441BF0923FBD48
SHA-256:	576AB7C63E7239FAC9A8B572704F40D67039D1700E8AFC1A19751DFE4C6D93A1
SHA-512:	708E62D5072C0420885DAA17DDD78FF85E7C916A7CC8D0999307E31722707B52E124BC51F13D15D294023550EFFA65A908C28588826BC87A9EAEA252FED3E057
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-sharing-core.min-vfldA-fFz.js
Preview:	define("metaserver/static/js/avatar/contact_avatar",["require","exports","tslib","react","metaserver/static/js/avatar/avatar_with_default","metaserver/static/js/avatar/initials_avatar","metaserver/static/js/avatar/size","metaserver/static/js/contacts/types","metaserver/static/js/core/i18n","metaserver/static/js/core/user_i18n"],(function(e,t,s,i,r,n,a,o,l,c){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),i=s.__importDefault(i),r=s.__importDefault(r),o=s.__importDefault(o),c=s.__importStar(c);const d=i.default.createElement;class _ extends i.default.Component{render(){let e,t;const{contact:s}=this.props,i=s.name\|\|s.email\|\|"";let _=s.photo_url;s.type===o.default.FB&&(_=`https://graph.facebook.com/${s.fb_id}/picture`);let u="";this.props.dimension!==a.AvatarSize.XSMALL&&(u=c.getInitials(i)),s.type===o.default.NEW_STYLE_GROUP?(e=l.intl.formatMessage({id:"FxoGBv",defaultMessage:"Group"}),t="SQUARE"):(e=l.intl.formatMessage({id:"n4ojia",defaultMessage:"User"}),t="CIRCLE");cons

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6081)
Category:	downloaded
Size (bytes):	6144
Entropy (8bit):	5.12988454589802
Encrypted:	false
SSDEEP:	96:TFyB6ymruDe2ygnrnEbD2xMzzHMSZKQl4iQt+s6M2natjv8YMwExDsfW:0cLruDeOETzzsSZKK4C9nkjvfgsW
MD5:	7BD596821FAD0D793C36B7F8F91DA87A
SHA1:	32911FF43B5CF886EFAD1A46C78DAB9F4800BADC
SHA-256:	CF3B26634DC46ADEF8767BB22CC8AFBE043C20AEEE8B176291C7E8262C1E7E2C
SHA-512:	80BDDC260E1D7F86A26762D84F42E5FEF7F6A479AFE9ECC5ECAFD9696CC30CD92D5A08DD8CA6EF9A7B9CF494103DEF33C68205552CED294B12BACF2862DDBDB4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-url-and-css.min-vfle9WWgh.js
Preview:	define("js/browser/css/css_cache",["require","exports","js/browser/css/inject_css"],(function(e,t,s){"use strict";function r(e){try{const t=new URL(e);return t.pathname?decodeURIComponent(t.pathname):""}catch(e){return""}}function i(e=document){const t=c(e),s=e.querySelectorAll('link[rel="stylesheet"]');for(let e=0;e<s.length;e++){let i=r(s[e].href);0,null==t.already_loaded_css_paths[i]&&(t.loaded_css[i]=Promise.resolve(),t.already_loaded_css_paths[i]="loaded")}}function c(e){const t=e;return t._cssCache\|\|(t._cssCache={loaded_css:Object.create(null),already_loaded_css_paths:Object.create(null)}),t._cssCache}Object.defineProperty(t,"__esModule",{value:!0}),t.loadCssWithCache=t.getOrCreateCache=t.rescanForMoreCssLinks=void 0,t.rescanForMoreCssLinks=i,i(),t.getOrCreateCache=c,t.loadCssWithCache=function(e,t,r,i){let c=t.loaded_css[r];return c\|\|(c=new Promise((c,n)=>{const a=e.createElement("link");return a.href=i,a.rel="stylesheet",a.type="text/css",a.crossorigin="anonymous",a.onload=func

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3789)
Category:	downloaded
Size (bytes):	3848
Entropy (8bit):	5.0803181659327
Encrypted:	false
SSDEEP:	96:oPOmXP+owrPmVrxEwYiQK7ZpUxaHrFsePeJLeJOvJed0s46p3Gv8cC:oPOkGQ1pUwHrFcC0op2jC
MD5:	3C8D77BBC9AC96372C0D5E71C5ADDADE
SHA1:	6398514B640F20EF01C84E781F6FC76C1DE63470
SHA-256:	194E435610833CA04BDD2CAF361A1243775B66E3DB17D47690E5BD19CC307F74
SHA-512:	AD501F52549DBD8B5E288B7CCC1ED4C175414EAFE6982E6BC54FE85A227D78AB1508442FC286E2B9404C7E9252E558EDA443F9D7E751A8196921DF1682ECCCD0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-snackbar.min-vflPI13u8.js
Preview:	define("spectrum/button/index",["require","exports","tslib","spectrum/button/button"],(function(e,t,r,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),r.__exportStar(s,t)})),define("spectrum/button/button",["require","exports","tslib","classnames","react"],(function(e,t,r,s,a){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Button=void 0,s=r.__importDefault(s),a=r.__importStar(a),t.Button=a.forwardRef((e,t)=>{const{children:n,className:c="",disabled:o,href:i,size:l="default",variant:u="primary",fullWidth:m=!1,onClick:b,shouldWrapContent:d=!1,type:p}=e,_=r.__rest(e,["children","className","disabled","href","size","variant","fullWidth","onClick","shouldWrapContent","type"]),f=t\|\|a.createRef();let{tagName:g="button"}=_,k=r.__rest(_,["tagName"]);const y=(0,s.default)(c,{"mc-button":"styleless"!==u,"mc-button-styleless":"styleless"===u,"mc-button-primary":"primary"===u,"mc-button-secondary":"secondary"===u\|\|"borderless"===u,"mc-button-circular":"circular"===u

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.306500764198375
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1yqIcZ/VcY/T3/OXg6n:MMHdVBMHgWdzR05yqI0D6
MD5:	C6E69CACD83739DEFEDCE000AE4458FB
SHA1:	22FEB85EEB8FB01E85CC193621C3BBC7D1FE6583
SHA-256:	0E3A88A135A8BD81585403296AC684E232B72C6C513180C8B3AE39880EFCA94E
SHA-512:	03EEF7112711B43D9D34DFB88E03DBBBA047DE55D76B09F2705B03767F745EAA3276082EE2C9BBF92DB1A77C3E39FF8745000C97EBC0ADF418DDFB53858B38B6
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/pagelayout_mos_background_right.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:7dc561fe-d01e-0012-5af3-bbb111000000.Time:2023-07-21T16:51:43.8608749Z</Message></Error>

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.247193243983674
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH16E4EzSYoGg6n:MMHdVBKW/UTYER1o36
MD5:	8A97F24E62D4841F46EA706640FF7B7A
SHA1:	814DDBEC637742F60C14AEDE2C3BC834B12EF078
SHA-256:	7DF5361687188686BC088DA4104B7718FB269F04C924D29070D534A5BE93F68D
SHA-512:	8C8049019F98AA30C69087B67FCA63E92741923255DEC1A36A758281223A196F62B7A3B173646EA38511E85180E73BE345FF99D0E27C9A144CE0964F7E65BA89
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/backgrounds/image1.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:0521524a-f01e-0067-66f3-bbda3d000000.Time:2023-07-21T16:51:45.0753406Z</Message></Error>

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37562)
Category:	downloaded
Size (bytes):	37626
Entropy (8bit):	5.2969328272960015
Encrypted:	false
SSDEEP:	768:PxvBBa60kgCbYw5GWzThUx/Y5MAO70yc6N:plpgKYFp8m
MD5:	B6C17F4E5CA8F7FB42764A63EC745F34
SHA1:	5DA6048837FF50ADE88C155094650289402E320B
SHA-256:	99B155F62C25A29F9C5C17EF2CA2233FCDD04A20179113BE408769B1BAA62C0D
SHA-512:	A5152C99B0C9164F11DF1FC0409ED04F662E48DAD274531E4847931EB11BD7392ACBFD07726E92A8DB99D4D0739D2FBC868DE8B9C71D21BACB4E14D8029A47B6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-icons-no-home.min-vfltsF_Tl.js
Preview:	define("spectrum/icon_action/index",["require","exports","tslib","react","spectrum/icon_templates/actionable/index","spectrum/svg_icon_bundle/index","spectrum/icon_action/bundle"],(function(e,l,t,a,n,c,h){"use strict";Object.defineProperty(l,"__esModule",{value:!0}),l.IconAction=l.ICONS=void 0,a=t.__importStar(a),Object.defineProperty(l,"ICONS",{enumerable:!0,get:function(){return h.ICONS}});l.IconAction=e=>{const{name:l}=e,t=a.createElement(c.SvgIconBundle,{focusable:"false",icon:h.ICONS[l]});return a.createElement(n.Component,Object.assign({icon:t},e))},l.IconAction.displayName="IconAction"})),define("spectrum/icon_action/bundle",["require","exports"],(function(e,l){"use strict";Object.defineProperty(l,"__esModule",{value:!0}),l.ICONS=void 0,l.ICONS=JSON.parse('\n {"add-comment":{"attrs":{"width":"32","height":"32","viewBox":"0 0 32 32"},"dangerouslySetInnerIconHtml":"<path fill-rule=\\"evenodd\\" clip-rule=\\"evenodd\\" d=\\"M13.446 20H21v-9H11v11l2.446-2zM14 22h7.5a1.5 1.5 0 0 0

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.294728511062088
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1GrVGUstdKYm6NUAg6n:MMHdVBMHgWdzR05wVGZdzN+6
MD5:	F97E52F95D9ED253CEEF75CBBA6D9F26
SHA1:	37AAA077474B15A828A560341D1EC4D80A617F3E
SHA-256:	BA54719C7587A2E195DD7FA07F382B7EB5BBF7B661B86B5709A4501664180090
SHA-512:	6AEAAFEDBA23265C6BD23802DD068DE207490AD8063DC0954731050D739E24E71BCBA6ED1C4A5829CC7783F9BA121D9DEE7987C0F2C29285329DAC3E1E11C22A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/pagelayout_nav_highlight.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:ce83f249-b01e-0014-4df3-bb82ae000000.Time:2023-07-21T16:51:44.2053680Z</Message></Error>

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 216
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	6.6931427463741064
Encrypted:	false
SSDEEP:	3:FttBPutNHYphAfVkfCrELHbnvCFvY72Pi4LlXESyVoZUyW4OBktfMloo/7/ln:XtUj4cSfPXvGP/LlnyVoa4Ojloo7l
MD5:	7AC08A3439E54B0F03AC3FC87AA6DBCF
SHA1:	2574606FFA99EFE247DFEB7BC2DC9B3FD8114331
SHA-256:	F12F2DC54A3CB72A3D9370B440B44B3C1613552E2042F6D6EEFEE1A46F9154BB
SHA-512:	4A87FD38151FB069C7C69E161CFA58E82824922A5ACB0E3DA6164F5AC9A5E4C282FE1E1077AB98A935A8440C3F507431C00502B6A5EF66177B39E620FF76D0D8
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_native_desktop~paper_pifs~paper_te~b48e404f.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.PDLfAhd6xUj73iIPSwWB5L8ej6aIH9LdVfTJB4055qk.css.gz
Preview:	..........=.... .@w...C_"mM\.u.8..\.J..0.c..:..sJf.YK.<.sJ..u{"k..U...*V..r.<r.^N.......J....J.3.qY2. .B[e2Z..'.@&1...Z.... =....AP.o.A...[B.ZwJP.......i.1.#.E..?O......

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.25841967207344
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1f5JsSKs0Y4R8g6n:MMHdVBKW/UT15IsT4Rx6
MD5:	72F6A471F1A444ACCD8B319B0CA1D137
SHA1:	AA02401E70C4BFE176BCB742131004841B7111D7
SHA-256:	F5D2EE74E59E735BC8051EA004979A976BF73F562FEF5689EB4ABA015402C8ED
SHA-512:	75FFE48E71EB2F3773A0A759292BF6F400532F36E5C6F75D580A8589EAE1F9A0C36AD2E44984BD2D5943AE6599EC9EA379932CE69E4D949455E122B1D9D23847
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/servicestatus.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:8f859881-101e-000d-47f3-bb0215000000.Time:2023-07-21T16:51:43.3058656Z</Message></Error>

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 12411
Category:	downloaded
Size (bytes):	4524
Entropy (8bit):	7.959976164363993
Encrypted:	false
SSDEEP:	96:DiEAXunWX/4trPAN0325A/TwA+t4TyY0vEavVQiZKAwVD3vPlWfhnt8:DixXuno/4WN0325cwA+4H0yi8AwF3n0s
MD5:	078BF31EA544E63EEB616600B04136EB
SHA1:	7276938FDA8582CB6BD1A1DFD0A1BDC3CA2B186C
SHA-256:	BC75F25969F51EF4549F1F0A15174AB0B437EEC525275ACF84B323EB8F6F778E
SHA-512:	33D702B85C303439B05EE666096EA86C8FFF1F36A026F340B391E169FBAD1D82574D275FB4141CC0AA2DC4679F1AEEBA6CF9E1BF86286DC26701B0D0D3661685
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/58cc5c6db7c1186fa9f3.zY6o-XeH44T0_vpOvZUDLeJeznVBNUebzrAuflJz95U.js.gz
Preview:	...........Z{s.F......T@e.....CT...x.]~d.N.....D..p..%..~....$('u.........{..8.....{y...k.p}uw..._.............X.77..pQ.+.9.ws..m.<N.iDiV.wq..._.%.Q3.S.l.]..2...z1}...O.9...=y.4X.<.I.]F$.^....R$.tf.....'v%q.W,.:....6..J0Y.>.....@.${UJ....ig.G.\3.Y\|.q).tp..&..O.r...q+\xC.X....#E.}...d.x...w_..m...{..l.n...X.0...(~.k.H...A...u..c..O.$..&...l.r....UM\|.Ok.{.O.(.x!oJ...3...Q.t.d.\w......E.....n..0........-..W{.....L->^...N.,.\.....!U...P.....IdB.t{....'..)..v...."=.l...M.....h.......X.9a(.9..cv.\.....Gsc........g?.D.'7... F.2?..^^..U.u..."V.h.Vp59.l.8..k"."..<M.D._....6.._.Q8.....e...G..N..N.8).nq.Oe.Q.L<$i.\|."s.$B.u.H...c.......Ob...'....b.r%mk.I....!p&.....w."I............2..........L,.L&.sE."...A8.....".\.!..y;.?}...6....f:.O.....t..\fi&l.?.....\|.....)..S2~.9..D....e......<..?.!..........[.(..F......(.=.!...y....i.Hh..M.....C...m....J.....8V..$jB[W...x#.\...S...w..X...+.B-5..n..G.....v.:[...W.z/..8~....8'.J.u.a........]..'.~.

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45781)
Category:	downloaded
Size (bytes):	45832
Entropy (8bit):	5.354028494784637
Encrypted:	false
SSDEEP:	768:z0jgGS/fQ2VP5Twkb9t8pLrUPLWs0aCJyRj5fOsH3wj0n9qSetRgvvztwus9UpWx:Mshw293nkSeaqu5pXDdYoQgVKMSTqx+
MD5:	41B84554AFEEBCABA18CA3DFD34DA558
SHA1:	9DD8F57960BC96EDE7692478F1559D9142568A3C
SHA-256:	E6FA0E383116F93B69C7D33A34A7DBE8D37894F873F4F53D10C674215D9F0313
SHA-512:	DB3E25947E5D8A7EA69B8E6E4EEEFEDA4DE94534C533F20FB0858399D221CFCF362A60BEF0481C30098735B16CC42DFDE4A95F6DFC192B7F4C5ED51911F0099A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core.min-vflQbhFVK.js
Preview:	define("metaserver/static/js/clean/dbmodal_stack",["require","exports"],(function(e,t){"use strict";function o(e,t={detail:null}){if("function"==typeof CustomEvent)return new CustomEvent(e,t);const o=document.createEvent("CustomEvent");return o.initCustomEvent(e,!0,!0,t.detail),o}Object.defineProperty(t,"__esModule",{value:!0}),t.DBModalStack=t.createCustomEvent=void 0,t.createCustomEvent=o;class n{static initClass(){this.__stack=[],this.CLEAR="dbmodal:clear"}static pop(e){null!=e?n.remove(e):e=n.__stack.pop(),null!=e&&e._hide();const t=n.top();null!=t?t._show():this.trigger(n.CLEAR)}static push(e){n.remove(e);const t=n.top();(null!=t?t.visible:void 0)&&t._hide(),n.__stack.push(e),e._show()}static top(){const{length:e}=n.__stack;return e?n.__stack[e-1]:null}static remove(e){const t=[];for(const o of Array.from(n.__stack))o!==e&&t.push(o);n.__stack=t}static clear(){for(let e=n.__stack.length-1;e>=0;e--){const t=n.__stack[e];t.visible&&t._hide()}this.trigger(n.CLEAR),n.__stack=[]}static

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46188, version 1.66
Category:	downloaded
Size (bytes):	46188
Entropy (8bit):	7.994727284862106
Encrypted:	true
SSDEEP:	768:1NNzV0ynJc0ZFM5VB4R4HFlW3dhjfPlHRGSngzacOTXs4bS8PQefNYYI6xS:MWcx5VB4R4HFlwP1UTacOTXTS8PZfNY5
MD5:	DFC5E24CBC1B134E0C00C61E84EC999A
SHA1:	D3B1A8EF1D0F6F9162986479252570525719F203
SHA-256:	B5DB3E633EC765FC01A19C06B0955D56C2503285E59D8D348D08EC34ABBFEAF3
SHA-512:	48726CB83BDD0EB6822A73734AE272286483E8AEB6E18F57E635ED9269CA3C6C62E2D900224138DAFE32A79A94C3C7694307FF413505D695A77FE602681DF27B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2
Preview:	wOF2.......l...............B.......................&.......`..\.2..a.....\..M.....6.$..x..~.. .....\|..?[....r.O.tf.$...d.wSc....=.3-=7v=.....`n.u...h.\|.I........d"c.\.%i.@QU...s..b.&n.T..%J..Zj....^(....3....k.vV..{8(..M{J/.C..w<.uV....=u.2t..Y.......`...C3K.'wp.F.R....5C..2w<.N=.+...@..A..:....._....X....y.Zn....DE..`....Yh.82....."..3YM..f.]...?..'.".s5...#.O..P....4....;6W.U.S.....Y.CGD....v...].....&..".....9.X.d.m.g..m...3c..%b...]....<b(....h...,.v...._z........R..z23?.S.?3...Y`...e...qL...m6YJ...h....#l.........B..m.`....KDQq. s...."c9G..\e.U....5....fu...e7...n..kDM...`. 7......OB.&(.R...Y.....Ir.^......Q..V~}.!r!.J[;`.iU@Z........I8.8..b.5...e.Z%%.-t.B[.%...^..R..d....kM.LN...*T..L.a.X[.jd)...F....J.,pN..TE.v.5U.h...J#?M.[./..laM.'.HI....9.^.....\|.....!5%.X... .).~=..t..T...J..!.........Ml...2.Tx......I$.yRi.R.....l.X.$..o\|Oz..[i.1?l...0#.._.......)....I..Q.c......B...0.."...@.k..~)5...\|[!..p..8.6.OL$.(..`.C.e3.L............[4...%

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59005)
Category:	downloaded
Size (bytes):	59058
Entropy (8bit):	5.303786671173227
Encrypted:	false
SSDEEP:	768:P96Et847pxeVrXYmYBEXG/QZHtr8cHIAa9I9oeja25OWxVIobXnQ+53rmSlAuVxr:VSrY9xKIoLnyu0gMnFFoB
MD5:	2BCC684E921315FFB666591A4F585CF7
SHA1:	C035C181838B0FE0A00598B885A081DF7972FA7C
SHA-256:	2FF921044336162A64AFA257271F3A6243F7A1BB6DBF6CED3AFAC249DFDE4BDB
SHA-512:	1366803A50021F6F34CB6E96A36C939B1C2ED41E6359E2C4A36965BEA7DA7132682942BE5E1CBABD425CB6F75003CF44D5A129BDA2A54AA8A36DE6E846637E0B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-timing.min-vflK8xoTp.js
Preview:	define("metaserver/static/js/metrics/index",["require","exports","tslib","typescript/libraries/shared/apex-metrics/src/index","typescript/libraries/shared/apex-metrics/src/sink/index","typescript/libraries/shared/apex-metrics/src/no_op","metaserver/static/js/metrics/unload","metaserver/static/js/metrics/server_view_sink","metaserver/static/js/core/exception","metaserver/static/js/core/browser_detection","metaserver/static/js/uuid/insecure_uuid"],(function(e,t,s,i,r,n,a,o,c,l,p){"use strict";function u(){return new i.BrowserPerformanceClock}function d(){return s.__awaiter(this,void 0,void 0,(function*(){const{NoAuthApiV2Client:t}=yield new Promise((t,s)=>{e(["metaserver/static/js/api_v2/noauth_client"],t,s)}).then(s.__importStar),i=new t;return(0,r.clientBaseAdaptor)(i)}))}function m(){return()=>p.InsecureUUID.v4()}function h(){return{detectBrowser:f,detectOS:_}}function f(){const e=[[!!l.chrome,"chrome"],[!!l.edge,"edge"],[!!l.mozilla,"firefox"],[!!l.msie,"msie"],[!!l.safari,"safari"]]

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 60223
Category:	downloaded
Size (bytes):	21869
Entropy (8bit):	7.988347666522011
Encrypted:	false
SSDEEP:	384:SkuUsyYfra0Y1aOjo++m6+w/JDafuQ/xwW4xNMP/LDyCXitBW7cYQ5LOGY:SknviaV1pU++m9QWf9uMPD+CXifWwfLc
MD5:	B0363E551626C07EE9EE81EBA4B59918
SHA1:	09B77036B9F5A6FB89EBDC05096EBE5178D3628E
SHA-256:	4BB0C496CB7C703DEDF4E014B9FDB89FC1EED71BB4A873B3D56EAA00DA783964
SHA-512:	0CCB301E2E4BC414ADC007C6459BCD5B45A082A5FBAD30B7CA2D795AB5A0370EC591105DE1CCBFF425EFFFA85D721D474DDDC0465817E31E66A4B46C3BEB3CE2
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/3ee69373c43503423dee.hQ390ZRL-Hgo8uZZODlkclJcvKXLvy33mubixfvo22U.js.gz
Preview:	...........}{.....\|.Fg.D2..<....g6...g.d..2+D........t?...~J..=.........ztWW.OQ2I.:..?.^]_}...=.\...?..........p.t..\|n...#..Y.....e..d.%..}:..?F..>M..2.&X&_V.$f.%....~....I.............F.{..$,.4..[....V9k.E.......f.'.........qSJy..e.f`3g.M..4.4...3..g.S3aO.;6e.KBv.eif[.<.. O~W4.%.(..(...M..f....N%G..1.XN?c.K......;..a...:n.'....7........pt..3'...W...0cA..d..N....w.(.@O;.`..l..g..v..4.n.pnW2$C.y`..o&6D.....j.(...ur...K.........B.r.I..?..#?A.O.dX....c.e..sx.e&...C.@'...4...2..v._....Z.;...j..b.@........$....).3.X.9.!.T.....%.b./.`.},R.,..L....1..'QW.k..........7...g...z.c.0.5..P<..Ab.....B..u.f..0...W.L^..9}1l.....E..@..Q.:\|.....L..S.. 1=d../..;..^9..'+...(..].I..<....<..._.A...N.F..$L.....:..K:Hvh...p).t.n.A&.....r..B.,.i......W...Oz.W.}._']...S.K/i......x.....A0q.9D9....n..t..]T..U...@)fP....V.`'._..6ROZ..>:.y.d..C ..2...u......S.......F.O.).d. ]../r.Q..w.9.~.@.JN>..."-6K.O:a.X.$.u4.J...-v...T6.O.}z.Y..;e..S=...aV.s...N._n....3c.5.G6.f~...G

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20244), with no line terminators
Category:	downloaded
Size (bytes):	20244
Entropy (8bit):	5.384877432806757
Encrypted:	false
SSDEEP:	384:PPzNq8kSUet24/bHhR02hoQxJiOxe7C3W:PPzOgBK2+i0CG
MD5:	12F93CD4598913C2582ADFBD4BAFF89A
SHA1:	0BCE47CA9B279B10B1C9D0CAED68786393646888
SHA-256:	753443F3313470595BB110951D7B7E8AF621319149C4A6EA1E1DDF1ED9E020C8
SHA-512:	1F364CF879ED5D753FE402BADE3371B261B853B311027CD9BC038AFC5B6D75B00646E57924147A50174DCAE2A18CEE29C1EA01339ACE14C9B81B6E0063E8537B
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/staticscripts-12f93cd459.js
Preview:	var FlushUtilities=function(){function e(){}var t=function(e,t){return t&&t.message?e+": "+t.message:e},n=function(e,t){var n=document.createElement("title");n.innerHTML=t,e.appendChild(n)},r=function(e,t){if(e&&history&&history.replaceState){var n=history.state\|\|{};history.replaceState(n,t,e+window.location.hash)}};return e.redirect=function(e){e&&(window.location=e)},e.onShellInfoLoaded=function(e,i,a){var o=[];try{r(i,e)}catch(e){o.push(t("Caught exception while updating path and query string",e))}try{var l=document.getElementsByTagName("head")[0];n(l,e)}catch(e){o.push(t("Caught exception while setting page title and appending Shell css to <head>",e))}try{var d=document.getElementsByTagName("body")[0],s=document.createElement("div");s.style="display: none",s.id="ShellInfoLoaded",d.appendChild(s)}catch(e){o.push(t("Caught exception while creating ShellInfoLoaded element",e))}try{window.ng2EventService&&window.ng2EventService.broadcastEvent({name:"shellInfoLoaded",args:[]})}catch(e){

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5004)
Category:	downloaded
Size (bytes):	5005
Entropy (8bit):	5.095203328582515
Encrypted:	false
SSDEEP:	96:bX9deGEKaxnMEDEpJk+YJga7RPL8AwuYSQqJ:6GOnLD2m/PLfwuvJ
MD5:	70042933DA0606812F50012C91E8C5F9
SHA1:	C306D277644ACFCE3F4CF621D371F2ED800CF8F8
SHA-256:	A619CCFE0B958D4FE1EACF43686311DCBF02E78DA1392086F9EA19168D515211
SHA-512:	E576CD3604FDBB2F984E8891F4818F0EB2D9F042912A97FAD1EA86FF5759072DE5851F92D366CC810F06CB2DA12F6620878C8293934FB3A0CC1EFA36F6D72C1C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/cloud_docs/loading_page-vflcAQpM9.css
Preview:	body,input,textarea,select,button,.normal{font-family:"Open Sans","lucida grande","Segoe UI",arial,verdana,"lucida sans unicode",tahoma,sans-serif;font-size:13px;color:#000;color:var(--color__standard__text);font-weight:normal}.maestro body:not(.dig-Button),.maestro input:not(.dig-Button),.maestro textarea:not(.dig-Button),.maestro select:not(.dig-Button),.maestro button:not(.dig-Button),.maestro .normal:not(.dig-Button){font-family:AtlasGrotesk,sans-serif}body{background-color:#fff;min-height:100%;margin:0;padding:0}a,a *{cursor:pointer;outline:none}a{color:#0061ff;text-decoration:none}a:focus{text-decoration:underline}a img{border:0}p,h1,h2,h3,h4,h5{margin:0 0 1em 0;line-height:1.6em}h1{font-size:18pt;font-weight:normal;margin:10px 0}h2{padding-top:3px;padding-bottom:10px;margin-bottom:4px;font-size:10pt}h3{padding:0;margin:0;font-size:10pt}h4{margin:0 0 0.5em 0;font-weight:bold;font-size:14px}h5{margin:0 0 0.5em 0;font-weight:bold;font-size:12px}input[type='password']{font-family:ar

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	90606
Entropy (8bit):	5.144527907185429
Encrypted:	false
SSDEEP:	1536:rqLkX8GT+I1MWMqc7FPWVz8Nk0q0p00Ngk7mPb99:oc8GT+I1MWFc7FPWVz8Nk0q0p00Ngk7O
MD5:	193DBB62F4198E533B160C540E8C88A1
SHA1:	9CA0BB12073CBC40DDBA3CEEDD77ED10CFFA8C9F
SHA-256:	EB078847844618ED3206306A92F95249193F60C9FF8C2B92CF25603670B677B3
SHA-512:	4B1B6FFDE58768A60331E9E24AEAB1D15B1B348D2484DF0748B844A1DDEFE06CD2C45E2F0B3679F8B464EDBA3CC3920617E2F94C173243F6025982FAFF032896
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/app-bundle-b9df9fb44cdbb260d068.css
Preview:	.officeHome-callout{z-index:100;position:relative;margin:16px auto;width:288px}.officeHome-callout.officeHome-callout--arrowSide:after,.officeHome-callout.officeHome-callout--arrowSide:before{content:"";position:absolute;transform:rotate(-45deg);height:0;width:0}.officeHome-callout.officeHome-callout--arrowSide:before{z-index:0;outline:1px solid transparent;box-shadow:0 0 5px 0 rgba(0,0,0,.4)}@media (-ms-high-contrast:active),(-ms-high-contrast:none){.officeHome-callout.officeHome-callout--arrowSide:before{box-shadow:0 0 5px 1px rgba(0,0,0,.4)}}.officeHome-callout.officeHome-callout--arrowSide:after{z-index:10}.officeHome-callout.officeHome-callout--arrowSide:after,.officeHome-callout.officeHome-callout--arrowSide:before{top:40px;display:none;left:-4px;border:10px solid #fff;border-right-color:transparent}.officeHome-callout.officeHome-callout--arrowBottom:after,.officeHome-callout.officeHome-callout--arrowBottom:before,.officeHome-callout.officeHome-callout--arrowTop:after,.officeHome

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3319
Entropy (8bit):	7.8575716148182195
Encrypted:	false
SSDEEP:	96:t5lSI71nPxWZ52FLIs6bqPXzg7axScZWIwHqYfZN:ToI71PUv2lIs6r7axBWIwZfP
MD5:	DA7F263D7E44EB65E76522941FF95B79
SHA1:	C102BF1E458401E9E05BCD3C9F641C8235986299
SHA-256:	A53A8D6DAD77F024A0677D32B9410D45C3D3E7ABC11EAD59C93D9808D281DB7B
SHA-512:	27BAF203306C4B1DF08D605232AFA7925173B14AA1F9143F7B6A31B17A7D037BEFDB817C59FA7AB242AF4296196BCB959D15BA6C25B936E0D899C288C37A0AA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[]l\G....{..c;N.&.iJI..(mQ.........7@%@.T....!Q..O}@.@.......6..B..T)R.R~...Nh..6...b..{........}.]..N....sf.7.o...H#...?..I...)!<J.....'.9.j.6....=.".Y......Gc~.&3..........}ef.._-9..Y...W.[.....oiz...g...p......WI..`...7C.}$...Yb9......6.......e.t...X..z...............\.<U...........].Bj?.u.P.7n..V..@# ...@..x.._>..z.ZZ..8\|...D....{h...........'.i.]..[.zW..;{...so......<.u..B.f.......?....zRk.(.F..;.Y.........S:.J...!B.C......w].[....o....0rp..:.vh...i.Wp..4...X..@.L.X.-....c.fh"&.;..B.J.P)..J:....:....\.....ynm.....:E.FL..hz'.,... ...;Kk....Rz%.D..........N..e..Yj.....;\|...m....rJ.....T.....Lj...<`dx.^%xP..}..sp.1.....0G.....XN.B.\..h.....E.P.T.-.....xi.."P:+..Z.........n.$..@o...:..<.Q.3.N...I{...c...sH..u..6..............)C.E.6p..4..F.....].9}..ze.....YN0..2.(...(B...]....Cr"W..S..U..X........e.;..v.=w..Id....,.I\|C.~.................i

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 233280
Category:	downloaded
Size (bytes):	65210
Entropy (8bit):	7.993737067547282
Encrypted:	true
SSDEEP:	1536:N9eMcC2NX46jvPJRZ/zb5qlLXAUN2UNef+b4u3f4Mo65TYF:NEMX4XTvhjzbALQyMe4uP4Mo6A
MD5:	C30A969FCF7B3398F8A4D7EAA4063148
SHA1:	7C8B50D7335159A130A8862E1CCB1C8C2944D700
SHA-256:	7416596F1B81C7794CBBB4241677F3F7F4A2A9B77E64BF16160E3734EFE7FE4C
SHA-512:	FF385996511C61621A891492AC3CCB08B4A45C854FE70CE7F3DBCB5231DA3BD1C642C2806C8603AC4938C4128B513F97EE161D89ABB396204623AAF366A7EEFC
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/ce3721cd78168aca8dff.TOBxGySy4L8Jev4cz1MMkll3TM-ZkPmz6kB0Q7cRP8c.js.gz
Preview:	............w.6.(....[w.W...Q....v.....N.;....qh....I-I.....\|.)....{.97}b@ .B...B.....\|Q<.........7.Q.........O.WW..s<?_\.G.uu7...?.....s....Y.g9._.77W.Y.xU..'...@.......T../...jQ.U......Ow.'..}..6={...u>.."..Vm..M:J?.......:..\..CR...c.k.=...v.$.}...`...dX%./...8...j...p.5.q:..%.i.H_.z8.n..7..?...Q.....;::.....i~[....x..Y...2?.L....A..=...%PK..=.......`.j..S..+....Zn...J..b...X.M.\.....-.....-...d...[.e. .k-@...r4/.yR....]./..2._.U.L..E..nbHI.......7..N...>:...e6O..u3...i.4.h...dS.8N.......UZ..(..e..6...W-....o...j.^.....^n...RC..n.e../. ...N..>q..6.xnyt../TM...C........j.....r..L...iA5-.&..>........H.....1.=.D..;8.F._hGx.sQ...hu.....5....A.^;}'a..I@Z....!.Su.:<i.7...S.rj.b...../......^.....a:".h..Y.jNx...x..N...K.-.\|...m}.U.<.\.)......iD.[.a.....L.(V.)...........tC.....<..3.k.5..z5..x~l[.C%.. ..\~...y3A.A%...A.K@..]C!C..y.!..j..j..5+....n[Xn{3..j....)..]z.........7..2..K.........p.......nV.(.u.D....(i)..DH.e.x.....).......T.f.....5.1..R...

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.164497779200461
Encrypted:	false
SSDEEP:	3:VLioSRooBLn:VLoRH
MD5:	F65A5488612E2AE1E96458B31A8E87B9
SHA1:	AF4B64518393235C6A54ABBD9E6525C5CBAFA7E1
SHA-256:	F927C6406F4AA874E1C7771823AD2F1F755FEC09E9682D19B6A4F6C6B3AF02AE
SHA-512:	4C45BAA7E6B688F7E0ACB48A3AFC326BB11886111E9798EFF703ACAF12872BE8B8AEDF06632720FA37A967B53BB0B77E30AA69CD6180288B98D2269960A0E942
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTA0LjAuNTExMi44MRIXCZ1PG8T4iKcFEgUNdTS-oRIFDewtwx0=?alt=proto
Preview:	ChIKBw11NL6hGgAKBw3sLcMdGgA=

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	469
Entropy (8bit):	5.090258374482922
Encrypted:	false
SSDEEP:	12:bRVocXEx3x/w2FeFylde9hWKg2JW3dwVxK:kPxF1FoyyWK5Y3KVxK
MD5:	19C42DF1645953750CE7BB01F1645D35
SHA1:	5FC6C124A6569750940BB0CE9FCEC07C45B8CB03
SHA-256:	D4CA5749CD572E85E620D38A0579AADCB53F834F64DDB580462F30CBBD027967
SHA-512:	91A086E1D912D8C8142B4ECF634741BD607C51DF8DF68C83EA7F313190FB80F6604AB5BBE3C000B30DC987E08224F1E35B1E6BA002CAF9936ED6628707A1AE68
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/index.web-vflGcQt8W.css
Preview:	@import url('./components-vfl-kwZ-o.css');.@import url('./logos-vfl1shkG9.css');.@import url('./icons-vfl-haF26.css');.@import url('./foundations-tokens-vflo9_NiU.css');.@import url('./foundations-components-vflgUleH4.css');../* For any images that are circle cropped, scale them up a bit so that they're still cropped as a squircle /..dig-Avatar-image--modern[src='circle_crop=1'],..dig-Avatar-image--modern[srcset*='circle_crop=1'] {. transform: scale(1.075);.}.

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 85096, version 1.0
Category:	downloaded
Size (bytes):	85096
Entropy (8bit):	7.997143828952949
Encrypted:	true
SSDEEP:	1536:CHEKYQoriayzxUhQXTDF1PYOvyQV5xwiJliuCHx673ZwCMbrYBrMYADfSvlsBJ4G:CkKAilzLXTJ1Plv3zyiJliuCHxA3PBro
MD5:	95E97662A93CAE50B0DAB432DF119AEA
SHA1:	8D2582583203248D7E7091643B206B41670F06B4
SHA-256:	7DDBB15E310036B76C1DABC3D596A153E74FEEA6EF999152A68264A37DF173B4
SHA-512:	D51AF73C37F0500C9EAAF67E38C6ED47D658862F59C776960BA8C9D7977FCE65BC2793FCE79D0BCC2F06E205F9DAF1E414E6C298C5C12B2C43F4919F5C7DA965
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Medium-190618-Web.woff2
Preview:	wOF2......Lh......-...L..............................d.`....<..s.....8..{..h..6.$..d. ..L.....Z[)........$j....1..!&.T.V..........o".t..@....g.H1..}.a.....@.f..........d....v....J.....w.G....L....cr/0....yO..2....>.(..2..Vi.R.,..&..\|.e!`\m..3Kh.R.d...B.,....h.....Y.t..d.n.....R}...;1.'$.:NP../X=....s...:.N.........#..e..R.yw(4......&vJiDo.EH.jcv..3...lh...%..{.J.p?.L....L....[T.T...+.].$...."/.R...t].T.B.v.lo..]...ke.7X\..'...pbG.s.B.".Y...\.^..+.....@.................W......S?..E.oo..O..._..T.(`."P.8_3{a..7..$.....#.9..@..?......w.f....'..L..#..8..................r....t.q.W7.h.P~......mnT=H3x....E.fHU...eF@.q.>D.&..ZzWb....FM...-.......=$.D.8....+{_.J%(...R................!...d..>.N...s.....)@.[6..S....^.J..NA%KN.$.p.......7.m7.d..4.4.0..w.S..\.{.{@..#..f..V...=.....^..}]J..G3.O..YICS....7.....f..2..u.....x.G.5$V..u..Di.:.............07k.....L...Y.8K0..U. ..g..-..).."..lS.UX...o...;..V..2.D'.b!V.a..`#.511..1......t.ElJ.`J...Mx.M.b.

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65272), with no line terminators
Category:	downloaded
Size (bytes):	94157
Entropy (8bit):	5.550169665032203
Encrypted:	false
SSDEEP:	1536:psIRhmgd/LjKKbP57N2riFHCxo/Inf4u/5C5yBzeo5ocN/MSV4bghevgdJguC2zd:eIRhmU7NN+eYfC2zvl
MD5:	D857E1529860597080473BB6827938C0
SHA1:	8B665FA6F3B73098F1B7C7EE0673373859358421
SHA-256:	B020C08F74AE92DF525EF53FD242FC31AE030993CD22FD521D755DA344DC913C
SHA-512:	FD8634E998FF9CF2CE3961566739D8981D28FC64C18B15AEB831F31608C12896193D419DCA548DC469D60D65883604D263ED3FC7BCEA1487321AF67421408982
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15.css
Preview:	.adminScoped *{line-break:strict}.o15table,.o15table2{width:100%;margin-bottom:30px;border-collapse:separate;border-spacing:1px}.o15table th,.o15table2 th{font-weight:normal;white-space:nowrap;width:25%;font-size:11px}.o15table th,.o15table td{padding:5px 12px;vertical-align:top;text-align:left}.adminScoped h4{line-height:normal}.adminScoped h5{line-height:normal}.adminScoped h6{line-height:normal}.adminScoped a:hover{text-decoration:underline;cursor:pointer}.adminScoped a[disabled]{color:#666!important}.adminScoped a[disabled]:hover{cursor:default;text-decoration:none}.adminScoped p{margin:1ex 0 1ex 0}.adminScoped img{border-style:none}.adminScoped hr{border:solid 1px #505050;margin:8px 0 8px 0}.DropdownList-disabled,.TextBox-disabled{opacity:.4;filter:alpha(opacity=40)}.adminScoped th{font-weight:normal;text-align:left}.adminScoped select:disabled{color:#c3cdd2;background-color:#fff;border:solid 1px #d5dee2}.adminScoped option{padding-left:10px}.adminScoped option:disabled{color:#c3c

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3319
Entropy (8bit):	7.8575716148182195
Encrypted:	false
SSDEEP:	96:t5lSI71nPxWZ52FLIs6bqPXzg7axScZWIwHqYfZN:ToI71PUv2lIs6r7axBWIwZfP
MD5:	DA7F263D7E44EB65E76522941FF95B79
SHA1:	C102BF1E458401E9E05BCD3C9F641C8235986299
SHA-256:	A53A8D6DAD77F024A0677D32B9410D45C3D3E7ABC11EAD59C93D9808D281DB7B
SHA-512:	27BAF203306C4B1DF08D605232AFA7925173B14AA1F9143F7B6A31B17A7D037BEFDB817C59FA7AB242AF4296196BCB959D15BA6C25B936E0D899C288C37A0AA9
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fe.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[]l\G....{..c;N.&.iJI..(mQ.........7@%@.T....!Q..O}@.@.......6..B..T)R.R~...Nh..6...b..{........}.]..N....sf.7.o...H#...?..I...)!<J.....'.9.j.6....=.".Y......Gc~.&3..........}ef.._-9..Y...W.[.....oiz...g...p......WI..`...7C.}$...Yb9......6.......e.t...X..z...............\.<U...........].Bj?.u.P.7n..V..@# ...@..x.._>..z.ZZ..8\|...D....{h...........'.i.]..[.zW..;{...so......<.u..B.f.......?....zRk.(.F..;.Y.........S:.J...!B.C......w].[....o....0rp..:.vh...i.Wp..4...X..@.L.X.-....c.fh"&.;..B.J.P)..J:....:....\.....ynm.....:E.FL..hz'.,... ...;Kk....Rz%.D..........N..e..Yj.....;\|...m....rJ.....T.....Lj...<`dx.^%xP..}..sp.1.....0G.....XN.B.\..h.....E.P.T.-.....xi.."P:+..Z.........n.$..@o...:..<.Q.3.N...I{...c...sH..u..6..............)C.E.6p..4..F.....].9}..ze.....YN0..2.(...(B...]....Cr"W..S..U..X........e.;..v.=w..Id....,.I\|C.~.................i

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 82560, version 1.0
Category:	downloaded
Size (bytes):	82560
Entropy (8bit):	7.9969346853325245
Encrypted:	true
SSDEEP:	1536:Qm6+Juu2ZGBB/hVq73dtJEiO9fqsyAD7S1ULwSzuIAm4YBD:QAJuu5B5VqDdtOpvea0sD
MD5:	3777CF6535DB972DF634D4CB16895797
SHA1:	C82654E2FE488D321F3CE0FA494F846530E25875
SHA-256:	1F8D64D90C3DF5741AE4A60E80AE4A2CDCB7D212B12AA9A822F18FBF93FD2AB3
SHA-512:	428C278A5901CBA420E354D5BC6B55DE45F47F78E5C28508487D7A250DCA28C3AEFDDB998B2FD26C9E4750E8F11B6DD35648897D718896317D3BF87FA3ABC3EA
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-RegularItalic-190618-Web.woff2
Preview:	wOF2......B........x..B............................h..d.`.......s...........4..6.$..d. ........l[.g..Sd.....v.F..O..z....).H.!...Y.E.%c....c-$..!.sl.!....3.........gM......Z+.X.V...]B.y..b..B..5m../...!_V....7.{@...S..].2.m;5Yv.M... ..=I......U.K......":.W........].S..(...xI...q..X...Z.\| ..@...).o..+5Mz.ks.,...t.....!.3.'I....>...2j.R.\|....e..cp=.....p..m.;h..Y. Y0.....K......I.!{.....R..%..:.A.e..".........=..(...9=.EJ.R.0.)%.Z....~...qV..D.r\|...6.M.%.....\...Twx..>....\|j/mdi..../.F.....b{....{..........61x...'.v.u. .....Zy{.}Rc..2.....Z.....m....a`Uf.P...n?...A.!]L......3(TMn..b...N.&<P^..-.-.%R.S1.'.\|>..._.g..{.,.l...4g...T@Y....b./..,a.....O......v.....Eo.Ce......&...Q1....y.h._W...p.5m..,.q<....I.s..&...!.T<M.].f_&....<":..P..`.....iV].'......F%...@.t..I.\|zA......"C..,}!....K...@eH.lo.k.+' .._8.ri.@.....')!!!))%)-%-##+++.v...................=8Y9y\|\|..[.g...N.......,...w.>E....../...6.....$../...........-];H.>.7.....0...T...R.....*.S.

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6631.16/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 8111
Category:	downloaded
Size (bytes):	3505
Entropy (8bit):	7.945008338787512
Encrypted:	false
SSDEEP:	96:ziS8LmnrKD6nrzRydFgkoVfemimQY/W+X:ziarzrzR04GmP7/fX
MD5:	1A9078EB7795CC2AB9BE86D02D21A853
SHA1:	0CD912EEE4E1FE283AD99FA0C69CDC1F32DA7025
SHA-256:	B68C76624B9979DA1E4138A3570F2F944CF67343AFE8EC089C15E0266E8E2D35
SHA-512:	3E3AA3A4BB67BF617276C27F17AC7FC390C6520009EE9478AC28934AC50F195B2985153AD2DD9DA8ADCE0192572A4385CBE153F53BAFE3C2419AAAA13DDB0CA8
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js
Preview:	...........Y[s.6.~..Q.L.`FI...D..q..c+....$$1.I..-+...~..M....N......~..&e..(MlgY.Z....U.U.c..n.\|%..{=[.Y...7..JH.......!...O..1....7.......>..'e....!0...>1.M.......s+..^>...Z..q9...M ..[..(e.^o..[.z...`.Z.$L.n!.8..i..)/..=wG...D...w....C.,....m....I.....K........9. \|.a#;u...... ....5..+I..AeV&.0J..F..$.......V...!..RK...F.\..\.. .8.07...{$......h...O8..Jw[..Y6..Qh..`.(...K...8..09P..#.,`..f.qI..\|...{.h....pm.\.m.&.s...tI@....Y.m.sg.x.j.og]..+.AY6.&.8...7.5..Y.$...Z....6....w.f.d..Q.LV..3qTh....X5Ih.%....j..tb..kfB..o..;....3...8C...l.:.W..jF...1!..5..~/.j....t....3.......e..:".9........_.,.h..<.. .x..9.HD...1...w..Kq..Q^FW....VA'K.&..<.H.3l..>........M.....t.._....+B ..e6jK..A. ..+9...nRX.M.....\.....b...j55<..X...U...U0S...we..8.kY...@&._.......;h.e.=..&.H.e.d...;%.R.YH...tg~.a.\|....E..p..Q.Gj.T;.....'3.iQP....m..U.......KC..k.b0...w...z...9r[..R.h....K?.#.....e.!..5y.....s....G.oa.;..:............H......._Y&.W...X.u.

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (423)
Category:	downloaded
Size (bytes):	482
Entropy (8bit):	4.818829452715539
Encrypted:	false
SSDEEP:	12:QTgfxNBd5yZEB9GNT2nOoRcp9e9Iu2RKPyyzy8VKY:8ghdwZEPyPyzvVKY
MD5:	5469DBE753C3B16DCF884F4C30F8BB9A
SHA1:	7F43ADEAA27828C963428322FDA5FFD7CCE42532
SHA-256:	6EDFDE42889DAFBB08F0D5E0BD533C0CAEC97F33513D70862E1F877993BD9629
SHA-512:	63957FEFACF888E78BFFD35A9E7600B768818281432DC6AB8386A7FAD192018655A912DA2CC6EEFEF85BF7823B544B437DEEB2092BB4F6ED772344CFB578064F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-progress.min-vflVGnb51.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/progress_indicators",["exports","../../common/index","react","../../react-transition-group/CSSTransition","../../common/index.esm3","../../common/_commonjsHelpers","../../common/extends","../../common/Transition","react-dom"],(function(o,e,n,r,s,t,i,m,a){"use strict";o.Interstitial=s.Interstitial,o.ProgressBar=s.ProgressBar,o.Spinner=s.Spinner}));.//# sourceMappingURL=pkg-dig-progress.min.js-vflpo2KQA.map

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38677), with no line terminators
Category:	downloaded
Size (bytes):	38677
Entropy (8bit):	5.2403199684773
Encrypted:	false
SSDEEP:	768:mlxte81WzOZm5eiSPuAAjmFl9+pW4bg1WMG1yKyAIHo7lYSF5bsbMb8jssi1+:ix91WzZYiOuIl9+pW4b7IXSo
MD5:	F0CCEF116CC550152B90DB0EA68D8FB0
SHA1:	1D813F3F06C36AA45AE76A8B5AAD50B24FCC460D
SHA-256:	811E2184ACAC6E3DC10851B5E1DDD6F431AB4FEFF39A4914EE487A961F7761DB
SHA-512:	2105C19E40EE71D0278832B430A9E208606AFE052F6C05A3CE53D5B2F31E114246853E836A971891F1EA9B7165EC08D63F9F4B516D141BC8E7DBC0073240F72A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/jsc/hipcontrol.js
Preview:	function HipChallenge(){this.LoadingTrials=3,this.CurrentLoadingAttempt=0,this.FailOverMessage='',this.ShouldShowMessageOnFailing=!0,this.IsActive=!1,this.IsUILess=!1,this.IsChallengeLoading=!1,this.ChachedLoadingParams=!1,this.CachedLoadParam1=null,this.CachedLoadParam2=null,this.CachedLoadParam3=null,this.ChallengeId='',this.Verified=!1,this.FailOverChallengeId="",this.LoadTimeOut=2e3,this.LoadTimeOutHandle=null,this.UILoaded=!1,this.PrerequisiteChallenge='',this.ConnectionFailed=!1,this.ShowValidation=!1,this.Loaded=!1,this.DependantChallengeId='',this.GradedActionChallenge='',this.ShowErrorPanel=function(){},this.Deactivate=function(){},this.Activate=function(){},this.ShowConnectivityError=function(){},this.GetVerificationData=function(){this.NotImplementedException()},this.GetUserResponse=function(){this.NotImplementedException()},this.GetChallengeType=function(){},this.Show=function(){this.UILoaded=!0},this.Hide=function(){this.UILoaded=!1},this.Verify=function(){return!0},this.V

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.2520849030291545
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1M5CwpVXcYBqQg6n:MMHdVBKW/UTWC4bM16
MD5:	A440141EE145FE99901E8818D1030C9F
SHA1:	4D1B42D1193FC851094186F317FA041D7FB652FC
SHA-256:	A9DE579B7E63CC283E6D017232C60D0886342874BD980B3CF081C0971EB99483
SHA-512:	2E34805C60E4563600BCBC2E9803F32D20B95A8407E4C786634F417D7C276EE815CF7C408A41DAB999E8A3608A8111C87C448B9279A4CD177C1FEFBD0D856D66
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/shell/images/signup_ms_logo.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:70615913-d01e-0002-05f3-bb7479000000.Time:2023-07-21T16:51:45.0253724Z</Message></Error>

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	292
Entropy (8bit):	4.732763378845963
Encrypted:	false
SSDEEP:	6:UnKq8fCEap95RVvWR95RVvWcF7lIANAL0NueXtBQVn:2XkCdh1WRh1WcVS+uatBQVn
MD5:	BC0928158EAC5A1DF70E02C1DA3FAA45
SHA1:	6AD279A30FE941809FA741BDB742EF5298150A3B
SHA-256:	7B5E58EE749D0FB60C08241AE892E833E203ADF562B216487B1F1F3D0D690A4C
SHA-512:	0C33F2A4BA5342D322482A9C369B57EA8CDED931ADF1914051C430714F043FEAB48A8AF491F8A54DEEE889964A79F1DC9F94237E5E42992DCBDCA21D506C4E41
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/cloud_docs/frame-vflvAkoFY.css
Preview:	html,body{width:100%;height:100%;overflow-y:hidden}.cloud-doc-iframe{position:absolute;width:100%;height:100%;border:0}.gdd-doc-iframe{position:absolute;width:100%;height:100%;border:0}.third-party-cookie-iframe{width:0;height:0;display:none}.paper_integration .devtools-portal{display:none}.

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://portal.microsoftonline.com/WebResource.axd?d=SYxG2gKEltHc92c7-eKy7vreyN1e2QqrvpdCCR4utt35Rwac9rd_c8SeOHxrYQBj6_mlgMwB-OaZiOiHvHjimRyiyb40s7dxOv3AMLtzClV2W-wogtkMOc2pDBD_sJZyRKzfvgJtVY-JClcKNVaTSg2&t=638137640945220281
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5800)
Category:	downloaded
Size (bytes):	5852
Entropy (8bit):	5.3008032992422365
Encrypted:	false
SSDEEP:	96:bfb5hH5N3XceG0B4ygcw3qFCC5J+jD1qBDqEybtAVifxBz3X:bfbr3VHB4Uw1U+jBqp0+ViJxn
MD5:	3134B918F599FBC10023871A81BE20BB
SHA1:	BCA02AB82B3294306B9D9F84FFC66C7BBA7B7402
SHA-256:	CC24BE7127A7221EE8DCF324FD67259D37C4803734156F6F8657DED5A16273A8
SHA-512:	1F72636EDE268E13F3A6F2E45BF274D541008FB5CC31F60511BA68697F3A964B55EFCE9D3085BAB7AAEA11BCF8B016A5596BF0E4FB098F2EBB3DF2754D84FEA8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-b.min-vflMTS5GP.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/index.esm3",["exports","./index","react","../react-transition-group/CSSTransition"],(function(e,t,r,a){"use strict";var n=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var a=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,a.get?a:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)})(r),i=({className:e,onComplete:r,value:i=0,isIndeterminate:s=!1,inverse:o=!1,"aria-valuetext":l,...c})=>{const d=Math.min(100,Math.max(0,i)),m=n.useRef(null),[u,g]=n.useState(!1),v=n.useRef(null),E=t.classNames114("dig-Interstitial",{"dig-Interstitial--isIndeterminate":s,"dig-Interstitial--complete":u,"dig-Interstitial--inverse":o},e),f={};return s?f["aria-valuetext"]=l:(f["aria-valuenow"]=d,f["aria-valuemin"]=0,f["aria-valuemax"]=100),n.useEffect(()=>{i>=100&&!u&&g(!0),(()=>{const e=Math.max(800-d/100*700,0);v&&v.current&&v.cur

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3163)
Category:	downloaded
Size (bytes):	3219
Entropy (8bit):	5.178298974638202
Encrypted:	false
SSDEEP:	48:l9u7o8pyAyoMH9MgdAcMzfHMUrGsycX5XyX5XP0XmpYQ3blHP4fBi+SCyt:rapL1c/Gc4GsycpCpf026ffBrK
MD5:	CA96C5C279D6FFFD534A5B63EC0D7BA8
SHA1:	CDFF7BFD277DB1AFDE355F062B53EEBCFF9FFDDE
SHA-256:	54ACE8C08A67787D6ED3D7D16DA681A67994559E24AC040A541E3E3EBCAB1743
SHA-512:	FB4CA4C7BD73C412F04591A8D1906C5000EE68CFBF556BBAF5D1F0A8A9F83592889A38C425EE56D2826EBDA79B14EF361E915ACB9DB2E91F8D779313EB21A686
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-icons.min-vflypbFwn.js
Preview:	define("spectrum/util/raf_throttle",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.RafThrottle=void 0;t.RafThrottle=class{constructor(e,t){this.ticking=!1,this.currentRequestId=-1,this.request=()=>{this.ticking\|\|(this.ticking=!0,this.currentRequestId=this.window.requestAnimationFrame(()=>{this.thunk(),this.ticking=!1}))},this.cancelPending=()=>{this.window.cancelAnimationFrame(this.currentRequestId)},this.thunk=e,this.window=t\|\|window}}})),define("spectrum/vertically_fixed/index",["require","exports","tslib","spectrum/vertically_fixed/vertically_fixed"],(function(e,t,s,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),s.__exportStar(i,t)})),define("spectrum/vertically_fixed/vertically_fixed",["require","exports","tslib","classnames","exenv","react","spectrum/util/raf_throttle"],(function(e,t,s,i,n,r,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.VerticallyFixed=void 0,i=s.__importDefault(i),r=s.__i

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6019)
Category:	downloaded
Size (bytes):	6076
Entropy (8bit):	5.383368388084358
Encrypted:	false
SSDEEP:	96:bhKfRynUl1ID6pfECzOHuD4TgtuNYAq4+dYxvs+pObQmmU1UDFibGlJdGsSkPp:bAfRynUl1ID6dECzMm48tueAq4EY5bpP
MD5:	20E3E5B263D34B9C21E5E4D77E196527
SHA1:	928351D7411AC373E4D2962E9601C53CAFBFAABF
SHA-256:	AB71B12D61C0E21B00A7D8AACEE470AF92F4090D0F4DB58DAF2CE6B8892659A2
SHA-512:	5EADEAF1A5A7D89122F8C89E5570B808FFCF3A2A6ADB0D0D05EE44317B2D3C37D0F627CDAB445D4B15E88DCD9EFEE8A7801981A2FA40E3007D6C4BC8E67A9D4B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-avatar.min-vflIOPlsm.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/avatar",["exports","../../common/index","react","../../common/person","./hooks","../../common/index.esm2","../../common/_commonjsHelpers","../../@juggle/resize-observer","../../common/useIsMounted","focus-visible","../../common/pictogram_icon","../../common/chevron-down","../../common/index.esm3","../../react-transition-group/CSSTransition","../../common/extends","../../common/Transition","react-dom"],(function(e,t,a,r,i,n,o,l,c,d,s,u,g,m,v,_,p){"use strict";var h=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(a){if("default"!==a){var r=Object.getOwnPropertyDescriptor(e,a);Object.defineProperty(t,a,r.get?r:{enumerable:!0,get:function(){return e[a]}})}})),t.default=e,Object.freeze(t)})(a),f=[["medium","standard"]],y=e=>{const t=f.find(([t,a])=>e===t);return void 0!==t?t[1]:e},b=e=>{const t=f.find(([t,a])=>e===a);return void 0!==t?t[0]:e},x=[{background

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 224
Category:	downloaded
Size (bytes):	179
Entropy (8bit):	6.8340740871871635
Encrypted:	false
SSDEEP:	3:FttJmVr2a9GCyQmzVlCPZhDQBg1ncydKkqpyNTPkqkH+itc1w8ZY98oiVGMjc:XtoVyVCyQ8V+QW1RzqIdPkJ+ODWNoqG1
MD5:	E61F0B987E7FA04847E5C351DBE9D8DE
SHA1:	18562B0741E8484649FA64E78990CFC97EE7A39F
SHA-256:	016CF2A4A3FC33926FEED2F2EC5EDE7CC6E6B18392A10FAF599314C98A742263
SHA-512:	A4DF06B553DEBC39E5B5F1553FAB68F3A91E968AD997824461114CD8CBC7350597A415B0E563665A20A67AC9CDFA72555F7E505B56B7EC9B700466175A434C4C
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg
Preview:	..........u.;..0.D.bm.?\|.&.)R'.H...-9...s..PGZ.v.^1l#.?~..,.r.<..b..u.............5n.x..3.6........N.Co.>..A..GK...\fE.Yy*..X[...yO@.K....2..L8..O..Z....y;.5L.d...w_........

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15820), with no line terminators
Category:	downloaded
Size (bytes):	15820
Entropy (8bit):	5.036084866767802
Encrypted:	false
SSDEEP:	192:VlxxgkrOOIrUC8ZvLtqiZ30EEAizFM62T1Qfktq/P0DRcjKjRDJgVXH4/HU:Vlx3lIcVaXP1jKjRDJgx3
MD5:	89BF4B5A3206F43733057C233C5DB63F
SHA1:	2738781309E08596B763CDD12C6B67B6EE75B907
SHA-256:	408DE09E503D66A837CFB11DFC24CB96FACC4958436520AA78A845CDE5EE9ACF
SHA-512:	DA4193F705AB074D37A4BD3C82833BF49670ED5CD277F49815566FB612EF37B09215441CF39FB04D9F211B553EC2AA6E594B88B4DCB48866280FD0C392DD677A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15mvc.css
Preview:	.pl-shell-footer-hide{display:none}.pl-padding-hide{display:none}.mvc-validator>.field-validation-error{border:1px solid red}.adminScoped input[type=submit]{min-width:100px;display:inline-block;margin-right:10px;margin-left:0;margin-top:5px;text-transform:lowercase;vertical-align:baseline;border:1px solid;color:#fff;text-align:center;line-height:normal;font-size:13px;padding:0 0 0 0}.mpl-layout{margin-left:50px;margin-right:50px;line-height:normal}.mpl-layout.gemini{font-family:"SegoeUI-Light-final","Segoe UI Light","Segoe UI",Segoe,Tahoma,Helvetica,Arial,Sans-Serif;-webkit-font-smoothing:antialiased;font-size:16px;line-height:20px}.mpl-layout.gemini *{box-sizing:border-box}.mpl-layout-table{width:100%}.mpl-banner-box.gemini{position:absolute;top:0;padding-top:17px;padding-bottom:17px;padding-left:30px;padding-right:42px}.mpl-banner-box-text.gemini{font-size:36px;line-height:36px}.mpl-banner-box-hidden{display:none}.mpl-header-td{min-width:300px}.mpl-header-td{vertical-align:middle}.mp

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78992, version 1.0
Category:	downloaded
Size (bytes):	78992
Entropy (8bit):	7.996774816040856
Encrypted:	true
SSDEEP:	1536:zbQC+WBW4KFawRjjXGLBFoadyiQMeJZjAt+JHKReyy2Bgvcf8xGj:PQCf5wRjjWLB1dRQdjDJZ+BgvEH
MD5:	CBDA27012EF85AF41A43B5F63F8F01DE
SHA1:	1013AF6F986DFE48FB0B1DD32FEEEC6D9832F92F
SHA-256:	85562292D87897A6E0F1EB0E1DBACDF1F89B6A607393484F1B5D5987CD7908BC
SHA-512:	0ED76162E316CFC4B8EF08E86D8DCFC7C1F24F279727DFF657BBB9742983BC9FA33213C040A64E80502C4D45C1AEB99042AEB727B573836D0A146FE98B60F339
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Bold-190618-Web.woff2
Preview:	wOF2......4........\..40...........................t..f.`..\|.>..s.....@..H..4..6.$..d. ..0.....T[.[...6..om....ZUw}...-.(.?..r....%j.5<._..h.+.....]oV.,............]2.s...$9q..._.B....F.A.Q....Z..j..D..np..<^2<....f......8j.J8.2.....2...j.V.g.i.E5......H1.o=.\.;L......].H...L..z.....Yd4......].Z..w.3.i..=F.Y.m...aY"...w&_..p{....{.hO...:.n.x.8yQ....L.e.pi.].~....."&....F.W...""..".A...ff+...l...2.O.G..y.....D.0..U........e..Q%.q.o...&."..;.<h..+...xP.a..a...../4......\|A(.U...f.....;.....r.r...Gg.k..A...%.J.......\%U&.+x..\|.....w...U..YcB.2K.{>.&.....O.5G........z..Sk.].......P..K...-.9...X.?..+7..&..S....q.3-....p....X...J.*.O...z....wI...s.....R.......(...4k.....<..l........p4....O_..}jBIM...E&.................$\|...a6xJ...q......S..R3.5.b...f3D..cE@\|g...........,.x..Q...F.8...a.""..... ly...-...?...g......pi"..4.......h......]}...8<9;g.....J..j=.v........F.jTm..........B.Y....{D.5..K...$.@h.>.....=...J4......b.X(...X....."j^..W\|.n..h....6...Q1..1.

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 352
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	7.146872106953667
Encrypted:	false
SSDEEP:	6:XtGeY5R6bwlfK8WyRy7UPWsknVIq5EGdZ7KYvwY4qtOOES1THs+rqEHq8En:XIxqwlfnZRXWskVIqxb7/ZO7S1THscDw
MD5:	6C3194FDC28B6804D557BE186D86036E
SHA1:	FDE62337E5100311CE52FF10B68EDB08945C2A7F
SHA-256:	6C32483F9F14971B245A1B43F460BE9385331EB0CCF466621E3F93FD89040693
SHA-512:	B175811F9B35B9737C49EC55580288FDF0F4B164E5392ECA6D505E1E91B52C232F54EA86937D1C674C038ACF7C074C5CD4650843B2F686CF12304063B14287A4
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/0f87dfdb09fdf4689436.XmWd3ZCjNs5ikVl6X4w5UBoJH0WCva2GW011KNNjeIU.js.gz
Preview:	.............n.@...>...H.0*.0,.E[..6TSc&#.S."C...".^m...s..;.~...gD.r=..G..o.N.x.{..B.....no.4.G}..2.."..TNc..L.e..N.'.."..&3..!.@!.!O.).)d.K.S#..J.<..,.........4.s...>n....4..[.f.g.G...jo.j5..K.g..h.....^.G.R.XVJ.2...D.8YRQ...8...a..Bv....v..[..=mX.m.y..?^...>...x.......7.....G.D.....#`...

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 59817
Category:	downloaded
Size (bytes):	19633
Entropy (8bit):	7.9868251820162826
Encrypted:	false
SSDEEP:	384:FzO0f+0mLRCwmwn7Z84i5b9lg3VDTy/Nxsc9V+kwqYnJufACQ+NcLbjJ6C5:P1mjbnlM5bg3VONxV9shqYnJoQJFH
MD5:	81E082CC637D2B7BA62D8036BFB86760
SHA1:	17BDA8EC788E9210AA4C3835E3F4D78951068482
SHA-256:	34C65B446A25113078238E018C0B42C404084FB3BBADC8BF9838A0F949F0FAA5
SHA-512:	902D16B96F8F0A0B823D6B14C803D431AF57942976A04602543C152993EBFFD7C89DB847DD56BB1D56623D93F274378040D068D0F102DD6A4E550C4C4799F01E
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/wlivepackagefull_stPwvW3-5mShoxrbkAw2qw2.js?v=1
Preview:	...........}........+.....+...%...]..U[i..> .$....CG$..of...d'....Z.....s....L."J.......$L/y...31+..b.....R..d.-8..O.,.Y/_.e...X....1w.-&..6..N2X.I.......k&..2.w.A...E^...J$. LW~.....:.....#X..y...b.,..1...S.r....A.b.3.d..\.3..q,.\NU<...L\|.).,]{.... -..qV&..G...W\.E:...\|.^}.~.c.._.d..Q.).y.e......Mt!&z.no....0.....1..qVd~ ..jk.q';z..LCS.p...gJ..&..LU/......<.X.r6Xx...B.....WaU...x...._..WBW...1.....l.a.......HYz{...x)...3.jU.......y:.E..[...^@F.94C.(.A?.@l..2..k..t.$..>.........u.s..Z.h..........d..I^deP....e..=u....#.VZ..N.\^.\.3..39..i...N3p...fn6..P^.c.M\.."..E~..Ga.).u.7...'...v.$............p.ayY....\|......X....`.>..\|.....`.,......._....Q.:.,V5$.......R......f......8..7l.3.36..9.6N^.`i...N.......wD0..I.....X.%....a....1...,.z....?..Iq...;.CK...u./...vRa.N.j5>\&U..p{{.......E.7.....g^...".fa.+.c.....k...U.......c...IV.R......LS..}.Faoh^.h..=@...>........) .g.~.S..H.{....r..r..x.`O.5b....{...]..B..K.z..,??..L..2..8ZE....z.2...i.j...\

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (61371), with no line terminators
Category:	downloaded
Size (bytes):	61371
Entropy (8bit):	5.237542510810988
Encrypted:	false
SSDEEP:	384:J66D8dHRGWZMKGrhEDa/Vi7XVl1TqI4iv1SxXlSlE4GYLQ6IgXm0gWtMZAGn6wpL:BmRaI9ahvYsw2DAGn6wppscyO1
MD5:	6D4AD7661B98C4CE3444484CBC068A7E
SHA1:	9A4BC733289A99B8D11D8904B5098EFBE3D98C64
SHA-256:	1461BE81ED64FF3244D8EF01E12F34D0D66D8FD6D5912BBBD2FFF6316AAF0D53
SHA-512:	1026990C1984BA88BC049AB3BE5F051DD314559F52E228DBA0A3F7D76AD208BC45A2228A0E847303AD8B76ED0B3920EE806B41C918282DF8D5BE8E7EE4379B91
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/listgrid.js
Preview:	var NavigatePage,BOX,ListGrid;(function(n){n[n.NoChange=0]="NoChange",n[n.First=1]="First",n[n.Previous=2]="Previous",n[n.Next=4]="Next",n[n.Last=8]="Last",n[n.Direct=16]="Direct"})(NavigatePage\|\|(NavigatePage={})),function(n){var t;(function(n){function i(n){var t=document.createElement("div");return t.appendChild(document.createTextNode(n)),t.innerHTML.replace(/\"/g,""")}function t(n){var t=i(n);return t.replace(/\'/g,"'")}function o(n,t){return t.length?t.length>n.length?!1:n.substr(0,t.length)==t:!0}function u(n){return n!==null&&n!==undefined&&n!=''}var a,v,s,h,f,c,l,r,e;(function(n){n[n.ascending=0]="ascending",n[n.descending=1]="descending"})(a=n.SortOrder\|\|(n.SortOrder={})),function(n){n[n.clientInitiated=0]="clientInitiated",n[n.serverInitiated=1]="serverInitiated"}(v=n.DataFetchMode\|\|(n.DataFetchMode={})),s=function(){function n(){this.AddButton='AddButton',this.ArrowDown='ArrowDown',this.ArrowUp='ArrowUp',this.CloseButton='CloseButton',this.DeleteButton='DeleteButto

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://mvolenoazaqoerutien.com/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4787), with no line terminators
Category:	downloaded
Size (bytes):	4787
Entropy (8bit):	5.3136178165749515
Encrypted:	false
SSDEEP:	96:5iBUcCRgqJY+ebZFBfquEiwQYGQwnCSo3DijVxlJz/odkFVMhMY7PHYh+O8C:5i/PquEiwQ/QJzDeVnN/odkbMhMY7PHI
MD5:	D4A9893F26D6C6BA6370D1AA877D9530
SHA1:	616E7478F40C2EE6DDE03C7D6AFA35265211EDBD
SHA-256:	329E33E61952A1445BF79F6D073FF443339AA13E6338C568D20A3015C0E7BF9E
SHA-512:	9870638699DD51E0EEF34BCE532E24B585FE02E3BB52AE62F0389E97904EE04A12646D24041F277718938A1EA3AF257BDB6D136514B97AB0790FF1E9C1F40820
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.7.17.2/en/js/netperf.js
Preview:	function NetPerf(){function c(r){var u,l=[],p=['"i":30000,"v":3'],o,a,y,s,h,v,c;if(l.push(p),u=[],r=='u')e?(u.push('0'),u.push('1')):(u.push('1'),u.push('0'));else if(r=='l')u.push('0'),u.push('0'),e=!0;else return;for(o=null,y=f.length,s=0;s<y;s++)h=window.performance.timing[f[s]],o==null?o=h:(a=h>0?h-o:-1,u.push(a));if(u.push('"'+n.encodeJsonStringLiteral(document.URL)+'"'),u.push(n.edgeInfo.isEdge?"1":"0"),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.ds)+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.f.toString())+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.cid)+'"'),v=[],n.edgeInfo.prop)for(c in n.edgeInfo.prop)n.edgeInfo.prop.hasOwnProperty(c)&&v.push(c+'='+n.edgeInfo.prop[c]);u.push('"'+n.encodeJsonStringLiteral(v.join(t))+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.wl)+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.tid)+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.ipv)+'"'),l.push('"f":['+u.join(t)+']'),i.push('{'+l.join(t)+'}')}function

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31932)
Category:	downloaded
Size (bytes):	53194
Entropy (8bit):	5.382571760823651
Encrypted:	false
SSDEEP:	768:JmneBhpLkzObU/cOTEShONa7zUVvHCIMDzwzOuVrxYrJr0tBt7F4dZkBgeUfU7aE:DBhrbU0OTEShONylIRTrrlEQT
MD5:	939520EADA638AF9C1CCAB3DEBB8B14B
SHA1:	8A3F7D9992E48620C61C58DC1C251DCCE524173F
SHA-256:	57604CC987E25FE54B77B409E487ABEB52CCD8F7FBF8BB08D31D98ED977FD6EC
SHA-512:	4212982022961F884493DC4FE09902C49E01F4FB922608A1DA12DBADB4F3BFC4DC80AED325FEF79B137A3C445A3402B71FD80AEB4182AB091678228303DA5EB5
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js
Preview:	!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var i=t();for(var n in i)("object"==typeof exports?exports:e)[n]=i[n]}}(this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var r=i[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i={};return t.m=e,t.c=i,t.i=function(e){return e},t.d=function(e,i,n){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.e?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=30)}([function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),function(e){e[e.Unspecified=0]="Unspecified",e[e.String=1]="String",e[e.Int64=2]="Int64",e[e.Double=3]="Double",e[e.Boolean=4]="Boolean"}(t.AWTPropertyType\|\|(t.AWTPropertyType={})),function(e

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16708)
Category:	downloaded
Size (bytes):	16763
Entropy (8bit):	5.236603273517482
Encrypted:	false
SSDEEP:	384:bAg6yUfhZDIKfWFBt/0XgqEOmyqtOs1Fs+lMtswVN4icqp6:byyUfjWbt/0XgqEXD1S++K44izp6
MD5:	40A7E0976393287023793DB1F35E79F3
SHA1:	678801168FEA049EA629514C722FD14D9D4E6490
SHA-256:	2521107F64BC34617111D673085F7B3C6A5A8CB0F4832E83E98FDB25ED94410A
SHA-512:	F48B05400B5890E7C4137865AAB28F5E6F36E067B57A6BFD04300C76C838E0636DA91369C14DDCF6C4CFE1E97150400D9D8EF255AE864BCF134BC23ED690244D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-common-7.min-vflQKfgl2.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/chips",["exports","../../common/index","react","../../common/index.esm2","focus-visible","../../common/pictogram_icon","../../common/chevron-down","../../common/close","../../common/_commonjsHelpers","../../common/index.esm3","../../react-transition-group/CSSTransition","../../common/extends","../../common/Transition","react-dom"],(function(e,t,n,r,i,a,s,o,c,l,u,d,m,p){"use strict";var g=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)})(n),h=[["medium","standard"]],v=e=>{const t=h.find(([t,n])=>e===t);return void 0!==t?t[1]:e},f=e=>{const t=h.find(([t,n])=>e===n);return void 0!==t?t[0]:e},C=g.forwardRef(({children:e,className:n,size:i="medium",withIconLeft:a,isSelected:s=!1,isAle

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 77628, version 2.2490
Category:	downloaded
Size (bytes):	77628
Entropy (8bit):	7.997399359312532
Encrypted:	true
SSDEEP:	1536:fLgIYQv50I0Sbp9dEkMi0SKsk0wP33p5Q9xOstd0sT:07Qv50kp9dqidkZbOxXOsT
MD5:	748FD04DF3AEE82492EC3B5615213218
SHA1:	0AAC50D2E0FEE7EF3CD91C806A9A8A7F0E445B6D
SHA-256:	A7B709CDDAA8AE92BD3C9EC9D013295FFA3B408C5BA4EFA0395F78FFE1CC65F5
SHA-512:	33642738F6E3243360B9B970A5B4E36309EC13F5DC428ED83933C99940383614AF8525310AA9BE9C444E9605DD238A8CCA1B55E9118F214449320A2E866FA369
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/SourceCodePro-Bold-2038.otf.woff2
Preview:	wOF2OTTO../<.......T.............................F......j..b..J.`..f.6.$..B....d. [f....c.]}.......fv.._................../..`..G.<..............\|?..xH3....6.....9..n..l.D...D......B....3'~V.n.yS.w.b./......H.X0..:n9...j.-......m.v.....RU&..v4...!..V..X.M.^..}JhJ./....4.u-...^'..H...E...d....>..e.......[.....}p....d...78..>......$.G.-1D.'..b.`gw...{.:.......C!QH.!P-....CB.....w].gb63....X.V........$...a.G..."....O.....Z..)...3bf1b!ff4.....M.q%V.oY...\.4..z\|.3B.....F..CI.%B.X..6.;..z.../...T.[.).T.JEZ.C..1...D.q.......>.N.x....L..7..q%NTX....H..e........UKR~.2.r+.;.D.3..3...%..lv;.....T.3v.%;..{.D'R..'..<..Mf6..RJ)..4....ffL.f."k..>.;....rM.!z...> .>[._`..h...N...kx.h..LsH.+:B\.....(...9J....,...5...>..../.1o.b..`...".....e..n......M...i.+:..B+Ri......2.r<....g...DB.I..J.<.8..#..P].e.LN+..&c.._L..I.Y.....-...}e7.<.$...;....]....yM.&m....(.._~..-....QQT.<.{.s.\|cL.2<wNw.\|s:wu.-l...9......V...t...7.a...b.u."f..B.!..h{.'...=..f..?C .f.5.p"A....Kb`j..

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13413)
Category:	downloaded
Size (bytes):	13465
Entropy (8bit):	5.251549694317088
Encrypted:	false
SSDEEP:	192:MEeIH1ESvqzDTzBR0zKy0KNS9nsj+M8k0gwuSdEOXzLZ9OS4TQrn:DeIH6YzGy0Ksnsj+M8FvfFj1Z4TQrn
MD5:	C45A95E5D5C05B18B5F1173E7AED8FD9
SHA1:	2DC88FE5E89EB2E2CF784991D2A56AA6EC6FF03A
SHA-256:	5E37E98B9D48D34A71D8578CE9E69BA06BE910D5180B367779B0E12E7305E8BF
SHA-512:	41472964B6DC92657492407AB2ADE8A8CA52B7906417D9D8565A947DC2654F07DEB72A420A3AF574BF81AD56F7D28A37E5D70917EF239F98C289EC45D3DB11E2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-h.min-vflxFqV5d.js
Preview:	define("metaserver/static/js/maestro/layout/global_header/utils",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.generateGHLogName=t.GLOBAL_HEADER_VARIANT=void 0;t.GLOBAL_HEADER_VARIANT=()=>{const e=document.documentElement;let t="OFF";return e&&(e.classList.contains("global-header")?t="V2":e.classList.contains("global-header--V1")&&(t="V1")),t};t.generateGHLogName=(e,t)=>`gh_${e}_${t?`select-${t}`:"trigger"}`})),define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/global_header",["exports","focus-visible","react","../../common/index.esm","../../common/index.esm2","../../common/chevron-down","../../common/chevron-right","../../common/chevron-up","../../common/close","../../common/open","../../common/search","../../common/pictogram_icon","../../common/index","../../common/index3","./badges","./menu","../../common/index.esm3","../../common/index.esm5","../../common/index.esm6","./avatar","../../common/_commonjsHelp

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 273170
Category:	downloaded
Size (bytes):	105716
Entropy (8bit):	7.9966881199454365
Encrypted:	true
SSDEEP:	3072:/IuCFZmgGfas/n8fHSFYXfFmO7scECa0Ht15HhSd:/dY7sE/MwfFmyscEfgBK
MD5:	68B3385A6DFFC8D64E019832ACC918ED
SHA1:	7D29DDA429CED1040EE8959B5688387D4DD1B4E0
SHA-256:	17190922204C288B25C7DB6B10EB4130B147C53171E442B25BC1F2D56BB74AEC
SHA-512:	3C90DEEBED1C066B1629ADDA526ADA2821BA66DC523910C71D84BAC4D88BFB830965AF355C132BA9D7AA84ACB58BF602ED9B4C70F6E2F42A1B4CAE203AE85426
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1
Preview:	............is.H...}".?.....Y.Im..].....Zlwst..Y.`Q..E.-..~.......{...L[D.[VVfVf.....[.Fw.....q.....'J4V.+..N.'OIx}.5.....I..WY#.F.a.eIx.gq.....q.s..D..W.6W.V...L%Q0n.F.'../.... iD2..S..U...0......j...0sz.u$."...t..o....G#u.Fj.T:.$...i...#.. =\|...x......<..Qf..\\...ix..M..&.8.O]gQR.....s.FF.x.+.....&..q...FGJ.--..lv<.fi)z~v...q=./..)..).ZZ..T.....0%R5..y...Q.?..(~.9.7..e.]...G.......d7I...C..I.8....d.....f...\|.....s.......%E?GKK.\G.A.\..]...........}....h.d$..&>s.........N.....e<.U...S%.<o....^W4"...DW$2H..;.ei{.....NzY.....F.5T.o..{...0..]%B.k>...?^1/.T...Z..X...b...)8..n_\.\\...i..Y..1..I.<--.+..ev.....Zt<.{...f...:I..z.uZM.WS.dl.6mw.......f].zb.5l..n.i75.c..Q...j8-.r.a.bB........'.s."..f0....U..2.(.V... ~.....Z.."...r....Rv^-....N..Y.....;n...w..t.Uv.g....u.?).` .........#......BG..h.W.5a.$...@...A.F..8..FU....uDB.....2J..4=.iuD.q..t..o..R........aJ+...JL.]\|....)=...Q<...u..?..#..G[..d.2....8.........$...?...=..!.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 21, 2023 18:50:25.967926979 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:25.967956066 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:25.968316078 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:25.968671083 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:25.968710899 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:25.968792915 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:25.970051050 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:25.970067978 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:25.970180035 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:25.970217943 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.080152035 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.099883080 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.108422995 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:26.108443975 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.109371901 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:26.109407902 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.110375881 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.110470057 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:26.110636950 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.110726118 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:26.112540007 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.112648010 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:26.367182970 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:26.367523909 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:26.367554903 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.367640018 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.368321896 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:26.368505001 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:26.368520975 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.368547916 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.403574944 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.403759003 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.403795004 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:26.403825045 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:26.414202929 CEST	49722	443	192.168.2.5	172.217.168.46
Jul 21, 2023 18:50:26.414237022 CEST	443	49722	172.217.168.46	192.168.2.5
Jul 21, 2023 18:50:26.415792942 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:26.415824890 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.423943996 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.424061060 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:26.424101114 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.424489975 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:26.424570084 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:26.425074100 CEST	49723	443	192.168.2.5	172.217.168.13
Jul 21, 2023 18:50:26.425112009 CEST	443	49723	172.217.168.13	192.168.2.5
Jul 21, 2023 18:50:28.548959970 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.549071074 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.549185038 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.554579973 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.554663897 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.554764032 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.555130959 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.555166960 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.555592060 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.555629015 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.700944901 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.701376915 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.701438904 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.702750921 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.702883005 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.703376055 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.705183983 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.705210924 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.705693007 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.705841064 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.706342936 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.706379890 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.707123041 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.707223892 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.716470003 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.716721058 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.758172035 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.758208036 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:28.800169945 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:28.831198931 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.506974936 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.507006884 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.507106066 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.541358948 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.541383028 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.541455984 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.541491985 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.541503906 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.541521072 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.541548967 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.541588068 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.541599035 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.541618109 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.555386066 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.555409908 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.555449009 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.555501938 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.555552959 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.555583954 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.555612087 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.573832035 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.573859930 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.573894024 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.573975086 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.574022055 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.574048042 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.574074984 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.574074984 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.578221083 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.578387022 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.578439951 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.581954956 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.582118988 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.582154036 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.592710018 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.592756987 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.592892885 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.592926025 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.592983007 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.600369930 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.600474119 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.600538969 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.600563049 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.600590944 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.609898090 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.609945059 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.610075951 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.610136986 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.610179901 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.615124941 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.615164995 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.615231037 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.615262985 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.615284920 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.620542049 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.620570898 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.620646954 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.620673895 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.620693922 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.625232935 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.625258923 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.625328064 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.625356913 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.625386953 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.625411987 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.639607906 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.639656067 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.639770985 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.639856100 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.639925003 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.639987946 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.644218922 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.644349098 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.644382954 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.644439936 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.644479036 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.644503117 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.644520998 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.647263050 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.647344112 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.647403002 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.647448063 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.647475958 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.650315046 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.650382042 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.650444031 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.650484085 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.650510073 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.653582096 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.653665066 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.653738976 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.653804064 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.653846025 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.656244040 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.656338930 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.656383991 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.656416893 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.656446934 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.658618927 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.658655882 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.658736944 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.658773899 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.658802032 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.661418915 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.661451101 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.661542892 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.661576033 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.661602020 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.664218903 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.664259911 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.664339066 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.664360046 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.664380074 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.666265965 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.666312933 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.666380882 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.666380882 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.666435003 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.669743061 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.669795036 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.669859886 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.669887066 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.669909954 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.672081947 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.672122955 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.672203064 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.672234058 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.672281981 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.672923088 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.672990084 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.673027992 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.673051119 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.673110008 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.684312105 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.684456110 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.684957027 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.685049057 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.686261892 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.686374903 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.686965942 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.687201023 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.687263966 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.688100100 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.688247919 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.688282967 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.711636066 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.711816072 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.711853027 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.830120087 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.830274105 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.830312014 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.849379063 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.849498034 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.849525928 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.864542007 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.864559889 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.864584923 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.864595890 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.864626884 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.864671946 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.864686966 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.864712000 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.864767075 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.864806890 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.880350113 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.880444050 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.880476952 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.887295961 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.887397051 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.887653112 CEST	49726	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:29.887698889 CEST	443	49726	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:29.984076023 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:30.019186974 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.019256115 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.019397974 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.019691944 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.019711971 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.024287939 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:30.033246994 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.033327103 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:30.033440113 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.038213015 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.038264990 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:30.093741894 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.102727890 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:30.148308039 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.231332064 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.250338078 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:30.250521898 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:30.250649929 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:30.345999956 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.346054077 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:30.346206903 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.346265078 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.347011089 CEST	49725	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:30.347057104 CEST	443	49725	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:30.349361897 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.349437952 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.349505901 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.349800110 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:30.349941969 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.357403040 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.357657909 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.358971119 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.359004021 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.359205008 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.359446049 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:30.399730921 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.399761915 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:30.431324005 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.431346893 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.456374884 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:30.481055975 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:30.481204987 CEST	443	49727	162.125.248.18	192.168.2.5
Jul 21, 2023 18:50:30.481293917 CEST	49727	443	192.168.2.5	162.125.248.18
Jul 21, 2023 18:50:31.262609959 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:31.262721062 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:31.262814999 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:31.263092041 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:31.263123035 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:31.390851974 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:31.454221010 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:31.454282045 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:31.456028938 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:31.458139896 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:31.458373070 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:31.460406065 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:31.460463047 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:31.460485935 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.075387001 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.075438976 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.075453997 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.075480938 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.075495958 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.075514078 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.075545073 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.075572968 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.075721025 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.186155081 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.186204910 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.186274052 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.186446905 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.186471939 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.186537027 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.186801910 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.186842918 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.186904907 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.187155962 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.187200069 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.187272072 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.187608004 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.187644958 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.187706947 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.187956095 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.187987089 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.188056946 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.188292027 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.188347101 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.188421965 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.188699007 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.188738108 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.188812971 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.188970089 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.189001083 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.189069986 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.189415932 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.189449072 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.189508915 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.190026999 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.190027952 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.190056086 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.190058947 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.190129042 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.190160036 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.190814972 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.190850019 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.191071987 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.191102982 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.191406012 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.191431999 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.192769051 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.192791939 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.193056107 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.193084955 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.194264889 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.194288015 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.195673943 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.195710897 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.196335077 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.196368933 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.196927071 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.196959019 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.197238922 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.197267056 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.197458982 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.197484016 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.197817087 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.197834969 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.220005989 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.220088005 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.220096111 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.220124960 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.220180035 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.227144957 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.227231979 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.227248907 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.240828991 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.240919113 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.240937948 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.255060911 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.255125999 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.255151987 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.255175114 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.255213022 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.261887074 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.262006998 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.262027979 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.262270927 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.262339115 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.262536049 CEST	49741	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:32.262558937 CEST	443	49741	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:32.357804060 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.358136892 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.358197927 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.362669945 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.362816095 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.365200043 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.365483999 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.365509987 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.365546942 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.525960922 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.526000023 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.535664082 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.538175106 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.538209915 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.540349007 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.540474892 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.543045998 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.543205023 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.543224096 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.543358088 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.548876047 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.549246073 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.549283028 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.551412106 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.551538944 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.552122116 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.552279949 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.552298069 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.552342892 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.568412066 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.568450928 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.568531990 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.568555117 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.568582058 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.568628073 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.570123911 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.570159912 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.570239067 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.570255041 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.570271969 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.579123020 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.579174995 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.579301119 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.579322100 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.580970049 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.581012011 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.581094980 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.581115007 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.581139088 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.582700014 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.582798958 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.582828045 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.582861900 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.582875967 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.582885027 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.582956076 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.583419085 CEST	49774	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.583435059 CEST	443	49774	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.583869934 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.583926916 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.584007978 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.584760904 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.584785938 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.588397026 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.588781118 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.588804007 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.591248035 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.591358900 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.591989040 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.592164040 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.592168093 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.601232052 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.601783037 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.601819038 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.607352972 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.607441902 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.607882977 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.608031988 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.608041048 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.608124971 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.608145952 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.608221054 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.608252048 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.608387947 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.609901905 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.609936953 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.610009909 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.610032082 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.610059977 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.618594885 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.618632078 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.618705034 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.618746996 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.618789911 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.620372057 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.620404005 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.620456934 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.620485067 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.620523930 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.620548964 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.622237921 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622272015 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622334957 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.622335911 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622354984 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622394085 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.622441053 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.622457981 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622488022 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622555971 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.622745037 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622771978 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622821093 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.622852087 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.622869015 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.622924089 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.623572111 CEST	49778	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.623603106 CEST	443	49778	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.624048948 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.624191046 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.624281883 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.624716043 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.624744892 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.624821901 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.624847889 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.624866009 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.625103951 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.625140905 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.631445885 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.631478071 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.632957935 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.632997990 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.633081913 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.633128881 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.633152962 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.635584116 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.635612965 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.635695934 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.635730982 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.635746002 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.637494087 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.637562037 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.637610912 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.637667894 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.637686968 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.638375044 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.638456106 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.638484001 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.638506889 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.638578892 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.638578892 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.638816118 CEST	49779	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.638845921 CEST	443	49779	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.639240980 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.639312029 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.639388084 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.640096903 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.640137911 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.711232901 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.712594032 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.712640047 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.714461088 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.714570045 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.718929052 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.719384909 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.719414949 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.719604969 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.722948074 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.723406076 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.723463058 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.725624084 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.725996971 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.726099968 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.726567984 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.726736069 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.726752996 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.726780891 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.731462955 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.760530949 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.760910988 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.760960102 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.762418032 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.762521982 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.762981892 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.763124943 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.763148069 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.763196945 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.771145105 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.771192074 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.771321058 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.771353960 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.771442890 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.772898912 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.772993088 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.773001909 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.773017883 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.773072004 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.779927969 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.779953003 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.780060053 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.780108929 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.780194998 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.781956911 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.782002926 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.782054901 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.782109976 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.782145023 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.782568932 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.782603025 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.782676935 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.782713890 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.782742023 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.784441948 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.784468889 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.784588099 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.784611940 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.786463022 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.786498070 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.786597013 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.786633015 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.786663055 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.787173033 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.787306070 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.787312984 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.787379980 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.789237022 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.790397882 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.790451050 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.790515900 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.790568113 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.790591002 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.791250944 CEST	49775	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.791286945 CEST	443	49775	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.791332960 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.791727066 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.791783094 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.791894913 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.792017937 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.792071104 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.792121887 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.792144060 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.792185068 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.792545080 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.792587042 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.793073893 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.793124914 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.794006109 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.794053078 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.794101954 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.794136047 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.794169903 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.794200897 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.794220924 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.794318914 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.797388077 CEST	49776	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.797431946 CEST	443	49776	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.797749996 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.797790051 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.797869921 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.798026085 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.798134089 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.798677921 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.798701048 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.799268961 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.799688101 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.799782038 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.824579954 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.824636936 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.824728966 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.824728966 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.824784040 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.824893951 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.826169014 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.826225042 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.826342106 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.826342106 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.826384068 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.827198982 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.827689886 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.827719927 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.830914974 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.831026077 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.831449032 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.831482887 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.831671953 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.831950903 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.831973076 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.832057953 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.835239887 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.835297108 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.835391998 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.835444927 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.835488081 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.837078094 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.837140083 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.837172985 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.837223053 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.837260962 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.838895082 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.838965893 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.838999033 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.839032888 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.839066029 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.839699984 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.839804888 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.839838028 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.839937925 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.840019941 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.840193987 CEST	49777	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.840240955 CEST	443	49777	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.840554953 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.840605021 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.840689898 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.841578960 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.841603041 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.858292103 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.858383894 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.858817101 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.858854055 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.926044941 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.926079988 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.926157951 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.933113098 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.946163893 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.946598053 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.946669102 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.949654102 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.949810982 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.950361967 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.950489044 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.950525045 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.950555086 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.950578928 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.950608969 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.950663090 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.950684071 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.950685024 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.950716972 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.950754881 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.950783968 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.950835943 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.950882912 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.951086998 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.951225042 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.951255083 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.951289892 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.951339960 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.951343060 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.951343060 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.951375961 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.951400042 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.951436043 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.960381031 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.960402966 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.960445881 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.960472107 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.960485935 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.960495949 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.960536957 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.960551977 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.960567951 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.960586071 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.960609913 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.960613012 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.960645914 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.960663080 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.961067915 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.971671104 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.971972942 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.972011089 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.973378897 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.973458052 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.973937035 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.974184036 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:32.974199057 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:32.999747038 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.000119925 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.000147104 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.001725912 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.002851009 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.002924919 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.003173113 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.003212929 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.003220081 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.003340006 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.003978968 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.004506111 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.004697084 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.004708052 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.004733086 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.020281076 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.029088974 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.029119015 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.029198885 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.029203892 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.029226065 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.029295921 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.029371023 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.029431105 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.030389071 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.030462027 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.030519962 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.030585051 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.030596018 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.030622959 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.032764912 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.032810926 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.032883883 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.032906055 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.032959938 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.032969952 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.034511089 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.034549952 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.034667015 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.034692049 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.036043882 CEST	49769	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.036065102 CEST	443	49769	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.036550999 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.036593914 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.036683083 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.038037062 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.038063049 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.039414883 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.039453030 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.039503098 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.039520025 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.039552927 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.040390968 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.040431976 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.040479898 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.040482044 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.040505886 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.040519953 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.040540934 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.041109085 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.041141033 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.041218996 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.041234016 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.041260958 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.041285992 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.041910887 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.041965961 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.041979074 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.041990995 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.042016029 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.042031050 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.042038918 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.042062998 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.042073965 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.042095900 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.042845011 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.042903900 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.042949915 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.042975903 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.042998075 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.043225050 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.043277025 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.043344021 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.043355942 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.043400049 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.043400049 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.043919086 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.043962002 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.044028044 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.044049978 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.044064045 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.044091940 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.044099092 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.044167042 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.044181108 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.044219017 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.044238091 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.044276953 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.044807911 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.044855118 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.044903040 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.044920921 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.044959068 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.045650005 CEST	49788	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.045670986 CEST	443	49788	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.046094894 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.046150923 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.046241999 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.046550989 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.046611071 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.046637058 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.046667099 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.046685934 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.046721935 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.046766043 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.048604965 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.048649073 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.050993919 CEST	49785	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.051034927 CEST	443	49785	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.051214933 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.051285982 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.051307917 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.051335096 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.051353931 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.051361084 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.051389933 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.051399946 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.051441908 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.065576077 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.065860987 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.065892935 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.068259001 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.068778992 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.068973064 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.068989992 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.069118023 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.097230911 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.097313881 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.097429991 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.097484112 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.097515106 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.097572088 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.097588062 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.097645044 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.098859072 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.098939896 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.099006891 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.099034071 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.099066019 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.101088047 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.107671022 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.107741117 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.107779026 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.107827902 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.107881069 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.107909918 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.109570026 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.109612942 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.109673023 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.109690905 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.109728098 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.109780073 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.110632896 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.110717058 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.110774040 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.110795021 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.110795021 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.110867023 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.111112118 CEST	49783	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.111135960 CEST	443	49783	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.125485897 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.125864983 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.125863075 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.125902891 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.125910997 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.131524086 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.131572008 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.131655931 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.131668091 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.131705046 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.131742001 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.131742001 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.131815910 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.132049084 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.132108927 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.132961035 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.132999897 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.133066893 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.133088112 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.133120060 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.134413004 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.135915041 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.135951996 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.136049986 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.136086941 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.136109114 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.136183977 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.136183977 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.136225939 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.136240959 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.136274099 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.136373997 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.137485981 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.137515068 CEST	443	49770	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.137542009 CEST	49770	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.137890100 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.137952089 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.138236046 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.139722109 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.139748096 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.184628963 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.184760094 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.184901953 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.185595989 CEST	49768	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.185631990 CEST	443	49768	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.226125002 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.227072954 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.236938000 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.237396955 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.237461090 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.238748074 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.239387989 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.239584923 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.239598036 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.239722967 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.240511894 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.241296053 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.241336107 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.242319107 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.245620966 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.245866060 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.245886087 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.245965958 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.268309116 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.268353939 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.268517971 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.268554926 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.268640041 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.268642902 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.268682003 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.268702030 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.268748045 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.268785954 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.272998095 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.273031950 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.273140907 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.273160934 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.273232937 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.274775028 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.274832964 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.274936914 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.274960995 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.274985075 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.275135040 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.275288105 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.275372028 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.277771950 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.277806997 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.277857065 CEST	49773	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.277894020 CEST	443	49773	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.277904034 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.277935028 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.277968884 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.279412031 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.279444933 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.279529095 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.279548883 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.279567957 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.279591084 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.279612064 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.279637098 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.285140991 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.285197020 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.285336018 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.285358906 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.285388947 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.287179947 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.287209034 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.287331104 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.287331104 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.287352085 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.288868904 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.288960934 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.288988113 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.289002895 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.289031982 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.289057016 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.289057016 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.289093018 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.291898966 CEST	49786	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.291944981 CEST	443	49786	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.292870045 CEST	49791	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.292912960 CEST	443	49791	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.382133961 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.382546902 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.382684946 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.388519049 CEST	49771	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.388580084 CEST	443	49771	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.400929928 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.401226044 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.401252031 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.402682066 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.404678106 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.404866934 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.404881001 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.405193090 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.406368017 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.408418894 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.408446074 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.409565926 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.410888910 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.411056995 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.411067963 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.411096096 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.415328026 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.415358067 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.415416002 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.415430069 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.415538073 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.415596008 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.429532051 CEST	49772	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.429558992 CEST	443	49772	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.431546926 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.435110092 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.435132980 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.435220003 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.435235023 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.435283899 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.435359001 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.435439110 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.436896086 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.436932087 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.436992884 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.437006950 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.437032938 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.437052011 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.439973116 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.440032959 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.440881014 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.441422939 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.442034006 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.443562031 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.444639921 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.445282936 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.445307016 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.445777893 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.445878983 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.445894003 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.445985079 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.445991993 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.446285009 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.446438074 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.447288036 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.447359085 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.447393894 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.447406054 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.447434902 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.447477102 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.447762966 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.447942019 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.447990894 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.448179007 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.448191881 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.448216915 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.449919939 CEST	49789	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.449937105 CEST	443	49789	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.484306097 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.525975943 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.531574011 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.847862959 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.848005056 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.848097086 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.848141909 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.849952936 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.850001097 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.850066900 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.850094080 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.850164890 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.851783037 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.851874113 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.851921082 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.851932049 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.851947069 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.852071047 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.865740061 CEST	49796	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.865777016 CEST	443	49796	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.885456085 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.885653973 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.885952950 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.886957884 CEST	49794	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.886989117 CEST	443	49794	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.892631054 CEST	49793	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.892657995 CEST	443	49793	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.901181936 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.901253939 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.901351929 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.901633978 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.901652098 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.970623970 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.970669985 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.970813036 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.971175909 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.971199989 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.985315084 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.985382080 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.985466957 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.986766100 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.986815929 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.986897945 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.988203049 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.988253117 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.988365889 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.989299059 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.989335060 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.989595890 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.989639044 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.990331888 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.990391016 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.990470886 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.991065025 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.991111994 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:33.991835117 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:33.991862059 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.020693064 CEST	49824	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.020756960 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.020955086 CEST	49824	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.021320105 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.021385908 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.021466970 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.021990061 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.022038937 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.022130013 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.022346020 CEST	49824	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.022409916 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.022576094 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.022620916 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.022876978 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.022906065 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.098400116 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.099159956 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.099201918 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.102910042 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.103467941 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.103631020 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.103646040 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.103868961 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.180197001 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.180650949 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.180697918 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.182445049 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.182632923 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.183085918 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.183238983 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.183264017 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.183317900 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.258938074 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.259423018 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.259453058 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.260921001 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.261460066 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.261672020 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.261682987 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.262296915 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.308321953 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.308473110 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.325611115 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.325716972 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.325747013 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.378815889 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.379179955 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.379223108 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.382472992 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.382622957 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.383392096 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.383630991 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.383658886 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.383817911 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.414663076 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.415895939 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.415930033 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.417828083 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.417944908 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.419687033 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.428926945 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.430325985 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.430706978 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.431590080 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.431626081 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.439785004 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.439838886 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.440028906 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.440063953 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.441854000 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.442013025 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.445621967 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.445898056 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.445954084 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.461081982 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.467297077 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.467329979 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.468497992 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.469005108 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.469197989 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.469235897 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.475649118 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.475966930 CEST	49824	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.475997925 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.476671934 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.477319956 CEST	49824	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.477513075 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.477999926 CEST	49824	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.488284111 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.507905006 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.508070946 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.508147001 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.509371996 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.509371996 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.509402990 CEST	443	49825	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.509471893 CEST	49825	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.511275053 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.511548996 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.511591911 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.512290955 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.513257027 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.513356924 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.513995886 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.514138937 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.514183998 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.517343998 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.517393112 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.517472982 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.517966032 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.517982006 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.520296097 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.531764030 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.531764984 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.532753944 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.532824039 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.532907009 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.532932997 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.532991886 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.533001900 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.533068895 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.534667015 CEST	49816	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.534698009 CEST	443	49816	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.546092987 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.546170950 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.546261072 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.546483040 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.546505928 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.556282043 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.609303951 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.609335899 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.609345913 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.609361887 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.609369993 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.609378099 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.609447956 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.609477997 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.609504938 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.609519958 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.609536886 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.626658916 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.626687050 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.626733065 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.631589890 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.631618977 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.697988987 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.698004961 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.698066950 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.698081017 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.698112011 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.698137999 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.698287010 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.698298931 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.698308945 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.698373079 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.699713945 CEST	49823	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.699747086 CEST	443	49823	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.705827951 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.706295013 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.706336021 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.707242966 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.707838058 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.708081961 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.708308935 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.709850073 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.709916115 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.710000992 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.710597992 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.710630894 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.731594086 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.752296925 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.800988913 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.801039934 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.801059008 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.801088095 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.801121950 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.801134109 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.801136017 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.801165104 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.801170111 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.801192999 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.801211119 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.801234961 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.801249027 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.805700064 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.805928946 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.806019068 CEST	49824	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.812693119 CEST	49824	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.812745094 CEST	443	49824	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.815099955 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.815809011 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.815828085 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.815884113 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.815931082 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.815988064 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.816023111 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.825875998 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.856693029 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.857168913 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.857196093 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.858494997 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.859462023 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.859790087 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.859991074 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.867983103 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:34.868036032 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:34.868112087 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:34.868381023 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:34.868412018 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:34.877629995 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.877660036 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.877679110 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.877691031 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.877716064 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.877783060 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.877816916 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.877863884 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.877994061 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.878011942 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.878027916 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.878050089 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.878078938 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.879388094 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.879405022 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.879445076 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.879456997 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.879498005 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.879548073 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.879574060 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.900294065 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906044006 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906066895 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906131029 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906156063 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906171083 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906183004 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.906229973 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906259060 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.906259060 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.906660080 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906724930 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.906874895 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.906905890 CEST	443	49820	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906928062 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906955957 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.906965971 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906977892 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.906979084 CEST	49820	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.907018900 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.907026052 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.907078028 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.907115936 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.907115936 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.907124996 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.907170057 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.911900043 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.911926985 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.911937952 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.911988020 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.911993980 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.912033081 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.912053108 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.912081003 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.912082911 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912082911 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912082911 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912082911 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912091017 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.912132025 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.912158012 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912158012 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912158012 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912178040 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.912199020 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912620068 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.912687063 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.912704945 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.912740946 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.912760019 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.912803888 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.912971973 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.912995100 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.913281918 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.913377047 CEST	443	49826	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:34.913443089 CEST	49826	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:34.914573908 CEST	49817	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.914609909 CEST	443	49817	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.917889118 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.917967081 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.918103933 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.918462038 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.918498993 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.968878031 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.968904018 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.968940973 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.968986988 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.969002008 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.969024897 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.969079018 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.969142914 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.969177008 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.969259977 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.970748901 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.970767021 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.970792055 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.970837116 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.970850945 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.970856905 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.970877886 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.970910072 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.970935106 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.970959902 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.970969915 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.970994949 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:34.971012115 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:34.971055984 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.002197027 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.002258062 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.002351046 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.002381086 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.002413034 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.004040003 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.004060984 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.004090071 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.004102945 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.004204988 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.004235983 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.004276037 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.020788908 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:35.020860910 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:35.020910025 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:35.020982027 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:35.021028996 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:35.021068096 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:35.021074057 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:35.021225929 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:35.022069931 CEST	49833	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:35.022098064 CEST	443	49833	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:35.060040951 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.060066938 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.060601950 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.060658932 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.060796976 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.060868979 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.061523914 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.061552048 CEST	443	49822	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.061567068 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.061611891 CEST	49822	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.065078020 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.065501928 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.065524101 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.067406893 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.068120956 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.068557978 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.068573952 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.068645954 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.070086956 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.070144892 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.070250034 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.070514917 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.070543051 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.088093996 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.090867043 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.090900898 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.091867924 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.092422009 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.092576027 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.092618942 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.093359947 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.093415976 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.093441010 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.093456984 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.093472004 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.093492031 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.093534946 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.095319033 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.095330000 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.095376968 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.095398903 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.095403910 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.095419884 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.095447063 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.095464945 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.095474005 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.095498085 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.095498085 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.097074986 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.097125053 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.097150087 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.097171068 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.097181082 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.097201109 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.097214937 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.097233057 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.099000931 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.099076986 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.099087000 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.099107027 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.099126101 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.099148989 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.099208117 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.109101057 CEST	49821	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.109126091 CEST	443	49821	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.114195108 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.114584923 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.114634037 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.115689039 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.117343903 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.117563963 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.117575884 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.117614031 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.126312017 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.129074097 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.129136086 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.129220009 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.129585981 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.129614115 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.136290073 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.231687069 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.231703997 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.276348114 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.276861906 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.276901960 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.279793024 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.279916048 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.282279015 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.282316923 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.282345057 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.282457113 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.282495022 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.282569885 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.282586098 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.283729076 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.284003973 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.284027100 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.284159899 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.284369946 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.284403086 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.285520077 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.286142111 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.286417007 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.286432981 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.286453962 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.349061966 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.372589111 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.372615099 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.372679949 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.372706890 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.372750998 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.372809887 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.372838020 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.372840881 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.372878075 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.372893095 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.380697966 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.380733013 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.383094072 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.393501043 CEST	49834	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.393546104 CEST	443	49834	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.395562887 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.396058083 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.410027981 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.440691948 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.440706968 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.440737963 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.452286959 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.523871899 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.523957968 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.523982048 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.524127007 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.524127007 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.524162054 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.524215937 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.524353981 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.527638912 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.527731895 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.527829885 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.530591011 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.530673027 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.530733109 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.530754089 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.530781031 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.530805111 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.530805111 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.530810118 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.530850887 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.530879974 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.530886889 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.530917883 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.531167984 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.531244993 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.542581081 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.542654037 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.542675972 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.542738914 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.542759895 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.542778015 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.542808056 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.542856932 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.542880058 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.542927027 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.542927027 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.542929888 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.543020964 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.567497015 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.570225954 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.570894957 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.576905012 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.577068090 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.577653885 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.620300055 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.625663996 CEST	49838	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.625705957 CEST	443	49838	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.625718117 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.643174887 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.643230915 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.643332958 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.643717051 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.643750906 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.655200005 CEST	49845	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.655241013 CEST	443	49845	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.661838055 CEST	49844	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.661896944 CEST	443	49844	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.709655046 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.710342884 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.710413933 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.711288929 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.712052107 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.712287903 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.712301970 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.756303072 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.757323027 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.758881092 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.758908033 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.758940935 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.758953094 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.758965015 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.759052992 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.759119987 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.759136915 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.759150028 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.759186029 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.822581053 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.824172974 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.824197054 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.824234009 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.824320078 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.824321032 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.824348927 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.824394941 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.824421883 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.824434042 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.824454069 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.824470043 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.824486017 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.826689959 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.827285051 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.830446959 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.830492973 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.830584049 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.830804110 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.830833912 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.832988977 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.833024979 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.833093882 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.833427906 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.833446026 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.846493006 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.846513033 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.846575022 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.846604109 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.846632004 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.846688032 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.846688032 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.846749067 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.846757889 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.846826077 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.871119976 CEST	49848	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.871159077 CEST	443	49848	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.891333103 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.891396046 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.891483068 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.891855955 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.891870975 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.896478891 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.906435966 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.906466961 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.906532049 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.906563044 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.906570911 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.906621933 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.906644106 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.906660080 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.906692028 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.906706095 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.908865929 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.909296036 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.909338951 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.910200119 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.911048889 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.911201000 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.911211014 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.911245108 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.911663055 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.912019014 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.912058115 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.913482904 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.913924932 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.913969994 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.914046049 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.914087057 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.914110899 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.914223909 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.914391041 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.914755106 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.914995909 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.915097952 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.915102005 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.915153980 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.920536995 CEST	49851	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.920584917 CEST	443	49851	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.924910069 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.925008059 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.925138950 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.925723076 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.925757885 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.942583084 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.942611933 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.942666054 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.942686081 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.942703009 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.942718029 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.942733049 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.942765951 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.942775965 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.942791939 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.947032928 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.947541952 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.947581053 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.950920105 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.951035976 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.951462984 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.951577902 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.951773882 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.951800108 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.956284046 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.956762075 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.956809998 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.956870079 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.956891060 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.956902027 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.956922054 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.956943035 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.956950903 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.956964970 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.956989050 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.956995964 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.957010984 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.959121943 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.959490061 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.960443020 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.961133003 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.961280107 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:35.961580992 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:35.970001936 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.970037937 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.970113993 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.970134974 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.970139027 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.970174074 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.970191002 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.970212936 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.979542971 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.979583025 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.979633093 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.979697943 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.979722023 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.979749918 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.989950895 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.989985943 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.990106106 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.990139008 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.990173101 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.998497009 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.998534918 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:35.998651981 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:35.998672962 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.003994942 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.004060030 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.004139900 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.004157066 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.004196882 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.004316092 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.009073973 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.009135962 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.009287119 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.009308100 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.009330988 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.013325930 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.013406038 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.013509035 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.013535023 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.013555050 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.018143892 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.018215895 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.018297911 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.018323898 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.018343925 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.021728039 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.021790028 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.021877050 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.021903992 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.021927118 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.026017904 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.026438951 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.026561975 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.026633978 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.026659012 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.026700020 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.029725075 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.029803991 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.029851913 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.029874086 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.029892921 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.031702042 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.033082008 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.033153057 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.033207893 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.033231974 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.033252001 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.033401966 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.033477068 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.080285072 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.116452932 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.116560936 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.116607904 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.116730928 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.116770029 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.116790056 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.116833925 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.150276899 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.150314093 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.150321960 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.150382042 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.150413990 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.150432110 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.150449991 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.206475019 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.206523895 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.206598997 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.206639051 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.206686974 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.206715107 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.206737041 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.207400084 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.207532883 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.207562923 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.207659960 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.208750010 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.208899021 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.208925962 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.225449085 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.225507975 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.225613117 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.226655960 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.226679087 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.235657930 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.235721111 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.235841036 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.236535072 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.236567974 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.239058018 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.239089012 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.239110947 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.239187002 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.239218950 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.239243031 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.239248991 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.239269018 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.239331961 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.239348888 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.239365101 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.239583969 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.239654064 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.256252050 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.256323099 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.256416082 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.256855965 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.256870031 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.288068056 CEST	49842	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:36.288121939 CEST	443	49842	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:36.297806978 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.297869921 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.297947884 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.297969103 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.297991991 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.299582005 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.299637079 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.299699068 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.299700022 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.299724102 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.299742937 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.299746990 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.299770117 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.299807072 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.299814939 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.301536083 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.301601887 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.301672935 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.301690102 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.301702976 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.301760912 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.303246975 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.303327084 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.303375959 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.303389072 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.303404093 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.303428888 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.303445101 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.303467035 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.303519011 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.303543091 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.305099964 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.305183887 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.305226088 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.305241108 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.305254936 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.305293083 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.306292057 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.307358980 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.307481050 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.313026905 CEST	49856	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.313040972 CEST	443	49856	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.319111109 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.319195032 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.319294930 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.320192099 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.320229053 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.342171907 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.342591047 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.342631102 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.343676090 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.344010115 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.344059944 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.344088078 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.344181061 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.344206095 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.344228029 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.344224930 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.344309092 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.344463110 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.344599009 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.345590115 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.345613003 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.355920076 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.356255054 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.356292009 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.360821009 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.360953093 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.361429930 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.361597061 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.361777067 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.361803055 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.361881018 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.362303972 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.362634897 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.362689972 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.363946915 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.364404917 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.364538908 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.364557028 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.364584923 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.371582031 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.371948004 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.371982098 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.374825001 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.374933958 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.375601053 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.375773907 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.375988960 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.376013041 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.376071930 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.387450933 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.387516022 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.387670994 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.387974024 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.388076067 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.388134956 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.394047022 CEST	49855	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.394074917 CEST	443	49855	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.402026892 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.402101040 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.402208090 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.402432919 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.402503967 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.404294968 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.416296005 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.422805071 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.422882080 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.423008919 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.423042059 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.423126936 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.423199892 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.429843903 CEST	49860	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.429891109 CEST	443	49860	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.431756973 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.431761026 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.433655024 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.433794975 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.433821917 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.435736895 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.435798883 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.435894012 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.435915947 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.435935020 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.436640024 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.436748981 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.436755896 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.436816931 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.437937975 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.438314915 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.438877106 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.439481974 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.439529896 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.439543962 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.439701080 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.441032887 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.441175938 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.441196918 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.441215038 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.441292048 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.441292048 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.441324949 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.446054935 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.446105957 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.446197033 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.460383892 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.466614008 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.466665030 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.467814922 CEST	49858	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.467842102 CEST	443	49858	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.472733974 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.472774029 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.472846985 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.473598957 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.473618984 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.498230934 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.498605967 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.499489069 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.499963045 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.500082970 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.500111103 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.507981062 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.508317947 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.508860111 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.510186911 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.510354042 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.510612965 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.531774998 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.531785965 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.532877922 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.532895088 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.532919884 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.532932043 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.532963037 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.532984018 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.532998085 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.533071995 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.533071995 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.534625053 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.534652948 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.534703970 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.534723997 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.534728050 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.534764051 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.534790993 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.534811974 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.540282011 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.542464972 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.542524099 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.542577982 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.542598009 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.542613983 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.542639971 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.551841974 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.551861048 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.551908970 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.551934958 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.551947117 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.551945925 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.552017927 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.552047014 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.552078009 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.552078009 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.552078009 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.552117109 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.552279949 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.621648073 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.622545004 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.622606993 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.622704983 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.622744083 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.622769117 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.624043941 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.624125957 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.624169111 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.624197960 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.624222994 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.624330997 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.624535084 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.624629974 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.625505924 CEST	49863	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.625539064 CEST	443	49863	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.625813961 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.625894070 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.625943899 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.625998020 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.626028061 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.626053095 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.631783962 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.633275986 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.633346081 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.633471966 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.633481979 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.633497000 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.633517981 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.633557081 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.642956018 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.642980099 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.643042088 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.643065929 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.643090010 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.643104076 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.643137932 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.643188953 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.662986994 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.663219929 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.663333893 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.665011883 CEST	49864	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:36.665039062 CEST	443	49864	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:36.713155031 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.713185072 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.713335037 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.713365078 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.714215994 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.714256048 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.714327097 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.714345932 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.714447975 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.715070009 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.715178013 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.715190887 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.715300083 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.715317011 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.716021061 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.716092110 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.716109991 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.716144085 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.716173887 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.716905117 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.717012882 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.717015982 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.717036009 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.717111111 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.717863083 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.717940092 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.717973948 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.718035936 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.718065023 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.718122005 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.718159914 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.718235016 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.719033003 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.719156027 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.719468117 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.719485044 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.719542027 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.719705105 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.719759941 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.719777107 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.719793081 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.719835997 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.720741034 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.720771074 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.720833063 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.720870018 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.720887899 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.720917940 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.720961094 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.721034050 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.721062899 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.734420061 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.734443903 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.734483957 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.734524012 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.734569073 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.734622955 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.734654903 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.781282902 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781346083 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781368971 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781410933 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781435013 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781454086 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781476021 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.781521082 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781549931 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.781549931 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.781562090 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781594992 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.781606913 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.781667948 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.786514997 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.804903030 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.804944038 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.805181980 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.805181980 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.805222034 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.805521011 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.805661917 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.805928946 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.805928946 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.805947065 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.806040049 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.806104898 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.806143999 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.806159973 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.806185961 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.806289911 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.806410074 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.806720018 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.806756973 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.806838989 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.806845903 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.806863070 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.806912899 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.806950092 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.806961060 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.807375908 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.807414055 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.807502031 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.807531118 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.807554960 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.808110952 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.808173895 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.808321953 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.808321953 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.808353901 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.808793068 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.808842897 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.808897018 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.808921099 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.808960915 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.809475899 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.809509039 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.809588909 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.809613943 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.809633970 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.809712887 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.809746981 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.809787035 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.809803009 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.809923887 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.810544968 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.810606003 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.810656071 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.810674906 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.810693026 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.810733080 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.811319113 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.811358929 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.811424017 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.811431885 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.811451912 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.811482906 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.811482906 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.811500072 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.811513901 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.811621904 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.811685085 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.825598955 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.825663090 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.825706959 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.825743914 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.825989008 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.825989008 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.826039076 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.828882933 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.870825052 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.871022940 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.871063948 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.871197939 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.905812025 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.907593966 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.907638073 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.907660961 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.907731056 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.907749891 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.907759905 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.907809973 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.907841921 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.907841921 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.907876968 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.907928944 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.916523933 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.916548967 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.916580915 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.916594028 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.916604996 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.916625023 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.916687012 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.916738987 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.916768074 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.925955057 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.926012993 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.926057100 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.926153898 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.926176071 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.926242113 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.956641912 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.956758976 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.956823111 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.956873894 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.956933975 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.981703997 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.981777906 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.981803894 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.981852055 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.981883049 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.981898069 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.981920004 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.981920958 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.981920004 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.981983900 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.981982946 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:36.982054949 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.997632027 CEST	49866	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:36.997697115 CEST	443	49866	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.003277063 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.003356934 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.003453016 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.004095078 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.004136086 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.005177021 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.005269051 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.005304098 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.005363941 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.005398035 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.005398035 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.006313086 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.006350994 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.006423950 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.006464958 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.006493092 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.006567001 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.006629944 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.006855011 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.006886005 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.006939888 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.006966114 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.006980896 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.006992102 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.007028103 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.007057905 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.007117987 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.007133961 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.007217884 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.007241964 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.008244991 CEST	49857	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.008297920 CEST	443	49857	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.016148090 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.016187906 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.016309023 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.016334057 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.016362906 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.016391039 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.016391039 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.018043995 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.018125057 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.018171072 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.018183947 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.018256903 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.023042917 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.023116112 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.023200035 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.024602890 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.024643898 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.027992010 CEST	49859	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.028029919 CEST	443	49859	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.041104078 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:37.041237116 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:37.041328907 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:37.042246103 CEST	49862	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:37.042277098 CEST	443	49862	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:37.043956995 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.044348955 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.044397116 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.045546055 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.046071053 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.046289921 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.046288967 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.048671007 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.048717022 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.048840046 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.049045086 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.049063921 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.062592983 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.071254969 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.071278095 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.071373940 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.071433067 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.071434975 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.071475983 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.071490049 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.071532965 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.073019981 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.073071003 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.073141098 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.073179960 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.073209047 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.073230028 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.073257923 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.087601900 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.088295937 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.088658094 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.088740110 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.088812113 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.088849068 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.088861942 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.090508938 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.090533018 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.090583086 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.090610027 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.090641975 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.090665102 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.090677977 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.090687037 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.090738058 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.090815067 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.090825081 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.092530012 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.092605114 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.092633963 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.092679024 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.092713118 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.092730045 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.094325066 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.094372034 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.094486952 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.094512939 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.094728947 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.094950914 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.095072031 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.106395960 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.106462955 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.106849909 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.106872082 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.106898069 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.107294083 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.114398956 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.114500046 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.114573956 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.114609003 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.114628077 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.127573967 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.127578020 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.127578020 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.132251978 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.132340908 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.132420063 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.132452965 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.132476091 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.132513046 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.167102098 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.167164087 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.167332888 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.167397022 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.167432070 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.168682098 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.168731928 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.168839931 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.168898106 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.168931961 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.170562983 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.170622110 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.170800924 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.170835972 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.170933008 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.171425104 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.171565056 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.171596050 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.171631098 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.171706915 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.179349899 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.179464102 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.179507017 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.179603100 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.179634094 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.179652929 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.180143118 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.180201054 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.180315971 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.180342913 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.180401087 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.181998014 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.182048082 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.182136059 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.182163000 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.182177067 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.183640957 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.183701992 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.183765888 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.183789968 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.183803082 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.184521914 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.184570074 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.184633017 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.184633017 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.184654951 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.185529947 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.185578108 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.185636044 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.185657978 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.185691118 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.187530041 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.187577963 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.187649965 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.187660933 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.187673092 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.187693119 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.187786102 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.187797070 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.187880039 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.187935114 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.203130007 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.203227997 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.203491926 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.204078913 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.204121113 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.204998016 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.205190897 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.205451012 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.206288099 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.206460953 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.207526922 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.207815886 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.248291016 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.248306036 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.262767076 CEST	49869	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.262805939 CEST	443	49869	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.269887924 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.269958973 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.270031929 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.272656918 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.272692919 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.287349939 CEST	49868	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.287391901 CEST	443	49868	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.309700012 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.310096025 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.310574055 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.311151028 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.311255932 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.311465025 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.316529989 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.316576004 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.316663027 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.316890955 CEST	49867	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.316916943 CEST	443	49867	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.318540096 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.318567991 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.325732946 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.325790882 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.325872898 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.326174021 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.326211929 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.352296114 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.370505095 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.371699095 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.371735096 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.372443914 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.373665094 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.374769926 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.374907970 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.375181913 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.375207901 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.375344992 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.375842094 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.376627922 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.376770020 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.376785994 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.416284084 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.420325041 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.431857109 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.498151064 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.498189926 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.498202085 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.498308897 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.498331070 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.498347998 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.498363972 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.498418093 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.498426914 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.498445034 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.498492956 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.498492956 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.498508930 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.503124952 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.503237009 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.503284931 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.503360987 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.503381968 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.503407001 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.503436089 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.503468037 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.503532887 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.562872887 CEST	49875	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.562897921 CEST	443	49875	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.566962957 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.567013025 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.567101955 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.567553997 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.567583084 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.590795040 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.590852022 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.590956926 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.590985060 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.591007948 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.591023922 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.591048956 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.591144085 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.591253996 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.591273069 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.591356993 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.591417074 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.601182938 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.601613998 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.602390051 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.603276014 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.603414059 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.603729010 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.608421087 CEST	49870	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.608484030 CEST	443	49870	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.631567001 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.631633997 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.631742954 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.632278919 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.632302046 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.644287109 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.647609949 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.647653103 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.647732019 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.647751093 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.647752047 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.647789001 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.647814035 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.647826910 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.647859097 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.673141956 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.673481941 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.673536062 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.674212933 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.674632072 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.674772978 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.674787998 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.707824945 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.709424973 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.709469080 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.709482908 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.709527969 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.709553003 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.709573984 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.709592104 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.709619999 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.709660053 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.709675074 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.709693909 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.716299057 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.735951900 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.736753941 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.736835003 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.736897945 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.736928940 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.736991882 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.737926960 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.738010883 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.738030910 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.738053083 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.738095999 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.738635063 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.738704920 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.747400045 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.747499943 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.747607946 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.747612953 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.747647047 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.747687101 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.747704983 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.748586893 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.748708963 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.796627045 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.796750069 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.796771049 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.798562050 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.798603058 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.798631907 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.798666954 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.798681974 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.798707008 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.798751116 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.798774958 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.798809052 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.798820972 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.798845053 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.798866034 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.798875093 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.800295115 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.800329924 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.800400972 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.800410032 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.800431967 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.800443888 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.800467968 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.800477028 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.800503016 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.828613043 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.828646898 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.828749895 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.828802109 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.828852892 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.831123114 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.838643074 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.838751078 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.838809013 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.838834047 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.838859081 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.838881969 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.841546059 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.841586113 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.841639042 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.841643095 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.841667891 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.841702938 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.841702938 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.842315912 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.842408895 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.842432976 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.842462063 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.842528105 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.889076948 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.889128923 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.889136076 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.889163017 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.889166117 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.889197111 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.889889956 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.889909029 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.889945030 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.889960051 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.889976978 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.889990091 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.890029907 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.890038967 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.890120029 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.890161991 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.927248955 CEST	49872	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.927315950 CEST	443	49872	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.936589003 CEST	49876	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.936659098 CEST	443	49876	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.938159943 CEST	49871	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.938180923 CEST	443	49871	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.942790985 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.942868948 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.942972898 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.945538998 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.945600033 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.949089050 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.949167013 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.949274063 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.949316978 CEST	49874	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.949366093 CEST	443	49874	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.950314999 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.950372934 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.950460911 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.950689077 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.950742006 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.951241970 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.951276064 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.992439032 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.994410992 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:37.994446039 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:37.994949102 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.022315979 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.026129007 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.064552069 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.064615965 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.064832926 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.064912081 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.066251040 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.068648100 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.069184065 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.081186056 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.081218958 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.081255913 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.081429005 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.081459999 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.081549883 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.128876925 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.131491899 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.165646076 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.165710926 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.165760994 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.165838957 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.165838957 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.165859938 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.165899992 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.165955067 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.171844959 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.171876907 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.171983004 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.172015905 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.172034025 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.172065020 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.173738003 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.173767090 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.173845053 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.173887014 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.173911095 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.173929930 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.173962116 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.247997046 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.248425007 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.248754978 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.249171972 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.261712074 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.262000084 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.262180090 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.262233973 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.262257099 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.262342930 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.263178110 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.263216019 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.263292074 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.263341904 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.263395071 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.263395071 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.264977932 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.265016079 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.265077114 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.265079021 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.265098095 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.265120029 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.265141964 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.267065048 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.267105103 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.267165899 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.267208099 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.267232895 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.267255068 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.273813009 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.273889065 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.273919106 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.273945093 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.273962975 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.273991108 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.274554968 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.274632931 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.274646997 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.274687052 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.274710894 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.274712086 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.274754047 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.294493914 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.295465946 CEST	49878	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.295509100 CEST	443	49878	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.304307938 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.304335117 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.328510046 CEST	49877	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.328562021 CEST	443	49877	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.331872940 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.331904888 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.525968075 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.683801889 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.683859110 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.683871984 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.683907986 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.683928013 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.683979988 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.684019089 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.684041977 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.684278011 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.684350967 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.691293955 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.691329956 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.691421032 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.691442013 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.691492081 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.713380098 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.713466883 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.713481903 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.713615894 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.713666916 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.713742971 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.714019060 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.714143038 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.714215994 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.780725002 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.780745983 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.780777931 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.780810118 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.780848026 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.780899048 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.780919075 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.780982971 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.780993938 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.781054974 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.782105923 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.782397032 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.782447100 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.782517910 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.782536983 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.782562017 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.793785095 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.793843031 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.793921947 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.793943882 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.793962002 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.793966055 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.793986082 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.794014931 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.954010010 CEST	49881	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.954062939 CEST	443	49881	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:38.989171982 CEST	49879	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:38.989197016 CEST	443	49879	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:39.003763914 CEST	49880	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:39.003793001 CEST	443	49880	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:40.099136114 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:40.099301100 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:40.099405050 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:40.585479021 CEST	49728	443	192.168.2.5	172.217.168.4
Jul 21, 2023 18:50:40.585535049 CEST	443	49728	172.217.168.4	192.168.2.5
Jul 21, 2023 18:50:42.629089117 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.629160881 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.629254103 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.631270885 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.631340981 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.631418943 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.632587910 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.632628918 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.632699966 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.634121895 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.634182930 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.634258032 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.635404110 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.635452986 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.635649920 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.635677099 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.635792971 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.635822058 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.636337996 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.636380911 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.714045048 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.714112043 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.714204073 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.716646910 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.716676950 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.731973886 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.732036114 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.732125998 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.732853889 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.732881069 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.811255932 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.822041988 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.906069994 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.906110048 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.912612915 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.912827969 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.930272102 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.932233095 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.939843893 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.939886093 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.940169096 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.940232038 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.940438032 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.940499067 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.940742970 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.940745115 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.940782070 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.940793037 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.940905094 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.940932035 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.941325903 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.941792011 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.942163944 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.942179918 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.942269087 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.943043947 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.943196058 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.943253994 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.943290949 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.943325996 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.943409920 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.943602085 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.943932056 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.944375038 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.944375992 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.944555044 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.944645882 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.944736958 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.944936991 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.944961071 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.944986105 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.945128918 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.945156097 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.945199966 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.945240021 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.945261002 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.945647955 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.945909977 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.946105003 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.946417093 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.946454048 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.946485043 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.947061062 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.947091103 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.947120905 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:42.955773115 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:42.955868006 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:42.955977917 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:42.956407070 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:42.956466913 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:42.956602097 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:42.956939936 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:42.956990957 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:42.957017899 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:42.957060099 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:42.984297037 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:42.988292933 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.009880066 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.010329008 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.010409117 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.010874033 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.011300087 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.011343002 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.011430025 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.012049913 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.012304068 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.012355089 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.012521982 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.012541056 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.013873100 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.013948917 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.014034986 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.014431953 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.014475107 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.015490055 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.015582085 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.015687943 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.015989065 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.016040087 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.016814947 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.016876936 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.016951084 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.017741919 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.017769098 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.032294989 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.056298018 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.093806028 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.094217062 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.094249964 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.095463037 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.096014023 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.096138954 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.096153975 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.096283913 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.117454052 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.117816925 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.117850065 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.118776083 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.119106054 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.119149923 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.119393110 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.119479895 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.120239019 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.120390892 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.120407104 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.120445013 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.120924950 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.121140957 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.121481895 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.121620893 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.121627092 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.121761084 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.122037888 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.122061014 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.122704029 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.123162985 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.123331070 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.124309063 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.129234076 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.131934881 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.131934881 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.131934881 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.132256031 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.142709017 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.142819881 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.142832994 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.142919064 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.144623041 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.144958973 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.144985914 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.146437883 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.146547079 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.147965908 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.148096085 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.148113966 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.151393890 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.152422905 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.152532101 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.152558088 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.152579069 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.152621031 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.152623892 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.152652979 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.152661085 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.152683973 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.152709007 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.175010920 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.175159931 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.175194979 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.175250053 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.209189892 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.209389925 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.209508896 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.211625099 CEST	49897	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.211669922 CEST	443	49897	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.212100983 CEST	49904	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.212161064 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.212193966 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.212310076 CEST	49904	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.212333918 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.212404966 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.213887930 CEST	49904	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.213912010 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.214112997 CEST	49893	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.214176893 CEST	443	49893	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.215483904 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.215533972 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.215600967 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.216274023 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.216305971 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.232320070 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.266453981 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.266597033 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.266711950 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.276873112 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.277007103 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.277123928 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.278827906 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.278959036 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.279059887 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.288538933 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.288647890 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.288755894 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.297985077 CEST	49894	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.298016071 CEST	443	49894	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.298455000 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.298512936 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.298592091 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.300815105 CEST	49895	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.300847054 CEST	443	49895	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.305116892 CEST	49896	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.305152893 CEST	443	49896	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.306001902 CEST	49892	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.306021929 CEST	443	49892	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.307748079 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.307785034 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.309638023 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.309745073 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.309825897 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.310653925 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.310707092 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.338633060 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.350238085 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.350300074 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.350403070 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.353069067 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.353111982 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.353208065 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.353615046 CEST	49904	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.353636026 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.355462074 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.355720997 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.357002974 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.357028008 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.358113050 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.358154058 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.358439922 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.358503103 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.358971119 CEST	49904	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.359127045 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.359335899 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.359616041 CEST	49904	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.360191107 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.360522032 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.360543966 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.376938105 CEST	49903	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.376976967 CEST	443	49903	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.377510071 CEST	49901	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.377548933 CEST	443	49901	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.378171921 CEST	49900	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.378205061 CEST	443	49900	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.378720045 CEST	49902	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.378755093 CEST	443	49902	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.400290966 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.408298969 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.431983948 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.432028055 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.432040930 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.432167053 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.432198048 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.432988882 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.433008909 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.433054924 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.433074951 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.433085918 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.433096886 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.433105946 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.433144093 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.433276892 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.441145897 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.472803116 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.522793055 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.522815943 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.522933006 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.523008108 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.523016930 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.523025036 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.523072958 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.526484966 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.526722908 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.526798964 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.532296896 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.532301903 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.532922029 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.532938004 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.574031115 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.574083090 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.575972080 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.576018095 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.576582909 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.576766968 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.577020884 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.577049017 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.577543974 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.577560902 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.578475952 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.578548908 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.578586102 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.578789949 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.578989029 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.579313993 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.579448938 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.579473019 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.579528093 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.579541922 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.579835892 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.579916954 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.580694914 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.580816031 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.581482887 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.581628084 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.581651926 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.581655979 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.583256006 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.583290100 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.587290049 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.587335110 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.587357998 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.588968039 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.588983059 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.589021921 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.628299952 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.632288933 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.632752895 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.632752895 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.632771015 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.657226086 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.657356024 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.657418966 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.684758902 CEST	49905	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.684811115 CEST	443	49905	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.685302019 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.685379982 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.685472012 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.685847044 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.686057091 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.686088085 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.686105967 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.686134100 CEST	49904	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.687685013 CEST	49904	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.687710047 CEST	443	49904	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.688479900 CEST	49912	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.688534021 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.688617945 CEST	49912	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.689855099 CEST	49912	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.689888954 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.699702978 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.699771881 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.699886084 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.700697899 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.700737953 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.703481913 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.703521013 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.703599930 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.704202890 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.704231024 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.708587885 CEST	49899	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.708610058 CEST	443	49899	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.712836981 CEST	49898	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.712883949 CEST	443	49898	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.726346016 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.743556023 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.743556023 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.744054079 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.744119883 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.744144917 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.744189978 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.744775057 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.744775057 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.745234013 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.745434046 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.745600939 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.745759964 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.745769978 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.745925903 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.768855095 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.768894911 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.769015074 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.769097090 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.769097090 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.769485950 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.769733906 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.769836903 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.769850969 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.769902945 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.770014048 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:43.770091057 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:43.797652006 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.798110008 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.798157930 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.799379110 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.799839973 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.800106049 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.800496101 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.800543070 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.800590992 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.804954052 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.811111927 CEST	49912	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.811183929 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.813465118 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.813976049 CEST	49912	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.814203024 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.814385891 CEST	49912	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.851851940 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.852024078 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.852144003 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.856303930 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.891139030 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.891277075 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.891377926 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.906369925 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.906507015 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.906622887 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.940850019 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.940973997 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.941056967 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.954462051 CEST	49910	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.954502106 CEST	443	49910	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.955022097 CEST	49915	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.955095053 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.955234051 CEST	49915	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.956994057 CEST	49906	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.957046032 CEST	443	49906	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.957721949 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.957779884 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.957849979 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.959022045 CEST	49908	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.959064007 CEST	443	49908	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.959703922 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.959763050 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.959857941 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.962054014 CEST	49915	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.962100983 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.962249041 CEST	49909	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.962299109 CEST	443	49909	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.964119911 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.964174032 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.964242935 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.966474056 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.966511965 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.966849089 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.966896057 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:43.967482090 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:43.967529058 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.078480005 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.109980106 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.110193968 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.110300064 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.113588095 CEST	49915	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.113635063 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.115101099 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.115109921 CEST	49911	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.115149975 CEST	443	49911	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.116110086 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.116174936 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.116250038 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.117407084 CEST	49915	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.117692947 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.118346930 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.118366957 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.119947910 CEST	49915	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.160336971 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.164443016 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.164632082 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.164779902 CEST	49912	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.191236973 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.194869995 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.195208073 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.231976032 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.232361078 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.289623976 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.289668083 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.289808989 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.289849043 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.290626049 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.290666103 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.290745020 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.290808916 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.290841103 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.290896893 CEST	49912	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.290952921 CEST	443	49912	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.291775942 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.291841984 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.291950941 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.292571068 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.292747974 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.293179989 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.293220997 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.293529987 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.293596983 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.293626070 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.294245005 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.294290066 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.294308901 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.294337034 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.294694901 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.294806004 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.294893980 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.295147896 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.295486927 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.295525074 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.295546055 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.296448946 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.297256947 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.297282934 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.297478914 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.297508955 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.298388958 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.298434019 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.298492908 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.298518896 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.299685001 CEST	49913	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.299724102 CEST	443	49913	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.305051088 CEST	49914	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.305088997 CEST	443	49914	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.411191940 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.412883997 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.412916899 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.414123058 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.426793098 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.426800966 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.426827908 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.432337999 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.434190989 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.434561014 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.435128927 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.435165882 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.435203075 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.459064960 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.459188938 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.459296942 CEST	49915	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.460957050 CEST	49915	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.460994959 CEST	443	49915	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.461469889 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.461519957 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.461599112 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.465802908 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.465828896 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.488194942 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.488312960 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.488480091 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.488812923 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.488857985 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.515583038 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.515768051 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.515945911 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.516254902 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.516295910 CEST	443	49917	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.516341925 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.516374111 CEST	49917	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.516763926 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.516835928 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.516927004 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.517788887 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.517822981 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.527067900 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.528491974 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.529367924 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.529428005 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.530263901 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.530812025 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.530972004 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.530988932 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.552901030 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.553145885 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.553267956 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.556258917 CEST	49919	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.556318045 CEST	443	49919	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.558309078 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.558382988 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.558470011 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.569274902 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.569338083 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.576287985 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.579628944 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.580009937 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.580055952 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.580951929 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.581445932 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.581578016 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.582060099 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.582154036 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.582165956 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.600121975 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.600411892 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.600550890 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.601147890 CEST	49918	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.601171970 CEST	443	49918	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.602421045 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.602484941 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.602602005 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.602874041 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.602905989 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.617969036 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.618154049 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.618285894 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.618760109 CEST	49916	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.618793964 CEST	443	49916	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.619515896 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.619612932 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.619736910 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.620256901 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.620331049 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.632360935 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.635642052 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.636074066 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.636109114 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.637572050 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.638060093 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.638300896 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.638328075 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.638334036 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.638478041 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.712730885 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.719504118 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.720602989 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.720643044 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.720918894 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.720957041 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.721316099 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.721971989 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.722107887 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.722194910 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.722232103 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.722240925 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.723310947 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.723423958 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.723841906 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.724019051 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.724066019 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.724205017 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.724215984 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.732357979 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.740324974 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.740534067 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.740643024 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.741205931 CEST	49920	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.741240025 CEST	443	49920	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.741740942 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.741791010 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.741872072 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.742274046 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.742300034 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.765058041 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.765357971 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.765388012 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.766788960 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.766876936 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.767329931 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.767474890 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.767908096 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.767929077 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.767945051 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.808290005 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.826379061 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.832357883 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.877952099 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.878488064 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.878544092 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.879832983 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.880330086 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.880634069 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.880769014 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.880806923 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.880847931 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.885308027 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.885477066 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.885703087 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.886969090 CEST	49923	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.887003899 CEST	443	49923	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.887686968 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.887737989 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.887868881 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.890590906 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.890806913 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.890868902 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.891355038 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.891401052 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.893780947 CEST	49921	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.893826962 CEST	443	49921	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.894253016 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.894320965 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.894406080 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.908325911 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.908368111 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.959405899 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:44.959480047 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:44.959578037 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:44.959851980 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:44.959880114 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:44.969557047 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.969679117 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.969724894 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.969772100 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.969930887 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.970045090 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.971051931 CEST	49924	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.971090078 CEST	443	49924	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.971658945 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.971721888 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.971801996 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.972218990 CEST	49925	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.972280025 CEST	443	49925	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.972536087 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.972632885 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.972831011 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.973104954 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.973139048 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.973237038 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:44.973273993 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:44.980132103 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.980170965 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.980182886 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.980242014 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.980253935 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.980273962 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.980283022 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.980319023 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:44.980343103 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.980366945 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.980393887 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:44.980405092 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.029133081 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.029211998 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.029427052 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.029550076 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.029594898 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.032387972 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.039118052 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.039201021 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.039321899 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.039567947 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.039613962 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.043328047 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.043380976 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.043483973 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.044008017 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.044027090 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.045229912 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.045316935 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.045447111 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.045620918 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.045640945 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.056960106 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.057004929 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.057076931 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.057348013 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.057369947 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.070384026 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.070414066 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.070461035 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.070478916 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.070504904 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.070553064 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.070576906 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.070652962 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.070683956 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.070796967 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.071644068 CEST	49922	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.071676970 CEST	443	49922	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.071883917 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.072102070 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.072153091 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.072232962 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.072278023 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.072400093 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.073097944 CEST	49926	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.073143959 CEST	443	49926	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.073410034 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.073457003 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.073538065 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.075148106 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.075177908 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.075411081 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.075443029 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.126955032 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.127055883 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.127171040 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.127737045 CEST	49929	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.127768993 CEST	443	49929	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.128259897 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.128334999 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.128431082 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.128937006 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.128971100 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.188786983 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.192903996 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.192994118 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.194171906 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.226295948 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.226599932 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.226686954 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.239186049 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.239335060 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.239363909 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.239433050 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.239443064 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.239484072 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.243719101 CEST	49943	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.243752003 CEST	443	49943	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.273461103 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.274280071 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.274328947 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.275136948 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.275651932 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.275871038 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.275892019 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.275917053 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.332415104 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.334680080 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.335059881 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.335088968 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.335752964 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.336332083 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.336497068 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.336631060 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.349591017 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.349704981 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.349725962 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.349793911 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.356543064 CEST	49944	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.356573105 CEST	443	49944	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.377490997 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.377850056 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.377897978 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.381139994 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.381242990 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.381747007 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.381874084 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.381974936 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.395421982 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.395509958 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.395539045 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.395581961 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.395631075 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.395657063 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.398298025 CEST	49947	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.398330927 CEST	443	49947	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.456552029 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.457245111 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.457287073 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.458431959 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.458899975 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.459161997 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.459172964 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.484150887 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.484487057 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.484539032 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.487868071 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.487967014 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.488524914 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.488761902 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.489023924 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.500291109 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.502115965 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.502233982 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.502248049 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.502312899 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.505976915 CEST	49946	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.506021023 CEST	443	49946	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.532418013 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.595185995 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.595331907 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.595422983 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.596095085 CEST	49932	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.596131086 CEST	443	49932	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.596699953 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.596765041 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.596846104 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.597472906 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.597505093 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.636058092 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.636502981 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.636559963 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.639167070 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.639291048 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.639782906 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.640089035 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.640500069 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.640536070 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.640793085 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.682641029 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.682995081 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.683018923 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.684298038 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.686122894 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.686234951 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.686861038 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.687016964 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.687223911 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.700018883 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.700158119 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.700181007 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.700289011 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.701469898 CEST	49945	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.701505899 CEST	443	49945	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.717077971 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.717425108 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.717461109 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.719865084 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.719966888 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.720458984 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.720674992 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.720679998 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.727663040 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:45.727984905 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:45.728020906 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:45.729407072 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:45.730552912 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:45.730751038 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:45.730762959 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:45.730783939 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:45.731659889 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.731961012 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.731998920 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.732517958 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.732933998 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.733041048 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.733154058 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.733205080 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.733216047 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.738635063 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.738926888 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.738955021 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.740634918 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.740717888 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.740866899 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.740986109 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.741226912 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.741319895 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.741411924 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.741447926 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.741586924 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.741624117 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.741671085 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.741692066 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.742708921 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.742856026 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.743144035 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.743223906 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.743607998 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.743618965 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.743730068 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.743731976 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.743810892 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.743839025 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.743902922 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.743937969 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.754089117 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.754205942 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.754231930 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.754276991 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.754333973 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.754333973 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.755578041 CEST	49948	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:45.755595922 CEST	443	49948	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:45.764291048 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.780898094 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.781080961 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.781177044 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.781737089 CEST	49933	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.781763077 CEST	443	49933	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.782304049 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.782368898 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.782480955 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.783462048 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.783488035 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.832159042 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.832175970 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:45.832180977 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.832196951 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.832432032 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.896717072 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.904611111 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.904680014 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.905606985 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.906192064 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.906380892 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.906390905 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.945543051 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.945643902 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.945770979 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.946621895 CEST	49941	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.946667910 CEST	443	49941	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.947825909 CEST	49958	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.947904110 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.947987080 CEST	49958	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.948339939 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.949345112 CEST	49958	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.949368000 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.978008032 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.978120089 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.980488062 CEST	49942	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.980518103 CEST	443	49942	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.980967045 CEST	49959	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.981014967 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:45.981090069 CEST	49959	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.983220100 CEST	49959	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:45.983242035 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.001331091 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.001569986 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.001651049 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.003264904 CEST	49950	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.003292084 CEST	443	49950	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.012860060 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.012909889 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.012996912 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.015960932 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.015988111 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.023075104 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.023221970 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.023341894 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.024180889 CEST	49954	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.024214029 CEST	443	49954	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.024826050 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.024882078 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.024986029 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.026648045 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.026684046 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.032493114 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.056394100 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.056432009 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.056442022 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.056463957 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.056473970 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.056515932 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.056600094 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.056653023 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.056698084 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.056713104 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.064843893 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.065216064 CEST	49958	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.065267086 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.066306114 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.066838980 CEST	49958	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.067015886 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.067187071 CEST	49958	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.091211081 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.091259956 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.091320038 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.091351986 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.091415882 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.105581999 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.105796099 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.105797052 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.105855942 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.105906010 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.106197119 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.112281084 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.123555899 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.123594046 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.123688936 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.123723984 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.123764992 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.123778105 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.123987913 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.124032974 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.124109983 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.124618053 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.124641895 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.125286102 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.125387907 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.144134998 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.154272079 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.154294014 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.154365063 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.154380083 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.154386044 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.154419899 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.154448986 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.154481888 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.154489040 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.154514074 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.176812887 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.190359116 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.190463066 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.190526962 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.190540075 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.190546036 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.190594912 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.190596104 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.190638065 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.191589117 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.191817045 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.197977066 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.198144913 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.198637009 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.198709011 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.198746920 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.200227022 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.200635910 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.204404116 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.204428911 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.204462051 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.204476118 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.204530001 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.204551935 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.204569101 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.217643023 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.217689037 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.217766047 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.217798948 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.217822075 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.217840910 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.224807024 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.225065947 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.226275921 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.226308107 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.226500034 CEST	49959	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.226516962 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.226880074 CEST	49955	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.226922035 CEST	443	49955	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.227278948 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.227345943 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.227360964 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.227401018 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.227421999 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.227433920 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.227472067 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.227539062 CEST	49966	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.227602005 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.227684975 CEST	49966	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.228221893 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.228245974 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.228260994 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.228535891 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.229883909 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.229963064 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.230674982 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.230719090 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.230777979 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.230814934 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.230897903 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.230897903 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.234245062 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.234608889 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.234684944 CEST	49959	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.234884977 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.234911919 CEST	49966	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.234946966 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.235124111 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.235163927 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.235255957 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.235289097 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.235311031 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.235346079 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.235912085 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.235933065 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.236010075 CEST	49959	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.237426996 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.237483025 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.237521887 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.237540007 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.237571955 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.240556955 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.240608931 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.240669966 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.240708113 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.240731001 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.240814924 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.245237112 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.245286942 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.245348930 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.245378971 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.245413065 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.245508909 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.246126890 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.246196985 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.246243954 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.246267080 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.246284008 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.250237942 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.250277042 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.250365019 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.250395060 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.250416040 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.250458956 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.251682043 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.251759052 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.251806021 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.251831055 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.251856089 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.256684065 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.256757975 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.256799936 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.256819010 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.256839037 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.261003017 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.261064053 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.261113882 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.261143923 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.261161089 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.262274027 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.262310028 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.262391090 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.262434959 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.262453079 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.262484074 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.265700102 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.265765905 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.265788078 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.265816927 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.265856028 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.266922951 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.266956091 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.267029047 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.267060995 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.267081976 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.267111063 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.269289970 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.269356012 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.269418955 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.269438028 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.269454956 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.270940065 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.272283077 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.272562027 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.272617102 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.272675037 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.272737026 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.272769928 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.272792101 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.273962021 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.274043083 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.274080038 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.274095058 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.274132967 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.276284933 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.277667046 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.277734995 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.277770042 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.277785063 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.277816057 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.277975082 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.278028965 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.278094053 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.278148890 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.278191090 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.278259993 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.280618906 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.280688047 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.280728102 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.280745029 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.280781031 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.281033039 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.281105995 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.297413111 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.298367977 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.298413038 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.299881935 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.300000906 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.302969933 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.303095102 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.303132057 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.319582939 CEST	49940	443	192.168.2.5	162.125.69.16
Jul 21, 2023 18:50:46.319641113 CEST	443	49940	162.125.69.16	192.168.2.5
Jul 21, 2023 18:50:46.326518059 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.328221083 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.344291925 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.391511917 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.391632080 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.391742945 CEST	49958	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.393939972 CEST	49958	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.393963099 CEST	443	49958	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.394401073 CEST	49972	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.394505024 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.394618988 CEST	49972	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.394953966 CEST	49972	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.394979954 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.406980991 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.407027006 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.407188892 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.407207966 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.407258987 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.409177065 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.409225941 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.409311056 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.409327984 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.409372091 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.409404993 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.409926891 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.410032988 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.410053015 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.412436962 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.412472010 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.412533998 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.412549019 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.412564993 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.414984941 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.415076017 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.415091038 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.415734053 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.415767908 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.415824890 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.415842056 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.415872097 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.417634964 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.417690039 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.417752981 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.417776108 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.417794943 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.418451071 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.418555975 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.418576956 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.420938969 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.420993090 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.421044111 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.421061039 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.421088934 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.423474073 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.423511982 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.423587084 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.423607111 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.423624039 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.425188065 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.425230980 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.425292015 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.425314903 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.425338984 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.427918911 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.428009033 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.428046942 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.428066015 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.428088903 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.429675102 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.429712057 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.429790974 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.429807901 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.429826021 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.430350065 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.430377960 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.430445910 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.430460930 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.430711031 CEST	49966	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.430737972 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.431873083 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.432399035 CEST	49966	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.432478905 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.432511091 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.432636023 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.433231115 CEST	49966	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.450066090 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.450174093 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.450258970 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.451234102 CEST	49960	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.451252937 CEST	443	49960	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.451781988 CEST	49973	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.451813936 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.451879025 CEST	49973	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.452646017 CEST	49973	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.452666044 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.452887058 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.452977896 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.453028917 CEST	49959	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.453779936 CEST	49959	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.453794003 CEST	443	49959	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.454282045 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.454309940 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.454368114 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.457237005 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.457259893 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.475605965 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.475826025 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.475935936 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.480287075 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.480550051 CEST	49961	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.480572939 CEST	443	49961	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.481036901 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.481069088 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.481136084 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.484025955 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.484044075 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.532484055 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.534133911 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.588907003 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.588949919 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.589025974 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.589050055 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.589085102 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.589121103 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.589154959 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.589214087 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.590339899 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.590374947 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.590631962 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.590698004 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.590728998 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.591959000 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.592046976 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.592088938 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.592103958 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.592140913 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.592163086 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.594204903 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.594254017 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.594324112 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.594342947 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.594362974 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.594403982 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.595937967 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.595976114 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.596055984 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.596072912 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.596097946 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.596127987 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.597292900 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.597331047 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.597419024 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.597440004 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.597456932 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.597484112 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.598613024 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.598644972 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.598754883 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.598754883 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.598768950 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.598834038 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.600441933 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.600477934 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.600594044 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.600594044 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.600620985 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.600677967 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.602220058 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.602256060 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.602375031 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.602395058 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.602411032 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.602469921 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.604227066 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.604367018 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.604453087 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.604557991 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.604587078 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.604773045 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.604845047 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.620923996 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.629365921 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.634485006 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.639503956 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.661262989 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.662265062 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.662297964 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.662442923 CEST	49972	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.662467957 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.662729025 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.662787914 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.662919044 CEST	49973	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.662966013 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.663672924 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.663832903 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.664164066 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.666150093 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.666318893 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.673787117 CEST	49973	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.674042940 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.674134970 CEST	49949	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.674205065 CEST	443	49949	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.674300909 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.674396038 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.674520016 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.675504923 CEST	49972	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.675759077 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.676249981 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.676714897 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.678208113 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.678451061 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.679399967 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.679435015 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.680031061 CEST	49973	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.680244923 CEST	49972	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.680819988 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.680860996 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.680927992 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.681361914 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.681415081 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.681449890 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.694946051 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.695138931 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.695256948 CEST	49966	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.720282078 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.720294952 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.724292040 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.726576090 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.741086006 CEST	49966	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.741131067 CEST	443	49966	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.741549969 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.741611004 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.741699934 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.741988897 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.742022038 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.789849043 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.853404999 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.888403893 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.888582945 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.888678074 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.902427912 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.902630091 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.902740955 CEST	49972	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.926614046 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.928353071 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.952321053 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.952569962 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.952688932 CEST	49973	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.986098051 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.986282110 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.986402035 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.998613119 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.998667955 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.998768091 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.998791933 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:46.999876022 CEST	49965	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:46.999923944 CEST	443	49965	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.000319004 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.000813007 CEST	49974	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.000848055 CEST	443	49974	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.001028061 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.001615047 CEST	49978	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.001679897 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.001779079 CEST	49978	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.003621101 CEST	49972	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.003667116 CEST	443	49972	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.004256010 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.004302025 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.004365921 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.007328987 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.007673025 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.007729053 CEST	49973	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.007765055 CEST	443	49973	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.008377075 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.008425951 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.008508921 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.009716988 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.009998083 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.012965918 CEST	49978	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.013012886 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.013153076 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.013201952 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.013736010 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.013786077 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.014118910 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.014163971 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.014183044 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.014472961 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.014472961 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.014564991 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.131161928 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.131246090 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.131356955 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.132713079 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.132764101 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.167500019 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.168668032 CEST	49978	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.168699980 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.169532061 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.170018911 CEST	49978	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.170169115 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.170465946 CEST	49978	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.195055962 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.195455074 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.195506096 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.195553064 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.195822954 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.195868969 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.196330070 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.196891069 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.196911097 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.196988106 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.197053909 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.197630882 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.197771072 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.198205948 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.198254108 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.198487997 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.200169086 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.200185061 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.212300062 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.251224995 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.261600971 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.262017965 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.262124062 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.312336922 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.312402964 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.313374996 CEST	49976	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.313426018 CEST	443	49976	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.313844919 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.313939095 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.314043045 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.314342022 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.314414978 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.314444065 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.314487934 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.314523935 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.315458059 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.315772057 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.315850019 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.316745996 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.316898108 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.316979885 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.317630053 CEST	49977	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.317651987 CEST	443	49977	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.318254948 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.318348885 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.318504095 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.318861961 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.318958998 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.332581043 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.345823050 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.346071959 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.346227884 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.347260952 CEST	49975	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.347295046 CEST	443	49975	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.348004103 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.348093033 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.348186970 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.349407911 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.349453926 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.356290102 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.421617985 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.421922922 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.422061920 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.432611942 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.432657957 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.434006929 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.447490931 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.465128899 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.499814034 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.499991894 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.500092030 CEST	49978	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.506966114 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.507174969 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.507256985 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.532627106 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.626729965 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.626745939 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.626745939 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.832411051 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.832470894 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.832586050 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.832603931 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.832761049 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.832798004 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.833617926 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.834256887 CEST	49980	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.834309101 CEST	443	49980	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.834341049 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.836409092 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.836469889 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.836538076 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.928487062 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.929028988 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.929028988 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.929445028 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.930933952 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.931008101 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.931112051 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.957616091 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.957711935 CEST	49979	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.957761049 CEST	443	49979	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.957957029 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.958406925 CEST	49986	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.958462954 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.958551884 CEST	49986	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.959661961 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.960143089 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.960364103 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.960886955 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.960922956 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.960967064 CEST	49978	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.960987091 CEST	443	49978	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.961196899 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.961440086 CEST	49987	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.961519003 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.961618900 CEST	49987	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.962770939 CEST	49986	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.962810040 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.966533899 CEST	49987	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.966572046 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:47.966746092 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.966856003 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.966970921 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:47.966993093 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.008287907 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.008306026 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.032628059 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.032648087 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.073142052 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.093072891 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.093280077 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.113214970 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.113251925 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.113414049 CEST	49986	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.113476992 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.113538980 CEST	49987	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.113588095 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.114820004 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.115797997 CEST	49986	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.115801096 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.115978003 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.116489887 CEST	49987	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.116697073 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.116733074 CEST	49986	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.117021084 CEST	49987	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.117667913 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.117826939 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.126945019 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.132628918 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.160295963 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.160303116 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.175733089 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.176145077 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.181565046 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.181700945 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.181879997 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.188843012 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.189002991 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.189084053 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.236475945 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.236530066 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.240000010 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.240164995 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.240242004 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.287830114 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.287884951 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.287919998 CEST	49984	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.287971973 CEST	443	49984	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.288048983 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.288356066 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.288446903 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.288556099 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.289220095 CEST	49982	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.289252043 CEST	443	49982	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.289746046 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.289810896 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.289895058 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.290245056 CEST	49983	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.290281057 CEST	443	49983	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.290653944 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.290690899 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.290755987 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.291177034 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.291230917 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.291660070 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.291707993 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.291919947 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.291944981 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.374038935 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.374232054 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.374327898 CEST	49986	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.374897003 CEST	49986	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.374929905 CEST	443	49986	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.375395060 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.375451088 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.375530958 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.376611948 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.376647949 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.380383015 CEST	49992	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:48.380429983 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.380547047 CEST	49992	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:48.380811930 CEST	49992	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:48.380826950 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.383373976 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.383555889 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.383634090 CEST	49987	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.384459019 CEST	49987	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.384490013 CEST	443	49987	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.384948015 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.384985924 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.385068893 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.385617018 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.385637045 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.425857067 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.426203012 CEST	49992	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:48.426254988 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.427098036 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.427774906 CEST	49992	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:48.427942038 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.428232908 CEST	49992	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:48.439486980 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.439943075 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.439976931 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.442985058 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.443373919 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.443435907 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.444211006 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.444345951 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.445007086 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.445281982 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.445477962 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.445620060 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.445638895 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.445688963 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.446067095 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.446348906 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.446377039 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.446425915 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.446472883 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.456655979 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.457012892 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.457036018 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.458956957 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.459439039 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.459541082 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.459908962 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.459923983 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.459939957 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.468287945 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.489682913 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.491787910 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.491808891 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.494333982 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.494462013 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.495371103 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.495580912 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.495719910 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.495735884 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.499476910 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.505388975 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.505422115 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.505783081 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.505893946 CEST	443	49981	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.505980015 CEST	49981	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.508024931 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.508148909 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.508599997 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.508786917 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.508912086 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.508939981 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.508968115 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.509028912 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.528256893 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.532763004 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.573075056 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.573230982 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.573277950 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.573333979 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.587677956 CEST	49985	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.587722063 CEST	443	49985	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.588372946 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.588439941 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.588548899 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.589044094 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.589080095 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.699929953 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.704292059 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.704458952 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.709831953 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.709969997 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.710583925 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.710675955 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.710772038 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.712069988 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.712296963 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.712579966 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.716299057 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.716427088 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.746319056 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.746438026 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.746525049 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.753827095 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.753976107 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.754024982 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.754102945 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.754180908 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.775274038 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.775461912 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.775510073 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.775594950 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.832053900 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.832082987 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.833573103 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.834148884 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.834726095 CEST	49988	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.834764004 CEST	443	49988	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.834913969 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.835031033 CEST	49992	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:48.835653067 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.835695982 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.835792065 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.839401007 CEST	49989	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.839428902 CEST	443	49989	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.840076923 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.840137959 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.840296030 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.843174934 CEST	49993	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.843208075 CEST	443	49993	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.843888998 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.843939066 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.844029903 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.846085072 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.846582890 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.846627951 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.846709013 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.847580910 CEST	49991	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.847604036 CEST	443	49991	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.848208904 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.848252058 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.848381996 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.848615885 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.848668098 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.848843098 CEST	49990	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.848870039 CEST	443	49990	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.849556923 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.849622011 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.849700928 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.856447935 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.856504917 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.857413054 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.857428074 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.857909918 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.857954979 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.858464003 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.858546972 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.858680010 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.858834028 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.858884096 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.863873005 CEST	49992	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:48.863914967 CEST	443	49992	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:48.958642960 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.959187984 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.959234953 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.960503101 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.961026907 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.961230993 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.961247921 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.961349964 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.961380959 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.961472034 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.967453957 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.968177080 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.968203068 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.970225096 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.970365047 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.970993042 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.971077919 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.971220016 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.971782923 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.971829891 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.972242117 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.972326994 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.972382069 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.972424984 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.972513914 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.973244905 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.973623037 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.973642111 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.973690987 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.973994970 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.974124908 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.987883091 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.988408089 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.988447905 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.990216017 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.990623951 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.990677118 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.990716934 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.990724087 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.991398096 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.991565943 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.991889000 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.991920948 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.991938114 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.992621899 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.992724895 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.993503094 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.993650913 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994129896 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994154930 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994231939 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994290113 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994292974 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994292974 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994323969 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994409084 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994440079 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994529963 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994688034 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994741917 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994765043 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994781971 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994821072 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994832993 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994854927 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994874954 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994910955 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994927883 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994950056 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994963884 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.994977951 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.994988918 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995074034 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995099068 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995121002 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995135069 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995192051 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995208025 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995229006 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995242119 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995260954 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995271921 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995332003 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995348930 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995362997 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995376110 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995394945 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995405912 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:48.995517015 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:48.995528936 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.032288074 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.032843113 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.036457062 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.036463976 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.127080917 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.189543962 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.189666033 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.189698935 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.189733028 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.229821920 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.229983091 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.230037928 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.230074883 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.242480993 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.242629051 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.242645025 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.242681980 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.248778105 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.248891115 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.248939991 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.248984098 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.250129938 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.250235081 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.250262022 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.250288010 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.250410080 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.264034986 CEST	49994	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.264058113 CEST	443	49994	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.264838934 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.264883041 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.264993906 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.266182899 CEST	49995	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.266223907 CEST	443	49995	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.266681910 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.266741991 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.266827106 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.268582106 CEST	49996	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.268611908 CEST	443	49996	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.270570040 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.270637989 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.270767927 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.271823883 CEST	49997	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.271857023 CEST	443	49997	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.272434950 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.272473097 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.272579908 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.273785114 CEST	49998	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.273818016 CEST	443	49998	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.274362087 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.274411917 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.274557114 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.274853945 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.274899006 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.275285959 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.275322914 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.275619984 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.275657892 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.276657104 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.276680946 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.276884079 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.276915073 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.402704000 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.403718948 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.403765917 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.405983925 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.406122923 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.406634092 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.406810999 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.407021046 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.407042027 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.407185078 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.407243013 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.407349110 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.407371998 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.407388926 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.407414913 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.480550051 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.487505913 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.487551928 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.488861084 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.489483118 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.498632908 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.501069069 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.527668953 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.528007984 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.528532028 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.528580904 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.528892994 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.528950930 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.529164076 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.529207945 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.530069113 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.530169964 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.530559063 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.531549931 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.531575918 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.531640053 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.531780005 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.532119989 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.532186985 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.532253027 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.533056974 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.533314943 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.534498930 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.534758091 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.535520077 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.535623074 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.535623074 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.535641909 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.535964966 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.536000967 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.536045074 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.576288939 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.576288939 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.587377071 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.587410927 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.587455034 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.628309011 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.632821083 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.632822990 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.710985899 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.711123943 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.711163044 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.711182117 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.711838961 CEST	50004	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.711858034 CEST	443	50004	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.712228060 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.712322950 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.712405920 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.712691069 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.712726116 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.788326979 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.788710117 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.788758993 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.789824009 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.790328979 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.790601015 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.790606976 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.790617943 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.790713072 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.806327105 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.806420088 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.806484938 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.806842089 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.806919098 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.807512999 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.807552099 CEST	443	50000	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.807574987 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.807622910 CEST	50000	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.807964087 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.808017015 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.808093071 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.808619976 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.808640957 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.811969042 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.812097073 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.812125921 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.812230110 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.812321901 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.812788963 CEST	50001	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.812824965 CEST	443	50001	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.812993050 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.813091993 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.813119888 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.813194990 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.813229084 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.813261986 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.813352108 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.814234018 CEST	50003	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.814266920 CEST	443	50003	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.814754009 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.814791918 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.814870119 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.815311909 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.815344095 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.815892935 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.815931082 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.822138071 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.822263002 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.822268009 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.822331905 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.825700998 CEST	49999	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.825752974 CEST	443	49999	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.826142073 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.826193094 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.826276064 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.826692104 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.826709032 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.838671923 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.895201921 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.895323992 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.895425081 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.899230003 CEST	50002	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.899271965 CEST	443	50002	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.899934053 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.899981976 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.900115967 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.900892973 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.900922060 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.919593096 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.920419931 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.920443058 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.921339035 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.924607992 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.924880028 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.925101042 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.925340891 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.925362110 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.980686903 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.981031895 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.981095076 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.981748104 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.982228041 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.982414961 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:49.982696056 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.982820034 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:49.982909918 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.040647030 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.041186094 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.041233063 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.043185949 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.043318987 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.046370029 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.046701908 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.047369957 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.047409058 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.047570944 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.050487995 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.050895929 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.053415060 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.053469896 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.053636074 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.053677082 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.054977894 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.055099010 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.055285931 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.055366039 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.056521893 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.056683064 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.056914091 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.057054996 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.057605028 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.057631016 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.057806969 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.057847977 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.092291117 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.093759060 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.093868971 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.093914986 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.094063044 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.094134092 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.123178005 CEST	50005	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.123245955 CEST	443	50005	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.123969078 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.124041080 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.124164104 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.124871969 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.124917030 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.135592937 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.135606050 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.232662916 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.232857943 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.232999086 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.243562937 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.284806967 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.285012960 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.285171986 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.294876099 CEST	50006	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.294914961 CEST	443	50006	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.295562029 CEST	50012	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.295638084 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.295733929 CEST	50012	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.300900936 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.300935030 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.302298069 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.304596901 CEST	50012	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.304651022 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.307048082 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.307245016 CEST	50008	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.307301044 CEST	443	50008	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.307323933 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.310879946 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.310957909 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.311048031 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.312809944 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.312848091 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.317933083 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.317967892 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.318032980 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.321553946 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.321677923 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.321789026 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.330297947 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.330507994 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.330621958 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.338573933 CEST	50010	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.338628054 CEST	443	50010	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.341053963 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.341133118 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.341240883 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.341684103 CEST	50007	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.341727018 CEST	443	50007	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.343035936 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.343086958 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.343178988 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.343564034 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.343600035 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.353210926 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.353251934 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.371016026 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.371131897 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.371248960 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.372109890 CEST	50009	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.372155905 CEST	443	50009	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.419327021 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.419728041 CEST	50012	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.419770956 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.420706987 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.424079895 CEST	50012	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.424303055 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.424601078 CEST	50012	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.433988094 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.435844898 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.435868979 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.436789036 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.439424038 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.439675093 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.439785004 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.439882040 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.439899921 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.444041967 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.444092035 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.444164038 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.444523096 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.444541931 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.460336924 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.460768938 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.460786104 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.462595940 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.462691069 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.463337898 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.463493109 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.463692904 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.463711977 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.468310118 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.474190950 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.474584103 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.474622965 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.478321075 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.478480101 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.479243040 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.479531050 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.479954958 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.479989052 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.480005980 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.520291090 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.526357889 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.526424885 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.565013885 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.570888042 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.570961952 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.571819067 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.573184967 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.573347092 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.629019976 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.629168034 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.629308939 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.635518074 CEST	50011	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.635555029 CEST	443	50011	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.635766029 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.636364937 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.636400938 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.636519909 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.640455008 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.640651941 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.640774012 CEST	50012	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.641742945 CEST	50012	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.641783953 CEST	443	50012	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.650854111 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.650918961 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.651042938 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.651523113 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.651547909 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.708909988 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.709043026 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.709070921 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.709168911 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.709247112 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.710192919 CEST	50013	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.710228920 CEST	443	50013	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.766459942 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.767146111 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.767189026 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.768557072 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.769134045 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.769602060 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.769645929 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.781270027 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.781404018 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.781415939 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.781493902 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.783248901 CEST	50015	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.783288002 CEST	443	50015	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.812311888 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.813020945 CEST	50018	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.813107014 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.813134909 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.813204050 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.813225031 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.813277960 CEST	50018	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.813313961 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.813325882 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.813325882 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.813371897 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.813405991 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.813431978 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.813432932 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.813460112 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.814995050 CEST	50018	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.815059900 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.839332104 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.909054041 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.909168005 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.909173965 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.909231901 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.929558039 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.940901041 CEST	50016	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.940957069 CEST	443	50016	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.941488028 CEST	50018	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.941529036 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.942596912 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.943144083 CEST	50018	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.943345070 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.943532944 CEST	50018	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.983617067 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.984297991 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.984688044 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.984806061 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.985212088 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.985277891 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.985349894 CEST	50017	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.985383034 CEST	443	50017	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.985403061 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.985987902 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.986013889 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.991019964 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:50.991168022 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:50.991189957 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.005541086 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.005585909 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.005645990 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.005664110 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.005680084 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.018426895 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.018579006 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.018601894 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.100452900 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.100820065 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.100850105 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.102334023 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.103027105 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.103244066 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.103297949 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.135848045 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.144290924 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.166687012 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.166708946 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.166743994 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.166763067 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.166820049 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.166850090 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.166867018 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.166940928 CEST	50018	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.167643070 CEST	50018	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.167666912 CEST	443	50018	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.169572115 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.169595003 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.169666052 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.169684887 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.175458908 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.175518036 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.175544024 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.175570965 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.175580978 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.175597906 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.175615072 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.175645113 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.179322958 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.179429054 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.179444075 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.179466963 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.179480076 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.181739092 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.181828022 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.181858063 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.198271036 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.198313951 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.198375940 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.198398113 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.198412895 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.201183081 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.201307058 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.201320887 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.245192051 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.317605019 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.317859888 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.317955017 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.318243027 CEST	50019	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.318289042 CEST	443	50019	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.319374084 CEST	50020	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.319427013 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.319518089 CEST	50020	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.319818020 CEST	50020	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.319838047 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.339112043 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.346266985 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.346307039 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.346386909 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.346414089 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.346430063 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.346443892 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.346477032 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.346529007 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.346529007 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.349061966 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.349086046 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.349128962 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.349145889 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.349220991 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.349246025 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.349312067 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.349313021 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.351867914 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.351893902 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.351942062 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.351963043 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.352047920 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.352076054 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.352099895 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.352144003 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.354919910 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.354969025 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.355093002 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.355115891 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.355246067 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.356579065 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.356669903 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.356695890 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.356719017 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.356750011 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.359559059 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.359595060 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.359877110 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.359894037 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.359975100 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.362992048 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.363023996 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.363123894 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.363137007 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.363156080 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.363187075 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.365969896 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.365997076 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.366111994 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.366123915 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.366192102 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.377806902 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.377971888 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.377994061 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.390383005 CEST	50021	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.390458107 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.390574932 CEST	50021	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.390908003 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.390979052 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.391072035 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.391573906 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.391632080 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.391725063 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.392453909 CEST	50024	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:51.392491102 CEST	443	50024	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:51.392580986 CEST	50024	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:51.393074989 CEST	50021	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.393100023 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.393681049 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.393732071 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.394078016 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.394113064 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.394464016 CEST	50024	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:51.394484997 CEST	443	50024	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:51.462599993 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.474153996 CEST	50020	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.474184036 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.475323915 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.478602886 CEST	50020	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.478892088 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.484608889 CEST	443	50024	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:51.496005058 CEST	50020	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.496412039 CEST	50024	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:51.496454000 CEST	443	50024	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:51.497056961 CEST	443	50024	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:51.502729893 CEST	50024	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:51.502856016 CEST	443	50024	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:51.502882957 CEST	50024	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:51.515400887 CEST	443	50024	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:51.515539885 CEST	50024	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:51.521723032 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.523262978 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.523401022 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.523428917 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.523540974 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.523555994 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.523634911 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.523663998 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.523694038 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.523715019 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.523726940 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.524324894 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.524437904 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.524444103 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.524467945 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.524509907 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.526066065 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.526108980 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.526173115 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.526177883 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.526223898 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.526242018 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.526256084 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.527822971 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.527867079 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.527915955 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.527936935 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.527964115 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.528987885 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.529023886 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.529082060 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.529098988 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.529115915 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.529678106 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.529778004 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.529798031 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.531591892 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.531630993 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.531718016 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.531739950 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.531757116 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.532960892 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.533010006 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.533082008 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.533103943 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.533118963 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.534027100 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.534064054 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.534133911 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.534152985 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.534167051 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.535839081 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.535947084 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.536284924 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.537049055 CEST	50021	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.537084103 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.537097931 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.537110090 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.537195921 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.537434101 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.537699938 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.537736893 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.537853956 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.537885904 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.537902117 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.537966013 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.548733950 CEST	50021	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.549062014 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.549778938 CEST	50021	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.557426929 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.557476997 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.557575941 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.557600975 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.557615995 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.558511019 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.558547020 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.558631897 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.558651924 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.558674097 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.560246944 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.560307026 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.560379028 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.560396910 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.560444117 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.561779976 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.561819077 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.561882973 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.561904907 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.561925888 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.563081980 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.563128948 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.563174009 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.563193083 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.563208103 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.564779043 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.564815998 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.564883947 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.564904928 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.564918995 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.565454006 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.565537930 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.565553904 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.570946932 CEST	50024	443	192.168.2.5	18.165.183.28
Jul 21, 2023 18:50:51.570990086 CEST	443	50024	18.165.183.28	192.168.2.5
Jul 21, 2023 18:50:51.592061996 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.592082977 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.592304945 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.634351015 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.634440899 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.634778976 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.634804964 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.636646986 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.637928009 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.638081074 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.638128996 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.638206959 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.638668060 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.639007092 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.639270067 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.639553070 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.639776945 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.639827013 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.639975071 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.639991045 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.704380035 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.704427958 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.704502106 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.704580069 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.704622030 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.705167055 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.705199957 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.705281973 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.705303907 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.705318928 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.705348015 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.706139088 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.706172943 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.706257105 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.706275940 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.706298113 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.706321955 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.706418037 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.706495047 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.706509113 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.706592083 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.706656933 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.706703901 CEST	50014	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.706723928 CEST	443	50014	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.711390018 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.711594105 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.711697102 CEST	50020	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.712074041 CEST	50020	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.712100983 CEST	443	50020	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.772520065 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.772751093 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.772890091 CEST	50021	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.773478031 CEST	50021	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.773524046 CEST	443	50021	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.839860916 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.839859962 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.868341923 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.868472099 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.868583918 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.869237900 CEST	50022	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.869268894 CEST	443	50022	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.876692057 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.876800060 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.876900911 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.877599955 CEST	50023	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.877623081 CEST	443	50023	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.890343904 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.890410900 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:51.890516996 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.891010046 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:51.891033888 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.006558895 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.007045031 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.007112980 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.008713961 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.009330988 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.009615898 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.009660959 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.052295923 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.120266914 CEST	50026	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.120351076 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.120438099 CEST	50026	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.120867968 CEST	50026	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.120893955 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.136724949 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.476161003 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.476717949 CEST	50026	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.476753950 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.477427006 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.478105068 CEST	50026	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.478233099 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.478439093 CEST	50026	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.520291090 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.596528053 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.596659899 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.596842051 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.598635912 CEST	50025	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.598676920 CEST	443	50025	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.599785089 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.599837065 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.599977970 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.600224972 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.600244999 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.673044920 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.675246000 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.675278902 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.676341057 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.676970005 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.677181959 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.677190065 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.704544067 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.704740047 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.704840899 CEST	50026	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.705518961 CEST	50026	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.705549955 CEST	443	50026	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.720295906 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.746208906 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.897305965 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.897382021 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.897484064 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.897994995 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.898035049 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.899074078 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.899174929 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.899261951 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.899720907 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.899781942 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.928931952 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.929042101 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.929147959 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.929775953 CEST	50027	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.929819107 CEST	443	50027	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.934530973 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.934632063 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:52.934779882 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.935189962 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:52.935230970 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.013197899 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.047447920 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.053169012 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.115302086 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.115333080 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.115552902 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.115595102 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.116036892 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.116074085 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.116887093 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.117470980 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.117687941 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.117700100 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.117722988 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.118613958 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.119328022 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.119725943 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.119745016 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.120040894 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.120886087 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.120961905 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.121018887 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.121623993 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.121836901 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.122144938 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.122183084 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.245621920 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.248855114 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.328130960 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.351890087 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.352143049 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.352245092 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.387348890 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.387522936 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.387643099 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.389408112 CEST	50028	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.389448881 CEST	443	50028	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.389769077 CEST	50031	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.389812946 CEST	443	50031	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.394809961 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.394880056 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.394982100 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.395322084 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.395359039 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.398739100 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.398814917 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.398947001 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.399609089 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.399645090 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.427479982 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.427555084 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.427647114 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.428137064 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.428173065 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.504748106 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.505127907 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.505178928 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.508683920 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.508815050 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.509318113 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.509557962 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.509987116 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.510019064 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.543560982 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.543673038 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.544013977 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.544068098 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.544203997 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.544245958 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.544543028 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.544696093 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.545053959 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.545161009 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.545571089 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.545681000 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.546082973 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.546122074 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.546138048 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.546636105 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.546675920 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.546755075 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.650547028 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.650605917 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.650687933 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.652030945 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.652064085 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.716303110 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.716415882 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.775599957 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.776946068 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.777086020 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.777299881 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.835371971 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.835501909 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.835557938 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.835587025 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.849981070 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.850095987 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.850186110 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.909029961 CEST	50032	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.909074068 CEST	443	50032	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.909917116 CEST	50033	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.909960985 CEST	443	50033	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.910636902 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.910686016 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.911377907 CEST	50034	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.911433935 CEST	443	50034	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.911537886 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.912143946 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.912336111 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.915374041 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.916538000 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.916569948 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.917195082 CEST	50036	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.917274952 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.917370081 CEST	50036	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.917805910 CEST	50036	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.917846918 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.924707890 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.924910069 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:53.924978018 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.925980091 CEST	50029	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:53.926023006 CEST	443	50029	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.028856039 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.048094988 CEST	50036	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.048142910 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.049098015 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.053778887 CEST	50036	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.054044962 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.054331064 CEST	50036	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.096293926 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.217860937 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.217998981 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.218135118 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.284358978 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.284590006 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.284729004 CEST	50036	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.437200069 CEST	50035	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.437242985 CEST	443	50035	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.438529968 CEST	50036	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.438561916 CEST	443	50036	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.452774048 CEST	50037	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.452843904 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.452914953 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.452959061 CEST	50037	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.453049898 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.453141928 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.453397036 CEST	50037	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.453419924 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.453614950 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.453651905 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.614305019 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.614567995 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.637022018 CEST	50037	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.637079000 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.637312889 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.637366056 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.638006926 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.638288975 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.638546944 CEST	50037	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.638772011 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.639040947 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.639318943 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.639794111 CEST	50037	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.640145063 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.640182018 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.640218973 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.680294991 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.864550114 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.864729881 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.864835978 CEST	50037	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.872031927 CEST	50037	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.872081995 CEST	443	50037	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.911959887 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.912113905 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.912118912 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.912190914 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.928016901 CEST	50039	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.928081036 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.928286076 CEST	50039	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.942219019 CEST	50039	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.942267895 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:54.945053101 CEST	50038	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:54.945091009 CEST	443	50038	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.054363012 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.062918901 CEST	50039	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.062963009 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.063754082 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.064281940 CEST	50039	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.064496040 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.064800978 CEST	50039	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.108285904 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.295285940 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.295453072 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.295559883 CEST	50039	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.313855886 CEST	50039	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.313914061 CEST	443	50039	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.359968901 CEST	50040	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.360045910 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.360162020 CEST	50040	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.360387087 CEST	50040	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.360424042 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.470782995 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.471287012 CEST	50040	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.471323967 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.471940994 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.481575012 CEST	50040	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.481930017 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.482450008 CEST	50040	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.524280071 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.707988977 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.708206892 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.708359003 CEST	50040	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.713576078 CEST	50040	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.713620901 CEST	443	50040	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.719140053 CEST	50041	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.719213009 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.719312906 CEST	50041	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.719579935 CEST	50041	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.719611883 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.830663919 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.836402893 CEST	50041	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.836477995 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.837384939 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.839436054 CEST	50041	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.839685917 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:55.840025902 CEST	50041	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:55.884293079 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.064800978 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.064975023 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.065087080 CEST	50041	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.521063089 CEST	50041	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.521131992 CEST	443	50041	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.625854969 CEST	50042	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.625912905 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.625998020 CEST	50042	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.627950907 CEST	50042	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.627974033 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.679889917 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.679970026 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.680077076 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.680660009 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.680685043 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.710787058 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:56.710859060 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:56.710963964 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:56.711319923 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:56.711375952 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:56.711487055 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:56.711641073 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:56.711668968 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:56.712003946 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:56.712023973 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:56.738430023 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.796577930 CEST	50042	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.796610117 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.797559023 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.797724962 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.798214912 CEST	50042	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.798409939 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.798553944 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.798588991 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.798942089 CEST	50042	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.799668074 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.800354004 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.800568104 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.801019907 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.801062107 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:56.801105976 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.844288111 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:56.986027002 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:56.987771034 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.030941963 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.031116962 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.031222105 CEST	50042	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.031284094 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.031297922 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.109214067 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.109357119 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.109472036 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.114202976 CEST	50043	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.114248991 CEST	443	50043	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.115072966 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.115099907 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.115294933 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.115318060 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.115513086 CEST	50042	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.115550041 CEST	443	50042	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.116785049 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.116890907 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.117501020 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.117588997 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.122519016 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.122674942 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.122832060 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.122987032 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.123406887 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.123435020 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.124656916 CEST	50046	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.124712944 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.124783039 CEST	50046	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.125184059 CEST	50046	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.125207901 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.237050056 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.237890959 CEST	50046	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.237929106 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.237941980 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.237943888 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.237965107 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.238734961 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.239641905 CEST	50046	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.239815950 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.240358114 CEST	50046	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.283163071 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.284293890 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.293304920 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.293442965 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.298610926 CEST	50044	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.298654079 CEST	443	50044	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.349163055 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.349201918 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.471555948 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.471720934 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.471837997 CEST	50046	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.644834042 CEST	50046	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:57.644880056 CEST	443	50046	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:57.797990084 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798053980 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798074007 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798109055 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798125982 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798144102 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798183918 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.798233032 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798270941 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.798274994 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798297882 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798315048 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.798341990 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798369884 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.798369884 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.798501015 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.798584938 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.840326071 CEST	50045	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.840384960 CEST	443	50045	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.931274891 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.931349039 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:57.931467056 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.932132959 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:57.932173967 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.182645082 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.183092117 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.183155060 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.183680058 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.184218884 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.184366941 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.184607029 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.184659958 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.587901115 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.587938070 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.587968111 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.588185072 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.588222027 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.588223934 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.588352919 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.588484049 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.588567972 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.588582993 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.633400917 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.708750963 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.708812952 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.708898067 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.708946943 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.709018946 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.763866901 CEST	50047	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.763916969 CEST	443	50047	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.906698942 CEST	50049	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.906745911 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.906851053 CEST	50049	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.907242060 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.907309055 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.907375097 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.907866955 CEST	50049	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.907882929 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:58.908508062 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:58.908530951 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.208182096 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.208545923 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.208590031 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.209076881 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.209558964 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.209686041 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.210273027 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.210326910 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.216445923 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.219845057 CEST	50049	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.219892025 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.220819950 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.247128010 CEST	50049	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.247373104 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.247802973 CEST	50049	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.247852087 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.340555906 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.340612888 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.340708971 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.341468096 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.341485023 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.451363087 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.452685118 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.452722073 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.453465939 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.467327118 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.467614889 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.467925072 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.467951059 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.467971087 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.682684898 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.684523106 CEST	50049	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.684652090 CEST	443	50049	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.684752941 CEST	50049	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.737221956 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.737360954 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.737401009 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.737478018 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.747781992 CEST	50052	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:50:59.747824907 CEST	443	50052	162.125.69.18	192.168.2.5
Jul 21, 2023 18:50:59.819406986 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.819449902 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.819470882 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.819521904 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.819560051 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.819583893 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.819622040 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.819994926 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.820022106 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.820085049 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.820110083 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.820131063 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.820154905 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.883476019 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:50:59.883541107 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:50:59.883661985 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:50:59.883874893 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:50:59.883910894 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:50:59.941836119 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.941905975 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.941956997 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.941978931 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.941992044 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.942030907 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.942589998 CEST	50050	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.942615032 CEST	443	50050	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.947715044 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:50:59.948318958 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:50:59.948385000 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:50:59.949618101 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:50:59.949759960 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:50:59.952501059 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:50:59.952650070 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:50:59.959187984 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.959239960 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.959322929 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.959825993 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.959889889 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.959995031 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.960314035 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.960347891 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.960424900 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.960556984 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.960592985 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.960807085 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.960838079 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:50:59.960952997 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:50:59.960988045 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.033534050 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:51:00.033577919 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:51:00.060300112 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.060357094 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.060450077 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.060838938 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.060863972 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.133519888 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:51:00.175652981 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.176057100 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.176079035 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.176923990 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.177668095 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.177846909 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.178186893 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.178204060 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.178246975 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.309818983 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.310358047 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.310395002 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.311707973 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.312325954 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.312558889 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.312910080 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.312988043 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.313730955 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.314213037 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.314254045 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.316457033 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.316572905 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.317078114 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.317188025 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.317336082 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.317358971 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.328032970 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.328607082 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.328646898 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.330328941 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.330441952 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.330985069 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.331196070 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.331202030 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.331307888 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.427697897 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.427711010 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.427771091 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.441757917 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.441945076 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.441988945 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.442028046 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.442153931 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.446542978 CEST	50058	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:00.446580887 CEST	443	50058	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:00.527640104 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.635317087 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.694833040 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.694876909 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.694888115 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.694917917 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.694931984 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.694947958 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.695080996 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.695120096 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.695188046 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.695197105 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.695292950 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.695611954 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.695626020 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.695693970 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.695741892 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.695765972 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.695777893 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.695827961 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.727837086 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.727907896 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.727957010 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.728183031 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.728183031 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.728250980 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.728323936 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.728501081 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.733973026 CEST	50055	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.734029055 CEST	443	50055	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.766882896 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.766905069 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.766999006 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.767019987 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.767041922 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.767060995 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.767082930 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.767149925 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.768153906 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.768546104 CEST	50056	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.768585920 CEST	443	50056	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818067074 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818120956 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818264961 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.818283081 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818315029 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818337917 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818350077 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818363905 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818386078 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.818478107 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.818486929 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.818581104 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.837896109 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.837937117 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.837989092 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.838104963 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.838196993 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.940723896 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.940754890 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.940924883 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.940949917 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.941025019 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.941334963 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.941359997 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.941430092 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.941438913 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.941502094 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.941777945 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.941797018 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.941865921 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.941873074 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.941911936 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.941941977 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.942531109 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.942569971 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.942627907 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.942636967 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.942718029 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.943304062 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.943326950 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.943413019 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.943419933 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.943475008 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.960107088 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.960418940 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.961095095 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.961218119 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.961236954 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.961237907 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.961258888 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:00.961302996 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:00.961378098 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.063400984 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.063450098 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.063687086 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.063719034 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.063749075 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.063818932 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.063821077 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.063844919 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.063913107 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.064486027 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.064522982 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.064640999 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.064657927 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.064729929 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.065459013 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.065491915 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.065637112 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.065655947 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.065726995 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.065843105 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.065871954 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.065958977 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.065973997 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.066041946 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.066600084 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.066629887 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.066749096 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.066770077 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.066860914 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.067256927 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.067290068 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.067385912 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.067405939 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.067476034 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.067878962 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.067909956 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.068001032 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.068022966 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.068119049 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.068386078 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.068420887 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.068502903 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.068521976 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.068588972 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.069047928 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.069087029 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.069144964 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.069163084 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.069201946 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.069248915 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.083136082 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.083198071 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.083298922 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.083328962 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.083362103 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.083384037 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.083997965 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.084036112 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.084105968 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.084125042 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.084162951 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.084186077 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.084875107 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.084913015 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.084984064 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.085000038 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.085022926 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.085045099 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.130145073 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.130211115 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.130244017 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.130266905 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.130291939 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.130322933 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.185930014 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.186005116 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.186196089 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.186227083 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.186310053 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.186467886 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.186557055 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.186613083 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.186620951 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.186702013 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.186990023 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.187060118 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.187108994 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.187117100 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.187164068 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.187202930 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.187566042 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.187644005 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.187710047 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.187721014 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.187794924 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.188117027 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.188191891 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.188245058 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.188251972 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.188303947 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.188349009 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.188493967 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.188761950 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.188839912 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.188882113 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.188889027 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.188983917 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.189183950 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.189243078 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.189291000 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.189297915 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.189338923 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.189380884 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.189750910 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.189826965 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.189872026 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.189878941 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.189955950 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.190263987 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.190339088 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.190376997 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.190383911 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.190433025 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.190474987 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.190900087 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.190968990 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.191039085 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.191046953 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.191138029 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.191762924 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.191821098 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.191860914 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.191869974 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.191936016 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.192734003 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.192795038 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.192840099 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.192851067 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.192903996 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.193268061 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.193326950 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.193366051 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.193373919 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.193422079 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.193767071 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.193825006 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.193860054 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.193867922 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.193906069 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.193948030 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.194111109 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.194144964 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.194200039 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.194207907 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.194281101 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.194422007 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.194453001 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.194511890 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.194519043 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.194542885 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.194581985 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.194689989 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.194750071 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.196152925 CEST	50054	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.196176052 CEST	443	50054	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.223192930 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.223268986 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.223433018 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.223666906 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.223695993 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.481050014 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.481493950 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.481570959 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.482254028 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.483417988 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.483565092 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:01.484108925 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:01.484159946 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.032468081 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.032526016 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.032630920 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.032969952 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.032988071 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.107512951 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.108519077 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.108556032 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.109522104 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.120692015 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.120937109 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.120946884 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.161670923 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.163361073 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.163400888 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.163424969 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.163553953 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.163595915 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.163676023 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.163820028 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.163849115 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.163922071 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.163938999 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.163960934 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.164292097 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.203699112 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.285554886 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.285592079 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.285758972 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.285789967 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.285873890 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.286259890 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.286309004 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.286354065 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.286365032 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.286384106 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.286397934 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.286427021 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.287519932 CEST	50059	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.287544012 CEST	443	50059	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.344474077 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.344542980 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.344671011 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.345053911 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.345081091 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.401190996 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.401240110 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.401355028 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.401945114 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.401962996 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.439299107 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.439455986 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.439565897 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.447534084 CEST	50060	443	192.168.2.5	162.125.69.18
Jul 21, 2023 18:51:02.447581053 CEST	443	50060	162.125.69.18	192.168.2.5
Jul 21, 2023 18:51:02.607533932 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.609121084 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.609175920 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.610172033 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.610786915 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.610992908 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.611073971 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.611118078 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.651705027 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.655673981 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.686760902 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.686845064 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.688034058 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.721998930 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.722268105 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.722732067 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.722784996 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.835905075 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.835972071 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:02.836059093 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.836354017 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:02.836383104 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009511948 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009562016 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009576082 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009603024 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009643078 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.009661913 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009702921 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009722948 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.009722948 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.009737015 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009754896 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.009762049 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009804010 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.009865999 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.009936094 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.011945963 CEST	50061	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.011972904 CEST	443	50061	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.095504045 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.146747112 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.164675951 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.164712906 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.166090965 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.166599035 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.166881084 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.167047024 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200006962 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200083017 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200098038 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200155020 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200200081 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200208902 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200239897 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200239897 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200243950 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200279951 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200295925 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200347900 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200359106 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200372934 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200447083 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200459957 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200511932 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200516939 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200534105 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200582027 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.200689077 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.200758934 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.208295107 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.209180117 CEST	50062	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.209211111 CEST	443	50062	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.272074938 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.272138119 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.272283077 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.272588968 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.272614956 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.452512980 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.452555895 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.452649117 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.452930927 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.452945948 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.458754063 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.458836079 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.458937883 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.459358931 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.459408045 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.461168051 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.461225986 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.461318016 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.461545944 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.461577892 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.548118114 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.548639059 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.548682928 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.549465895 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.550220013 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.550404072 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.550610065 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.574343920 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.574387074 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.574456930 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.574470997 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.574573994 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.574601889 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.574634075 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.574714899 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.574791908 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.575051069 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.575082064 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.575206995 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.575227022 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.575685024 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.575809956 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.575815916 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.575907946 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.591357946 CEST	50063	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.591407061 CEST	443	50063	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.596298933 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.619944096 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.620032072 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.620124102 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.621103048 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.621141911 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.621244907 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.621436119 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.621476889 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.622682095 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.622708082 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.710988045 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.711424112 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.711469889 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.712111950 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.712656975 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.712817907 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.713160992 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.721771955 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.724211931 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.724272966 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.724355936 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.724576950 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.724603891 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.725794077 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.725869894 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.726288080 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.726404905 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.726417065 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.726502895 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.726876020 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.727035999 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.727336884 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.727380037 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.727616072 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.727642059 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.760308027 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.766860008 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.767936945 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.915610075 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.916678905 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.916729927 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.919240952 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.919852972 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.919929028 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.920432091 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.920573950 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.920768976 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.923651934 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.924122095 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.924376965 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.924432039 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.924727917 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.924776077 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.924912930 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:03.924990892 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:03.964782000 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.008002043 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.048808098 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.048840046 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.062553883 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.062585115 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.062604904 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.062690973 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.062731028 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.062751055 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.062751055 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.062799931 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.062813044 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.064394951 CEST	50065	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.064423084 CEST	443	50065	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.088754892 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.100246906 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.100960970 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.100991964 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.100996971 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101013899 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101082087 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101155043 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.101177931 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101226091 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.101274014 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.101408005 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101434946 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101521015 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.101548910 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101574898 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.101778984 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101850033 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101890087 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.101913929 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.101955891 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.101965904 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.102018118 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.124078035 CEST	50068	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.124139071 CEST	443	50068	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.131371975 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.131388903 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.131441116 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.131458998 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.131474018 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.131510973 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.131556988 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.131612062 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.132375002 CEST	50066	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.132407904 CEST	443	50066	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.141805887 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.175523043 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.175596952 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.175688982 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.176098108 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.176130056 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.187351942 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.187437057 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.187566042 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.187591076 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.187621117 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.189068079 CEST	50069	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.189100981 CEST	443	50069	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.195925951 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.196012974 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.196110010 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.196487904 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.196520090 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.222871065 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.222913980 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.223052025 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.223094940 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.223114014 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.223148108 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.225095034 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.225126982 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.225220919 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.225241899 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.225272894 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.225307941 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.225900888 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.225930929 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.226018906 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.226037025 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.226074934 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.226115942 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.344703913 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.344743967 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.345060110 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.345091105 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.345149040 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.345352888 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.345382929 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.345455885 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.345469952 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.345524073 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.345954895 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.345984936 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.346045017 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.346060991 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.346108913 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.346695900 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.346729994 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.346813917 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.346832991 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.346878052 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.347366095 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.347398043 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.347460985 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.347476006 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.347503901 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.347527981 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.364814043 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.364872932 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.365118980 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.365353107 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.365365982 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.375897884 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.375936031 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.375999928 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.376030922 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.376080036 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.376101971 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.376508951 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.376537085 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.376585960 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.376599073 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.376650095 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.376673937 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.429222107 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.429711103 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.429749966 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.430485010 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.431251049 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.431405067 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.432306051 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.468029976 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.469641924 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.469671011 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.469808102 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.469818115 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.469836950 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.469866991 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.469933987 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.469948053 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.469975948 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.470010042 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.471251011 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.471280098 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.471467972 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.471483946 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.471581936 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.472332001 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.472361088 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.472465038 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.472479105 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.472528934 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.473408937 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.473445892 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.473443985 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.473479986 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.473495960 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.473509073 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.473562002 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.474317074 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.474350929 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.474402905 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.474425077 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.474438906 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.474487066 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.474514008 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.475806952 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.475838900 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.475933075 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.475950003 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.476002932 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.476291895 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.477125883 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.477165937 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.477181911 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.477221012 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.477236032 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.477274895 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.477298021 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.477375031 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.478014946 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.478049040 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.478110075 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.478122950 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.478178024 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.478203058 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.478684902 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.478745937 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.479468107 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.479500055 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.479624033 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.479640007 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.479691982 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.497601032 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.497648001 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.497843981 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.497881889 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.497937918 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.499098063 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.499136925 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.499255896 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.499273062 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.499316931 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.520967960 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.521009922 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.521133900 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.521169901 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.524599075 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.524739981 CEST	443	50070	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.524856091 CEST	50070	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.532213926 CEST	50075	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.532284021 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.532380104 CEST	50075	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.532989025 CEST	50075	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.533010006 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.540014029 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.540061951 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.540185928 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.540214062 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.540246010 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.540276051 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.541368008 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.541400909 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.541523933 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.541539907 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.541589975 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.595952034 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.595989943 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.596128941 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.596158028 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.596280098 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.596821070 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.596858978 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.596935987 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.596951008 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.597007036 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.597757101 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.597795010 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.597862959 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.597878933 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.597903013 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.597937107 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.598423004 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.598458052 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.598577023 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.598592043 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.598648071 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.599292040 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.599324942 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.599390030 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.599406004 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.599529028 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.600181103 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.600218058 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.600286007 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.600301027 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.600348949 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.600389957 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.600966930 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.600997925 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.601083994 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.601100922 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.601145983 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.601938009 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.601977110 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.601985931 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.602003098 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.602041006 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.602132082 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.602771044 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.602808952 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.602884054 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.602897882 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.602945089 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.602993011 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.603408098 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.603441000 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.603503942 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.603516102 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.603558064 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.603585005 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.603835106 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.603872061 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.603944063 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.603956938 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.604002953 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.604628086 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.604660988 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.604741096 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.604754925 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.604823112 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.605206013 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.605252028 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.605314016 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.605328083 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.605354071 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.605379105 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.605870962 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.605904102 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.605971098 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.605984926 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.606026888 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.606049061 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.606393099 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.606429100 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.606482983 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.606496096 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.606548071 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.606911898 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.606942892 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.607017994 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.607064962 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.607079029 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.607109070 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.607131004 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.607177973 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.608360052 CEST	50067	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.608383894 CEST	443	50067	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.624638081 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.625108957 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.625147104 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.626647949 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.626796007 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.627320051 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.627435923 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.627595901 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.627615929 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.667840004 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.690536022 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.690609932 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.690716028 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.691740036 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.691766024 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.701797009 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.701874971 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.701972961 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.702014923 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.702074051 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.702078104 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.702125072 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.704149961 CEST	50071	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.704190969 CEST	443	50071	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.757528067 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.757567883 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.757678986 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.757724047 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.757760048 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.785506964 CEST	50072	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.785545111 CEST	443	50072	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.789197922 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.789603949 CEST	50075	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.789627075 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.790283918 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.790971041 CEST	50075	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.791107893 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.791282892 CEST	50075	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.791316032 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.800337076 CEST	50077	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.800396919 CEST	443	50077	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.800517082 CEST	50077	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.800713062 CEST	50077	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.800736904 CEST	443	50077	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.885236979 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.885272980 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.885360003 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.885406017 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.885440111 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.886679888 CEST	50074	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.886727095 CEST	443	50074	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.917632103 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:51:04.917763948 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:51:04.917861938 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:51:04.947900057 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.948411942 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.948447943 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.949120998 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.949867964 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.950016975 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:04.950143099 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:04.996296883 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.019542933 CEST	50053	443	192.168.2.5	13.107.246.60
Jul 21, 2023 18:51:05.019584894 CEST	443	50053	13.107.246.60	192.168.2.5
Jul 21, 2023 18:51:05.054457903 CEST	443	50077	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.054991007 CEST	50077	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.055054903 CEST	443	50077	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.055737019 CEST	443	50077	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.056570053 CEST	50077	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.056711912 CEST	443	50077	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.056911945 CEST	50077	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.056912899 CEST	50077	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.056946993 CEST	443	50077	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.061924934 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.062001944 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.062114000 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.062321901 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.062367916 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.062441111 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.062735081 CEST	50081	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.062777996 CEST	443	50081	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.062840939 CEST	50081	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.063124895 CEST	50082	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.063158989 CEST	443	50082	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.063237906 CEST	50082	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.063437939 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.063486099 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.063554049 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.064120054 CEST	50084	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.064158916 CEST	443	50084	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.064219952 CEST	50084	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.065047026 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.065079927 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.066061020 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.066091061 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.066788912 CEST	50081	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.066813946 CEST	443	50081	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.067307949 CEST	50082	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.067332983 CEST	443	50082	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.067841053 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.067878962 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.069161892 CEST	50084	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.069205046 CEST	443	50084	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.092545986 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.096432924 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.096554995 CEST	50075	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.099297047 CEST	50075	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.099325895 CEST	443	50075	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.126089096 CEST	50086	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.126159906 CEST	443	50086	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.126231909 CEST	50086	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.126713037 CEST	50086	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.126739025 CEST	443	50086	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.164426088 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.164906979 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.164958954 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.166196108 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.166322947 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.169425011 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.169584036 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.169624090 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.187637091 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.187728882 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.187804937 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.187871933 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.189181089 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.189212084 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.189812899 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.189851999 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.189960957 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.190932989 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.190962076 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.213397980 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.214109898 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.214149952 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.216152906 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.216315031 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.217521906 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.217684984 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.218192101 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.218221903 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.220891953 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.220961094 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.221065998 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.221100092 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.221153021 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.222732067 CEST	50076	443	192.168.2.5	23.227.196.140
Jul 21, 2023 18:51:05.222762108 CEST	443	50076	23.227.196.140	192.168.2.5
Jul 21, 2023 18:51:05.244652987 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.244683981 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.244867086 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.244896889 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.244918108 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.244970083 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.245023012 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.245035887 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.245064020 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.259998083 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260071039 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260176897 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.260200024 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260227919 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.260313034 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260348082 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260379076 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.260390043 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260404110 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.260710955 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260744095 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260788918 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.260803938 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.260827065 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.261184931 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.263191938 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.263231039 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.263806105 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.264278889 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.264413118 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.264514923 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.275764942 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.275820017 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.275917053 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.275943995 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.275966883 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.275970936 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.275998116 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276030064 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276038885 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276055098 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276197910 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276236057 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276278019 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276293993 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276315928 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276436090 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276464939 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276514053 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276527882 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276545048 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276628017 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276664019 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276695013 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276706934 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276721954 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276738882 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276828051 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276856899 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276896000 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.276906967 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.276933908 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.277082920 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277121067 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277149916 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.277163029 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277178049 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.277270079 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277295113 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277328968 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.277340889 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277357101 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.277493954 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277524948 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277559996 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.277571917 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.277606010 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.281356096 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.281475067 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.281569958 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.281589031 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.281636953 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.282984972 CEST	50087	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.283020020 CEST	443	50087	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.283533096 CEST	50088	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.283577919 CEST	443	50088	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.283658981 CEST	50088	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.285892963 CEST	50088	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.285922050 CEST	443	50088	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.290616989 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.290663958 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.290766954 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.290790081 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.290827036 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.291134119 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.291174889 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.291210890 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.291228056 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.291245937 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.291258097 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.291402102 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.291429996 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.291479111 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.291491985 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.291507959 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.292150021 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292188883 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292233944 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.292248964 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292284966 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.292474985 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292505026 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292557955 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.292572021 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292613029 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.292844057 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292902946 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292938948 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.292952061 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.292968988 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293015003 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293037891 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293066978 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293076992 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293096066 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293252945 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293286085 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293311119 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293324947 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293339014 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293349981 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293551922 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293579102 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293612003 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293626070 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293643951 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293824911 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293865919 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.293958902 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.293975115 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294199944 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294230938 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294270992 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294286013 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294300079 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294377089 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294388056 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294403076 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294434071 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294450998 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294462919 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294472933 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294480085 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294501066 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294511080 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294595957 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294620037 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294656992 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294667959 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294687986 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294891119 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294929028 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294969082 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294985056 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.294998884 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.294998884 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.295598030 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295629025 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295675993 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.295694113 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295707941 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.295713902 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295737028 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.295746088 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295751095 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.295773983 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.295782089 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295800924 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295819998 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.295823097 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295864105 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.295872927 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.295898914 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.305435896 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.305500984 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.305517912 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.305537939 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.305562019 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.305623055 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.305649042 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.305687904 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.305700064 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.305716038 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.306520939 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306567907 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306612968 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.306629896 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306651115 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.306731939 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306763887 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306788921 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.306801081 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306823015 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.306902885 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306936026 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306963921 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.306974888 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.306993961 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.307159901 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307190895 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307225943 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.307239056 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307255030 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.307387114 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307427883 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307450056 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.307462931 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307477951 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.307488918 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.307602882 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307631016 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307663918 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.307677031 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.307697058 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.308151960 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308195114 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308237076 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.308248997 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308289051 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.308509111 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308535099 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308593035 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.308604956 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308619022 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.308799982 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308832884 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308886051 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.308897018 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.308919907 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.309045076 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309073925 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309111118 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.309123039 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309149981 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.309737921 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309773922 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309847116 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.309863091 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309880972 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309884071 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.309910059 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309952974 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.309962034 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.309988022 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.309993982 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310026884 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310054064 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310061932 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310090065 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310122013 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310146093 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310178995 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310189009 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310210943 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310224056 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310231924 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310240030 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310261965 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310278893 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310322046 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310332060 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310514927 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310544968 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310591936 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310605049 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310626984 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310745001 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310781002 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310812950 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310823917 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.310847044 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.310981989 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311011076 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311024904 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.311036110 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311052084 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.311081886 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.311260939 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311290979 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311336994 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.311347961 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311368942 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.311547995 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311589956 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311618090 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.311630964 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311659098 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.311806917 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311836004 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311873913 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.311887026 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.311904907 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312089920 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312128067 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312164068 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312176943 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312191963 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312342882 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312370062 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312412024 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312424898 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312439919 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312659979 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312695980 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312721968 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312733889 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312750101 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312763929 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312886953 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312937975 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.312968969 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.312980890 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313007116 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.313546896 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313582897 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313631058 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.313644886 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313662052 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.313750982 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313775063 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313811064 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.313822031 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313848972 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.313865900 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313899040 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 21, 2023 18:51:05.313922882 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 21, 2023 18:51:05.313931942 CEST	443	50080	152.199.21.175	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 21, 2023 18:50:25.805008888 CEST	192.168.2.5	8.8.8.8	0x1673	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:25.813577890 CEST	192.168.2.5	8.8.8.8	0xe758	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:28.486004114 CEST	192.168.2.5	8.8.8.8	0x329a	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:29.950018883 CEST	192.168.2.5	8.8.8.8	0xf234	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:29.970143080 CEST	192.168.2.5	8.8.8.8	0xc653	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:29.986160040 CEST	192.168.2.5	8.8.8.8	0xf695	Standard query (0)	dropbox.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:32.146295071 CEST	192.168.2.5	8.8.8.8	0x41d4	Standard query (0)	paper.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:34.817209005 CEST	192.168.2.5	8.8.8.8	0x66e9	Standard query (0)	uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:46.082762957 CEST	192.168.2.5	8.8.8.8	0x5f92	Standard query (0)	37.comet.dropbox.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:56.534342051 CEST	192.168.2.5	8.8.8.8	0x4a41	Standard query (0)	mvolenoazaqoerutien.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:58.766351938 CEST	192.168.2.5	8.8.8.8	0x641b	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:59.851938009 CEST	192.168.2.5	8.8.8.8	0xc25e	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:04.773085117 CEST	192.168.2.5	8.8.8.8	0xf8ae	Standard query (0)	portal.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:12.261156082 CEST	192.168.2.5	8.8.8.8	0x5efe	Standard query (0)	www.microsoft365.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:13.318398952 CEST	192.168.2.5	8.8.8.8	0x5e4d	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:17.274146080 CEST	192.168.2.5	8.8.8.8	0xf4	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:25.741333961 CEST	192.168.2.5	8.8.8.8	0x47a7	Standard query (0)	clientlog.portal.office.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:25.749701023 CEST	192.168.2.5	8.8.8.8	0x37dd	Standard query (0)	account.live.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:26.357661009 CEST	192.168.2.5	8.8.8.8	0x728c	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:41.066453934 CEST	192.168.2.5	8.8.8.8	0x167d	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:58.790186882 CEST	192.168.2.5	8.8.8.8	0x51b1	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 21, 2023 18:50:18.807002068 CEST	8.8.8.8	192.168.2.5	0xaa23	No error (0)	t-ring.t-9999.fdv2-t-msedge.net	t-9999.fdv2-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:18.807002068 CEST	8.8.8.8	192.168.2.5	0xaa23	No error (0)	t-9999.fdv2-t-msedge.net		13.107.237.254	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:19.016196966 CEST	8.8.8.8	192.168.2.5	0xe353	No error (0)	k-ring.k-9999.k-msedge.net	k-9999.k-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:19.016196966 CEST	8.8.8.8	192.168.2.5	0xe353	No error (0)	k-9999.k-msedge.net		13.107.18.254	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:25.833775997 CEST	8.8.8.8	192.168.2.5	0x1673	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:25.833775997 CEST	8.8.8.8	192.168.2.5	0x1673	No error (0)	clients.l.google.com		172.217.168.46	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:25.854804039 CEST	8.8.8.8	192.168.2.5	0xe758	No error (0)	accounts.google.com		172.217.168.13	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:28.527736902 CEST	8.8.8.8	192.168.2.5	0x329a	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:28.527736902 CEST	8.8.8.8	192.168.2.5	0x329a	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:29.973292112 CEST	8.8.8.8	192.168.2.5	0xf234	No error (0)	www.google.com		172.217.168.4	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:30.010294914 CEST	8.8.8.8	192.168.2.5	0xc653	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:30.015300989 CEST	8.8.8.8	192.168.2.5	0xf695	No error (0)	dropbox.com		162.125.248.18	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:32.175512075 CEST	8.8.8.8	192.168.2.5	0x41d4	No error (0)	paper.dropboxstatic.com		18.165.183.28	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:32.175512075 CEST	8.8.8.8	192.168.2.5	0x41d4	No error (0)	paper.dropboxstatic.com		18.165.183.60	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:32.175512075 CEST	8.8.8.8	192.168.2.5	0x41d4	No error (0)	paper.dropboxstatic.com		18.165.183.86	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:32.175512075 CEST	8.8.8.8	192.168.2.5	0x41d4	No error (0)	paper.dropboxstatic.com		18.165.183.80	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:34.866213083 CEST	8.8.8.8	192.168.2.5	0x66e9	No error (0)	uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.com	edge-block-previews-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:34.866213083 CEST	8.8.8.8	192.168.2.5	0x66e9	No error (0)	edge-block-previews-env.dropbox-dns.com		162.125.69.16	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:46.118108034 CEST	8.8.8.8	192.168.2.5	0x5f92	No error (0)	37.comet.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:46.118108034 CEST	8.8.8.8	192.168.2.5	0x5f92	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:56.572216034 CEST	8.8.8.8	192.168.2.5	0x4a41	No error (0)	mvolenoazaqoerutien.com		23.227.196.140	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:58.802345991 CEST	8.8.8.8	192.168.2.5	0x641b	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:59.878252029 CEST	8.8.8.8	192.168.2.5	0x17e0	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:59.878252029 CEST	8.8.8.8	192.168.2.5	0x17e0	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:59.878252029 CEST	8.8.8.8	192.168.2.5	0x17e0	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:50:59.880578041 CEST	8.8.8.8	192.168.2.5	0xc25e	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:50:59.880578041 CEST	8.8.8.8	192.168.2.5	0xc25e	No error (0)	cs1100.wpc.omegacdn.net		152.199.23.37	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:04.833703995 CEST	8.8.8.8	192.168.2.5	0xf8ae	No error (0)	portal.microsoftonline.com	geo.portal.microsoftonline.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:05.059767962 CEST	8.8.8.8	192.168.2.5	0xb131	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:05.059767962 CEST	8.8.8.8	192.168.2.5	0xb131	No error (0)	sni1gl.wpc.sigmacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:12.276379108 CEST	8.8.8.8	192.168.2.5	0x5efe	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:12.276379108 CEST	8.8.8.8	192.168.2.5	0x5efe	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:13.333198071 CEST	8.8.8.8	192.168.2.5	0x5e4d	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:13.333198071 CEST	8.8.8.8	192.168.2.5	0x5e4d	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:13.333198071 CEST	8.8.8.8	192.168.2.5	0x5e4d	No error (0)	outlook.ms-acdc.office.com	ZRH-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:13.333198071 CEST	8.8.8.8	192.168.2.5	0x5e4d	No error (0)	ZRH-efz.ms-acdc.office.com		52.97.201.194	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:13.333198071 CEST	8.8.8.8	192.168.2.5	0x5e4d	No error (0)	ZRH-efz.ms-acdc.office.com		52.97.186.146	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:13.333198071 CEST	8.8.8.8	192.168.2.5	0x5e4d	No error (0)	ZRH-efz.ms-acdc.office.com		40.99.201.194	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:13.333198071 CEST	8.8.8.8	192.168.2.5	0x5e4d	No error (0)	ZRH-efz.ms-acdc.office.com		52.98.250.130	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:17.302294970 CEST	8.8.8.8	192.168.2.5	0xf4	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:25.764257908 CEST	8.8.8.8	192.168.2.5	0x37dd	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:25.770287037 CEST	8.8.8.8	192.168.2.5	0x47a7	Name error (3)	clientlog.portal.office.com	none	none	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:26.300344944 CEST	8.8.8.8	192.168.2.5	0xdbf1	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:26.300344944 CEST	8.8.8.8	192.168.2.5	0xdbf1	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:26.300344944 CEST	8.8.8.8	192.168.2.5	0xdbf1	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:26.374926090 CEST	8.8.8.8	192.168.2.5	0x76ec	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:26.374926090 CEST	8.8.8.8	192.168.2.5	0x76ec	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:26.387247086 CEST	8.8.8.8	192.168.2.5	0xacaa	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:26.387247086 CEST	8.8.8.8	192.168.2.5	0xacaa	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:26.387247086 CEST	8.8.8.8	192.168.2.5	0xacaa	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:26.406299114 CEST	8.8.8.8	192.168.2.5	0x728c	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:26.406299114 CEST	8.8.8.8	192.168.2.5	0x728c	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:26.406299114 CEST	8.8.8.8	192.168.2.5	0x728c	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:41.094211102 CEST	8.8.8.8	192.168.2.5	0x167d	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 21, 2023 18:51:41.094211102 CEST	8.8.8.8	192.168.2.5	0x167d	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Jul 21, 2023 18:51:58.826704025 CEST	8.8.8.8	192.168.2.5	0x51b1	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

accounts.google.com

clients2.google.com

www.dropbox.com

https:

dropbox.com

paper.dropboxstatic.com

uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.com

37.comet.dropbox.com

mvolenoazaqoerutien.com

res-h3.public.cdn.office.net

outlook.office365.com

acctcdn.msauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49723	172.217.168.13	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:26 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:26 UTC	0	OUT	Data Raw: 20 Data Ascii:
2023-07-21 16:50:26 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 21 Jul 2023 16:50:26 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-VXtgJhRizoxL0--DNuXigQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-07-21 16:50:26 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-07-21 16:50:26 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49722	172.217.168.46	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:26 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.81 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:26 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-cM-jvDuXLeASZFdIsBoMmg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 21 Jul 2023 16:50:26 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6045 X-Daystart: 35426 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-07-21 16:50:26 UTC	1	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 30 34 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 35 34 32 36 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6045" elapsed_seconds="35426"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-07-21 16:50:26 UTC	2	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-07-21 16:50:26 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.5	49779	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	573	OUT	GET /static/fonts/AtlasGrotesk-Medium-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:32 UTC	638	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 85096 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 09:40:55 GMT Cache-Control: max-age=43200 ETag: "95e97662a93cae50b0dab432df119aea" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 cb0d3a2bdc5300e2d139e111e94efe5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: bEJVFGl49bNroTEOTmw2SAcmPgkBdwVt6JtTJcxOvjsY6E2Rn58XVA== Age: 25778
2023-07-21 16:50:32 UTC	638	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 4c 68 00 10 00 00 00 05 2d e4 00 01 4c 07 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 a4 2a 1c ce 64 06 60 00 8c 02 08 3c 09 82 73 11 0c 0a 89 83 38 87 d6 7b 0b a8 68 00 01 36 02 24 03 a8 64 04 20 05 90 4c 07 eb 00 0c 84 5a 5b 29 c2 b4 02 ca c9 f0 8f bc 82 24 6a ed da e1 c0 31 98 ce 21 26 f9 54 90 56 8b b2 e5 1b df e1 fd 8e bd 99 6f 22 a7 74 0e f1 40 ab a0 10 dd 9c 67 ce 48 31 ee 16 7d 0a 61 d7 f0 ee 1b cc 96 40 9f 66 ff ff ff ff ff ff ff ff ff ce 64 12 b6 95 cc 76 93 ec d7 a5 14 4a cb af 88 a8 e0 83 77 9e 47 a2 c0 02 88 4c 12 0c b9 a8 63 72 2f 30 b6 b5 ce 8c ba 79 4f 8b c8 32 cb 8b 18 a8 d4 3e c4 92 28 a5 f9 32 95 81 56 69 ec 52 9a 2c a5 f5 26 e7 c5 7c 95 65 21 60 5c 6d c1 b8 33 4b 68 dd 87 Data Ascii: wOF2Lh-L*d`<s8{h6$d LZ[)$j1!&TVo"t@gH1}a@fdvJwGLcr/0yO2>(2ViR,&\|e!`\m3Kh
2023-07-21 16:50:32 UTC	654	IN	Data Raw: 01 43 a6 77 ea 70 bc 2d 3a 8b f2 e3 ef 6a 91 c4 3b 51 f5 62 70 69 bf 31 37 4a d7 72 5e 5e 70 35 a9 7f 19 b0 13 cd bc e7 55 43 8a 65 32 f4 8d cd e7 c0 7c 85 a1 e9 87 c9 f4 6a 75 94 6b ac b4 4b 28 6b 2d 46 48 10 8b 6f e2 f9 41 a7 2a 7f 26 63 e8 2f 0a 65 20 91 02 00 c9 3c 85 61 78 84 4d 68 db 84 ce 99 76 c6 8c b1 27 1f 02 75 08 d9 f2 40 aa 69 bf b0 e7 60 74 1e 61 1d 8b ec d9 42 05 89 89 23 89 98 8c a8 45 10 6f 65 81 71 51 f9 7c 9c 43 7d 7e 1a d7 1b 5e 5e e1 66 68 bc 3f e6 74 f0 8c 6e 1d ca 70 af d9 38 fc 77 05 ef 29 66 ac d9 99 b6 51 1e 44 ad f6 36 51 a2 8f f2 fb 60 9d b2 9e 69 7b b0 c5 e1 39 73 7b 2c f1 61 66 ad ed 6d 72 f2 68 fb 31 38 73 2a 9b f5 ce 40 aa 76 e9 79 1e 6f ec f8 d6 66 ea 5f 09 bc 42 b9 42 f2 5e ac 52 9b e4 81 30 0d 9a 35 dd 20 f1 71 77 39 2a Data Ascii: Cwp-:j;Qbpi17Jr^^p5UCe2\|jukK(k-FHoA&c/e <axMhv'u@i`taB#EoeqQ\|C}~^^fh?tnp8w)fQD6Q`i{9s{,afmrh18s@vyof_BB^R05 qw9*
2023-07-21 16:50:32 UTC	670	IN	Data Raw: e3 96 50 bb cd 61 17 dc f5 ca 67 52 7e c2 68 65 2b 51 af db 84 e5 b7 da ed 8e b8 e8 9e d7 44 5c f9 0b a7 93 a3 54 83 1e 93 56 de 6a 77 38 ea 92 fb de 70 e6 46 21 82 9e 51 99 46 bd a6 ac be f5 ef 74 cc 65 0f bc f5 85 3b a5 c8 11 d8 5f ae 49 9f 69 6b 42 e0 05 c5 c3 b2 ed f4 ae cd 30 96 95 bc 5b 32 38 9d 23 48 da 4d 8f a9 ae 35 5f 7c aa 92 61 08 e4 33 30 7b ce 20 bc 05 82 43 42 c5 a4 39 8e 3d 5d 19 19 30 0a 95 a8 40 d2 a0 55 97 7e 0c cc c3 b9 ff 9b 16 b3 8c 95 92 79 c1 5d fa 1c 21 e1 74 2c a9 b2 64 a5 ac 05 d1 b1 a0 ad 25 96 85 94 20 4b 21 22 b2 56 bd c6 cc 59 cf 87 ad 6c de 82 e2 44 67 f6 25 82 c4 01 5d 77 d7 63 8a 5e 46 f5 a2 81 ae fe 6c 5d 86 40 3e 03 b3 e7 0c c2 5b 20 38 64 44 2d 77 6d ee ce 4e 92 01 a3 50 89 0a 24 0d 5a 75 e9 c7 58 33 bf b9 4d f6 1c ac Data Ascii: PagR~he+QD\TVjw8pF!QFte;_IikB0[28#HM5_\|a30{ CB9=]0@U~y]!t,d% K!"VYlDg%]wc^Fl]@>[ 8dD-wmNP$ZuX3M
2023-07-21 16:50:32 UTC	686	IN	Data Raw: 6e e1 bf 1b fe a6 fc cd 3e 4f 39 78 5b 30 32 00 05 77 43 35 b7 05 07 16 57 d7 f3 1b 95 cd 9e 75 3c a1 ee 02 98 cd a2 50 fe 97 47 ad 64 f3 ad 70 e4 5d e8 b1 12 19 93 31 80 c4 2b b1 93 d2 18 ef d6 13 09 1e 0f 7c 05 8c 64 10 fd eb ea 9a 3b 5a 23 e9 8c 3a f1 3b 1e ec c7 2d d1 df 7b cc 87 dd 76 13 e0 bc b1 1e 71 d5 af 0a 89 a7 e7 b3 33 38 ec ba ff e5 7a 7f c6 3b f2 fc 5f 68 dd 86 73 b5 35 a3 c3 01 e1 a8 4f b6 4d 96 b7 12 ea f7 b3 ea b6 76 d9 36 16 9b 37 37 57 d1 da 96 ae e3 b7 46 35 af ae 81 3b 6a 32 41 41 5d a3 2d 35 1a 87 30 bb 91 6c 80 ab 5d 9a 45 3a 55 6c b7 c7 92 bd cd 1c a4 43 68 c6 d4 90 d5 25 bf 9f e3 6f ad b1 51 aa c8 a9 ed 78 64 bf 41 84 aa fc d1 61 19 51 79 bf c3 36 21 cc 37 da 6b 48 c3 23 be 52 3c b1 8c 1b 5c cd 2e 8f 7f 9b e9 79 13 0f b1 06 7e 14 Data Ascii: n>O9x[02wC5Wu<PGdp]1+\|d;Z#:;-{vq38z;_hs5OMv677WF5;j2AA]-50l]E:UlCh%oQxdAaQy6!7kH#R<\.y~
2023-07-21 16:50:32 UTC	702	IN	Data Raw: 49 34 2c d6 e1 2c c4 23 ff 5b 15 c6 62 43 ca ff ca 88 f3 d8 7b 8c 04 14 02 11 b2 c7 4c a8 d3 eb 49 3a e2 69 cd dd 8e 5d 2e 26 ed 64 5a 3b 18 95 c2 92 d3 9c c8 eb 0e 75 72 3e b1 1e d4 46 28 f2 89 a5 ad 87 f2 6d 0f c4 8a 53 1c 4d eb 40 22 97 2f f9 1d 71 a1 7c 60 50 1b dc ad dd f1 bc d4 68 1e 28 cc db 37 3e c2 35 21 6d f5 74 ea d7 8f 6f cd 8b 24 f7 44 49 2b d1 a2 48 8d 7c 6c e9 c4 a9 f9 ae 93 75 4d 73 c7 a1 29 61 e0 7c 77 6f 84 32 5c a1 9a e9 eb 0b df e8 97 68 18 a8 a5 b9 dd 75 0d 0a 36 16 13 9f bb 0d 13 ba 2e 16 e0 c7 b6 4e be 56 bc 8d 55 74 a6 95 d7 8f 15 13 4b 20 a8 5a dc 92 4c 3c 3c de 3a d1 b6 e8 c1 2d 04 8b f0 e0 a3 fc fa f1 07 15 ca bc 16 49 15 16 5f 04 62 f1 35 43 81 b6 69 60 c8 ee 48 90 a1 94 71 5b 04 3f 50 5d b7 e1 73 27 23 51 23 d9 8e 6e ee 4d 87 Data Ascii: I4,,#[bC{LI:i].&dZ;ur>F(mSM@"/q\|`Ph(7>5!mto$DI+H\|luMs)a\|wo2\hu6.NVUtK ZL<<:-I_b5Ci`Hq[?P]s'#Q#nM
2023-07-21 16:50:32 UTC	718	IN	Data Raw: 42 f2 2b ec 88 09 ef f8 98 61 ce 8f 3b 82 82 4d 0f 09 3c a1 41 10 55 7c 0e 23 85 44 3e 96 49 2b a2 79 2e 3e 67 d9 67 da 28 a2 5b 5f 88 62 94 22 8a 38 ca 51 89 6a 4b b5 09 49 d0 19 5d d1 dd da cf d7 04 00 21 18 41 73 92 58 6d b1 5c ad 37 5b 45 a4 6f 0a 4e 90 14 cd b0 1c 2f 88 92 ac f4 25 f1 33 d3 30 2d db 71 3d 3f 08 a3 38 49 b3 bc 28 ab ba 69 bb 7e 18 01 10 82 11 14 c3 09 92 a2 19 96 e3 85 02 25 fe 35 ad 6a ba 61 5a b6 e3 7a 7e 10 46 71 92 66 79 51 56 75 d3 76 fd 30 4e f3 b2 6e fb 71 5e 95 4a 70 6b 13 c4 05 42 95 38 7a af af d6 32 ba 72 b0 16 27 ff 5c fc fe fe 00 22 4c 28 e3 42 2a 6d ac f3 22 96 b8 23 63 c9 2f fc 7f 2f ff ac 28 c9 8a 9a d3 74 30 90 50 d3 ca 17 8a a5 32 b3 1d 57 eb e4 90 ea 3c 68 84 51 53 bc 5b 06 dd 8e b9 59 6f 3a 9b b3 62 72 4a ae 92 aa Data Ascii: B+a;M<AU\|#D>I+y.>gg([_b"8QjKI]!AsXm\7[EoN/%30-q=?8I(i~%5jaZz~FqfyQVuv0Nnq^JpkB8z2r'\"L(B*m"#c//(t0P2W<hQS[Yo:brJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.5	49924	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4163	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 883 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4164	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6c 6f 61 64 5f 69 66 72 61 6d 65 5f 73 75 63 63 65 73 73 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 2d 30 38 6e 77 5f 77 4a 77 48 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"EAiNyh0Etp1-SLOVW1yl7","event_name":{".tag":"load_iframe_success"},"auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu-08nw_wJwH
2023-07-21 16:50:44 UTC	4174	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 29 X-Webkit-Csp: sandbox Content-Length: 21 Date: Fri, 21 Jul 2023 16:50:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f79da921c78642209bbe0a4b2bdaccaf Connection: close
2023-07-21 16:50:44 UTC	4174	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.5	49926	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4167	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 752 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4168	OUT	Data Raw: 1f 8b 08 00 f4 35 bb 64 00 ff 75 54 5d 6f e3 36 10 fc 2b 05 9f 5a 40 32 f4 65 4b f6 5b e1 26 48 80 c0 0d 7a e9 15 c5 e1 60 d0 e2 ca 66 2b 91 2a 49 f9 9a 1e ee bf df d0 92 6c 39 71 f5 62 73 76 76 b8 cb 1d f2 d3 57 b6 75 af 2d b1 15 a3 23 29 c7 82 e1 77 c5 3e 91 da 7f fe a1 25 53 01 6c 8d c6 3f 27 c9 b2 d5 57 a6 ba e6 77 4b c6 fe aa 9e b9 60 ab 24 f0 c8 5a 2b 45 a5 23 31 0d 45 01 93 76 5d eb 4e fc a2 4b b6 72 a6 a3 80 95 3d f3 4e f9 dc 34 3e 03 1f 1c 37 d8 39 cd 02 26 74 c3 a5 7a d2 fa ef ae 3d f1 de 82 d7 dc b5 6e da 9a 1c da c0 86 a7 b5 72 e8 e2 49 73 41 e2 ce 37 74 12 89 93 34 c7 76 37 09 83 e0 85 f2 08 86 e1 a5 93 47 c8 5e 60 9f 22 d5 9e ad 8a 79 11 b0 8a 5c 79 18 53 03 56 23 78 d9 0e b5 9c 81 81 03 c8 90 90 66 6c 7f b2 9e 32 fe e9 c8 8e 40 92 a6 1e b2 Data Ascii: 5duT]o6+Z@2eK[&Hz`f+*Il9qbsvvWu-#)w>%Sl?'WwK`$Z+E#1Ev]NKr=N4>79&tz=nrIsA7t4v7G^`"y\ySV#xfl2@
2023-07-21 16:50:45 UTC	4207	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:44 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:44 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 5adfef47-cb96-4167-9bd9-2cace52a548d X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: bd7a3d27a9d749e08b551f94dd888870 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.5	49929	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4169	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 860 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4170	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 72 65 63 65 69 76 65 64 5f 6d 65 73 73 61 67 65 5f 74 69 74 6c 65 5f 63 68 61 6e 67 65 64 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"EAiNyh0Etp1-SLOVW1yl7","event_name":{".tag":"received_message_title_changed"},"auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkN
2023-07-21 16:50:45 UTC	4209	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 32 X-Webkit-Csp: sandbox Content-Length: 21 Date: Fri, 21 Jul 2023 16:50:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f7807e8169834cbeb78d269ecbfdd1f8 Connection: close
2023-07-21 16:50:45 UTC	4209	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.5	49943	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4209	OUT	GET /static/img/ace/emoji/270b.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:45 UTC	4210	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3037 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "c4ce23f7313e8e2319f10e4d8aeb20d1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 abd012b9637ad93b7c9aa82d2cfb262c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: Jds47unj8SgnDmhTY_4V9rkPNHBTIOXcRkfGjO_UEm3DRkrTJgCukA== Age: 7101
2023-07-21 16:50:45 UTC	4210	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0b 6a 49 44 41 54 78 9c cd 9b 5d 88 1c d9 75 c7 7f e7 d6 47 cf 74 8f 46 33 d2 6c 46 d6 46 2b cb 1a ed 7a ad 8f 75 48 08 49 58 87 b5 8d c3 62 9c 97 2c 21 5e 88 0d b6 31 eb 5d ad 16 c7 18 1c 30 18 85 3c f8 c1 24 04 69 45 88 8d 09 ce 22 e3 0f fc 60 30 04 62 96 3c 84 e0 4d ec c5 f6 48 0a 96 64 59 da 95 57 df d2 8c 76 46 fd 51 55 f7 9e 3c 54 f7 4c 57 77 55 75 cf 4c 8f b4 7f e8 a9 9e aa ae 7b ee ff 7f 4f 9d 73 ee bd dd c2 26 e2 fc b1 27 7e 0f e3 8e 8a f0 47 aa 4c 23 72 0e d5 57 22 71 27 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<jIDATx]uGtF3lFF+zuHIXb,!^1]0<$iE"`0b<MHdYWvFQU<TLWwUuL{Os&'~GL#rW"q'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.5	49932	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4213	OUT	POST /paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:45 UTC	4214	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 73 50 43 76 45 4e 38 59 77 56 53 66 48 68 31 30 48 4e 6d 63 46 26 74 3d 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 Data Ascii: localPadId=sPCvEN8YwVSfHh10HNmcF&t=deghsLEKJOGSu-1QvrwgkKX3
2023-07-21 16:50:45 UTC	4228	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:45 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:45 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 318396e6-6805-4f5b-b06c-ad71473d8460 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: c3e3ccac22df420b87ae25870929ea21 Connection: close
2023-07-21 16:50:45 UTC	4229	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.2.5	49944	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4214	OUT	GET /static/img/ace/emoji/270b-1f3fc.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:45 UTC	4215	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3361 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:31 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "cd5a34185731b928deaa73d238282ad6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: DeBw1KUXUOFXHHI6JcZ-_YFX66eFKkOQukrpSVazKa0mtAAl_4UeWQ== Age: 7101
2023-07-21 16:50:45 UTC	4215	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c ae 49 44 41 54 78 9c cd 5b 69 8c 1c 47 15 fe 5e 55 77 cf ce cc da bb 6b af 63 27 c6 31 ce 61 22 20 89 03 88 4b 09 4a 00 23 04 84 60 47 09 89 04 48 d8 0e 42 08 24 40 06 db 41 42 0b 12 ac 03 82 1f 89 b8 4c 62 02 c1 11 04 81 ed 3f 20 01 81 1f 08 71 0b 45 08 44 22 62 af 9d b5 77 7d ec e1 f5 5c 7d d4 7b fc e8 ee 39 bc 5d b3 bb b3 33 76 9e dc 9e 99 ae ae e3 fb ea 5d 55 d5 4b e8 a1 1c 1d dd 79 9b 28 19 21 e8 37 8b f0 10 11 bd 20 2c 4f 05 7e ee 5b f7 8f 7c bb d4 cb be 17 2b d4 ab 86 7f Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[iG^Uwkc'1a" KJ#`GHB$@ABLb? qED"bw}\}{9]3v]UKy(!7 ,O~[\|+

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	192.168.2.5	49947	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4218	OUT	GET /static/img/ace/emoji/270b-1f3fb.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:45 UTC	4219	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3275 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:30 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "beaa0ed7207b6d54f5bc7a8118f30e9d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8f2341b304c32ec6530aa5361edb2fe4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: v6fPFdrpQUmWo9o_yn8PaZZZ02WbISrls8lqXnCXt9rKa-6IZkolGQ== Age: 7101
2023-07-21 16:50:45 UTC	4219	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 58 49 44 41 54 78 9c cd 5b 5b 6c 1c 57 19 fe fe 73 66 f6 e6 7b ec d4 49 43 9a a6 0d 69 84 21 8d 4b b8 2a 45 6d 21 a8 42 f4 85 8a 90 90 0b 2a 55 81 07 2a 55 08 d1 82 d3 6a 21 81 14 2a 78 68 84 10 45 08 41 e2 14 8a fa 50 09 09 a9 50 fa 80 10 85 96 34 a1 2a a2 2d 4d 9b ab 63 3b 8e ef 3b bb 33 73 fe 9f 87 d9 ab 77 67 76 d7 5e 27 f9 e4 f1 ec 7a e6 5c fe ef fc b7 f3 cf 98 b0 8c 38 f1 f4 a3 83 62 24 4d 44 1f 15 96 1e 52 f4 26 20 47 6c db fa e9 c0 8e f4 dc 72 8e dd 28 68 b9 3a 3e 71 6c Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<XIDATx[[lWsf{ICi!KEm!BUUj!xhEAPP4*-Mc;;3swgv^'z\8b$MDR& Glr(h:>ql

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.2.5	49933	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4223	OUT	POST /paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:45 UTC	4224	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 73 50 43 76 45 4e 38 59 77 56 53 66 48 68 31 30 48 4e 6d 63 46 26 74 3d 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 Data Ascii: localPadId=sPCvEN8YwVSfHh10HNmcF&t=deghsLEKJOGSu-1QvrwgkKX3
2023-07-21 16:50:45 UTC	4246	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:45 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:45 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: d8be50fe-4271-4b1a-838e-760287599d87 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 74303e90ed504f92b9e2b595dbb23ab1 Connection: close
2023-07-21 16:50:45 UTC	4247	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	192.168.2.5	49946	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4224	OUT	GET /static/img/ace/emoji/270b-1f3fd.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:45 UTC	4224	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3254 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:32 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "f8ab974b28712b004af916d2c01d4e86" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 abd012b9637ad93b7c9aa82d2cfb262c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ExECgq07ggsejhD3g7A_Ct94DxcyUfHL12ufUsfowcp8if2fkfRRIw== Age: 7101
2023-07-21 16:50:45 UTC	4225	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 43 49 44 41 54 78 9c cd 5b 6b 6c 1c d5 15 fe ce b9 33 b3 de f5 da 9b 4d 9c 07 81 10 c2 2b 29 b4 09 b4 15 af 38 51 84 1a 54 5a f1 48 23 54 a8 4a a5 b6 02 f5 47 29 04 a1 96 aa 12 72 7f 51 4a 0b 85 88 22 d1 1f 6d 85 82 50 29 24 11 42 95 68 a9 42 02 81 02 7d a0 02 25 a1 31 c4 26 c4 89 4d 6c c7 f6 3e e6 71 4f 7f ec ec 7a 76 77 66 76 d7 de 4d fa 49 23 db 73 67 ee bd e7 bb e7 79 ef 98 d0 41 dc bd 75 e3 a5 9e 96 01 45 74 85 86 64 19 38 e8 89 3c e9 18 c6 63 bf 7e 66 cf 74 27 c7 6e 16 d4 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<CIDATx[kl3M+)8QTZH#TJG)rQJ"mP)$BhB}%1&Ml>qOzvwfvMI#sgyAuEtd8<c~ft'n

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.2.5	49941	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4229	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 310 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:45 UTC	4231	OUT	Data Raw: 1f 8b 08 00 f4 35 bb 64 00 ff 4d 50 51 6b f2 40 10 fc 2b 1f fb 9c 2b 89 5a 6b f2 56 ac c5 42 51 c1 56 29 22 e1 7a b7 26 07 c9 5d b8 bd d8 06 f1 bf bb a9 9f e0 53 c8 dc cc ec cc ec 4e 90 87 ae 41 c8 00 8f 68 03 44 ff bf 19 ec d0 16 fb 7f aa 72 ad 16 da 29 12 a5 b4 ba 42 a1 bd 6b be dd af 38 78 59 a3 a8 91 48 16 c8 ba 86 71 f4 c1 20 41 76 02 db d6 9f 84 9e 96 76 25 35 64 83 a8 47 a6 ce 5a 54 01 f5 fd 53 1c 81 a1 69 7f e6 c5 29 c8 82 6f 31 82 d2 11 d3 6e e8 1b d3 60 f6 6c 16 5d 19 cf 42 93 88 f5 fb 72 b3 4d ba ea 89 ef 4a 15 8c b3 4c b8 8f ca 72 e1 51 ea 8e 09 4a 06 2c 9c ef fa 8e b6 b8 26 d5 ad 0a 1f d7 de 2b c9 b1 19 b5 f2 68 0a d9 7b 51 4e c6 2a cc 89 bb f1 6f de 70 c1 bc 72 7d d8 24 82 60 6a 96 25 e3 49 9a a6 f1 78 34 7a 78 4c 52 f6 94 fa 2f 25 ad a6 c7 Data Ascii: 5dMPQk@++ZkVBQV)"z&]SNAhDr)Bk8xYHq Avv%5dGZTSi)o1n`l]BrMJLrQJ,&+h{QN*opr}$`j%Ix4zxLR/%
2023-07-21 16:50:45 UTC	4248	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:45 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:45 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 26b20ed2-da7c-44ae-9386-a113cbf9b48e X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 8ea009dc3fc84869ac353b5e52a594d3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.5	49768	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	722	OUT	GET /static/webpack/production/paper_admin~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~paper_graphql~paper_influence~887f98f3.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.vn64oJWFEA7wxU-bxq9IMHUDOT746y1nS0QLwk8PHbw.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1418	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 344 Connection: close Date: Fri, 21 Jul 2023 16:50:34 GMT Last-Modified: Fri, 21 Jul 2023 03:23:52 GMT ETag: "cae3d7603b384599618fb478a310f5ca" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fec5e83bcae9ab1295b776b3f64183d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 0FMSGCaxbyC3-QsbVWE8bEJPIsXXVjB2HinAfcOYKhwMIFkBoCSrSg==
2023-07-21 16:50:33 UTC	1419	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 65 50 cb 4e c3 30 10 bc f7 2b 40 5c a0 6a d2 3c da bc 2a 2e dc 90 e0 82 c4 d9 72 d6 9b c4 c2 b1 8d e3 b4 11 51 fb ed 24 ad 81 4a 9c bc 33 da f1 ec 8c 4f ca de 5a 25 49 28 c0 6a 12 8e 5a 75 dc 72 25 8b 8a 0f c8 76 86 d7 8d 2d b6 7a d8 59 a5 8b 78 7a bf 3c 2e 19 0e 45 7e f4 49 87 02 c1 22 73 ea 6c 2c 29 7c d4 46 f5 92 79 a0 84 32 c5 9e 9a 7b ef 32 13 02 ca 20 21 14 00 a5 7d 38 2e 7c 72 30 54 6b 34 24 dc b3 20 bf 36 a7 65 a7 44 6f f1 d7 f5 c0 99 6d 8a 68 1b e8 61 f2 e5 52 f7 d6 a9 d2 51 53 c6 b8 ac 8b e0 96 b7 5a 19 4b a5 9d 76 40 20 35 4f 2e dc e5 ff 68 e5 e8 67 f8 23 e3 d5 9c 83 1a 68 ae d9 70 6c f0 1c 3d 4c ce 8e ff 65 63 4b 4d cd a5 37 5f e8 cd 4b 8b c5 7a 79 77 d3 a9 de 00 be 4e b9 a6 93 de df 5e 1e 35 9d 13 52 d6 72 79 ba Data Ascii: ePN0+@\j<*.rQ$J3OZ%I(jZur%v-zYxz<.E~I"sl,)\|Fy2{2 !}8.\|r0Tk4$ 6eDomhaRQSZKv@ 5O.hg#hpl=LecKM7_KzywN^5Rry

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	192.168.2.5	49945	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4231	OUT	GET /static/img/ace/emoji/270b-1f3ff.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:45 UTC	4231	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3352 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:34 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "b735b5f2fd640f4e93bbfa17772e4790" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3d994808da6a9ce8c9e7b1364fa689ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: l5F2E6gDLTkRaTe9LQAoLYsopNiVTZE9tz6p9Bh_VbIsJD9qxzVpVA== Age: 7099
2023-07-21 16:50:45 UTC	4232	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c a5 49 44 41 54 78 9c cd 5b 59 6c 24 c7 79 fe fe aa ee 9e 7b 78 cc 88 a4 78 ec 5a 2b ee 2a d6 ea b0 2d 41 8e 93 75 20 0b 96 60 d8 b0 1f 2c 18 91 80 38 40 10 08 c8 43 1e 94 20 40 f4 24 c8 4f 7e 30 92 87 18 81 01 fb 21 87 a0 20 71 60 04 7a 48 0c d8 30 10 c0 36 7c 09 b6 25 81 3a b8 24 97 bb cb 99 5d 72 97 c7 70 ce be ea f7 43 4f cf f4 70 ba 86 33 bc d6 1f 40 ce b0 7b ba aa fe af be ff a8 aa 21 e1 14 b1 38 7b df c7 41 ea 35 22 fa 43 40 4d 10 c4 b2 02 bf 9e b0 c5 3f 2f dd b9 53 3b cd Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[Yl$y{xxZ+*-Au `,8@C @$O~0! q`zH06\|%:$]rpCOp3@{!8{A5"C@M?/S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
111	192.168.2.5	49942	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4235	OUT	GET /paper/comet/channel?v=2&r=794120692113024842781272&id=359881680158568536413245&channel=shortpolling&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvz Notes-Pad-Id: sPCvEN8YwVSfHh10HNmcF Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 Notes-App-Time: 1689901056000 Notes-Socket-Id: 359881680158568536413245 Notes-Tab-Id: PyrhnmTtVxZUnEUavH4O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:45 UTC	4250	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:45 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 3c2c4abe-543e-4eaf-bb8e-4e305bc008df X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 0 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 1eea6589af97495b9f1bb4d8d454c0a9 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
112	192.168.2.5	49940	162.125.69.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4236	OUT	GET /p/thumb/AB-xkKhbJ-5eZjqJkfR4QswIuG92izqYLGt1vO9MVU9zXMyuB-IIhiBQzvHqqU_6fMC5FGtA83r1PzfBmbax1X3rUdvnGLadcwGZ4667XLS4HptYyv2zdDSG0a9qm9HlNb6LmfjzHVHqZbrbbOpCw9wfvG237D5GG-6XWekcNRlTQMzI34XPyXpnD0aewH1IpR8nz-iYeDEtmdJMD1E0U3zXYeKvqClh7qPODStlXeXuAGdgSc1AbcrkwxeKjc0g9Y1tsAfOxaEVgLW8OtsV6Nf71wA8pCp5KWoRoS9iITHPCc2gnvCm9nXf9PpSgQHKneIWMpjTDrZYdRmLqJlm_Z_4mTsywrvF2e6cuv7ZGMityP5VoCtBPg-_GC-Z392qNyDnukyEdr_az-qUCcD25HSM/p.png HTTP/1.1 Host: uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:46 UTC	4322	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=31536000, no-transform Content-Disposition: inline; filename="CcD25HSM.png"; filename=UTF-8''CcD25HSM.png Referrer-Policy: no-referrer Timing-Allow-Origin: Vary: Origin X-Content-Type-Options: nosniff X-Dropbox-Content-Length: 243248 X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 163 Content-Type: image/png Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:46 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9bcfc9365c9f4b918b1c39e15c7707ce Connection: close Transfer-Encoding: chunked
2023-07-21 16:50:46 UTC	4323	IN	Data Raw: 34 30 30 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 01 f0 08 06 00 00 00 38 b7 1d 3d 00 00 01 35 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 78 9c 63 60 60 32 61 80 82 dc bc 92 a2 20 77 27 85 88 c8 28 05 f6 7b 0c 6c 0c 2c 0c 82 0c da 0c 16 89 c9 c5 05 0c 98 80 11 c1 fc 76 0d c2 bb ac 8b 45 1d 21 c0 95 92 5a 9c 0c a4 ff 00 71 65 52 76 41 09 d0 e8 0a 20 5b a4 bc 04 cc ee 01 b1 93 0b 8a 40 ec 05 40 b6 68 11 d0 81 40 f6 0e 90 78 3a 84 7d 06 c4 4e 82 b0 1f 80 d8 45 21 41 ce 40 f6 17 20 db 21 1d 89 9d 84 c4 86 da 0b 02 f2 c5 20 8f 7b ba 3a 9b 19 5a 9a 99 e9 1a e9 1a 2a 24 e5 24 26 67 2b 14 27 27 e6 a4 a6 90 e1 2b 02 00 14 c6 10 16 b3 18 10 1b 33 30 30 2d 41 88 21 c2 b3 24 b5 a2 04 c4 72 29 ca 2f 48 ca af d0 51 f0 cc 4b d6 Data Ascii: 4000PNGIHDR8=5iCCPICC Profilexc``2a w'({l,vE!ZqeRvA [@@h@x:}NE!A@ ! {:Z*$$&g+''+300-A!$r)/HQK
2023-07-21 16:50:46 UTC	4339	IN	Data Raw: b4 6d ce c3 5e c7 0d 0a Data Ascii: m^
2023-07-21 16:50:46 UTC	4339	IN	Data Raw: 34 30 30 30 0d 0a 23 7d 11 39 5e d6 94 ba 8a bc ee 13 7b db 78 dd 27 f6 b6 cb 71 16 f5 23 c7 66 0e 80 d4 17 11 61 6c 09 01 19 30 1b 80 74 c1 e9 87 67 61 b7 8d d9 ab d2 ae c9 f1 7c 2a f3 71 73 d8 85 d7 9b c3 de b6 b5 6f 3d 54 e4 b8 4e 2a 72 dc 1c 76 9f bc 9e 7f f5 55 e4 b5 90 4b 07 ec 25 8a 62 03 79 97 a2 46 72 a5 bc ae 72 a3 dc 9f 1a 03 c4 ed 3f 4b 06 98 c7 f8 d7 a2 e4 d7 de cb 31 0d 03 f0 a1 e9 f2 ef 7d 56 eb 19 84 7b 4f 3f 85 a7 9f 7e ba a5 f0 4f bf 24 ce 66 c9 7c 01 77 b3 6b fa 9a f5 63 cf 1b f3 f9 d8 f3 e9 3c ec 8b d0 ea bc ee a6 fc 9a 22 c7 ae 9e b7 4d 8e e7 f3 ba 2f ec f3 16 b7 8b 3c 7f 97 25 c7 8b 4a 77 b7 e7 8c 7d 13 38 e7 50 8d c7 70 04 30 7b c4 4a 34 66 9c b6 ff c4 1d a0 65 ca d6 ef b8 0b 57 07 28 72 6c 5e 73 f5 d6 be 6e 2a 6b df 6c da 4e 39 96 Data Ascii: 4000#}9^{x'q#fal0tga\|qso=TNrvUK%byFrr?K1}V{O?~O$f\|wkc<"M/<%Jw}8Pp0{J4feW(rl^sn*klN9
2023-07-21 16:50:46 UTC	4355	IN	Data Raw: 29 6e d4 b4 fa c1 0d 0a Data Ascii: )n
2023-07-21 16:50:46 UTC	4356	IN	Data Raw: 34 30 30 30 0d 0a ce 95 a7 b5 62 23 e7 f2 fa b0 d3 4e 6c a6 de 45 71 53 76 c0 02 45 02 58 fd c1 d9 30 d8 0a c7 b1 3c 3c 21 88 42 39 99 c0 7f fc 31 de fe e5 2f f1 93 bf ff 2a 7e f1 f5 6f e0 dd df fc 06 fb 27 a7 b8 1e 18 95 2a ad 81 1c fc 08 70 21 48 29 37 22 51 5a dd 48 93 e1 69 82 36 06 2a 32 b7 6e 42 70 59 9d 0a b2 0c fa 2c bb e2 20 d3 17 75 4c ca 41 53 0c 99 c4 43 df f2 5c 30 c0 2e 20 04 80 6c ab 1c 50 2f 00 9d 03 51 09 4f c6 8f a8 fc c3 fa 52 19 69 58 ba e9 1a c1 49 ec bd 63 73 4c 37 c5 14 31 24 80 2c ac 01 16 68 03 71 cb 67 86 23 a7 4a b5 61 65 cf 82 23 20 1f 33 18 20 17 ab 20 54 99 84 19 0c d6 58 7f 0e 15 e0 47 00 55 a0 e0 d4 b8 13 e4 fe 41 2a 0b c9 b8 1f 74 de 8b e9 67 a4 46 c0 5c b1 e6 8c 97 2a 33 54 ba 96 84 38 e7 6c bd 91 f2 81 52 86 8f 29 00 5a Data Ascii: 4000b#NlEqSvEX0<<!B91/~o'p!H)7"QZHi62nBpY, uLASC\0. lP/QORiXIcsL71$,hqg#Jae# 3 TXGUAtgF\*3T8lR)Z
2023-07-21 16:50:46 UTC	4372	IN	Data Raw: 79 08 1d 81 62 85 0d 0a Data Ascii: yb
2023-07-21 16:50:46 UTC	4372	IN	Data Raw: 34 30 30 30 0d 0a ff 1c 94 6a e5 31 8e e4 28 aa 4e 69 85 16 b3 19 f9 f3 dc 46 8a 4a 22 e4 34 90 12 82 24 f9 01 d4 c0 24 b8 43 19 44 09 8f 90 7c 05 04 c0 b2 91 e7 d5 0a 14 a1 3f 03 02 d9 60 08 73 6b 6e 65 f4 49 66 4c e3 91 3f b5 12 77 7e 2f 8c ac 07 a9 d4 10 8f b6 5a 36 c0 11 76 f8 d6 9c eb d6 af 63 35 dc 63 53 d4 1c af eb 58 1d c6 ee 3a 4e f0 be a1 c0 c4 9e 19 3d dc 13 eb 38 7a b8 df 9a bc af 39 b8 bd 01 40 63 73 2b e9 f8 71 9c 77 36 1c 99 33 ca 9f 6b 94 77 c2 2e 1f 46 8c 9f 32 bd d7 82 e1 4e 57 2b 71 37 72 d7 f0 70 97 dd 91 d1 f4 9c 72 6f 01 1f 07 6f 07 06 51 3c 7e 0a a6 64 c1 b0 b0 44 be 4c 99 37 bb c4 a7 a5 3a 32 3d 1c 45 58 2d 96 1f 82 22 14 3f 03 23 f6 63 f6 87 ac 56 94 40 3f 70 ca 76 20 b8 c0 0c 13 79 1b 78 2f 05 a1 23 5f 37 dd 10 d4 db 80 40 ce bd Data Ascii: 4000j1(NiFJ"4$$CD\|?`skneIfL?w~/Z6vc5cSX:N=8z9@cs+qw63kw.F2NW+q7rprooQ<~dDL7:2=EX-"?#cV@?pv yx/#_7@
2023-07-21 16:50:46 UTC	4388	IN	Data Raw: 83 ae 83 a2 1b 74 0d 0a Data Ascii: t
2023-07-21 16:50:46 UTC	4388	IN	Data Raw: 34 30 30 30 0d 0a 63 02 23 81 a3 27 f2 5e 20 6c e5 b3 24 92 71 39 00 c8 79 0c 38 e2 10 85 97 a2 3f 2c ca b2 fb ee 13 09 5a e3 dc 80 35 99 a0 25 20 15 5c 31 5e 8f 1b 82 1b f0 f6 ad 3c 6e eb 68 8f ad 7e 56 dc 26 e0 2a c3 ad ff b2 8c df 4f 82 67 62 c4 ec f0 59 23 ff 92 3f 21 51 9b 06 5b 86 0b 9b 70 f3 a2 7a 7f 50 b8 80 4a 5e 53 cd 5b c7 e1 fe de aa 7b cf 2e a8 a1 31 63 f3 01 aa bf 7e 9a c2 43 2a fc 2e 4a af 9e 85 64 0d a2 79 71 8b e2 cb e1 3b bb 13 b4 de 9e 3e 3c fe c4 13 38 71 e2 c4 10 c6 9c ed c1 7b a7 08 71 5a b6 38 71 e2 04 36 6e dc 88 03 07 83 db af 4b ce 4a 3e ff 45 30 0e 2a df 0e fc 83 ca bb 81 21 92 5b f5 bd e4 fa 76 fc dc 20 31 06 c5 e2 20 8e 1e 3d 82 e2 e0 a0 57 0c ac b5 92 24 d0 6d 1c 16 5e 93 da 10 f7 3a d0 3f 80 23 47 df 1c 9e 62 92 1f e8 b0 7e Data Ascii: 4000c#'^ l$q9y8?,Z5% \1^<nh~V&OgbY#?!Q[pzPJ^S[{.1c~C.Jdyq;><8q{qZ8q6nKJ>E0*![v 1 =W$m^:?#Gb~
2023-07-21 16:50:46 UTC	4440	IN	Data Raw: 8f 7f d0 41 88 30 0d 0a 34 30 30 30 0d 0a 25 f1 ff b0 e2 1d 43 9a 9d 42 ef 0e fe 2c ec ff ab e3 8a 38 c1 fb 9a 82 3b 78 1d 21 b0 85 8a ed b2 99 23 9a 3d 10 02 83 f5 b4 43 79 57 15 60 66 e7 ee 6b 08 1d 1d ed b8 fe fa eb b1 74 c9 12 bc f2 ca 2b b9 f8 7b 41 c3 8c 92 28 83 7d 7d 03 78 ea e9 a7 71 e0 c0 01 4c 9b 36 cd b5 97 ac e9 49 62 50 2c 95 f0 c4 af 7f 8d 3d bb f7 40 33 96 e7 c1 00 be 4c db 25 17 5d 84 cb d7 ae f5 71 ee 3e cb b2 4d 11 4e d7 6b 08 79 65 3f 05 4a 72 bc 5e 3d 6e 86 2a 71 57 e8 b3 82 30 0d 10 4a 69 8a 87 1f 7e 18 77 dd 75 97 ab 73 4e 2a a8 39 b0 cc 40 94 95 3d 2f 58 57 0b a5 cd b8 9a ab eb bf 34 9c 39 63 16 fe e8 8f ff 18 1f fb f8 c7 31 75 ea d4 68 4c 54 7e 92 1c f1 94 da 29 fd c4 0d 5c 68 80 c5 f5 54 4f bc f5 24 da 8f 8d 19 9d 5d 1d 48 92 04 Data Ascii: A04000%CB,8;x!#=CyW`fkt+{A(}}xqL6IbP,=@3L%]q>MNkye?Jr^=nqW0Ji~wusN9@=/XW49c1uhLT~)\hTO$]H
2023-07-21 16:50:46 UTC	4456	IN	Data Raw: 10 3d 9f c2 3c 64 4c 4e 4c e0 c0 81 83 68 0d 0a Data Ascii: =<dLNLh
2023-07-21 16:50:46 UTC	4488	IN	Data Raw: 34 30 30 30 0d 0a b6 5a c8 4f cd f5 3f 82 e2 e7 f1 e2 c2 02 3e f7 b9 cf e1 a6 9b 6e c6 9b df fc 66 67 d0 a8 c4 96 8f 27 02 67 30 ab d5 6a 78 ee b9 e7 f0 37 7f f3 61 7c 4b 79 bb e9 b5 c7 98 08 83 95 8e b9 7f ff 3e ec dc b9 23 a9 42 0c 25 f3 f3 73 38 7c f8 10 0e 1d 3a 84 7b ee b9 17 77 de 75 27 be ff fd ef e3 e8 33 cf e0 f8 89 13 60 06 32 32 e2 c4 8c 87 1e 7a 08 7f f6 67 7f 8e 7d fb f6 63 f7 79 bb 83 74 d9 cb 2b 4a a7 7b ef bd 17 9f f9 ec 67 31 3b 3b eb ae 53 b7 76 a0 c7 5b bd 5e c7 b6 6d db dd ed 23 7e 9e 5b cb 83 83 be 2e 23 29 d3 76 d5 69 bd c2 0a 53 50 dc ab fa 91 1e 02 28 4a 53 e4 15 3c ad 2a ae 34 ad 3e 73 58 5e 5d 2b 6d c7 60 d8 55 6a 47 60 e2 54 fc ee 5d 55 02 63 77 cc 81 c5 8d 9e 9c c2 15 5c f8 44 19 f7 8a 98 5b 14 5c f0 36 f6 d7 00 39 b0 d1 0d 9f Data Ascii: 4000ZO?>nfg'g0jx7a\|Ky>#B%s8\|:{wu'3`22zg}cyt+J{g1;;Sv[^m#~[.#)viSP(JS<*4>sX^]+m`UjG`T]Ucw\D[\69
2023-07-21 16:50:46 UTC	4520	IN	Data Raw: 3a ad 28 f1 5e a9 0d 0a 34 30 30 30 0d 0a 4f 14 77 fd 1b 40 88 aa cb aa 1e 65 10 60 8e 3b f5 c6 2b ee a1 51 64 c0 c6 04 63 81 73 e5 f6 67 c8 83 7b a7 18 03 dc 31 02 eb 0d 12 62 36 62 65 d4 08 a3 2d 75 57 c1 5a d2 71 f9 51 c2 87 81 bd da 69 a9 10 b5 77 85 84 c8 d3 ea ae 28 b0 3e 8a be bf 26 32 fa f9 84 d0 8f a9 52 5e b8 c2 8f a0 c2 ef 15 76 58 04 36 15 ea 17 d8 d1 04 e4 3e 8b 21 fa 24 d2 3f 03 05 4f 23 8e b0 61 7c b9 18 c5 38 38 41 f3 20 d8 2c e8 29 bc f7 fe 04 ac 5d bd 4d ec 27 af 84 87 fd 08 f3 be 01 b0 fb ee ce 51 c5 3a a5 ca 91 fa 41 28 d8 af 56 3d 69 fa 9f 9d b8 3e 53 74 5c 29 ec b5 83 7b b6 e2 fa 1c 1d 5f 18 74 5c ed b4 96 b8 3e c7 fb 7a c1 3e bb e8 28 e9 6c c5 f5 39 3a 06 b8 5c f0 00 08 e2 72 b2 db a7 8a 30 bc 9b 7f f5 4e 16 ab 7d 15 f9 cd 45 8d 9f Data Ascii: :(^4000Ow@e`;+Qdcsg{1b6be-uWZqQiw(>&2R^vX6>!$?O#a\|88A ,)]M'Q:A(V=i>St\){_t\>z>(l9:\r0N}E
2023-07-21 16:50:46 UTC	4536	IN	Data Raw: 5d b5 b4 8e 99 47 70 2d f6 3f d5 2b 47 50 0d 0a Data Ascii: ]Gp-?+GP
2023-07-21 16:50:46 UTC	4536	IN	Data Raw: 34 30 30 30 0d 0a 2e d0 c6 04 85 2c ec 4c 01 08 67 83 28 85 11 72 48 1d 8a 4e e4 ff c6 80 37 01 58 30 0d a5 fa 99 01 93 0d ae 5a 00 c2 4e b2 81 8b c2 9c 93 d4 c9 ce 20 96 e7 a8 37 1b e8 a0 8b 76 cd 62 6c e7 66 ec bf f1 4a 8c ed de 1e ae 1c 0a b3 c2 37 af b7 a5 7e 75 e8 b8 3e d8 db d2 5a b1 b4 39 93 3e 4f 94 98 34 64 a9 7f 59 c8 ef 9f c5 a7 2a b0 9e 28 ed e1 6f 41 db a2 38 26 8b 8c 37 92 b9 07 ec d8 52 5f d2 5d 3f 18 4c 63 05 d8 69 09 44 fe 14 ba 16 6b 0e 39 95 11 2b 84 c7 54 ca 65 21 c0 6d cc 1e e2 67 0c cf e7 aa d2 0b 8b f7 9d fe c5 5c 9d 5c eb 5f 56 db 72 86 aa a0 47 26 39 1f ab dc 50 2a af 5a 92 73 af a2 fc 77 a2 c2 d2 69 b7 fd 77 f7 7c 64 74 14 5b 36 6f c6 cc cc 0c ea f5 7a dc 6d 61 c4 f3 d0 25 1e f8 23 c6 fb 84 76 0c b7 93 3c 32 82 66 ab 89 66 ab 85 Data Ascii: 4000.,Lg(rHN7X0ZN 7vblfJ7~u>Z9>O4dY(oA8&7R_]?LciDk9+Te!mg\\_VrG&9PZswiw\|dt[6ozma%#v<2ff
2023-07-21 16:50:46 UTC	4552	IN	Data Raw: d7 b6 c0 67 db 98 0d 0a 34 30 30 30 0d 0a a7 0d 3e 57 df 2d 23 f5 3f ee c5 24 17 91 cb 65 9c 04 86 10 59 77 4b 66 b3 19 97 77 ae 72 ee ca 45 9e fd fa 0b dc 7c e7 53 6e 7f 74 93 83 9b f7 58 1d 1d 33 ac 07 40 09 fd 8c f5 4c e8 76 f6 b8 78 f9 02 57 5f 7e 8e 2b af 3d c7 c5 e7 9f a6 3f b3 03 73 d0 4e b1 33 01 41 48 84 a4 f4 93 31 19 22 4f 08 24 13 34 68 27 3a bd a9 64 ca 25 10 13 ac d7 e8 7a 8d a6 08 31 e1 67 03 db a4 37 28 62 35 0a 4c f1 da 3b 2f cf 6d bf 36 f6 41 eb 1d ce 8c b8 5d 87 bc a5 a9 47 5b 8e fb de 26 82 9c 52 4e a3 78 e3 46 78 4d ae 97 ea 1e 00 99 4c a9 11 36 da f9 aa a4 11 9e 78 f8 99 8d d9 71 64 3c 66 95 44 3a 3c a2 53 25 68 b0 5a 10 5d 56 e4 d5 3c 46 6e e4 2b 73 2b ca be 01 5e 73 38 5e 51 d0 8b 21 60 0c dd 2a aa e4 51 34 c5 8c a4 0c 58 51 26 7d Data Ascii: g4000>W-#?$eYwKfwrE\|SntX3@LvxW_~+=?sN3AH1"O$4h':d%z1g7(b5L;/m6A]G[&RNxFxML6xqd<fD:<S%hZ]V<Fn+s+^s8^Q!`*Q4XQ&}
2023-07-21 16:50:46 UTC	4584	IN	Data Raw: 56 c5 a7 30 a2 dc 97 7f 6f 0d 89 c6 a8 2a 0d 0a 34 30 30 30 0d 0a 29 d4 f6 f7 56 c2 19 f5 dd ac d3 63 f4 5d 21 e2 81 7b da 10 ea 16 87 9a 5a 05 6e d4 d8 e8 bb 8a 9d 1e de ef dd 24 11 12 29 af b1 79 0f 34 74 c4 c5 2e fd d9 73 c4 ce 24 b7 2e 7c 41 6c fd 03 ed db ec 9b c7 ed db 57 b1 fd b4 ad 37 5c 3a 65 f2 c0 e9 57 cb e1 75 7a a3 79 47 b3 df c6 a3 f7 cc 51 13 54 d4 bd 71 b9 2b 2f d4 25 d9 53 a8 40 8a ca f5 eb 0f b8 fe e9 03 5e 7d f5 3c f3 19 3c fd d4 8c b3 fb 33 e4 38 31 44 8b aa 3a b7 d7 73 f5 a9 05 fb 73 b1 b0 63 a0 ef 84 97 5f ba cc d9 bd 19 07 4b 61 88 82 c6 81 8b fb bb 5c bd 78 96 b9 c0 b1 c2 ed 3b 0f b8 71 e3 36 31 82 76 79 f7 27 53 50 ea e0 72 18 2e 8a 8a d7 0e 99 ca 11 9b 20 34 05 1b 47 f2 8c 75 ee 79 1a a9 10 88 50 3c d8 85 24 e4 f0 61 cd 4c a0 21 Data Ascii: V0o*4000)Vc]!{Zn$)y4t.s$.\|AlW7\:eWuzyGQTq+/%S@^}<<381D:ssc_Ka\x;q61vy'SPr. 4GuyP<$aL!
2023-07-21 16:50:46 UTC	4616	IN	Data Raw: 6e cb 8c 94 0f 4a 76 ad 9c b0 62 8c f1 e8 f9 c5 5a 27 a5 19 c2 d6 0d 0a 34 30 30 30 0d 0a 17 a6 bf ea d6 01 2a 67 34 8d 44 24 f3 c4 a3 86 96 ea f2 bf 4d 67 46 76 57 db 2e 27 63 c9 90 2a 0c 7e 9e f8 26 48 ca bd 12 7a d1 92 99 02 83 69 d3 dc b7 83 8d be a7 d3 1e 11 cd b4 6f 7b 9b fa 95 f6 bd 26 44 40 0b 81 ce 0a 21 69 3c 02 a4 30 9c 99 72 91 63 cd 54 71 12 10 f1 a8 3a ae a5 e3 d1 fc 94 f0 ce f7 b9 f7 e7 ff 82 f9 9b ef b2 5a ec c3 bc 27 7a 21 04 67 4a 2f ef 29 09 cb 76 1d b1 bf 7f b8 ef ef 1e a3 8e 0c 9a 8c f4 2b 77 fd 32 31 6b e9 ab 95 c7 ca 0e de 7c 66 eb 5c 34 cf cb c6 4d 65 1c ab 60 1c b1 08 24 f1 99 61 2c 61 43 9e b3 cb 81 9f 7f f4 19 67 d7 ef 31 eb 3c 49 60 0d 7c f0 f9 23 3e fe fa 9a b5 cc 19 f0 f8 e4 48 1a f8 e2 eb 2b 3e f9 fc 92 f7 df 38 60 96 d3 96 Data Ascii: nJvbZ'4000g4D$MgFvW.'c~&Hzio{&D@!i<0rcTq:Z'z!gJ/)v+w21k\|f\4Me`$a,aCg1<I`\|#>H+>8`
2023-07-21 16:50:46 UTC	4648	IN	Data Raw: d3 92 2b 02 43 f2 ac f2 ba 6a 89 e7 6f f6 8b 68 1b 7f 3f 7e b1 8c 5b 33 5f 58 14 06 a1 dc 0d 0a 34 30 30 30 0d 0a 6b ee 3b 60 c8 e7 43 b5 c0 41 2a bb 39 86 00 8c 14 ba 3e 96 f1 83 cb f4 d2 13 99 b3 64 df ad 39 9d 0b b7 f7 3c af 9d ec f3 fe fd 5b bc 77 e7 80 b7 8e 03 af 1f 08 87 b3 64 55 c5 34 8c 61 39 13 88 ea 64 69 5a 0a 69 de 19 23 c4 db c7 da 33 3b ed 77 7b b5 6e 5e c7 8d 6b 37 bc 16 da eb 95 c5 91 7c e6 c8 16 fc d4 22 ed e2 4e 92 11 47 a3 61 95 8c 70 5d 8e c9 36 84 57 e2 5f 32 ba cd 48 2f 0e 6b 2e 2f 2e 48 29 e1 bd af e3 6b 78 c2 9d 13 db 75 7f d7 93 bb 6e ef ba b6 f5 dd cd 07 65 f3 c9 e7 eb f7 c6 fb ed 21 dc 58 99 e7 1d f3 cd f7 6f 5c fe a7 f7 7d c3 47 ea 66 de 89 38 76 f7 fd 52 d6 b1 71 6f 6f 15 4b 2a 26 c4 95 fd e7 9c c3 a7 c4 e0 06 9c 77 f8 c1 5b Data Ascii: +Cjoh?~[3_X4000k;`CA9>d9<[wdU4a9diZi#3;w{n^k7\|"NGap]6W_2H/k./.H)kxune!Xo\}Gf8vRqooK&w[
2023-07-21 16:50:46 UTC	4664	IN	Data Raw: f9 84 8b 0e 1d 3c 4a 60 2d 03 ab 34 70 ed 2d 27 80 0e 09 92 23 ad 80 35 f8 e4 08 83 c7 39 cf 20 33 06 ed 49 dd 82 0d 0a 34 30 30 30 0d 0a b0 38 e2 e8 f6 6b 1c bf fb 2e f1 f1 19 ab 87 8f 59 9d 9d 71 f5 f8 8c ab b3 73 96 d7 d7 a4 61 80 75 b4 18 58 ef e8 3a 4f 3f 9b e1 f7 e7 84 83 05 7b b7 6f 33 3f 3e a4 3f 3a 40 f6 e6 b8 7e 86 9b 75 ac bb c0 e0 1d 22 19 e1 10 40 3c c1 79 0b 11 10 ad 7e 9e ea 8d 11 1c 9c 65 0d f7 58 c9 a3 20 96 a7 c0 17 b7 7e 09 39 a4 27 20 59 98 77 5e b1 3c 52 d9 95 df 7b c4 97 b2 26 e6 42 5b 5c fd ab 35 b4 c4 52 36 8c 83 c1 7c 37 a2 fb e6 09 b7 fe d0 fe 21 b4 52 12 2c 25 53 6a f9 ba af a4 ee a9 91 f9 df 66 76 5f da 38 18 bf 59 59 b3 6c b9 b2 10 a3 84 aa 67 90 01 1f 1c 7e f0 68 0a f4 7d cf 6c 36 e3 f1 e3 c7 7c f2 c9 27 74 dd bb c6 28 67 81 Data Ascii: <J`-4p-'#59 3I40008k.YqsauX:O?{o3?>?:@~u"@<y~eX ~9' Yw^<R{&B[\5R6\|7!R,%Sjfv_8YYlg~h}l6\|'t(g
2023-07-21 16:50:46 UTC	4696	IN	Data Raw: d0 34 2b e5 a2 f7 b4 da 4c 40 92 ed 1e 88 ea 69 56 fd 43 db cc a4 7d df 6e fd 93 dd 4f 6e e5 e8 b4 af 23 e5 35 f5 b4 47 cd 2f f1 3a d5 8b 0d 0a 33 36 33 30 0d 0a 3a bc de 49 8e 43 c5 8e b2 34 ab d9 3d d8 b1 0d 71 db b4 f4 48 a4 de 01 ba 40 4b ba e5 ac 9d 0e a1 ad d3 ee 6d 26 66 d5 92 a3 f1 4c 98 ac cd 04 8f c2 2e f6 e6 f8 48 a3 e9 0c e7 7d 9b 0d 00 a1 b0 b6 33 47 b4 c0 d8 64 ba ff 8b e0 21 46 02 47 0c af 2b ff 10 81 c4 98 00 2c 31 01 1c c4 23 40 b6 08 2c a2 6b 68 1c 44 34 36 00 1a f8 e0 2d 20 13 42 29 d4 ba 5e e3 7f fe e7 7f f1 fc c5 1f f0 1f ff fe 1f 78 f1 f2 c5 31 78 32 8a 8e 2e 4b 03 76 8e d8 83 cf 9d e0 85 3e 47 7e cc 15 fb 31 fb a0 73 e4 c7 94 d8 63 da cc 19 8e 09 5b e9 28 65 8e 83 4a 9a a0 31 33 ea 46 56 fe 81 10 f4 cf 05 83 32 cc a7 1a 0b 10 e7 24 Data Ascii: 4+L@iVC}nOn#5G/:3630:IC4=qH@Km&fL.H}3Gd!FG+,1#@,khD46- B)^x1x2.Kv>G~1sc[(eJ13FV2$

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
113	192.168.2.5	49954	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4237	OUT	POST /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 525 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:45 UTC	4239	OUT	Data Raw: 7b 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 2d 30 38 6e 77 5f 77 4a 77 48 56 6a 61 44 6e 35 54 5a 79 4c 6b 39 35 54 68 41 54 35 49 6f 54 45 70 73 33 56 71 31 5f 78 38 54 4e 30 42 50 63 36 66 32 48 32 54 67 72 66 73 46 75 38 78 67 56 4b 48 54 6f 52 43 51 31 70 32 7a 78 6b 50 76 7a 31 59 51 65 76 46 70 55 68 Data Ascii: {"doc_id":"EAiNyh0Etp1-SLOVW1yl7","auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu-08nw_wJwHVjaDn5TZyLk95ThAT5IoTEps3Vq1_x8TN0BPc6f2H2TgrfsFu8xgVKHToRCQ1p2zxkPvz1YQevFpUh
2023-07-21 16:50:46 UTC	4251	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 41 X-Webkit-Csp: sandbox Content-Length: 271 Date: Fri, 21 Jul 2023 16:50:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 91e5d1dc29e14a028062ac3fe484bf4f Connection: close
2023-07-21 16:50:46 UTC	4252	IN	Data Raw: 7b 22 66 69 6c 65 6e 61 6d 65 22 3a 22 50 6c 65 61 73 65 20 66 69 6e 64 20 74 68 65 20 62 65 6c 6f 77 20 73 68 61 72 65 64 20 56 69 74 61 6c 20 44 6f 63 75 6d 65 6e 74 73 20 e2 86 93 2e 70 61 70 65 72 22 2c 22 6d 61 78 5f 61 63 63 65 73 73 5f 75 72 6c 22 3a 22 22 2c 22 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 22 3a 7b 22 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 5f 74 61 67 22 3a 7b 22 2e 74 61 67 22 3a 22 61 63 74 69 76 65 22 2c 22 63 6f 6d 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 64 6f 77 6e 6c 6f 61 64 22 3a 74 72 75 65 2c 22 65 64 69 74 22 3a 66 61 6c 73 65 2c 22 66 69 6c 65 5f 6c 6f 63 6b 5f 73 74 61 74 65 22 3a 7b 22 2e 74 61 67 22 3a 22 75 6e 6c 6f 63 6b 65 64 22 7d 2c 22 71 75 6f 74 61 22 3a 30 2c 22 72 65 6e 61 6d 65 22 3a 66 61 Data Ascii: {"filename":"Please find the below shared Vital Documents .paper","max_access_url":"","state_and_actions":{"state_and_actions_tag":{".tag":"active","comment":false,"download":true,"edit":false,"file_lock_state":{".tag":"unlocked"},"quota":0,"rename":fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
114	192.168.2.5	49948	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4239	OUT	GET /static/img/ace/emoji/270b-1f3fe.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:45 UTC	4242	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3319 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:33 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "da7f263d7e44eb65e76522941ff95b79" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a9717fb92179a05f5da85fabc586e750.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: Wdo-pk_SMaTp-JEYowaOOtVW_lhs8mySuraLuDS-D4jvf0mlw_Nfjg== Age: 7099
2023-07-21 16:50:45 UTC	4242	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 84 49 44 41 54 78 9c d5 5b 5d 6c 5c 47 15 fe ce cc bd 7b d7 eb b5 63 3b 4e 93 26 0d 69 4a 49 9c 04 28 6d 51 a1 8d 8b 02 a2 88 82 e0 01 37 40 25 40 02 54 04 12 0f 08 21 51 09 a9 2a 4f 7d 40 f0 40 85 90 ca 03 a0 92 d2 36 0d a5 42 08 09 54 29 52 dd 52 7e 2a a8 aa b4 4e 68 9a bf 36 a6 8e ff 62 af bd 7b 7f e6 1c 1e e6 de f5 ae 7d ef 5d af bd 4e ca 89 ae d7 d9 b9 73 66 ce 37 e7 6f ce 8c 09 1b 48 23 b7 ef bf 99 14 3f 08 c2 87 49 a8 1f c0 29 21 3c 4a 8e fa d9 d1 e3 27 2a 1b 39 f6 6a 89 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[]l\G{c;N&iJI(mQ7@%@T!QO}@@6BT)RR~Nh6b{}]Nsf7oH#?I)!<J'*9j

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
115	192.168.2.5	49950	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4239	OUT	POST /paper/comet/post?r=241902745168834476259068&v=2&id=359881680158568536413245&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&xsrf=deghsLEKJOGSu-1QvrwgkKX3&postSeq=1&remark=&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 22 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvz Notes-Pad-Id: sPCvEN8YwVSfHh10HNmcF Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 Notes-App-Time: 1689901056000 Notes-Socket-Id: 359881680158568536413245 Content-Type: application/octet-stream Notes-Tab-Id: PyrhnmTtVxZUnEUavH4O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:45 UTC	4241	OUT	Data Raw: 0a 14 0a 12 1a 10 08 01 12 0c 73 68 6f 72 74 70 6f 6c 6c 69 6e 67 Data Ascii: shortpolling
2023-07-21 16:50:45 UTC	4251	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:45 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 1358235e-4915-4ee0-aec0-8b1f786b677d X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 2 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 3d36d8a18041437cab50d7e79d904bf5 Connection: close
2023-07-21 16:50:45 UTC	4251	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
116	192.168.2.5	49949	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4241	OUT	GET /paper/emoji/list?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	4252	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:45 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:45 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/list X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: acdcb9de-a5ee-40e6-8ef8-ee7e9162b810 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 575663 Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 0b4b3b71da9a4aed9a67e0d4b71a603b Connection: close
2023-07-21 16:50:46 UTC	4254	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 6d 6f 6a 69 73 22 3a 5b 7b 22 63 68 22 3a 22 f0 9f 98 80 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 30 22 2c 22 6e 61 6d 65 22 3a 22 67 72 69 6e 6e 69 6e 67 20 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 67 72 69 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 83 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 33 22 2c 22 6e 61 6d 65 22 3a 22 67 72 69 6e 6e 69 6e 67 20 66 61 63 65 20 77 69 74 68 20 62 69 67 20 65 79 65 73 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 6d 6f 75 74 68 20 6f 70 65 6e 20 73 6d 69 6c 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 Data Ascii: {"success":true,"emojis":[{"ch":"","code":"1f600","name":"grinning face","tags":"face grin","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f603","name":"grinning face with big eyes","tags":"face mouth open smile","fitzpatrick":"n/a","se
2023-07-21 16:50:46 UTC	4270	IN	Data Raw: 6d 65 22 3a 22 61 6c 69 65 6e 20 6d 6f 6e 73 74 65 72 22 2c 22 74 61 67 73 22 3a 22 61 6c 69 65 6e 20 63 72 65 61 74 75 72 65 20 65 78 74 72 61 74 65 72 72 65 73 74 72 69 61 6c 20 66 61 63 65 20 66 61 69 72 79 20 74 61 6c 65 20 66 61 6e 74 61 73 79 20 6d 6f 6e 73 74 65 72 20 75 66 6f 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 96 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 31 36 22 2c 22 6e 61 6d 65 22 3a 22 72 6f 62 6f 74 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 6d 6f 6e 73 74 65 72 20 72 6f 62 6f 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 Data Ascii: me":"alien monster","tags":"alien creature extraterrestrial face fairy tale fantasy monster ufo","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f916","name":"robot","tags":"face monster robot","fitzpatrick":"n/a","section":"people"},{"ch":"
2023-07-21 16:50:46 UTC	4286	IN	Data Raw: 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 9e f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 31 65 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 63 72 6f 73 73 65 64 20 66 69 6e 67 65 72 73 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 72 6f 73 73 20 66 69 6e 67 65 72 20 68 61 6e 64 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6c 75 63 6b 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 9e f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 31 65 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 63 72 6f 73 73 65 64 20 66 69 6e 67 65 72 73 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f Data Ascii: "},{"ch":"","code":"1f91e-1f3fb","name":"crossed fingers: light skin tone","tags":"cross finger hand light skin tone luck","fitzpatrick":"","section":"people"},{"ch":"","code":"1f91e-1f3fc","name":"crossed fingers: medium-light skin to
2023-07-21 16:50:46 UTC	4302	IN	Data Raw: 22 2c 22 6e 61 6d 65 22 3a 22 68 61 6e 64 20 77 69 74 68 20 66 69 6e 67 65 72 73 20 73 70 6c 61 79 65 64 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 69 6e 67 65 72 20 68 61 6e 64 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 73 70 6c 61 79 65 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 96 90 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 39 30 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 68 61 6e 64 20 77 69 74 68 20 66 69 6e 67 65 72 73 20 73 70 6c 61 79 65 64 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 69 Data Ascii: ","name":"hand with fingers splayed: medium-light skin tone","tags":"finger hand medium-light skin tone splayed","fitzpatrick":"","section":"people"},{"ch":"","code":"1f590-1f3fd","name":"hand with fingers splayed: medium skin tone","tags":"fi
2023-07-21 16:50:46 UTC	4318	IN	Data Raw: 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 62 79 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 79 6f 75 6e 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b6 f0 9f 8f be 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 36 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 62 61 62 79 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 62 79 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 79 6f 75 6e 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b6 Data Ascii: n tone","tags":"baby medium skin tone young","fitzpatrick":"","section":"people"},{"ch":"","code":"1f476-1f3fe","name":"baby: medium-dark skin tone","tags":"baby medium-dark skin tone young","fitzpatrick":"","section":"people"},{"ch":"
2023-07-21 16:50:46 UTC	4407	IN	Data Raw: 67 73 22 3a 22 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 22 Data Ascii: gs":"medium-dark skin tone woman","fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3ff","name":"woman: dark skin tone","tags":"dark skin tone woman","fitzpatrick":"","section":"people"},{"ch":"","code":"1f468","name":"man"
2023-07-21 16:50:46 UTC	4423	IN	Data Raw: 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 62 65 61 72 64 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 94 f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 34 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 62 65 61 72 64 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 Data Ascii: me":"woman: light skin tone beard","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d4-1f3fc-2640","name":"woman: medium-light skin tone beard","tags":"","isAlt":true,"fitzpatrick":"","section":"pe
2023-07-21 16:50:46 UTC	4456	IN	Data Raw: 66 34 38 32 22 2c 22 6e 61 6d 65 22 3a 22 67 75 61 72 64 22 2c 22 74 61 67 73 22 3a 22 67 75 61 72 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 82 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 32 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 67 75 61 72 64 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 67 75 61 72 64 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 82 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 32 2d 31 66 33 66 63 Data Ascii: f482","name":"guard","tags":"guard","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f482-1f3fb","name":"guard: light skin tone","tags":"guard light skin tone","fitzpatrick":"","section":"people"},{"ch":"","code":"1f482-1f3fc
2023-07-21 16:50:46 UTC	4472	IN	Data Raw: 75 64 65 6e 74 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f 8e 93 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 65 2d 31 66 33 39 33 22 2c 22 6e 61 6d 65 22 3a 22 73 74 75 64 65 6e 74 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 Data Ascii: udent: medium skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d1-1f3fe-1f393","name":"student: medium-dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-07-21 16:50:46 UTC	4504	IN	Data Raw: 22 6f 66 66 69 63 65 20 77 6f 72 6b 65 72 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f bb e2 80 8d f0 9f 92 bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 62 2d 31 66 34 62 63 22 2c 22 6e 61 6d 65 22 3a 22 6f 66 66 69 63 65 20 77 6f 72 6b 65 72 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f bc e2 80 8d f0 9f Data Ascii: "office worker","tags":"","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f9d1-1f3fb-1f4bc","name":"office worker: light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-07-21 16:50:46 UTC	4568	IN	Data Raw: 66 69 72 65 74 72 75 63 6b 20 6d 61 6e 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bd e2 80 8d f0 9f 9a 92 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 64 2d 31 66 36 39 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 66 69 72 65 66 69 67 68 74 65 72 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 69 72 65 66 69 67 68 74 65 72 20 66 69 72 65 74 72 75 63 6b 20 6d 61 6e 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 Data Ascii: firetruck man medium-light skin tone","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-1f3fd-1f692","name":"man firefighter: medium skin tone","tags":"firefighter firetruck man medium skin tone","isAlt":true,"fit
2023-07-21 16:50:46 UTC	4600	IN	Data Raw: 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b8 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 38 22 2c 22 6e 61 6d 65 22 3a 22 70 72 69 6e 63 65 73 73 22 2c 22 74 61 67 73 22 3a 22 66 61 69 72 79 20 74 61 6c 65 20 66 61 6e 74 61 73 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b8 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 38 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 70 72 69 6e 63 65 73 73 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 Data Ascii: skin tone","tags":"","fitzpatrick":"","section":"people"},{"ch":"","code":"1f478","name":"princess","tags":"fairy tale fantasy","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f478-1f3fb","name":"princess: light skin tone","tags
2023-07-21 16:50:46 UTC	4632	IN	Data Raw: 6d 61 6e 20 65 6c 66 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 67 69 63 61 6c 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9d f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 64 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 65 6c 66 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 67 69 63 61 6c 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 Data Ascii: man elf: medium skin tone","tags":"magical medium skin tone","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9dd-1f3fe-2642","name":"man elf: medium-dark skin tone","tags":"magical medium-dark skin tone","isAlt":t
2023-07-21 16:50:46 UTC	4680	IN	Data Raw: 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f be e2 80 8d f0 9f 8d bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 65 2d 31 66 33 37 63 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 66 65 65 64 69 6e 67 20 62 61 62 79 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d f0 9f 8d bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 2d 31 66 33 37 63 22 2c 22 6e 61 6d Data Ascii: trick":"","section":"people"},{"ch":"","code":"1f469-1f3fe-1f37c","name":"woman feeding baby: medium-dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3ff-1f37c","nam
2023-07-21 16:50:46 UTC	4712	IN	Data Raw: 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 8b f0 9f 8f bb e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 62 2d 31 66 33 66 62 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 72 61 69 73 69 6e 67 20 68 61 6e 64 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 67 65 73 74 75 72 65 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 72 61 69 73 69 6e 67 20 68 61 6e 64 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 8b f0 9f 8f bc e2 80 8d Data Ascii: trick":"base","section":"people"},{"ch":"","code":"1f64b-1f3fb-2640","name":"woman raising hand: light skin tone","tags":"gesture light skin tone raising hand woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-07-21 16:50:46 UTC	4728	IN	Data Raw: 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 8d f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 64 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 66 72 6f 77 6e 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 72 6f 77 6e 69 6e 67 20 67 65 73 74 75 72 65 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 Data Ascii: tone woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f64d-1f3fc-2640","name":"woman frowning: medium-light skin tone","tags":"frowning gesture medium-light skin tone woman","isAlt":true,"fitzpatrick":""
2023-07-21 16:50:46 UTC	4744	IN	Data Raw: 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 69 6e 20 73 75 69 74 20 6c 65 76 69 74 61 74 69 6e 67 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 75 73 69 6e 65 73 73 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 61 6e 20 73 75 69 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 95 b4 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 37 34 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 69 6e 20 73 75 69 74 20 6c 65 76 69 74 61 74 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 75 73 69 6e 65 73 73 20 6d 61 6e Data Ascii: -1f3fb","name":"man in suit levitating: light skin tone","tags":"business light skin tone man suit","fitzpatrick":"","section":"people"},{"ch":"","code":"1f574-1f3fc","name":"man in suit levitating: medium-light skin tone","tags":"business man
2023-07-21 16:50:46 UTC	4752	IN	Data Raw: 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 77 61 6c 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 68 69 6b 65 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 77 61 6c 6b 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a b6 f0 9f 8f bd e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 62 36 2d 31 66 33 66 64 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 77 61 6c 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 Data Ascii: fc-2640","name":"woman walking: medium-light skin tone","tags":"hike medium-light skin tone walk woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f6b6-1f3fd-2640","name":"woman walking: medium skin tone","tag
2023-07-21 16:50:46 UTC	4768	IN	Data Raw: 69 6e 20 74 6f 6e 65 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f a4 9d e2 80 8d f0 9f a7 91 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 65 2d 31 66 39 31 64 2d 31 66 39 64 31 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 70 65 6f 70 6c 65 20 68 6f 6c 64 69 6e 67 20 68 61 6e 64 73 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 Data Ascii: in tone dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d1-1f3fe-1f91d-1f9d1-1f3fb","name":"people holding hands: medium-dark skin tone light skin tone","tags":"","isAlt":true
2023-07-21 16:50:46 UTC	4776	IN	Data Raw: 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 62 2d 31 66 39 31 64 2d 31 66 34 36 39 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 65 6e 20 68 6f 6c 64 69 6e 67 20 68 61 6e 64 73 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bc e2 80 8d f0 9f a4 9d e2 80 8d f0 9f 91 a9 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 63 2d 31 66 39 31 64 2d 31 66 34 36 39 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 65 6e 20 68 6f Data Ascii: "code":"1f469-1f3fb-1f91d-1f469-1f3ff","name":"women holding hands: light skin tone dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3fc-1f91d-1f469-1f3fb","name":"women ho
2023-07-21 16:50:46 UTC	4792	IN	Data Raw: 20 74 6f 6e 65 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bd e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 91 a8 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 64 2d 32 37 36 34 2d 31 66 34 36 38 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 63 6f 75 70 6c 65 20 77 69 74 68 20 68 65 61 72 74 3a 20 77 6f 6d 61 6e 20 20 6d 61 6e 20 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 Data Ascii: tone dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3fd-2764-1f468-1f3fb","name":"couple with heart: woman man medium skin tone light skin tone","tags":"","isAlt":t
2023-07-21 16:50:46 UTC	4808	IN	Data Raw: 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f bd e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 92 8b e2 80 8d f0 9f a7 91 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 64 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 39 64 31 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 6b 69 73 73 3a 20 70 65 72 73 6f 6e 20 20 70 65 72 73 6f 6e 20 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 Data Ascii: :"","section":"people"},{"ch":"","code":"1f9d1-1f3fd-2764-1f48b-1f9d1-1f3fb","name":"kiss: person person medium skin tone light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-07-21 16:50:46 UTC	4816	IN	Data Raw: 34 36 39 2d 31 66 33 66 66 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 6b 69 73 73 3a 20 77 6f 6d 61 6e 20 20 6d 61 6e 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 92 8b e2 80 8d f0 9f 91 a8 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 2d 31 66 33 66 66 22 2c 22 6e 61 6d Data Ascii: 469-1f3ff-2764-1f48b-1f468-1f3fe","name":"kiss: woman man dark skin tone medium-dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3ff-2764-1f48b-1f468-1f3ff","nam
2023-07-21 16:50:46 UTC	4832	IN	Data Raw: 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 9a 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 35 61 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e e2 80 99 73 20 63 6c 6f 74 68 65 73 22 2c 22 74 61 67 73 22 3a 22 63 6c 6f 74 68 69 6e 67 20 77 6f 6d 61 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 95 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 35 35 22 2c 22 6e 61 6d 65 22 3a 22 74 2d 73 68 69 72 74 22 2c 22 74 61 67 73 22 3a 22 63 6c 6f 74 68 69 6e 67 20 73 68 69 72 74 20 74 73 68 69 72 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e Data Ascii: rick":"n/a","section":"people"},{"ch":"","code":"1f45a","name":"womans clothes","tags":"clothing woman","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f455","name":"t-shirt","tags":"clothing shirt tshirt","fitzpatrick":"n/a","section
2023-07-21 16:50:46 UTC	4848	IN	Data Raw: 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f aa b6 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 62 36 22 2c 22 6e 61 6d 65 22 3a 22 66 65 61 74 68 65 72 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 90 93 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 31 33 22 2c 22 6e 61 6d 65 22 3a 22 72 6f 6f 73 74 65 72 22 2c 22 74 61 67 73 22 3a 22 62 69 72 64 20 72 6f 6f 73 74 65 72 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a6 83 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 38 33 22 2c 22 6e Data Ascii: a","section":"nature"},{"ch":"","code":"1fab6","name":"feather","tags":"","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f413","name":"rooster","tags":"bird rooster","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f983","n
2023-07-21 16:50:46 UTC	4864	IN	Data Raw: 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a5 a6 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 36 36 22 2c 22 6e 61 6d 65 22 3a 22 62 72 6f 63 63 6f 6c 69 22 2c 22 74 61 67 73 22 3a 22 77 69 6c 64 20 63 61 62 62 61 67 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a5 ac 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 36 63 22 2c 22 6e 61 6d 65 22 3a 22 6c 65 61 66 79 20 67 72 65 65 6e 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f ab 91 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 64 31 22 2c 22 6e Data Ascii: /a","section":"food"},{"ch":"","code":"1f966","name":"broccoli","tags":"wild cabbage","fitzpatrick":"n/a","section":"food"},{"ch":"","code":"1f96c","name":"leafy green","tags":"","fitzpatrick":"n/a","section":"food"},{"ch":"","code":"1fad1","n
2023-07-21 16:50:46 UTC	4880	IN	Data Raw: 2c 7b 22 63 68 22 3a 22 f0 9f 8f 82 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 32 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 73 6e 6f 77 62 6f 61 72 64 65 72 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 73 6b 69 20 73 6e 6f 77 20 73 6e 6f 77 62 6f 61 72 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 82 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 32 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 73 6e 6f 77 62 6f 61 72 64 65 72 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c Data Ascii: ,{"ch":"","code":"1f3c2-1f3fc","name":"snowboarder: medium-light skin tone","tags":"medium-light skin tone ski snow snowboard","fitzpatrick":"","section":"activity"},{"ch":"","code":"1f3c2-1f3fd","name":"snowboarder: medium skin tone",
2023-07-21 16:50:46 UTC	4896	IN	Data Raw: 64 65 22 3a 22 31 66 33 63 63 2d 31 66 33 66 66 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 67 6f 6c 66 69 6e 67 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 67 6f 6c 66 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 8c ef b8 8f e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 63 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 67 6f 6c 66 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 67 6f 6c 66 20 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a Data Ascii: de":"1f3cc-1f3ff-2640","name":"woman golfing: dark skin tone","tags":"dark skin tone golf woman","isAlt":true,"fitzpatrick":"","section":"activity"},{"ch":"","code":"1f3cc-2642","name":"man golfing","tags":"golf man","isAlt":true,"fitz
2023-07-21 16:50:46 UTC	4906	IN	Data Raw: 61 6d 65 22 3a 22 6d 61 6e 20 73 75 72 66 69 6e 67 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 6e 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 73 75 72 66 69 6e 67 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 84 f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 34 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 73 75 72 66 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 6e 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e Data Ascii: ame":"man surfing: medium skin tone","tags":"man medium skin tone surfing","isAlt":true,"fitzpatrick":"","section":"activity"},{"ch":"","code":"1f3c4-1f3fe-2642","name":"man surfing: medium-dark skin tone","tags":"man medium-dark skin
2023-07-21 16:50:46 UTC	4922	IN	Data Raw: 6d 65 22 3a 22 6d 61 6e 20 6d 6f 75 6e 74 61 69 6e 20 62 69 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 69 63 79 63 6c 65 20 62 69 6b 65 20 63 79 63 6c 69 73 74 20 6d 61 6e 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 6f 75 6e 74 61 69 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a b5 f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 62 35 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 6d 6f 75 6e 74 61 69 6e 20 62 69 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b Data Ascii: me":"man mountain biking: medium skin tone","tags":"bicycle bike cyclist man medium skin tone mountain","isAlt":true,"fitzpatrick":"","section":"activity"},{"ch":"","code":"1f6b5-1f3fe-2642","name":"man mountain biking: medium-dark sk
2023-07-21 16:50:46 UTC	4938	IN	Data Raw: 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a 85 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 38 35 22 2c 22 6e 61 6d 65 22 3a 22 62 75 6c 6c 65 74 20 74 72 61 69 6e 22 2c 22 74 61 67 73 22 3a 22 62 75 6c 6c 65 74 20 72 61 69 6c 77 61 79 20 73 68 69 6e 6b 61 6e 73 65 6e 20 73 70 65 65 64 20 74 72 61 69 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a 88 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 38 38 22 2c 22 6e 61 6d 65 22 3a 22 6c 69 67 68 74 20 72 61 69 6c 22 2c 22 74 61 67 73 22 3a 22 72 61 69 6c 77 61 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c Data Ascii: tion":"travel"},{"ch":"","code":"1f685","name":"bullet train","tags":"bullet railway shinkansen speed train","fitzpatrick":"n/a","section":"travel"},{"ch":"","code":"1f688","name":"light rail","tags":"railway","fitzpatrick":"n/a","section":"travel
2023-07-21 16:50:46 UTC	4954	IN	Data Raw: 74 65 72 20 64 69 73 6b 20 66 6c 6f 70 70 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 62 66 22 2c 22 6e 61 6d 65 22 3a 22 6f 70 74 69 63 61 6c 20 64 69 73 6b 22 2c 22 74 61 67 73 22 3a 22 63 64 20 63 6f 6d 70 75 74 65 72 20 64 69 73 6b 20 6f 70 74 69 63 61 6c 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 93 80 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 63 30 22 2c 22 6e 61 6d 65 22 3a 22 64 76 64 22 2c 22 74 61 67 73 22 3a 22 62 6c 75 2d 72 61 79 20 63 6f 6d 70 75 74 65 72 20 64 69 73 6b 20 64 Data Ascii: ter disk floppy","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4bf","name":"optical disk","tags":"cd computer disk optical","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4c0","name":"dvd","tags":"blu-ray computer disk d
2023-07-21 16:50:46 UTC	4970	IN	Data Raw: 22 6e 61 6d 65 22 3a 22 62 75 63 6b 65 74 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 b4 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 66 34 22 2c 22 6e 61 6d 65 22 3a 22 6c 6f 74 69 6f 6e 20 62 6f 74 74 6c 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9b 8e 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 63 65 22 2c 22 6e 61 6d 65 22 3a 22 62 65 6c 6c 68 6f 70 20 62 65 6c 6c 22 2c 22 74 61 67 73 22 3a 22 62 65 6c 6c 20 62 65 6c 6c 68 6f 70 20 68 6f 74 65 6c 22 2c 22 68 61 73 41 6c 74 22 Data Ascii: "name":"bucket","tags":"","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f9f4","name":"lotion bottle","tags":"","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f6ce","name":"bellhop bell","tags":"bell bellhop hotel","hasAlt"
2023-07-21 16:50:46 UTC	4986	IN	Data Raw: 73 22 3a 22 79 65 6c 6c 6f 77 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 9a 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 39 61 22 2c 22 6e 61 6d 65 22 3a 22 67 72 65 65 6e 20 68 65 61 72 74 22 2c 22 74 61 67 73 22 3a 22 67 72 65 65 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 99 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 39 39 22 2c 22 6e 61 6d 65 22 3a 22 62 6c 75 65 20 68 65 61 72 74 22 2c 22 74 61 67 73 22 3a 22 62 6c 75 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 Data Ascii: s":"yellow","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f49a","name":"green heart","tags":"green","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f499","name":"blue heart","tags":"blue","fitzpatrick":"n/a","section":"symb
2023-07-21 16:50:46 UTC	5002	IN	Data Raw: 75 72 2d 64 65 2d 6c 69 73 22 2c 22 68 61 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 e2 9a 9c ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 32 36 39 63 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 65 75 72 2d 64 65 2d 6c 69 73 22 2c 22 74 61 67 73 22 3a 22 66 6c 65 75 72 2d 64 65 2d 6c 69 73 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 94 b0 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 33 30 22 2c 22 6e 61 6d 65 22 3a 22 4a 61 70 61 6e 65 73 65 20 73 79 6d 62 6f 6c 20 66 6f 72 20 62 65 67 69 6e 6e Data Ascii: ur-de-lis","hasAlt":true,"fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"269c","name":"fleur-de-lis","tags":"fleur-de-lis","isAlt":true,"fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f530","name":"Japanese symbol for beginn
2023-07-21 16:50:46 UTC	5018	IN	Data Raw: 6e 61 6d 65 22 3a 22 72 69 67 68 74 20 61 72 72 6f 77 20 63 75 72 76 69 6e 67 20 64 6f 77 6e 22 2c 22 74 61 67 73 22 3a 22 61 72 72 6f 77 20 64 6f 77 6e 22 2c 22 68 61 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 e2 a4 b5 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 32 39 33 35 22 2c 22 6e 61 6d 65 22 3a 22 72 69 67 68 74 20 61 72 72 6f 77 20 63 75 72 76 69 6e 67 20 64 6f 77 6e 22 2c 22 74 61 67 73 22 3a 22 61 72 72 6f 77 20 64 6f 77 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 94 Data Ascii: name":"right arrow curving down","tags":"arrow down","hasAlt":true,"fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"2935","name":"right arrow curving down","tags":"arrow down","isAlt":true,"fitzpatrick":"n/a","section":"symbols"},{"ch":"
2023-07-21 16:50:46 UTC	5034	IN	Data Raw: 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f b3 e2 9a a7 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 66 33 2d 32 36 61 37 22 2c 22 6e 61 6d 65 22 3a 22 74 72 61 6e 73 67 65 6e 64 65 72 20 66 6c 61 67 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 68 61 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f b3 ef b8 8f e2 80 8d e2 9a a7 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 66 33 2d 32 36 61 37 22 2c 22 6e 61 6d 65 22 3a 22 74 72 61 6e 73 67 65 6e 64 65 72 20 66 6c 61 67 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a Data Ascii: e,"fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f3f3-26a7","name":"transgender flag","tags":"","hasAlt":true,"fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f3f3-26a7","name":"transgender flag","tags":"","isAlt":
2023-07-21 16:50:46 UTC	5050	IN	Data Raw: f0 9f 87 b2 f0 9f 87 b1 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 32 2d 31 66 31 66 31 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 4d 61 6c 69 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b2 f0 9f 87 b9 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 32 2d 31 66 31 66 39 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 4d 61 6c 74 61 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b2 f0 9f 87 ad 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 32 2d 31 66 31 65 64 22 2c 22 Data Ascii: ","code":"1f1f2-1f1f1","name":"flag: Mali","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f2-1f1f9","name":"flag: Malta","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f2-1f1ed","

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
117	192.168.2.5	49955	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:45 UTC	4247	OUT	GET /paper/team/emoji-list?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	4355	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:46 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:46 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 4ff25d25-6c89-458b-be09-cdbc38736a90 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 076750458b8f474a9514115f061d58a8 Connection: close
2023-07-21 16:50:46 UTC	4356	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
118	192.168.2.5	49958	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	4268	OUT	GET /paper/cloud-docs/urls?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-pad-id: sPCvEN8YwVSfHh10HNmcF notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 notes-tab-id: PyrhnmTtVxZUnEUavH4O x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	4710	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:46 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:46 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: ae7a29c4-3712-4cd4-b150-2c18ed8e3747 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: ca43190794824e89a174a4cda03c55b7 Connection: close
2023-07-21 16:50:46 UTC	4712	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
119	192.168.2.5	49961	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	4404	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 905 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	4406	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6c 6f 61 64 5f 69 66 72 61 6d 65 5f 62 72 6f 77 73 65 72 5f 63 61 70 61 62 69 6c 69 74 69 65 73 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"EAiNyh0Etp1-SLOVW1yl7","event_name":{".tag":"load_iframe_browser_capabilities"},"auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1I
2023-07-21 16:50:46 UTC	4906	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 32 X-Webkit-Csp: sandbox Content-Length: 21 Date: Fri, 21 Jul 2023 16:50:46 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 73e8aec1360244d09f16981ed3048a82 Connection: close
2023-07-21 16:50:46 UTC	4906	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.5	49775	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	722	OUT	GET /static/fonts/AtlasGrotesk-MediumItalic-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:32 UTC	723	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 86404 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:43 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:32 GMT Cache-Control: max-age=43200 ETag: "6ff72a8066505bf68a02551c27ef4e49" Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 aca4cfc16ad0f84e78738cc400bfb7f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: FdPR_q0CUVCXgcKTOTNDPVzzuyyhoSjHoyazPssMw6Tzf51XKWxcSQ== Age: 7094
2023-07-21 16:50:32 UTC	724	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 51 84 00 10 00 00 00 04 b4 c8 00 01 51 22 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 d9 78 1c ce 64 06 60 00 8c 02 08 3c 09 82 73 11 0c 0a 86 ef 44 86 8e 09 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 91 0b 07 eb 00 0c 84 5a 5b c4 78 94 0e a5 32 f6 f7 a3 24 d0 c0 ea 90 80 6a f4 53 b6 b5 2b 00 ce 6b 05 be 82 0e 19 a6 87 c2 26 e2 75 8d d1 a9 63 0c 43 ed a3 1e 3f 43 9d fb d3 10 aa ec 1c b5 a5 63 be eb 15 76 ce fe ff ff ff ff ff ff ff d5 c9 22 72 73 77 ee 7f 76 af fc 53 a4 4a 13 91 aa 88 89 09 46 31 89 d0 80 bb c5 24 a6 3c 17 6b 5a 31 89 9d 6e af 2f cd 5d 36 35 10 ba 0f 9b d1 b8 57 4a 19 b8 34 93 d8 b9 1b ca 54 95 6e f4 46 ee 15 47 44 43 ce cc b4 15 ba 03 f7 39 48 ee 0e c9 c0 b9 5a e8 c5 6c 29 ab Data Ascii: wOF2QQ"xd`<sD46$d Z[x2$jS+k&ucC?Ccv"rswvSJF1$<kZ1n/]65WJ4TnFGDC9HZl)
2023-07-21 16:50:32 UTC	739	IN	Data Raw: fd 71 96 a9 0b df fc 8c 4b ae 83 77 a4 ec 7d 00 f0 09 00 28 dc f2 c8 e9 57 c6 6f b9 eb 81 5b 40 19 1e e1 b7 3c f5 5c 9c 97 bc bd f1 92 8f b4 0d 7c c1 b7 35 1d 5d 54 7a 5c 61 ef ba 2a 7a 27 b7 ef 73 7d 3e 28 7a 8f 92 bb 5d 65 5e 87 70 15 07 7d 59 e3 e4 c6 f6 00 82 6b 0f 9e 04 9b a3 37 77 e7 e6 1b 17 00 1c af 7e f5 ce a0 ea 8b 94 39 08 ec 59 82 97 6e 49 a4 98 a5 5f 0b b0 c4 c1 3d 58 b6 39 93 a7 3c 66 e9 16 58 c0 d2 dd 6c 5e 79 dc 03 47 dc 16 43 12 c5 3b 3e 88 4a 47 ca 72 6e b0 6c 35 6e 55 d6 9f f1 34 6c bd e4 39 58 fc ba b8 37 7b c7 9b bd 97 3e f0 99 78 92 84 06 1d b2 d1 75 6f 34 f7 71 95 24 2a e5 91 91 8e 7a e4 88 7b 32 a2 f0 86 4a 96 6e 88 97 7b 15 fa c0 d3 78 b2 70 91 85 13 4e b3 60 e1 98 ec cc 5a 50 31 21 8e 00 62 b2 d4 85 d4 85 0f 4e 78 c2 45 00 81 36 Data Ascii: qKw}(Wo[@<\\|5]Tz\az's}>(z]e^p}Yk7w~9YnI_=X9<fXl^yGC;>JGrnl5nU4l9X7{>xuo4q$z{2Jn{xpN`ZP1!bNxE6
2023-07-21 16:50:32 UTC	788	IN	Data Raw: 78 e8 d5 0d 51 96 41 ee 9e 80 93 b9 87 f0 2c 14 84 b2 0a 4b 9e 19 92 fe 20 35 44 e3 33 0d fd 24 12 56 70 d3 2b 00 0e d9 8e 29 a9 97 58 44 3b 0c 91 42 b9 e2 de c4 18 3b 95 4b 7c 38 eb 80 fd 00 03 cc 2f ac ad 54 c5 8a 9a 05 bc 72 a5 73 db c4 65 e5 0a 53 70 02 59 39 15 9b 81 9d 56 77 8b a7 2e 2c ae e4 2b 49 bd 65 f5 c2 60 e4 22 46 79 b8 09 ac e2 df 14 6b b3 8d b0 bc 70 32 88 1f 18 4d 77 92 e2 e5 96 36 df 8c d9 0e 50 76 ad b3 28 09 4d 66 8a d1 70 f5 4a 88 ab 82 92 5f 43 2d b9 da b9 f1 25 ef 2c e4 c7 b6 a2 43 a7 78 11 16 76 25 d8 c5 73 3d 17 70 88 9f ac ba 0c 21 a2 d0 e6 31 54 3f 93 98 49 84 79 c5 dd 22 51 4e b2 7c fe 01 60 12 4f 44 62 13 c2 ee f0 d1 4c b4 0a 57 24 5e 03 3a 39 52 3e 5f 36 29 82 b5 95 88 35 78 a3 ab 09 c3 12 92 0c 66 db eb 60 87 4b be 39 d4 63 Data Ascii: xQA,K 5D3$Vp+)XD;B;K\|8/TrseSpY9Vw.,+Ie`"Fykp2Mw6Pv(MfpJ_C-%,Cxv%s=p!1T?Iy"QN\|`ODbLW$^:9R>_6)5xf`K9c
2023-07-21 16:50:32 UTC	804	IN	Data Raw: 53 00 2f 91 82 fd 88 32 08 16 d3 9b 1e ef f6 5f fc 92 92 07 5e 88 66 e7 5a c3 50 af 0c 35 5e 8b 1a 82 17 03 cf 84 14 ca 62 67 33 aa 21 df 32 6e b2 a0 46 99 64 26 07 06 04 00 fd da 5b 17 cd cd d1 c7 08 a8 69 ab 01 b5 14 99 89 64 c3 99 c0 58 2c fa 7b db 4a 66 27 89 0e 43 03 80 02 c0 e3 de f7 db 12 ec de 3f 50 a3 f8 54 94 00 b8 10 0d ec 1a 6f c7 8f 8d c2 47 07 2f 10 db ff 98 b6 bc 04 1c 7e 69 e5 7b a0 21 d8 4a ef 05 e0 ec 85 55 11 07 6a 9c c5 cd 25 01 20 8c a5 51 d7 57 a3 b3 92 71 ae a2 f1 86 45 8f 10 50 7a 24 c8 ca f6 04 8c 07 2f da e3 6a 43 ed 81 47 0b 3c 19 c8 ea 13 f0 a8 df bb b0 5a 4e 46 46 09 ec 1f 7a a8 c7 46 38 fa df 0b d3 c6 a1 3e 7f ea 5f 7a 27 69 fb d2 da dc 05 d5 d3 6b 71 66 e2 da 72 6b ef a7 34 98 af dd 8f 06 c3 6c 7b 88 1b 7a 46 29 ee f4 38 aa Data Ascii: S/2_^fZP5^bg3!2nFd&[idX,{Jf'C?PToG/~i{!JUj% QWqEPz$/jCG<ZNFFzF8>_z'ikqfrk4l{zF)8
2023-07-21 16:50:32 UTC	820	IN	Data Raw: ab 03 5e 92 c6 df 6d 50 6d 6f fd 8d e4 6e 08 d3 dd 95 c6 6b 56 d3 85 43 75 ab 49 ea 8a e9 c9 d5 b4 01 9b 09 ce 1e d3 bc 2b 2b f6 2a 87 b3 1b b9 2b 7b 93 b4 f7 14 8e 83 5b d4 74 6d b5 be e1 6e 41 0f 8f dc b5 b9 40 8b 4e 39 0f eb 8f 18 70 8b 52 4f c1 85 26 f1 14 b1 a5 f1 3a 17 ec 10 8f 39 ab 5f f6 24 8d df d9 80 7d d3 eb 6a 98 38 e5 d8 ea be ee 0a dd a9 9a 26 44 d1 47 27 a6 3b 7d b6 de 3d 31 66 f0 05 28 ec da fb 29 39 3f cd 47 67 78 b3 ff d9 84 ac dd 09 3a db ac 60 4a 9c 81 59 dc 88 1d cf bd aa 12 91 01 e1 fa 42 93 ba 0b a4 fd f6 7d da 6f 5f 03 18 cd 0b a8 2c 56 81 b0 4b 62 38 32 d1 a7 2f ce bd 8a a4 77 ef 41 3e af a6 f5 c3 e5 7b 4d 5b a1 3b ba eb d4 bc 89 9f be 05 5e e9 5c 96 df 24 55 f6 66 21 b1 e8 ee dd 67 48 b1 9a de 1b 3a b7 8a ec 5a 21 96 f6 3a 6f cd Data Ascii: ^mPmonkVCuI++*+{[tmnA@N9pRO&:9_$}j8&DG';}=1f()9?Ggx:`JYB}o_,VKb82/wA>{M[;^\$Uf!gH:Z!:o
2023-07-21 16:50:32 UTC	836	IN	Data Raw: 29 74 0f c2 d3 e0 99 9a 8f 04 a4 28 53 fb 34 22 0e 1e 62 0d 32 02 be 81 87 9d c8 41 36 8d 98 6d 98 4d 22 22 9e 06 f5 64 7b 12 08 ae 94 88 2f 94 f0 3a 8d 38 b9 4f 30 02 eb c8 cb 8b 89 03 9f 76 0a a5 71 ab 2d 7d d1 86 9b 8a c9 f5 a9 c8 2b 20 4b 6a 34 9b cf af 33 56 15 e5 71 51 26 ee 55 ec 3b 7b 49 50 20 4b 41 17 7e 6c d9 41 c4 cc 42 80 6b 86 39 43 86 33 51 ab 8f f2 4e e3 0a 4d 77 ba 6a 45 8f 61 67 32 c8 a6 31 24 b2 ba 60 2d 1c 8f ce ee f8 ed 24 e2 8f 90 b8 7b fa 68 e5 1a 4c 58 c8 35 df 15 19 82 f7 45 e1 5c 00 97 ab 90 28 5b bf d8 45 02 4d a6 59 71 31 32 a5 65 73 6c 6f a6 e6 dc 2a 3b 60 4d 7b e5 69 1f 8f a9 28 9d bf a4 53 25 67 fe d7 16 84 58 22 10 51 21 41 51 06 98 79 fb 9c 05 fd c9 aa 61 7e a2 0a 64 2e e4 91 ef 47 ff 73 1d 23 a2 be eb c0 4d 8e 29 2c bc 37 Data Ascii: )t(S4"b2A6mM""d{/:8O0vq-}+ Kj43VqQ&U;{IP KA~lABk9C3QNMwjEag21$`-${hLX5E\([EMYq12eslo*;`M{i(S%gX"Q!AQya~d.Gs#M),7

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
120	192.168.2.5	49960	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	4439	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	4905	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Fri, 21 Jul 2023 16:50:46 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 290618839429475e926c98ae961bc819 Connection: close
2023-07-21 16:50:46 UTC	4905	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
121	192.168.2.5	49959	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	4439	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	4905	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Fri, 21 Jul 2023 16:50:46 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4da48e97cf634dabb098d9d86d3e37cc Connection: close
2023-07-21 16:50:46 UTC	4905	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
122	192.168.2.5	49965	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	4709	OUT	OPTIONS /paper/comet/channel?v=2&r=878235726477585130301259&id=359881680158568536413245&channel=streaming&seq=0&create=no&new=yes&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1 Host: 37.comet.dropbox.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: notes-app-time,notes-app-version,notes-pad-id,notes-pad-team-id,notes-socket-id,notes-tab-id Origin: https://www.dropbox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:46 UTC	5072	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Notes-App-Time, Notes-App-Version, Notes-Pad-Id, Notes-Pad-Team-Id, Notes-Socket-Id, Notes-Tab-Id, Notes-Team-Id, Pad-Sharding-Experiment, Create-New-Pad Access-Control-Allow-Origin: https://www.dropbox.com Allow: GET, HEAD, POST, TRACE, OPTIONS Content-Length: 0 Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:46 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Set-Cookie: t=j2G0coAI490GKiFW9tiLctuR; Path=/; Domain=dropbox.com; Expires=Mon, 20 Jul 2026 16:50:46 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-ss=_up7plVlO0; Path=/; Expires=Mon, 20 Jul 2026 16:50:46 GMT; HttpOnly; Secure; SameSite=Strict Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: bffb301c-7959-41ea-ab65-928ea01df361 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e2ee5c15f7544705bf70a5c00a3d658d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
123	192.168.2.5	49966	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	4904	OUT	GET /paper/ep/stateless/calendars/calendar-events?padId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	5070	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:46 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:46 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/stateless/calendars/calendar-events X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 24132be0-83fb-407f-ab09-8154aa490079 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 08bd1f14882d40a8934a4c91ae1b144a Connection: close
2023-07-21 16:50:46 UTC	5071	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"success":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
124	192.168.2.5	49973	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	5065	OUT	GET /paper/emoji/preferences?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	5074	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:46 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:46 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/preferences X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: b5d9c877-6629-4489-9aee-90d1f9663e0b X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 85 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 00dc7d2b548e4dcd9330647bf1b6d089 Connection: close
2023-07-21 16:50:46 UTC	5075	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 7b 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 30 2e 31 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 7d 7d Data Ascii: {"success":true,"preferences":{"fitzpatrick":"base","version":"7.0.1","locale":"en"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
125	192.168.2.5	49972	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	5066	OUT	GET /paper/comet/channel?v=2&r=383420915850636593080934&id=359881680158568536413245&channel=shortpolling&seq=0&create=yes&new=yes&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	5073	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:46 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 4846c4cd-7fc0-4cb2-8df4-ef6da201e822 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 8 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 2b33f8c639354426b99d09d8bcdea20a Connection: close
2023-07-21 16:50:46 UTC	5074	IN	Data Raw: 36 3a 6f 6f 62 3a 6f 6b Data Ascii: 6:oob:ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
126	192.168.2.5	49974	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	5067	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 363 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	5068	OUT	Data Raw: 1f 8b 08 00 f6 35 bb 64 00 ff ad 91 5f 6b c2 30 14 c5 bf ca c8 73 3b d2 bf 6b fb ea 1c ee c5 09 6e 93 21 52 b2 f4 da 86 d5 a4 24 a9 43 c4 ef ee ad b1 b0 97 81 0f 3e 35 b9 bd b9 e7 77 ce 5d 1f 49 69 0f 1d 90 82 c0 1e a4 25 de f5 5b 90 35 c8 7a f3 60 14 ff 01 eb 73 25 25 70 eb 9b 9e 73 30 66 db b7 d8 d9 69 d5 81 b6 02 0c 29 8e 44 f6 bb 0f 03 da bc c9 05 ab 48 11 7a 43 65 e2 de 41 f5 f7 17 f5 88 30 93 56 f5 d5 b3 e2 a4 b0 ba 07 8f 68 b8 6a 08 59 2f 2f a2 af d8 4a 28 0d 69 4e 93 24 0f 9e 68 14 44 34 8b a3 20 a1 49 8c f2 0e ed dd d1 4f 6d 03 ba 63 d5 0a be dd 6b 6c b0 62 07 be 55 23 3c 32 a5 49 ec 11 ce 2c d4 4a 1f 06 cf b2 76 3e aa 9e 8f 93 16 0c 4d 61 55 b2 bd a8 99 15 4a 9a d2 08 c9 a1 34 e8 1c af 65 c7 6a 28 5b 35 58 09 9c 0a 1e d2 2c cf 73 9a c6 e9 23 72 Data Ascii: 5d_k0s;kn!R$C>5w]Ii%[5z`s%%ps0fi)DHzCeA0VhjY//J(iN$hD4 IOmcklbU#<2I,Jv>MaUJ4ej([5X,s#r
2023-07-21 16:50:46 UTC	5075	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:46 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:46 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 1dc1b31f-eab7-435e-9bf8-173a86ce4dac X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 64c47611ece644faa2ec44eaee7ca996 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
127	192.168.2.5	49975	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:46 UTC	5068	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 252 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:46 UTC	5070	OUT	Data Raw: 1f 8b 08 00 f6 35 bb 64 00 ff 4d 90 4f 6b b4 30 10 87 bf cb 9c b5 a8 b5 a2 b9 6e 5b ec 65 2b f4 1f a5 14 09 c9 54 03 3a 91 4c f4 45 96 fd ee 1b d7 b7 d0 53 26 bf 19 9e 67 92 af 13 b4 7e 9d 10 04 e0 82 e4 21 fa 7f 0a 50 83 09 45 ec 50 ea 35 66 24 1d 0f d2 23 a9 35 cc 4c ce 4e e8 bc 41 06 71 02 9a c7 37 46 c7 cf d4 48 0d 22 8b b6 e4 60 89 50 79 d4 7f 5b 49 04 86 0f 83 9d f5 bd 55 20 bc 9b 31 02 6f 46 8c bd bd 3a 40 a4 f9 15 af 67 e5 5f f7 c5 1a 19 5c 41 4a 72 31 9d f4 c6 12 b7 6c 48 61 cb c8 1c ae ed 24 3b 6c 07 bb 19 d2 9d 17 8a a2 ac aa 2a 29 f2 e2 26 c9 ef 02 53 ea a7 d0 07 6e 0e cb c3 b1 fc fc f7 fe f2 53 f7 69 52 1f 47 f5 f8 fb ec 6d e2 b6 88 80 95 43 a4 0f a3 7d 1f 48 59 19 f6 de a3 1a 4d d7 87 df 49 93 2c 3f 9f bf 2f 4a 72 94 ee 3f 01 00 00 Data Ascii: 5dMOk0n[e+T:LES&g~!PEP5f$#5LNAq7FH"`Py[IU 1oF:@g_\AJr1lHa$;l*)&SnSiRGmC}HYMI,?/Jr?
2023-07-21 16:50:47 UTC	5086	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:47 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:47 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: bf1c00d6-d35f-4873-8c27-01e6f84ffae8 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 415c244fad0849348889ec97d8222d51 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
128	192.168.2.5	49976	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5077	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 747 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:47 UTC	5078	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6d 61 78 5f 61 63 63 65 73 73 5f 75 72 6c 5f 63 68 61 6e 67 65 64 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 2d 30 38 6e 77 5f 77 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"EAiNyh0Etp1-SLOVW1yl7","event_name":{".tag":"max_access_url_changed"},"auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu-08nw_w
2023-07-21 16:50:47 UTC	5084	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 30 X-Webkit-Csp: sandbox Content-Length: 21 Date: Fri, 21 Jul 2023 16:50:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 91e6fa46edf3485f96e88aa7f4b3d032 Connection: close
2023-07-21 16:50:47 UTC	5084	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
129	192.168.2.5	49977	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5079	OUT	POST /paper/comet/post?r=969207706799432086575527&v=2&id=359881680158568536413245&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&xsrf=deghsLEKJOGSu-1QvrwgkKX3&postSeq=2&remark=CLIENT_READY&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 55 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvz Notes-Pad-Id: sPCvEN8YwVSfHh10HNmcF Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 Notes-App-Time: 1689901056000 Notes-Socket-Id: 359881680158568536413245 Content-Type: application/octet-stream Notes-Tab-Id: PyrhnmTtVxZUnEUavH4O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:47 UTC	5080	OUT	Data Raw: 0a 35 1a 33 0a 15 73 50 43 76 45 4e 38 59 77 56 53 66 48 68 31 30 48 4e 6d 63 46 1a 12 67 2e 32 35 31 63 35 36 32 39 33 61 39 36 66 37 65 33 20 02 30 0d 48 0a 50 12 Data Ascii: 53sPCvEN8YwVSfHh10HNmcFg.251c56293a96f7e3 0HP
2023-07-21 16:50:47 UTC	5085	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:47 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 6f4be0a9-fe6c-4491-aeb4-2dd063cae682 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 2 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 4a392e8491264c38902cc8e1ce3e6d2f Connection: close
2023-07-21 16:50:47 UTC	5086	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.5	49776	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	723	OUT	GET /static/fonts/AtlasGrotesk-Semi-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:32 UTC	755	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 80256 Connection: close Date: Fri, 21 Jul 2023 10:07:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:35:04 GMT ETag: "9be183d893fc4e9776e2ac5c30d05ca5" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 a1822b92cbf5d3516743d4786d5b6020.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: IcngL_jTQ_XLc_WXDx_72reZIIHFQFrBA1BKGpwiyNcIBvlfOK7ueQ== Age: 24169
2023-07-21 16:50:32 UTC	756	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 39 80 00 10 00 00 00 04 ba f4 00 01 39 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 9f 26 1c cd 6a 06 60 00 8b 76 08 48 09 82 73 11 08 0a 87 b9 44 86 d9 02 0b 94 2c 00 01 36 02 24 03 a8 54 04 20 05 8e 49 07 ea 42 0c 85 66 5b 69 7f b4 03 0a 45 ee 4f 3f 6f 61 9d ad ac 86 80 a0 a7 80 49 72 56 b0 31 f6 ff f8 3b a8 8c 61 62 07 ca 3c 7a 6d 1d 9e 7a 5f 1a 0b 6c f8 15 74 db 76 94 34 22 3d b7 25 da d6 21 5e 25 d9 ff ff ff ff ff ff ff ff ff ce 64 11 6b ba 3b 07 b3 f7 80 20 28 28 58 d1 a8 01 f3 34 8d f6 13 12 98 37 1d 94 49 4c c0 a4 40 86 4b 3a af 20 2b 61 8d d6 8d a1 a6 6e bd f8 4d b2 18 a3 78 15 c2 56 3a 95 62 08 a9 d0 7d 08 e2 f5 da a3 5d 01 59 c8 9e ca 86 71 23 87 1f 72 8c 71 3a 96 aa 0c 62 76 5a Data Ascii: wOF299&j`vHsD,6$T IBf[iEO?oaIrV1;ab<zmz_ltv4"=%!^%dk; ((X47IL@K: +anMxV:b}]Yq#rq:bvZ
2023-07-21 16:50:32 UTC	772	IN	Data Raw: af 16 4a e8 b5 a8 e7 db e4 3e cf c0 cc 9c 04 99 4d 82 8d e4 14 4b 42 cb 26 9e e3 cd d7 c8 91 a8 59 ea de 12 26 0a 52 64 22 71 64 84 10 93 f3 14 09 17 4e 72 ab 87 46 d9 ba f3 e1 d7 c4 35 0e 01 31 72 51 ed 01 d7 02 2f b5 87 1c bc 6b 56 03 6a 75 f0 6e 59 01 0c f5 fd 2b 9c ef 36 c0 27 d5 16 bf 67 35 d9 42 c0 0b ae 4b 76 b0 97 1c e0 0e 5d c0 49 08 8a f0 02 41 6e 96 54 c2 0d 1c 42 dd 1b 01 7d e0 ed 59 01 ff d9 34 58 0a c8 53 7d 69 c4 58 47 9f da 57 6c 63 c2 3f 03 52 47 09 52 1e 2c ff b9 dd e3 fd ff cb c6 92 0d 70 19 55 97 b3 79 b0 cb 87 c7 fe d4 39 ce 9d 27 9f 74 3c a3 d6 ba 43 45 c7 07 b5 f2 b2 28 31 8f db cc bb 18 07 23 55 c6 84 cb 43 44 0a 89 68 69 46 b1 16 7c 5d fe 2b 9e 2c df 88 47 54 b0 55 01 5c 33 c2 16 15 fe dd 4a b0 93 2a 3e 6c 06 2b 39 02 57 71 e8 3d Data Ascii: J>MKB&Y&Rd"qdNrF51rQ/kVjunY+6'g5BKv]IAnTB}Y4XS}iXGWlc?RGR,pUy9't<CE(1#UCDhiF\|]+,GTU\3J*>l+9Wq=
2023-07-21 16:50:32 UTC	841	IN	Data Raw: ff 90 45 37 5b d8 ee b1 96 36 47 5b d0 5c ac 0f a7 8a 5b 7d 8d 33 58 bf 09 dd 01 31 7f be 66 50 ee e9 02 17 8a c4 3f 9b 6a 50 9e e8 20 ad d0 3a 4c 87 c8 12 1b 20 cc ae 30 e9 23 52 84 aa de 56 64 3a 5f 21 9a f5 6c 2a 32 fc d6 78 b5 d0 93 f1 b8 be c1 c8 0e 38 41 1f 3a c5 d2 39 dd 40 64 72 4f 84 4e 3e 09 cb f1 ef 7e c5 51 4e b3 12 6d 84 50 44 23 1e c9 48 41 a4 3b 4d 88 b2 eb 96 21 74 06 44 9a ac ca 52 9d 65 37 ca 99 d9 eb db 2a e3 3d 04 ba 46 85 ac c5 a4 0b 3a c5 b1 50 76 4e de e1 f2 bd 60 37 87 89 45 f4 28 21 8b 72 f6 32 e5 17 89 0f f1 2b 58 dd 1c 76 97 ad d8 ec 60 6e 41 4f ca af fa 6f 7f 50 96 fd 67 a3 7e 77 00 ca f5 6b fe 99 07 65 d9 1f 3d 6d 3d aa d3 c0 09 8f ff 7f 9d fe 99 3a a2 9f b9 97 b0 3e 0e d0 f8 22 5e c1 1d fe a7 ec ed e3 7f 18 91 8f 72 d4 b0 81 Data Ascii: E7[6G[\[}3X1fP?jP :L 0#RVd:_!l2x8A:9@drON>~QNmPD#HA;M!tDRe7=F:PvN`7E(!r2+Xv`nAOoPg~wke=m=:>"^r
2023-07-21 16:50:32 UTC	857	IN	Data Raw: 3e a1 b4 b8 53 4c 2a 40 14 d1 92 ea 18 c8 f6 4f 16 df 39 68 ac 05 11 dc e0 44 9c 4f ae f6 53 5b a7 07 a6 57 19 6c 3f 3f 32 19 b0 a8 45 68 5e bc 9e b2 dc f1 a8 29 7f b8 63 24 52 9c 58 97 a7 93 d4 94 1c 24 4a ed 25 c8 8b d2 29 ae d8 b6 fb cf a0 b5 f7 0a d5 3a ba 9f 77 78 55 be 7a 24 e3 e6 4c d4 68 93 fe c9 c4 44 62 56 ed 1e 36 8e ff ba 95 ff fe c0 bc e7 d0 b1 6a b1 05 29 fe f8 d9 48 4d 86 c2 d1 8a a4 ae b8 9f 27 c5 29 ae a8 af 57 cd 68 cd e8 0b d5 4a 8b b6 74 1d ba 89 6d 3f 4a 1e fe 4f fe a2 5e 0a 3e ca 1e 3a 38 fb 19 f6 9b b0 c0 dc 4c af c5 3b c7 bb 73 f4 8d 5d 1d 19 91 b6 f0 82 ac dd 9e fb ac 3a 5e a5 f5 ec c1 43 2d 9d e2 5c 5b 0e e1 81 be be 5d fa d2 44 db 91 08 0f 81 67 13 f2 26 f2 52 27 93 f0 c1 75 14 2c d5 17 1a 5a b6 69 f2 d4 a6 74 5f 3a 69 99 fc 32 Data Ascii: >SL*@O9hDOS[Wl??2Eh^)c$RX$J%):wxUz$LhDbV6j)HM')WhJtm?JO^>:8L;s]:^C-\[]Dg&R'u,Zit_:i2
2023-07-21 16:50:32 UTC	873	IN	Data Raw: bf b9 ce f5 df 65 bf 55 a7 1f 10 fe a0 d2 1d dc 1f 6f f8 d7 64 07 f3 7a 80 57 bc 9e 4c 11 77 be 37 9c ff 7c 10 b1 7f 6d 7f 79 e3 bb fd b7 fc 7e 02 b0 37 a0 ba 6c df df 3c 01 48 79 f6 2c cc 96 0f 3e 78 4f 7d 61 c3 35 50 02 48 0e 9c 7f 2c c3 b0 18 cc fb a8 7c 71 65 63 72 76 a3 d3 a3 a9 de 1a 94 4f 6b ff 32 02 4c 17 71 54 7f 4f c8 c0 22 30 58 fb f8 55 c8 94 ef 09 fb 14 1a 61 1c 05 10 69 f8 cc 48 8a 60 81 60 6d 87 e3 17 7d 19 8b 98 82 e1 61 91 21 c6 96 8c 62 5f 31 09 de 22 31 b7 d9 25 ed da 57 0c 36 34 4a c0 f8 ab 23 28 0f 95 71 69 eb e9 ea f6 a9 6a 7b 5c ec 8c 1e c7 70 1c 93 35 3e bf 4e e8 32 9f 9b 9c 0c 9a dc 04 55 d9 18 ae 03 8b 33 a9 13 97 3d 91 ce b7 9a 29 41 75 16 c3 e5 79 b2 27 17 ce 13 11 89 ac 2b 9f 33 02 78 79 4c 57 b0 9a 6a 85 9c 55 2a 99 51 d4 3c Data Ascii: eUodzWLw7\|my~7l<Hy,>xO}a5PH,\|qecrvOk2LqTO"0XUaiH``m}a!b_1"1%W64J#(qij{\p5>N2U3=)Auy'+3xyLWjU*Q<

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
130	192.168.2.5	49978	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5080	OUT	POST /paper/cloud-docs/get-permissions?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 54 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-pad-id: sPCvEN8YwVSfHh10HNmcF notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 notes-tab-id: PyrhnmTtVxZUnEUavH4O x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:47 UTC	5082	OUT	Data Raw: 64 6f 63 49 64 3d 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 26 74 3d 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 Data Ascii: docId=EAiNyh0Etp1-SLOVW1yl7&t=deghsLEKJOGSu-1QvrwgkKX3
2023-07-21 16:50:47 UTC	5089	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:47 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:47 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 02da93f4-13f0-4396-ab07-3b69a24bade0 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 32276630235f4c30adad0d998025358b Connection: close
2023-07-21 16:50:47 UTC	5090	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
131	192.168.2.5	49979	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5082	OUT	GET /paper/comet/channel?v=2&r=794120692113024842781272&id=359881680158568536413245&channel=shortpolling&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:47 UTC	5088	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:47 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: d1f95299-1db7-4f49-a197-81eeb35886ce X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 86 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 347db3769b48462da083312100f354cb Connection: close
2023-07-21 16:50:47 UTC	5089	IN	Data Raw: 37 33 3a 31 3a 30 3a 7b 22 74 79 70 65 22 3a 22 43 4f 4c 4c 41 42 52 4f 4f 4d 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 44 49 53 43 4f 4e 4e 45 43 54 5f 52 45 41 53 4f 4e 22 2c 22 72 65 61 73 6f 6e 22 3a 31 31 7d 7d 38 3a 32 3a 31 3a 6b 69 6c 6c Data Ascii: 73:1:0:{"type":"COLLABROOM","data":{"type":"DISCONNECT_REASON","reason":11}}8:2:1:kill

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
132	192.168.2.5	49980	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5082	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 324 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:47 UTC	5084	OUT	Data Raw: 1f 8b 08 00 f6 35 bb 64 00 ff 8d 91 61 6b fa 30 10 c6 bf ca b8 d7 cd 68 ab 54 ed bb e1 1c 0e 86 0a 6e ca 10 29 59 72 a6 81 36 e9 92 d4 fd 8b f8 dd bd ce 09 be fc bf 0a 79 f2 bb bb 3c cf ed 4e 50 84 ae 41 c8 01 8f 68 02 44 7f 67 0e 3b 34 6a ff 20 2a db 4a 26 ad f0 ac e4 46 56 c8 a4 b3 cd 97 fd c7 0e 8e d7 c8 6a f4 9e 2b a4 ba 86 74 74 41 a3 87 fc 04 a6 ad 3f 3c 3a bf 34 2b 2e 21 4f a3 5e 99 5a 63 50 04 94 f7 4f 71 04 da 4f fb 31 cf 56 40 1e 5c 8b 11 94 d6 13 76 53 5f 09 83 d9 93 5e 74 65 3c 0b 4d c2 d6 6f cb cd 36 e9 aa 11 cd 75 f8 dd e2 7f d3 5c 04 6d 0d 01 77 c6 6a 0c 5c f2 c0 99 20 8b 0a 25 61 82 07 54 d6 75 7d 2e 46 5d dd c9 56 84 f7 6b 56 2b 4e 56 49 35 fc a8 15 ef 3b fa c2 6b 23 b0 f0 94 07 5d 8b 86 42 29 2a db 1b 4c 22 08 ba a6 b2 24 1b 4f 26 93 38 Data Ascii: 5dak0hTn)Yr6y<NPAhDg;4j J&FVj+ttA?<:4+.!O^ZcPOqO1V@\vS_^te<Mo6u\mwj\ %aTu}.F]VkV+NVI5;k#]B)L"$O&8
2023-07-21 16:50:47 UTC	5090	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:47 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:47 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 95873e9f-511b-45fc-9d4c-d4fbd74b0253 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 681ef58e5f114b15a6cb08edc7e13b7d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
133	192.168.2.5	49981	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5084	OUT	GET /paper/comet/channel?v=2&r=878235726477585130301259&id=359881680158568536413245&channel=streaming&seq=0&create=no&new=yes&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1 Host: 37.comet.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvz Notes-Pad-Id: sPCvEN8YwVSfHh10HNmcF Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 Notes-App-Time: 1689901056000 Notes-Socket-Id: 359881680158568536413245 Notes-Tab-Id: PyrhnmTtVxZUnEUavH4O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=deghsLEKJOGSu-1QvrwgkKX3; locale=en
2023-07-21 16:50:47 UTC	5092	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Notes-App-Time, Notes-App-Version, Notes-Pad-Id, Notes-Pad-Team-Id, Notes-Socket-Id, Notes-Tab-Id, Notes-Team-Id, Pad-Sharding-Experiment, Create-New-Pad Access-Control-Allow-Origin: https://www.dropbox.com Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/messages; charset=utf-8 Date: Fri, 21 Jul 2023 16:50:47 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:47 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 9bb87e87-4cd3-44f8-a146-bad8479713a4 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 42995bbd6d4942349d7e87f31609ad7b Connection: close Transfer-Encoding: chunked
2023-07-21 16:50:47 UTC	5093	IN	Data Raw: 35 65 0d 0a 36 3a 6f 6f 62 3a 6f 6b 37 33 3a 31 3a 30 3a 7b 22 74 79 70 65 22 3a 22 43 4f 4c 4c 41 42 52 4f 4f 4d 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 44 49 53 43 4f 4e 4e 45 43 54 5f 52 45 41 53 4f 4e 22 2c 22 72 65 61 73 6f 6e 22 3a 31 31 7d 7d 38 3a 32 3a 31 3a 6b 69 6c 6c 0d 0a Data Ascii: 5e6:oob:ok73:1:0:{"type":"COLLABROOM","data":{"type":"DISCONNECT_REASON","reason":11}}8:2:1:kill

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
134	192.168.2.5	49982	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5093	OUT	GET /paper/comet/post?r=241902745168834476259068&v=2&id=359881680158568536413245&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&xsrf=deghsLEKJOGSu-1QvrwgkKX3&postSeq=1&remark=&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5098	IN	HTTP/1.1 404 Not Found Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:48 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: b2b2f159-9d65-43a2-82f0-7165f9197b6e X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 43 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: f5d85095250246bdba6e3a6d6ed9d106 Connection: close
2023-07-21 16:50:48 UTC	5098	IN	Data Raw: 4e 6f 20 73 75 63 68 20 73 6f 63 6b 65 74 2c 20 61 6e 64 2f 6f 72 20 75 6e 6b 6e 6f 77 6e 20 63 68 61 6e 6e 65 6c 20 74 79 70 65 Data Ascii: No such socket, and/or unknown channel type

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
135	192.168.2.5	49984	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5094	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5097	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Fri, 21 Jul 2023 16:50:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3ac28c61d9e34a7c81279e71713d31a6 Connection: close
2023-07-21 16:50:48 UTC	5098	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
136	192.168.2.5	49983	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:47 UTC	5095	OUT	GET /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5098	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 142 Date: Fri, 21 Jul 2023 16:50:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6bda7fa67397454ba2d7128cbebdbf85 Connection: close
2023-07-21 16:50:48 UTC	5099	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 67 65 74 5f 64 6f 63 5f 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 5f 6c 6f 67 67 65 64 5f 6f 75 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/get_doc_state_and_actions_logged_out": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
137	192.168.2.5	49986	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5095	OUT	GET /paper/comet/channel?v=2&r=473432312466479119456147&id=359881680158568536413245&channel=shortpolling&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvz Notes-Pad-Id: sPCvEN8YwVSfHh10HNmcF Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 Notes-App-Time: 1689901056000 Notes-Socket-Id: 359881680158568536413245 Notes-Tab-Id: PyrhnmTtVxZUnEUavH4O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5101	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:48 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 5687ff22-9dcf-4242-8a70-8b64b160d42c X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 86 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 05221481440448b3beea820f90463f69 Connection: close
2023-07-21 16:50:48 UTC	5102	IN	Data Raw: 37 33 3a 31 3a 30 3a 7b 22 74 79 70 65 22 3a 22 43 4f 4c 4c 41 42 52 4f 4f 4d 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 44 49 53 43 4f 4e 4e 45 43 54 5f 52 45 41 53 4f 4e 22 2c 22 72 65 61 73 6f 6e 22 3a 31 31 7d 7d 38 3a 32 3a 31 3a 6b 69 6c 6c Data Ascii: 73:1:0:{"type":"COLLABROOM","data":{"type":"DISCONNECT_REASON","reason":11}}8:2:1:kill

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
138	192.168.2.5	49987	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5096	OUT	GET /paper/ep/stateless/calendars/calendar-events?padId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5102	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:48 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:48 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/stateless/calendars/calendar-events X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 067f4592-2eb5-4e8c-b93d-1c67c0ced49f X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: ac05d42cddbd49379e202cb97cfa43d1 Connection: close
2023-07-21 16:50:48 UTC	5103	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"success":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
139	192.168.2.5	49985	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5099	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1077 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryj0r3nEBi352pPdff Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5100	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6a 30 72 33 6e 45 42 69 33 35 32 70 50 64 66 66 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6a 30 72 33 6e 45 42 69 33 35 32 70 50 64 66 66 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6a 30 72 33 6e 45 42 69 33 35 32 70 50 64 66 66 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryj0r3nEBi352pPdffContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryj0r3nEBi352pPdffContent-Disposition: form-data; name="t"deghsLEKJOGSu-1QvrwgkKX3------WebKitFormBoundaryj0r3nEBi352pPdffCont
2023-07-21 16:50:48 UTC	5117	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 30 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 51787907b93b4a0bbb14800617a4f759 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.5	49777	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	888	OUT	GET /static/fonts/AtlasGrotesk-SemiItalic-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:32 UTC	888	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 85632 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:35:06 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:32 GMT Cache-Control: max-age=43200 ETag: "d0768f14362ac267f79f96ebb4d3e6c1" Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 099d4ba9ace3ae96fa2a16ccfeeac6ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 33ri9yDbgOF4iJI4hJxe5VhxvVSLXx9h51of6_ZKvICN2zMgHjz29Q== Age: 7094
2023-07-21 16:50:32 UTC	889	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 4e 80 00 10 00 00 00 04 e3 e8 00 01 4e 1e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 d8 1c 1c cd 6a 06 60 00 8b 76 08 48 09 82 73 11 08 0a 87 d2 08 86 ee 68 0b 94 2c 00 01 36 02 24 03 a8 54 04 20 05 8f 08 07 ea 42 0c 85 66 5b 04 a7 b4 04 4a 65 ec be 14 ad 0b 8e 3a c0 44 26 1a 55 3b 47 db 16 25 e8 d0 ff 7f 76 09 90 76 f8 91 b6 30 e6 e8 1c 62 0e 2d c2 94 a1 ea 72 fc 06 d3 4d c7 78 11 cf 6d 83 89 3d 40 67 db 3b b3 ff ff ff ff ff ff ff ff ff b7 26 8b d8 4f 7f 77 0e 76 f7 f6 e0 40 11 15 bf 18 3f 24 4d 34 b1 69 5f 5f 4b 82 54 d5 22 d7 48 ee 49 c8 a8 72 66 64 64 66 12 35 8a a4 58 6b 8e 15 79 a2 dc 78 eb f5 8c 84 2a a3 f9 0c 74 d6 2c 80 f5 58 e0 b2 78 f5 bc 12 16 d5 8c d6 a2 64 09 3b 4c 0a 25 60 e0 Data Ascii: wOF2NNj`vHsh,6$T Bf[Je:D&U;G%vv0b-rMxm=@g;&Owv@?$M4i__KT"HIrfddf5Xkyx*t,Xxd;L%`
2023-07-21 16:50:32 UTC	904	IN	Data Raw: e8 35 c0 f8 2f eb 00 00 7e 3f b4 7b 5c 60 e9 87 00 69 e4 a1 68 76 b9 de fc 78 42 f2 42 38 99 24 2d 1c 0b d2 8f 03 2a 5f ae 00 e8 d6 a6 56 bb 4a 18 9a 74 cd 45 4d 19 53 43 f7 d5 71 9f 74 1a 15 f1 92 d0 77 f6 52 be d3 cf 73 70 8b 7e 40 cc 19 76 60 90 93 97 c4 ea ba 84 c5 1f 7e 85 30 84 fc da aa 9e 8a 84 c4 74 c4 11 09 c1 53 b0 b7 44 f8 a0 73 d4 63 a3 47 43 90 98 24 44 35 ae 15 1e 95 c8 92 b1 bc 83 25 be d3 11 37 08 0e f7 a7 ef ed 8f 9d 7e 8c d0 b5 56 e0 f9 91 21 2c 4b 9f 1a e6 01 1a a4 4a bc 55 1f 38 eb a0 63 0a a5 3a 03 74 4d 8c f7 0c 80 8b 1a 44 29 6e f6 5e 49 aa f9 86 4e f0 40 4f 32 a1 8d f4 29 01 a9 7d 3d 02 63 ea 88 de 4d 9d e4 36 33 6d e4 db bf d1 92 75 24 a9 53 56 4d d6 76 ab 8d 8f 7d 6e 80 8c 3c d5 64 e3 91 3a 94 01 a5 66 db 6a b5 c1 5f e0 de 79 1c Data Ascii: 5/~?{\`ihvxBB8$-*_VJtEMSCqtwRsp~@v`~0tSDscGC$D5%7~V!,KJU8c:tMD)n^IN@O2)}=cM63mu$SVMv}n<d:fj_y
2023-07-21 16:50:32 UTC	921	IN	Data Raw: e5 2a f7 64 71 c8 e9 c1 7d 00 6c 14 5a a6 14 0b 2e a1 02 de 6d 05 05 22 77 d8 2f a6 52 58 ad 22 a2 56 6d 6d 6b d3 da 7e 1d 48 a0 1b 69 49 26 32 28 14 f6 4f 5d 4d 1d ba 1f 33 2a f8 22 8e a4 b1 72 ce d6 75 74 3a 80 1a 72 03 6f 53 35 2b d6 45 d2 6e a0 84 30 ac b6 10 e4 74 ca 4d 44 db da d0 f4 4e 41 af cc 6b 58 cb 43 5b ea 45 2a 44 68 a1 c0 1f 29 ff f8 65 01 73 fb 40 3f 62 f4 91 09 14 06 bb c1 79 2a 11 7f 9c 6a ea 57 ec a0 5c 08 4f 11 64 1b 36 06 de 60 df 15 a0 db c8 74 51 6c ad 1c 53 39 e5 66 d3 e5 69 8a 0c 26 6b 6a 2c d6 ed 79 18 45 6c 61 82 e0 e3 68 53 bf 4a 4f 6e 45 b0 ed 65 a0 69 40 e1 83 da cf 4f fb 4e 68 a5 ff a8 98 fe 94 f2 1f b0 6d 69 3f 7f 53 52 77 63 2f 9e 65 4d 85 ba b1 12 95 e0 30 2b 9c dc 56 cb b5 b5 a2 89 a0 38 8b 71 cf 90 a9 51 7b ea 41 0b 9e Data Ascii: dq}lZ.m"w/RX"Vmmk~HiI&2(O]M3"rut:roS5+En0tMDNAkXC[EDh)es@?byjW\Od6`tQlS9fi&kj,yElahSJOnEei@ONhmi?SRwc/eM0+V8qQ{A
2023-07-21 16:50:32 UTC	937	IN	Data Raw: 5b 54 31 5b 13 5f 04 5b 84 3f be 78 82 84 b3 4f fe 7d 97 7a 4c 45 d7 07 48 84 4f cc 73 ab 1e fc bb 21 70 58 c1 0e 20 85 3f 63 b8 dc fe a8 82 6b 6f e3 01 2b 1a 2c 50 57 4b 08 08 85 be 17 37 b5 b7 e0 e4 c2 d3 15 6a b8 ac 29 c8 88 6a a2 f1 be 03 4d bb 92 90 83 50 29 fc 49 79 56 77 f9 5c 77 05 7a e5 f2 5b fe 34 a2 af b0 26 81 ee ed 3b 17 be 0a 2f bf 3a f6 51 56 6f 42 e8 14 64 d3 90 3d 49 a3 d0 82 7e b9 48 ed 6b 68 fe c1 3a a8 bb 8b 6c 58 6a 36 8d bf b9 ed c6 ed 22 de 15 a6 13 16 cd 5e 04 5e f8 c7 7c 67 77 68 4a f0 29 dd 05 8e 24 2f cc 5c f0 fb f3 e1 8e 57 26 e1 f9 df c6 82 a2 28 b1 45 69 2e aa 67 5b 1d 39 ed 96 7a f9 a9 fa f1 75 96 90 a7 59 d3 03 40 b5 58 6e a4 be 9e 3d 84 46 2f 67 f0 1c b4 db dc c8 7e 44 f5 b2 05 51 86 d5 26 2c b2 15 ca d4 52 5f 96 52 66 e1 Data Ascii: [T1[_[?xO}zLEHOs!pX ?cko+,PWK7j)jMP)IyVw\wz[4&;/:QVoBd=I~Hkh:lXj6"^^\|gwhJ)$/\W&(Ei.g[9zuY@Xn=F/g~DQ&,R_Rf
2023-07-21 16:50:32 UTC	953	IN	Data Raw: b9 f8 a7 b8 3b 50 b7 ee c8 a9 47 c3 de 6d c5 d3 36 09 e4 77 85 f1 67 2c cd 4f 93 ff 19 13 d3 09 d3 b1 c7 7c af 02 4c 37 53 d9 82 20 10 b7 2b 6f 28 20 cd 3f e9 23 67 8c 8a b4 26 16 9f 36 b9 ec 6c 9b 75 6d c8 c8 f5 c5 d7 73 5d 2c 0e 27 c0 fc e9 33 3d 84 a6 1e 90 ef aa 15 73 fb 55 f2 16 c7 62 99 70 f8 79 91 43 b5 70 4f c1 d4 9f 12 09 df b4 f0 a8 db 3c 49 dd 52 74 3e af a1 06 cc f4 88 56 a2 c3 cf a3 43 2c 28 43 d9 5a 6c 20 17 64 6a fc 4e 07 6b 7e d7 2b ce 1f ee d0 7d af f1 60 6c a7 a5 b1 47 5b b9 4b 45 4e 9a ca fb 1f fd a7 12 f2 e5 ae fd de ac 51 9c d5 13 28 3d bc 8e d0 49 7a 7f a4 37 c3 93 47 83 b8 e3 44 19 d2 ca be 22 19 15 34 f3 cb 17 4a ee 79 49 60 a6 bd 76 80 7c eb 81 98 87 5c cb 2d 8b 74 f1 6e f9 a3 e5 62 37 8b 5f ba af 37 7a bc 17 a2 14 62 f7 57 47 bc Data Ascii: ;PGm6wg,O\|L7S +o( ?#g&6lums],'3=sUbpyCpO<IRt>VC,(CZl djNk~+}`lG[KENQ(=Iz7GD"4JyI`v\|\-tnb7_7zbWG
2023-07-21 16:50:32 UTC	969	IN	Data Raw: 36 5a e2 1b 69 76 0b 66 90 dc 4b 1d a6 76 4a 1b e3 ec 71 1b b5 8c d1 0d 67 e3 0c 95 d7 51 d7 a3 72 95 ac df c3 6a cc 2e 76 e1 dd e6 62 1d 4f b0 46 ac 3a 4f d9 70 bb ed bf 93 34 12 a6 cf ae a8 b9 dd cb b5 1b 01 63 1f 82 f4 cf ec 64 d6 e2 2b b7 ab b5 58 cf 8e e2 89 f9 fa 49 39 73 8e ed 8b a7 b6 6a 1d f6 c0 bc a0 62 62 6d a0 fd fb ce 68 e8 72 a9 bf 9d 38 52 5f 9d 7c 4c 1d 97 73 06 f4 c8 fd 96 63 19 34 8e 20 78 15 59 9c fa 79 87 c2 a9 b7 79 2e b3 50 e7 cd bc 6f ae 06 11 65 33 ce c3 13 a1 2f d5 25 71 56 4b ec 42 bf 7b f7 fe 0f 7b 6c 34 ee 77 e9 d3 95 5f 7b 66 b9 eb df c9 96 0c 0f 57 51 78 7d 80 40 a7 c7 18 e4 da e0 11 c0 40 48 f4 0b 18 02 26 c9 0c 02 60 01 f0 ab 60 22 53 52 ab 54 24 d2 a2 72 f0 92 0e 03 2b 74 59 d9 a8 9f 1c ce ea 2f 28 54 03 a8 22 c9 20 a1 51 Data Ascii: 6ZivfKvJqgQrj.vbOF:Op4cd+XI9sjbbmhr8R_\|Lsc4 xYyy.Poe3/%qVKB{{l4w_{fWQx}@@H&``"SRT$r+tY/(T" Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
140	192.168.2.5	49992	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5103	OUT	GET /static/img/favicon/favicon-32.png HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:48 UTC	5129	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 497 Connection: close Last-Modified: Fri, 05 Apr 2019 00:05:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:49 GMT Cache-Control: max-age=60 ETag: "ec2e6e18a914b2bae990f7cc9f8cd4dd" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 478446fb4d72a1fd99b9a7a5157265f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: bbh65G3eo-lax2zwJr0wUsqOCVzwnetJW9lu3QKGXR89q4P7nJKbyw==
2023-07-21 16:50:48 UTC	5129	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 01 b8 49 44 41 54 78 01 ed 94 81 47 43 51 14 c6 df 32 5a 85 42 50 81 08 01 4a 48 90 82 e9 bd 5a 28 11 42 ed ad 2d 40 49 4b c0 42 14 d9 ae 06 26 20 00 fa 17 1a 40 b6 b7 11 64 19 00 41 08 94 25 76 3a df 63 30 9b 6b d7 7d bb d0 e1 c7 b1 77 ce f7 dd bb 7b ef b1 fe 43 39 92 34 61 1d d0 a3 0f f2 be 46 9c 5c 36 fe 64 08 f8 b9 4b 09 8b 28 14 ac b1 4b 33 6c fe 04 d3 2e 14 fd 1a ed 91 a1 30 8b a7 99 6f 18 49 40 4d 1a 3d ba 76 3d cf bb ae 42 bc 27 d0 83 5e e5 38 a1 21 16 b9 66 7e 21 a8 04 7a 5d ba 81 56 af 97 6c 95 a9 43 44 0b d0 82 a6 34 8e 69 8c 1b ee 99 26 1a 35 d3 f4 b5 e1 d1 31 12 b4 c5 ab 7c 47 71 90 c0 03 5e c6 17 60 f6 08 a4 91 a0 15 33 97 b0 ed 19 e2 09 Data Ascii: PNGIHDR szzIDATxGCQ2ZBPJHZ(B-@IKB& @dA%v:c0k}w{C94aF\6dK(K3l.0oI@M=v=B'^8!f~!z]VlCD4i&51\|Gq^`3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
141	192.168.2.5	49990	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5104	OUT	POST /web/notifications/retrieve_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 67 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" content-type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5105	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 26 63 6f 75 6e 74 3d 31 30 30 26 74 65 6d 70 6c 61 74 65 5f 76 65 72 73 69 6f 6e 3d 35 Data Ascii: is_xhr=true&t=deghsLEKJOGSu-1QvrwgkKX3&count=100&template_version=5
2023-07-21 16:50:48 UTC	5122	IN	HTTP/1.1 403 Forbidden Content-Security-Policy: sandbox allow-forms allow-scripts Content-Type: text/html Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 925 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e41f58c4983a402ab779341171703ced Connection: close
2023-07-21 16:50:48 UTC	5123	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 33 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 403</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
142	192.168.2.5	49988	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5106	OUT	POST /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 690 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5107	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 72 65 66 65 72 72 65 72 3d 26 6e 61 76 69 67 61 74 69 6f 6e 5f 73 74 61 72 74 3d 31 36 38 39 39 39 30 36 32 38 33 33 31 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 73 74 61 72 74 3d 30 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 65 6e 64 3d 30 26 72 65 64 69 72 65 63 74 5f 73 74 61 72 74 3d 30 26 72 65 64 69 72 65 63 74 5f 65 6e 64 3d 30 26 66 65 74 63 68 5f 73 74 61 72 74 3d 31 36 38 39 39 39 30 36 32 38 33 33 36 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f 73 74 61 72 74 3d 31 36 38 39 39 39 30 36 32 38 35 36 33 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f 65 6e 64 3d 31 36 38 39 39 39 30 36 32 38 35 36 33 26 63 6f 6e 6e 65 63 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&referrer=&navigation_start=1689990628331&unload_event_start=0&unload_event_end=0&redirect_start=0&redirect_end=0&fetch_start=1689990628336&domain_lookup_start=1689990628563&domain_lookup_end=1689990628563&connec
2023-07-21 16:50:48 UTC	5120	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 15 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d2948fc7e6c64a78b686a1a022cb4721 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
143	192.168.2.5	49989	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5108	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 629 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5109	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 77 65 62 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22web
2023-07-21 16:50:48 UTC	5124	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 008fbad4490547c4bad5f02c40d58f9b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
144	192.168.2.5	49991	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5109	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5119	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Fri, 21 Jul 2023 16:50:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3ee49d9a2ee74453b847ec7e3474264e Connection: close
2023-07-21 16:50:48 UTC	5120	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
145	192.168.2.5	49993	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5110	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 5374 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5111	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 72 65 73 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22res
2023-07-21 16:50:48 UTC	5126	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 288a082126a94a32a8770de6341a091d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
146	192.168.2.5	49994	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5130	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 36443 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5131	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 65 6e 73 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22ens
2023-07-21 16:50:48 UTC	5147	OUT	Data Raw: 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 69 64 6c 65 54 69 6d 65 25 32 32 25 33 41 25 32 32 32 34 36 2e 33 37 36 34 32 38 35 37 31 34 32 32 39 25 32 32 25 32 43 25 32 32 62 75 73 79 54 69 6d 65 25 32 32 25 33 41 25 32 32 31 35 2e 33 32 33 35 37 31 34 32 38 35 38 38 37 32 37 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 64 77 73 5f 62 65 66 6f 72 65 5f 69 6e 74 65 72 6e 61 6c 5f 73 65 74 75 70 5f 70 61 67 65 6c 65 74 5f 75 6e 63 61 63 68 65 64 5f 70 61 67 65 6c 65 74 5f 73 6b 65 6c 65 74 6f 6e 2d 31 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 64 77 73 5f 62 65 66 6f 72 65 Data Ascii: 22annotations%22%3A%7B%22idleTime%22%3A%22246.3764285714229%22%2C%22busyTime%22%3A%2215.323571428588727%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22dws_before_internal_setup_pagelet_uncached_pagelet_skeleton-1%22%3A%7B%22name%22%3A%22dws_before
2023-07-21 16:50:48 UTC	5163	OUT	Data Raw: 6d 65 25 32 32 25 33 41 25 32 32 34 37 36 39 2e 34 36 33 35 37 31 34 32 38 37 35 31 25 32 32 25 32 43 25 32 32 62 75 73 79 54 69 6d 65 25 32 32 25 33 41 25 32 32 35 32 38 34 2e 38 33 36 34 32 38 35 37 31 32 36 37 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 64 77 73 5f 70 61 67 65 6c 65 74 5f 63 73 73 5f 6c 6f 61 64 65 64 5f 69 64 6c 65 2d 74 69 6d 65 6f 75 74 2d 70 61 67 65 6c 65 74 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 64 77 73 5f 70 61 67 65 6c 65 74 5f 63 73 73 5f 6c 6f 61 64 65 64 5f 69 64 6c 65 2d 74 69 6d 65 6f 75 74 2d 70 61 67 65 6c 65 74 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 Data Ascii: me%22%3A%224769.463571428751%22%2C%22busyTime%22%3A%225284.836428571267%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22dws_pagelet_css_loaded_idle-timeout-pagelet%22%3A%7B%22name%22%3A%22dws_pagelet_css_loaded_idle-timeout-pagelet%22%2C%22start_ti
2023-07-21 16:50:49 UTC	5489	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 42 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 39113510e39e49cb91af7b9da00ddeb4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
147	192.168.2.5	49995	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5167	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2179 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5168	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 70 65 72 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22per
2023-07-21 16:50:49 UTC	5492	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d6f2c2b17e014ef1a5c412dd54182058 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
148	192.168.2.5	49996	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5170	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 3745 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5171	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 62 72 6f Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22bro
2023-07-21 16:50:49 UTC	5494	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 12 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ed5b91fde82b4ff98c2018f4233189b2 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
149	192.168.2.5	49998	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5175	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 6525 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5176	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 63 75 6d Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22cum
2023-07-21 16:50:49 UTC	5497	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 13 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5aa56333ed3848e4936371f626103574 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.5	49773	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	920	OUT	GET /static/webpack/production/paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_jasmine_~1ca7a66a.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.ixdWsDn48iRVHMxQAzgAuo9ds-FDa6WGwOOI_r2D2Yg.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1486	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 1219 Connection: close Date: Fri, 21 Jul 2023 16:50:34 GMT Last-Modified: Fri, 21 Jul 2023 03:23:46 GMT ETag: "16e9719d264315ca6b7ef13859dcf551" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8f2341b304c32ec6530aa5361edb2fe4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 4V4YViNbxjIpO5iWxN0XZeYJ7obOYz2gmy_gm_GVlcFCRW014awK_w==
2023-07-21 16:50:33 UTC	1486	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 97 4d 6f e3 36 10 86 ef f9 15 06 8a 02 c9 62 e5 95 64 5b 76 64 14 e8 c7 75 8b 02 8b 6d 8b 9e 04 8a a4 6c 26 14 a9 92 94 ed 44 c8 fe f6 0e 45 ca 96 1c 05 8d 6b f4 62 58 d4 cc c3 19 f2 1d 0d 39 cd b6 4c 98 2c 42 62 5b 67 51 43 98 ae 38 7a 4a 0b 4e 0f 6b fb 13 6c 94 dc a7 d1 cb 34 63 86 96 de 2e 69 72 a9 08 55 69 54 1d 26 5a 72 46 26 3b a4 6e 83 00 4b 2e 55 96 61 a9 68 96 21 8c a9 30 77 2d 26 8d d6 5b ca 36 5b 93 86 2f 37 d3 6c af 50 55 51 95 45 34 3c 2c 60 da 12 a9 0d 13 01 a7 85 49 83 79 58 1d d6 95 d4 cc 30 29 52 94 c3 04 b5 a1 10 c1 36 f2 0e c9 47 78 88 fd c3 b2 f3 36 b2 02 e7 ea 30 98 e0 91 44 90 5d 83 6b a5 a5 4a 2b 09 c9 52 b5 1e cc 17 db f9 ce 18 e3 f3 23 41 38 f5 cc 55 63 14 12 ba 90 aa 4c 95 34 c8 d0 db fb 90 d0 cd Data Ascii: Mo6bd[vduml&DEkbX9L,Bb[gQC8zJNkl4c.irUiT&ZrF&;nK.Uah!0w-&[6[/7lPUQE4<,`IyX0)R6Gx60D]kJ+R#A8UcL4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
150	192.168.2.5	49997	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5183	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 878 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5184	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 69 6e 69 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22ini
2023-07-21 16:50:49 UTC	5499	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c5466c3481be46409685b260d3afe891 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
151	192.168.2.5	49999	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:48 UTC	5185	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 310527 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:48 UTC	5186	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 72 65 73 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22res
2023-07-21 16:50:48 UTC	5202	OUT	Data Raw: 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 25 34 30 64 72 6f 70 62 6f 78 25 32 46 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 25 32 46 73 6e 61 63 6b 62 61 72 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 33 33 38 33 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 34 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 Data Ascii: web_modules%2F%40dropbox%2Fdig-components%2Fsnackbar%22%2C%22start_time%22%3A3383%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22400000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserve
2023-07-21 16:50:48 UTC	5218	OUT	Data Raw: 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 63 6f 6d 6d 6f 6e 25 32 46 69 6e 64 65 78 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 33 37 31 31 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 Data Ascii: tic%2Fprod_assets_web_modules%2Fcommon%2Findex%22%2C%22start_time%22%3A3711%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.metaserver%2Fstatic%2F
2023-07-21 16:50:48 UTC	5234	OUT	Data Raw: 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 65 61 6e 25 32 46 73 74 61 74 69 63 5f 75 72 6c 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 65 61 6e 25 32 46 73 74 61 74 69 63 5f 75 72 6c 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 33 38 36 35 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d Data Ascii: %3A1%7D%2C%22execCb.metaserver%2Fstatic%2Fjs%2Fclean%2Fstatic_urls%22%3A%7B%22name%22%3A%22execCb.metaserver%2Fstatic%2Fjs%2Fclean%2Fstatic_urls%22%2C%22start_time%22%3A3865%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTim
2023-07-21 16:50:48 UTC	5250	OUT	Data Raw: 65 72 66 5f 6d 65 74 72 69 63 73 25 32 46 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 5f 68 65 6c 70 65 72 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 34 32 39 39 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 74 79 70 65 73 63 72 69 70 74 25 32 46 64 72 6f 70 62 6f 78 25 32 46 70 72 6f 74 6f 25 Data Ascii: erf_metrics%2Fvisually_complete_helpers%22%2C%22start_time%22%3A4299%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.typescript%2Fdropbox%2Fproto%
2023-07-21 16:50:48 UTC	5266	OUT	Data Raw: 64 2e 74 79 70 65 73 63 72 69 70 74 25 32 46 64 72 6f 70 62 6f 78 25 32 46 70 72 6f 74 6f 25 32 46 68 71 6c 5f 65 76 65 6e 74 73 25 32 46 75 78 5f 61 6e 61 6c 79 74 69 63 73 25 32 46 75 78 5f 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 73 5f 70 62 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 31 38 32 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 32 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 Data Ascii: d.typescript%2Fdropbox%2Fproto%2Fhql_events%2Fux_analytics%2Fux_analytics_events_pb%22%2C%22start_time%22%3A5182%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22200000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22
2023-07-21 16:50:48 UTC	5282	OUT	Data Raw: 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 65 61 6e 25 32 46 66 69 6c 65 74 79 70 65 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 32 34 35 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 32 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 34 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 Data Ascii: xecCb.metaserver%2Fstatic%2Fjs%2Fclean%2Ffiletypes%22%2C%22start_time%22%3A5245%2C%22total_time%22%3A2%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%221400000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver
2023-07-21 16:50:48 UTC	5298	OUT	Data Raw: 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 6f 75 64 5f 64 6f 63 73 25 32 46 63 6c 6f 75 64 5f 64 6f 63 5f 66 72 61 6d 65 5f 6d 65 73 73 65 6e 67 65 72 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 6f 75 64 5f 64 6f 63 73 25 32 46 63 6c 6f 75 64 5f 64 6f 63 5f 66 72 61 6d 65 5f 6d 65 73 73 65 6e 67 65 72 25 32 32 25 32 43 25 32 32 73 74 61 Data Ascii: meNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver%2Fstatic%2Fjs%2Fcloud_docs%2Fcloud_doc_frame_messenger%22%3A%7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fjs%2Fcloud_docs%2Fcloud_doc_frame_messenger%22%2C%22sta
2023-07-21 16:50:48 UTC	5314	OUT	Data Raw: 6c 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 72 65 61 63 74 2d 69 6e 74 6c 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 36 34 32 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 37 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 Data Ascii: l%22%3A%7B%22name%22%3A%22execCb.metaserver%2Fstatic%2Fprod_assets_web_modules%2Freact-intl%22%2C%22start_time%22%3A5642%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22700000%22%7D%2C%22parent%22%3A%22%22%2C%2
2023-07-21 16:50:48 UTC	5330	OUT	Data Raw: 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 73 68 61 72 69 6e 67 25 32 46 73 68 61 72 65 5f 70 61 67 65 25 32 46 61 63 74 69 6f 6e 5f 74 79 70 65 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 39 30 33 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 32 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 Data Ascii: rver%2Fstatic%2Fjs%2Fsharing%2Fshare_page%2Faction_types%22%2C%22start_time%22%3A5903%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22200000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metas
2023-07-21 16:50:49 UTC	5346	OUT	Data Raw: 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 6c 6f 67 67 69 6e 67 25 32 46 68 69 76 65 25 32 46 73 63 68 65 6d 61 73 25 32 46 77 65 62 2d 75 73 65 72 5f 73 75 72 76 65 79 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 36 32 34 39 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 Data Ascii: head.metaserver%2Fstatic%2Fjs%2Flogging%2Fhive%2Fschemas%2Fweb-user_survey%22%2C%22start_time%22%3A6249%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22e
2023-07-21 16:50:49 UTC	5362	OUT	Data Raw: 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 74 79 70 65 73 63 72 69 70 74 25 32 46 6c 69 62 72 61 72 69 65 73 25 32 46 73 68 61 72 65 64 25 32 46 61 70 65 78 2d 6d 65 74 72 69 63 73 25 32 46 73 72 63 25 32 46 68 79 70 65 72 6c 6f 67 6c 6f 67 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 74 79 70 65 73 63 72 69 70 74 25 32 46 6c 69 62 72 61 72 69 65 73 25 32 46 73 68 61 72 65 64 25 32 46 61 70 65 78 2d 6d 65 74 72 69 63 73 25 32 46 Data Ascii: 2annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.typescript%2Flibraries%2Fshared%2Fapex-metrics%2Fsrc%2Fhyperloglog%22%3A%7B%22name%22%3A%22execCb.typescript%2Flibraries%2Fshared%2Fapex-metrics%2F
2023-07-21 16:50:49 UTC	5378	OUT	Data Raw: 74 69 6f 6e 47 72 6f 75 70 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 63 6f 6d 6d 6f 6e 25 32 46 54 72 61 6e 73 69 74 69 6f 6e 47 72 6f 75 70 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 36 35 37 37 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 Data Ascii: tionGroup%22%3A%7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fprod_assets_web_modules%2Fcommon%2FTransitionGroup%22%2C%22start_time%22%3A6577%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22100000%22%7D%2C%2
2023-07-21 16:50:49 UTC	5394	OUT	Data Raw: 74 61 6c 25 32 46 73 72 63 25 32 46 72 69 63 68 5f 73 6e 61 63 6b 62 61 72 25 32 46 69 63 6f 6e 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 36 38 34 33 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 Data Ascii: tal%2Fsrc%2Frich_snackbar%2Ficon%22%2C%22start_time%22%3A6843%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.metaserver%2Fstatic%2Fprod_assets_we
2023-07-21 16:50:49 UTC	5410	OUT	Data Raw: 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 73 70 65 63 74 72 75 6d 25 32 46 75 74 69 6c 25 32 46 75 75 69 64 5f 67 65 6e 65 72 61 74 6f 72 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 73 70 65 63 74 72 75 6d 25 32 46 75 74 69 6c 25 32 46 75 75 69 64 5f 67 65 6e 65 72 61 Data Ascii: 2total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22100000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.spectrum%2Futil%2Fuuid_generator%22%3A%7B%22name%22%3A%22overhead.spectrum%2Futil%2Fuuid_genera
2023-07-21 16:50:49 UTC	5426	OUT	Data Raw: 76 65 72 68 65 61 64 2e 61 6e 6f 6e 2d 31 33 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 61 6e 6f 6e 2d 31 33 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 31 31 33 34 32 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 61 6e 6f 6e 2d 31 34 25 32 Data Ascii: verhead.anon-13%22%3A%7B%22name%22%3A%22overhead.anon-13%22%2C%22start_time%22%3A11342%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.anon-14%2
2023-07-21 16:50:49 UTC	5442	OUT	Data Raw: 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 73 65 63 75 72 69 74 79 25 32 46 75 74 69 6c 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 31 36 30 31 31 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a Data Ascii: d.metaserver%2Fstatic%2Fjs%2Fsecurity%2Futil%22%2C%22start_time%22%3A16011%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.metaserver%2Fstatic%2Fj
2023-07-21 16:50:49 UTC	5458	OUT	Data Raw: 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 33 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 33 34 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 25 32 46 73 68 61 72 65 64 25 32 46 74 72 61 79 5f 63 68 72 6f 6d 65 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 Data Ascii: 2C%22total_time%22%3A3%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%223400000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver%2Fstatic%2Fjs%2Fuser_notifications%2Fshared%2Ftray_chrome%22%3A%7B%22name%22%3A
2023-07-21 16:50:49 UTC	5474	OUT	Data Raw: 4e 73 25 32 32 25 33 41 25 32 32 35 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 63 6f 6d 6d 6f 6e 25 32 46 75 73 65 49 73 4d 6f 75 6e 74 65 64 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 63 6f 6d 6d 6f 6e 25 32 46 75 73 65 49 73 4d 6f 75 6e 74 65 64 25 Data Ascii: Ns%22%3A%22500000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver%2Fstatic%2Fprod_assets_web_modules%2Fcommon%2FuseIsMounted%22%3A%7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fprod_assets_web_modules%2Fcommon%2FuseIsMounted%
2023-07-21 16:50:49 UTC	5568	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 247 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 574de2592e254a87a9ba6076dda98637 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
152	192.168.2.5	50004	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:49 UTC	5502	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 43318 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:49 UTC	5503	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 72 65 73 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22res
2023-07-21 16:50:49 UTC	5519	OUT	Data Raw: 63 74 2e 6d 69 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 70 61 63 6b 61 67 65 64 25 32 46 70 6b 67 2d 72 65 66 65 72 72 65 72 2d 63 6c 65 61 6e 73 69 6e 67 2d 72 65 64 69 72 65 63 74 2e 6d 69 6e 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 32 36 34 35 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 32 36 33 37 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 63 72 69 70 74 25 32 32 25 32 43 25 32 32 63 61 63 68 65 64 25 32 32 25 33 41 25 32 32 66 61 Data Ascii: ct.min%22%3A%7B%22name%22%3A%22metaserver%2Fstatic%2Fjs%2Fpackaged%2Fpkg-referrer-cleansing-redirect.min%22%2C%22start_time%22%3A2645%2C%22total_time%22%3A2637%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22type%22%3A%22script%22%2C%22cached%22%3A%22fa
2023-07-21 16:50:49 UTC	5535	OUT	Data Raw: 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 65 61 6e 25 32 46 75 78 61 5f 70 61 67 65 6c 65 74 2e 6d 69 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 65 61 6e 25 32 46 75 78 61 5f 70 61 67 65 6c 65 74 2e 6d 69 6e 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 31 31 33 34 36 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 31 33 36 34 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 63 72 69 70 74 25 32 32 25 Data Ascii: metaserver%2Fstatic%2Fjs%2Fclean%2Fuxa_pagelet.min%22%3A%7B%22name%22%3A%22metaserver%2Fstatic%2Fjs%2Fclean%2Fuxa_pagelet.min%22%2C%22start_time%22%3A11346%2C%22total_time%22%3A1364%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22type%22%3A%22script%22%
2023-07-21 16:50:49 UTC	5555	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bb9d2dc0d6394e00a4a0e6dd5bfc41b1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
153	192.168.2.5	50001	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:49 UTC	5546	OUT	POST /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2150 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:49 UTC	5547	OUT	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 74 79 70 65 3d 6e 61 76 69 67 61 74 65 26 73 65 72 76 65 72 5f 72 65 71 75 65 73 74 5f 73 74 61 72 74 5f 74 69 6d 65 3d 31 36 38 39 39 35 38 32 32 39 33 39 39 26 65 78 74 72 61 5f 63 6f 6c 75 6d 6e 73 3d 25 37 42 25 32 32 6c 6f 67 5f 73 6f 75 72 63 65 25 32 32 25 33 41 25 32 32 6c 6f 61 64 5f 65 6e 64 25 32 32 25 32 43 25 32 32 73 75 62 74 79 70 65 73 25 32 32 25 33 41 25 32 32 25 37 42 25 35 43 25 32 32 64 6f 63 5f 74 79 70 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 70 61 70 65 72 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 70 6c 61 74 66 6f 72 6d 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 74 74 69 5f 66 6c 6f 77 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 63 Data Ascii: navigation_type=navigate&server_request_start_time=1689958229399&extra_columns=%7B%22log_source%22%3A%22load_end%22%2C%22subtypes%22%3A%22%7B%5C%22doc_type%5C%22%3A%5C%22paper%5C%22%2C%5C%22platform%5C%22%3A%5C%22web%5C%22%2C%5C%22tti_flow%5C%22%3A%5C%22c
2023-07-21 16:50:49 UTC	5563	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 7d3544cd04da43b9b90fa864b872d832 Connection: close
2023-07-21 16:50:49 UTC	5566	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
154	192.168.2.5	50000	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:49 UTC	5549	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1441 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:49 UTC	5550	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 6d 61 65 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22mae
2023-07-21 16:50:49 UTC	5561	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 11 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f834f7d59c6249db8711010bce0edbd9 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
155	192.168.2.5	50003	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:49 UTC	5552	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 844 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:49 UTC	5553	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 70 61 69 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22pai
2023-07-21 16:50:49 UTC	5566	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 27 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e0b85260aba44a63a98c31d163ee6a1e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
156	192.168.2.5	50002	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:49 UTC	5554	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 330 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:49 UTC	5555	OUT	Data Raw: 1f 8b 08 00 f8 35 bb 64 00 ff 8d 91 51 6b ea 40 10 85 ff 4a 99 e7 6c 49 52 c9 8d 79 2b d6 e2 85 a2 82 f7 2a 45 24 6c 77 c7 cd 42 b2 9b ee 6e 6c 83 f8 df 9d 68 05 1f fb b4 e4 9b 33 33 39 67 b6 47 28 43 df 22 14 80 07 34 01 a2 9f b7 80 2d 1a b5 7b 10 b5 ed 24 93 56 78 56 71 23 6b 64 d2 d9 f6 c3 7e b3 bd e3 0d b2 06 bd e7 0a a9 af 25 8e 2e 68 f4 50 1c c1 74 cd 7f 8f ce 2f cc 92 4b 28 d2 68 20 13 6b 0c 8a 80 f2 be 14 47 a0 fd 64 58 f3 62 05 14 c1 75 18 41 65 3d c9 6e f4 2f c9 60 fa ac e7 7d 15 4f 43 9b b0 d5 db 62 bd 49 fa fa 0f ed 75 f8 d9 e1 af d5 5c 04 6d 0d 09 ee 8c 19 1b f4 5e 0b 3e 54 98 b0 9d 09 4c 90 59 85 92 1a 08 a3 b2 ae 1f 12 32 ea ea 53 76 22 fc bb a6 b6 e4 64 9a a8 e1 07 ad 2e 13 7c e9 b5 11 58 7a 4a 86 3e cb 96 e2 29 6b 3b 58 4d 22 08 ba a1 b6 Data Ascii: 5dQk@JlIRy+*E$lwBnlh339gG(C"4-{$VxVq#kd~%.hPt/K(h kGdXbuAe=n/`}OCbIu\m^>TLY2Sv"d.\|XzJ>)k;XM"
2023-07-21 16:50:49 UTC	5571	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:49 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:49 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: d0e137c1-d231-47ad-9cce-1b3a105d59e4 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 10eeb61eb00e446aaab647dcb2caf63d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
157	192.168.2.5	50005	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:49 UTC	5558	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1371 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:49 UTC	5559	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 76 69 73 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22vis
2023-07-21 16:50:50 UTC	5587	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3992b714faed4d60b41b99847f6e243a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
158	192.168.2.5	50006	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:49 UTC	5572	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 260 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:49 UTC	5573	OUT	Data Raw: 1f 8b 08 00 f8 35 bb 64 00 ff 4d 90 5d 6b 83 30 14 86 ff ca 38 d7 71 a8 2d 45 bd 75 1b ee a6 13 f6 c5 28 45 42 72 1a 03 7a 22 49 74 94 d2 ff de 64 6e b0 ab c0 73 72 de f7 e1 1c 2e d0 f9 f3 84 50 01 2e 48 1e d8 ef 5b c1 01 49 1d ef c4 60 66 99 48 23 12 85 3e 99 d0 8e da 39 6d c8 25 27 ae 07 94 61 61 b2 26 70 af d1 41 75 01 9a c7 77 87 d6 bd 50 cb 25 54 39 8b a4 36 44 28 3c ca ff a3 94 81 76 75 cc 7f 30 02 2a 6f 67 64 20 b8 47 65 ec 39 0a 91 5a d3 e5 2c fc db 2a d9 f2 50 15 28 f1 45 2b ee a3 48 e7 34 09 ec 1c fe 78 75 13 57 d8 0d 26 16 64 0c bc 1e c3 5a b6 2b ca b2 4c 77 db e2 7e 53 04 3a 71 f9 1c e6 e0 da 7a 79 dc 17 5f df 1f af a7 a6 cf d2 66 3f 8a a7 bf 13 c4 1f 9b 92 81 13 16 91 3e b5 f4 7d 48 ca 8b a0 bd a2 06 b5 ea c3 a5 b2 34 df 5e af c7 1b 70 58 31 Data Ascii: 5dM]k08q-Eu(EBrz"Itdnsr.P.H[I`fH#>9m%'aa&pAuwP%T96D(<vu0ogd Ge9Z,P(E+H4xuW&dZ+Lw~S:qzy_f?>}H4^pX1
2023-07-21 16:50:50 UTC	5589	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:50 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:50 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 61e30cde-4869-49cc-9e84-7d1c98c3e127 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: da3d2666fe5f40b490e09f4137c6583c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
159	192.168.2.5	50007	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:49 UTC	5574	OUT	POST /paper/log/connection-diagnostic-info?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 8481 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-pad-id: sPCvEN8YwVSfHh10HNmcF notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 notes-tab-id: PyrhnmTtVxZUnEUavH4O x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:49 UTC	5575	OUT	Data Raw: 70 61 64 49 64 3d 73 50 43 76 45 4e 38 59 77 56 53 66 48 68 31 30 48 4e 6d 63 46 26 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 65 73 73 61 67 65 25 32 32 25 33 41 25 32 32 42 6f 6f 74 43 6f 6e 6e 65 63 74 69 6f 6e 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 58 73 72 66 54 6f 6b 65 6e 25 32 32 25 32 43 25 32 32 70 61 64 49 6e 69 74 54 69 6d 65 25 32 32 25 33 41 31 36 38 39 39 39 30 36 34 32 34 33 30 25 32 43 25 32 32 63 6f 6c 6c 61 62 44 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 25 32 32 25 33 41 25 37 42 25 32 32 74 69 6d 65 25 32 32 25 33 41 31 36 38 39 39 39 30 36 34 38 34 32 33 25 32 43 25 32 32 65 72 72 6f 72 73 25 32 32 25 33 41 25 37 42 25 32 32 6c 65 6e 67 74 68 25 32 32 25 33 41 30 25 37 44 25 Data Ascii: padId=sPCvEN8YwVSfHh10HNmcF&diagnosticInfo=%7B%22disconnectedMessage%22%3A%22BootConnectionReason.InvalidXsrfToken%22%2C%22padInitTime%22%3A1689990642430%2C%22collabDiagnosticInfo%22%3A%7B%22time%22%3A1689990648423%2C%22errors%22%3A%7B%22length%22%3A0%7D%
2023-07-21 16:50:50 UTC	5595	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:50 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:50 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/log/connection-diagnostic-info X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: a131f0ec-60e9-45f2-87c7-a97c8511abb2 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 2 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 5c1db467f4d24498af327b7b948aa958 Connection: close
2023-07-21 16:50:50 UTC	5596	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.5	49771	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	1001	OUT	GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_native_desktop~paper_pifs~paper_te~b48e404f.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.PDLfAhd6xUj73iIPSwWB5L8ej6aIH9LdVfTJB4055qk.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1562	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 181 Connection: close Date: Fri, 21 Jul 2023 16:50:34 GMT Last-Modified: Fri, 21 Jul 2023 03:23:54 GMT ETag: "7ac08a3439e54b0f03ac3fc87aa6dbcf" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3d994808da6a9ce8c9e7b1364fa689ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: lfo31hAdXEe3QUwdgmSMCaTm_malHs6r-yO73fK4mpivOUoe4ASK_A==
2023-07-21 16:50:33 UTC	1562	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 3d 8b bb 0e c2 20 14 40 77 bf c2 c4 ad 43 5f 22 6d 4d 5c 9c 75 d1 38 13 b8 5c 0c 4a 81 f0 30 1a 63 bf dd a5 3a 9e 93 73 4a 66 dd 59 4b 14 3c ec 73 4a ce b2 f1 75 7b 22 6b de 06 55 da d6 9f c5 a2 2a 56 cb e8 72 00 3c 72 ef b5 bd 5e 4e 87 9d e7 1e 03 13 da 4a 0c d3 0c d9 4a 83 33 80 71 59 32 e9 20 ce 42 5b 65 32 5a f8 e7 96 27 fd 40 26 31 de 93 f3 b3 f4 5a fd 86 84 93 20 3d 92 9a a8 12 41 50 c2 a1 6f eb 41 0e a2 ee 5b 42 a5 5a 77 4a 50 d8 a0 a2 0d d2 0e a0 eb 69 09 31 96 23 f7 45 f5 05 3f 4f c0 8e d8 00 00 00 Data Ascii: = @wC_"mM\u8\J0c:sJfYK<sJu{"kU*Vr<r^NJJ3qY2 B[e2Z'@&1Z =APoA[BZwJPi1#E?O

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
160	192.168.2.5	50009	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5583	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 605 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5584	OUT	Data Raw: 1f 8b 08 00 f8 35 bb 64 00 ff b5 53 5f 4f 1b 3f 10 fc 2a e8 9e 43 95 a4 29 0a 79 a3 01 44 a4 92 20 92 b4 bf 0a a1 93 39 6f ee 2c 7c f6 d5 6b 5f 7e 11 e2 bb 33 4e 2e 7f 24 a8 44 55 fa 74 a7 dd f5 ec ec cc ee dd 53 92 fa 55 45 c9 20 a1 9a 8c 4f 5a cd 77 90 54 42 a6 99 35 86 32 af ac 49 d9 0b 1f 18 f9 ca d9 8a 9c 57 c4 c9 e0 29 31 a1 9c 33 39 9e 98 1b 21 93 41 b7 15 23 c3 cd 33 92 87 a9 76 2b 51 3c d4 36 c8 73 9b 25 03 ef 02 b5 92 a6 77 30 22 f8 02 7d 55 26 f0 6c d3 45 86 cc cf 36 f9 1b 81 96 88 1a 51 ab 5c 44 3e 9c b2 32 19 a5 4c cc 91 5e 25 72 4a b5 8d 8d 3a 80 55 25 9e 75 4e fa a7 a7 a7 ed 93 5e ff 53 af fb 05 98 42 8e 90 4f f8 66 58 5f 8c fb 3f 97 df a7 8b ab a2 d3 be 1a 97 d9 e5 76 f2 58 d1 03 57 ce 1c 91 f9 a1 a4 2f 80 d4 ed ef 42 57 a4 f2 02 02 75 da Data Ascii: 5dS_O?*C)yD 9o,\|k_~3N.$DUtSUE OZwTB52IW)139!A#3v+Q<6s%w0"}U&lE6Q\D>2L^%rJ:U%uN^SBOfX_?vXW/BWu
2023-07-21 16:50:50 UTC	5596	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:50 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:50 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: e44269a8-b40d-4a4b-bdf7-56b326409246 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 5a736fc30779418fa2c8c9e0e74dd703 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
161	192.168.2.5	50010	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5585	OUT	GET /paper/emoji/count?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5593	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:50 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:50 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/count X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 82b2adb1-d3b0-49dd-aa8d-882724fa966b X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 29 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e2d2186a8c84424cafa31a3ec1a8aefb Connection: close
2023-07-21 16:50:50 UTC	5595	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 22 3a 33 38 33 38 7d Data Ascii: {"success":true,"count":3838}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
162	192.168.2.5	50008	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5586	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5591	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Fri, 21 Jul 2023 16:50:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ca2e59be9c284b66806fdea578f17eed Connection: close
2023-07-21 16:50:50 UTC	5591	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
163	192.168.2.5	50011	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5591	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 329 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5593	OUT	Data Raw: 1f 8b 08 00 f8 35 bb 64 00 ff 8d 91 e1 6b f2 30 10 c6 ff 95 97 fb dc 8c d6 89 b6 fd 36 9c c3 c1 50 c1 4d 79 11 29 59 72 a6 81 36 e9 92 d4 ad 88 ff bb 57 9d e0 c7 7d 0a fd dd 73 77 7d 9e db 1e a1 08 5d 83 90 03 1e d0 04 88 7e df 1c b6 68 d4 ee 9f a8 6c 2b 99 b4 c2 b3 92 1b 59 21 93 ce 36 9f f6 87 ed 1d af 91 d5 e8 3d 57 48 7d 0d 71 74 41 a3 87 fc 08 a6 ad 3f 3c 3a bf 30 4b 2e 21 1f 44 3d 99 58 63 50 04 94 f7 a5 38 02 ed 27 fd 9a 67 2b 20 0f ae c5 08 4a eb 49 76 a3 af 24 83 e9 93 9e 77 65 3c 0d 4d c2 56 6f 8b f5 26 e9 aa 31 ed 75 f8 d5 e2 9f d5 5c 04 6d 0d 09 ee 8c 19 1b f4 5e 0b de 57 98 b0 ad 09 4c 90 59 85 92 1a 08 a3 b2 ae eb 13 32 ea ea 53 b6 22 bc 5f 53 5b 72 32 4d d4 f0 83 56 97 09 be f0 da 08 2c 3c 25 43 9f 45 43 f1 14 95 ed ad 26 11 04 5d 53 5b 32 Data Ascii: 5dk06PMy)Yr6W}sw}]~hl+Y!6=WH}qtA?<:0K.!D=XcP8'g+ JIv$we<MVo&1u\m^WLY2S"_S[r2MV,<%CEC&]S[2
2023-07-21 16:50:50 UTC	5603	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:50 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:50 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 8ff8edd5-24db-4caa-a81f-0141f528fea7 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 67d5de2c4d92475991cf1ff6418ff580 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
164	192.168.2.5	50012	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5598	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5607	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Fri, 21 Jul 2023 16:50:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2c5794e761ee4abba24b5d8e01cb2f11 Connection: close
2023-07-21 16:50:50 UTC	5608	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
165	192.168.2.5	50013	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5599	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1093 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundarysz9VAEqyEOYrrDmA Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5600	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 73 7a 39 56 41 45 71 79 45 4f 59 72 72 44 6d 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 73 7a 39 56 41 45 71 79 45 4f 59 72 72 44 6d 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 73 7a 39 56 41 45 71 79 45 4f 59 72 72 44 6d 41 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarysz9VAEqyEOYrrDmAContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarysz9VAEqyEOYrrDmAContent-Disposition: form-data; name="t"deghsLEKJOGSu-1QvrwgkKX3------WebKitFormBoundarysz9VAEqyEOYrrDmACont
2023-07-21 16:50:50 UTC	5608	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:50 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6c102c420ace40738f03689a22efcad5 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
166	192.168.2.5	50014	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5601	OUT	GET /paper/emoji/list?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5614	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:50 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:50 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/list X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: b69cca39-f67d-46d9-a51b-c78a3b9038a3 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 575663 Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 66d9a35eb08b4ea4b23875241df9b8b0 Connection: close
2023-07-21 16:50:50 UTC	5615	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 6d 6f 6a 69 73 22 3a 5b 7b 22 63 68 22 3a 22 f0 9f 98 80 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 30 22 2c 22 6e 61 6d 65 22 3a 22 67 72 69 6e 6e 69 6e 67 20 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 67 72 69 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 83 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 33 22 2c 22 6e 61 6d 65 22 3a 22 67 72 69 6e 6e 69 6e 67 20 66 61 63 65 20 77 69 74 68 20 62 69 67 20 65 79 65 73 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 6d 6f 75 74 68 20 6f 70 65 6e 20 73 6d 69 6c 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 Data Ascii: {"success":true,"emojis":[{"ch":"","code":"1f600","name":"grinning face","tags":"face grin","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f603","name":"grinning face with big eyes","tags":"face mouth open smile","fitzpatrick":"n/a","se
2023-07-21 16:50:50 UTC	5630	IN	Data Raw: 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 64 72 6f 6f 6c 69 6e 67 20 66 61 63 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 aa 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 32 61 22 2c 22 6e 61 6d 65 22 3a 22 73 6c 65 65 70 79 20 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 73 6c 65 65 70 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 ae f0 9f 92 a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 32 65 2d 31 66 34 61 38 22 2c 22 6e 61 6d 65 22 3a 22 66 61 63 65 20 65 78 68 61 6c 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 68 61 73 41 6c Data Ascii: face","tags":"drooling face","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f62a","name":"sleepy face","tags":"face sleep","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f62e-1f4a8","name":"face exhaling","tags":"","hasAl
2023-07-21 16:50:51 UTC	5638	IN	Data Raw: 64 73 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 65 6c 65 62 72 61 74 69 6f 6e 20 67 65 73 74 75 72 65 20 68 61 6e 64 20 68 6f 6f 72 61 79 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 72 61 69 73 65 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 8c f0 9f 8f be 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 63 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 72 61 69 73 69 6e 67 20 68 61 6e 64 73 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 65 6c 65 62 72 61 74 69 6f 6e 20 67 65 73 74 75 72 65 20 68 61 6e 64 20 68 6f 6f 72 61 79 20 6d 65 64 Data Ascii: ds: medium skin tone","tags":"celebration gesture hand hooray medium skin tone raised","fitzpatrick":"","section":"people"},{"ch":"","code":"1f64c-1f3fe","name":"raising hands: medium-dark skin tone","tags":"celebration gesture hand hooray med
2023-07-21 16:50:51 UTC	5654	IN	Data Raw: 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8c 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 63 22 2c 22 6e 61 6d 65 22 3a 22 4f 4b 20 68 61 6e 64 22 2c 22 74 61 67 73 22 3a 22 4f 4b 20 68 61 6e 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8c f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 63 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 4f 4b 20 68 61 6e 64 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 4f 4b 20 68 61 6e 64 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 Data Ascii: zpatrick":"","section":"people"},{"ch":"","code":"1f44c","name":"OK hand","tags":"OK hand","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f44c-1f3fb","name":"OK hand: light skin tone","tags":"OK hand light skin tone","fitzpatri
2023-07-21 16:50:51 UTC	5663	IN	Data Raw: 69 6e 67 20 64 6f 77 6e 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 63 6b 68 61 6e 64 20 64 6f 77 6e 20 66 69 6e 67 65 72 20 68 61 6e 64 20 69 6e 64 65 78 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 70 6f 69 6e 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 87 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 37 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 62 61 63 6b 68 61 6e 64 20 69 6e 64 65 78 20 70 6f 69 6e 74 69 6e 67 20 64 6f 77 6e 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 63 6b 68 61 6e 64 20 64 61 72 Data Ascii: ing down: medium-dark skin tone","tags":"backhand down finger hand index medium-dark skin tone point","fitzpatrick":"","section":"people"},{"ch":"","code":"1f447-1f3ff","name":"backhand index pointing down: dark skin tone","tags":"backhand dar
2023-07-21 16:50:51 UTC	5672	IN	Data Raw: 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f ab b1 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 66 31 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 72 69 67 68 74 77 61 72 64 73 20 68 61 6e 64 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f ab b1 f0 9f 8f be 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 66 31 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 72 69 67 68 74 77 61 72 64 73 20 68 61 6e 64 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 Data Ascii: :"","section":"people"},{"ch":"","code":"1faf1-1f3fd","name":"rightwards hand: medium skin tone","tags":"","fitzpatrick":"","section":"people"},{"ch":"","code":"1faf1-1f3fe","name":"rightwards hand: medium-dark skin tone","tags":""
2023-07-21 16:50:51 UTC	5680	IN	Data Raw: 73 22 3a 22 62 6f 64 79 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a6 bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 62 62 22 2c 22 6e 61 6d 65 22 3a 22 65 61 72 20 77 69 74 68 20 68 65 61 72 69 6e 67 20 61 69 64 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a6 bb f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 62 62 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 65 61 72 20 77 69 74 68 20 68 65 61 72 69 6e 67 20 61 69 64 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 Data Ascii: s":"body dark skin tone","fitzpatrick":"","section":"people"},{"ch":"","code":"1f9bb","name":"ear with hearing aid","tags":"","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f9bb-1f3fb","name":"ear with hearing aid: light skin t
2023-07-21 16:50:51 UTC	5696	IN	Data Raw: 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b1 f0 9f 8f be e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 31 2d 31 66 33 66 65 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 62 6c 6f 6e 64 2d 68 61 69 72 65 64 20 77 6f 6d 61 6e 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 6c 6f 6e 64 65 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b1 f0 9f 8f bf e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 Data Ascii: "section":"people"},{"ch":"","code":"1f471-1f3fe-2640","name":"blond-haired woman: medium-dark skin tone","tags":"blonde medium-dark skin tone woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"
2023-07-21 16:50:51 UTC	5704	IN	Data Raw: 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 94 f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 34 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 62 65 61 72 64 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 94 f0 9f 8f bd e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 34 2d 31 66 33 66 64 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 20 Data Ascii: eople"},{"ch":"","code":"1f9d4-1f3fc-2640","name":"woman: medium-light skin tone beard","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d4-1f3fd-2640","name":"woman: medium skin tone
2023-07-21 16:50:51 UTC	5712	IN	Data Raw: 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b3 f0 9f 8f bf e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 33 2d 31 66 33 66 66 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 77 65 61 72 69 6e 67 20 74 75 72 62 61 6e 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 61 6e 20 74 75 72 62 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 95 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 35 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 77 69 74 68 20 68 65 Data Ascii: ,"section":"people"},{"ch":"","code":"1f473-1f3ff-2642","name":"man wearing turban: dark skin tone","tags":"dark skin tone man turban","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d5","name":"woman with he
2023-07-21 16:50:51 UTC	5728	IN	Data Raw: 61 6c 74 68 20 77 6f 72 6b 65 72 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 64 6f 63 74 6f 72 20 68 65 61 6c 74 68 63 61 72 65 20 6e 75 72 73 65 20 74 68 65 72 61 70 69 73 74 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 e2 80 8d e2 9a 95 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 32 36 39 35 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 68 65 61 6c 74 68 20 77 6f 72 6b 65 72 22 2c 22 74 61 67 73 22 3a 22 64 6f 63 74 6f 72 20 68 65 61 6c 74 68 63 61 72 65 20 6d 61 6e 20 6e 75 72 73 65 20 74 68 65 Data Ascii: alth worker: dark skin tone","tags":"dark skin tone doctor healthcare nurse therapist woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-2695","name":"man health worker","tags":"doctor healthcare man nurse the
2023-07-21 16:50:51 UTC	5736	IN	Data Raw: 68 22 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f 8e 93 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 65 2d 31 66 33 39 33 22 2c 22 6e 61 6d 65 22 3a 22 73 74 75 64 65 6e 74 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f bf e2 80 8d f0 9f 8e 93 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 66 2d 31 66 33 39 33 22 2c 22 6e 61 6d 65 22 3a 22 73 74 75 64 65 6e 74 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 Data Ascii: h":"","code":"1f9d1-1f3fe-1f393","name":"student: medium-dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d1-1f3ff-1f393","name":"student: dark skin tone","tags":"","isAlt":t
2023-07-21 16:50:51 UTC	5752	IN	Data Raw: 9f 8f bb e2 80 8d f0 9f 92 bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 62 2d 31 66 34 62 63 22 2c 22 6e 61 6d 65 22 3a 22 6f 66 66 69 63 65 20 77 6f 72 6b 65 72 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f bc e2 80 8d f0 9f 92 bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 63 2d 31 66 34 62 63 22 2c 22 6e 61 6d 65 22 3a 22 6f 66 66 69 63 65 20 77 6f 72 6b 65 72 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 Data Ascii: ","code":"1f9d1-1f3fb-1f4bc","name":"office worker: light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d1-1f3fc-1f4bc","name":"office worker: medium-light skin tone","tags":"","isA
2023-07-21 16:50:51 UTC	5768	IN	Data Raw: 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bd e2 80 8d f0 9f 9a 92 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 64 2d 31 66 36 39 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 66 69 72 65 66 69 67 68 74 65 72 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 69 72 65 66 69 67 68 74 65 72 20 66 69 72 65 74 72 75 63 6b 20 6d 61 6e 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f be e2 80 8d f0 9f 9a 92 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 65 2d 31 66 36 39 32 22 2c 22 6e 61 6d Data Ascii: {"ch":"","code":"1f468-1f3fd-1f692","name":"man firefighter: medium skin tone","tags":"firefighter firetruck man medium skin tone","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-1f3fe-1f692","nam
2023-07-21 16:50:51 UTC	5784	IN	Data Raw: 61 6d 65 22 3a 22 70 72 69 6e 63 65 73 73 22 2c 22 74 61 67 73 22 3a 22 66 61 69 72 79 20 74 61 6c 65 20 66 61 6e 74 61 73 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b8 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 38 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 70 72 69 6e 63 65 73 73 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 61 69 72 79 20 74 61 6c 65 20 66 61 6e 74 61 73 79 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b8 f0 Data Ascii: ame":"princess","tags":"fairy tale fantasy","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f478-1f3fb","name":"princess: light skin tone","tags":"fairy tale fantasy light skin tone","fitzpatrick":"","section":"people"},{"ch":"
2023-07-21 16:50:51 UTC	5800	IN	Data Raw: bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9d f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 64 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 65 6c 66 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 67 69 63 61 6c 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9d f0 9f 8f bf e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 64 2d 31 66 33 66 66 2d 32 Data Ascii: ","section":"people"},{"ch":"","code":"1f9dd-1f3fe-2642","name":"man elf: medium-dark skin tone","tags":"magical medium-dark skin tone","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9dd-1f3ff-2
2023-07-21 16:50:51 UTC	5808	IN	Data Raw: 22 63 6f 64 65 22 3a 22 31 66 39 64 61 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 66 61 69 72 79 22 2c 22 74 61 67 73 22 3a 22 54 69 74 61 6e 69 61 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9a f0 9f 8f bb e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 61 2d 31 66 33 66 62 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 66 61 69 72 79 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 54 69 74 61 6e 69 61 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 Data Ascii: "code":"1f9da-2640","name":"woman fairy","tags":"Titania","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f9da-1f3fb-2640","name":"woman fairy: light skin tone","tags":"Titania light skin tone","isAlt":true,"fitzpa
2023-07-21 16:50:51 UTC	5824	IN	Data Raw: 73 22 3a 22 66 6f 72 62 69 64 64 65 6e 20 67 65 73 74 75 72 65 20 68 61 6e 64 20 6e 6f 20 6e 6f 74 20 70 72 6f 68 69 62 69 74 65 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 85 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 35 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 73 6f 6e 20 67 65 73 74 75 72 69 6e 67 20 4e 4f 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 6f 72 62 69 64 64 65 6e 20 67 65 73 74 75 72 65 20 68 61 6e 64 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6e 6f 20 6e 6f 74 20 70 72 6f 68 69 62 69 74 65 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f Data Ascii: s":"forbidden gesture hand no not prohibited","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f645-1f3fb","name":"person gesturing NO: light skin tone","tags":"forbidden gesture hand light skin tone no not prohibited","fitzpatrick":"
2023-07-21 16:50:51 UTC	5840	IN	Data Raw: 69 65 66 20 65 78 61 73 70 65 72 61 74 69 6f 6e 20 66 61 63 65 70 61 6c 6d 20 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 b7 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 33 37 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 73 6f 6e 20 73 68 72 75 67 67 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 64 6f 75 62 74 20 69 67 6e 6f 72 61 6e 63 65 20 69 6e 64 69 66 66 65 72 65 6e 63 65 20 73 68 72 75 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 b7 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 33 37 2d Data Ascii: ief exasperation facepalm man","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f937","name":"person shrugging","tags":"doubt ignorance indifference shrug","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f937-
2023-07-21 16:50:51 UTC	5856	IN	Data Raw: be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 36 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 67 65 74 74 69 6e 67 20 6d 61 73 73 61 67 65 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 6d 61 6e 20 6d 61 73 73 61 67 65 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 86 f0 9f 8f bf e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 36 2d 31 66 33 66 66 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e Data Ascii: ","code":"1f486-1f3fe-2642","name":"man getting massage: medium-dark skin tone","tags":"face man massage medium-dark skin tone","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f486-1f3ff-2642","name":"man
2023-07-21 16:50:51 UTC	5866	IN	Data Raw: 6e 20 73 75 69 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 95 b4 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 37 34 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 69 6e 20 73 75 69 74 20 6c 65 76 69 74 61 74 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 75 73 69 6e 65 73 73 20 6d 61 6e 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 73 75 69 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 95 b4 f0 9f 8f bd 22 2c 22 63 6f 64 Data Ascii: n suit","fitzpatrick":"","section":"people"},{"ch":"","code":"1f574-1f3fc","name":"man in suit levitating: medium-light skin tone","tags":"business man medium-light skin tone suit","fitzpatrick":"","section":"people"},{"ch":"","cod
2023-07-21 16:50:51 UTC	5874	IN	Data Raw: 77 61 6c 6b 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a b6 f0 9f 8f bd e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 62 36 2d 31 66 33 66 64 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 77 61 6c 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 68 69 6b 65 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 77 61 6c 6b 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c Data Ascii: walk woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f6b6-1f3fd-2640","name":"woman walking: medium skin tone","tags":"hike medium skin tone walk woman","isAlt":true,"fitzpatrick":"","section":"people"},
2023-07-21 16:50:51 UTC	5882	IN	Data Raw: 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 83 e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 33 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 72 75 6e 6e 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 6d 61 72 61 74 68 6f 6e 20 72 61 63 69 6e 67 20 72 75 6e 6e 69 6e 67 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 83 f0 9f 8f bb e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 33 2d 31 66 33 66 62 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 72 75 6e 6e 69 6e 67 3a 20 6c Data Ascii: ,"section":"people"},{"ch":"","code":"1f3c3-2640","name":"woman running","tags":"marathon racing running woman","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f3c3-1f3fb-2640","name":"woman running: l
2023-07-21 16:50:51 UTC	5890	IN	Data Raw: 68 22 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f a4 9d e2 80 8d f0 9f a7 91 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 65 2d 31 66 39 31 64 2d 31 66 39 64 31 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 70 65 6f 70 6c 65 20 68 6f 6c 64 69 6e 67 20 68 61 6e 64 73 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f a4 9d e2 80 8d f0 9f a7 91 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 Data Ascii: h":"","code":"1f9d1-1f3fe-1f91d-1f9d1-1f3fb","name":"people holding hands: medium-dark skin tone light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d1-1
2023-07-21 16:50:51 UTC	5906	IN	Data Raw: 6e 67 20 68 61 6e 64 73 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bf e2 80 8d f0 9f a4 9d e2 80 8d f0 9f 91 a8 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 66 2d 31 66 39 31 64 2d 31 66 34 36 38 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 6d 65 6e 20 68 6f 6c 64 69 6e 67 20 68 61 6e 64 73 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 Data Ascii: ng hands: dark skin tone medium-light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-1f3ff-1f91d-1f468-1f3fd","name":"men holding hands: dark skin tone medium skin tone","tags"
2023-07-21 16:50:51 UTC	5922	IN	Data Raw: 22 6e 61 6d 65 22 3a 22 63 6f 75 70 6c 65 20 77 69 74 68 20 68 65 61 72 74 3a 20 77 6f 6d 61 6e 20 20 77 6f 6d 61 6e 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 91 a9 f0 9f 8f be 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 2d 32 37 36 34 2d 31 66 34 36 39 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 63 6f 75 70 6c 65 20 77 69 74 68 20 68 65 61 72 74 3a 20 77 6f 6d 61 6e 20 20 77 6f 6d 61 6e 20 20 Data Ascii: "name":"couple with heart: woman woman dark skin tone medium skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3ff-2764-1f469-1f3fe","name":"couple with heart: woman woman
2023-07-21 16:50:51 UTC	5938	IN	Data Raw: 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 92 8b e2 80 8d f0 9f 91 a8 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 6b 69 73 73 3a 20 77 6f 6d 61 6e 20 20 6d 61 6e 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a Data Ascii: tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3ff-2764-1f48b-1f468-1f3ff","name":"kiss: woman man dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":
2023-07-21 16:50:51 UTC	5946	IN	Data Raw: 2c 22 6e 61 6d 65 22 3a 22 6b 69 73 73 3a 20 6d 61 6e 20 20 6d 61 6e 20 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bd e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 92 8b e2 80 8d f0 9f 91 a8 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 64 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 6b 69 73 73 3a 20 6d 61 6e 20 20 6d 61 6e 20 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d Data Ascii: ,"name":"kiss: man man medium skin tone light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-1f3fd-2764-1f48b-1f468-1f3fc","name":"kiss: man man medium skin tone m
2023-07-21 16:50:51 UTC	5962	IN	Data Raw: 3a 22 66 72 6f 6e 74 2d 66 61 63 69 6e 67 20 62 61 62 79 20 63 68 69 63 6b 22 2c 22 74 61 67 73 22 3a 22 62 61 62 79 20 62 69 72 64 20 63 68 69 63 6b 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a6 86 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 38 36 22 2c 22 6e 61 6d 65 22 3a 22 64 75 63 6b 22 2c 22 74 61 67 73 22 3a 22 62 69 72 64 20 64 75 63 6b 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a6 85 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 38 35 22 2c 22 6e 61 6d 65 22 3a 22 65 61 67 6c 65 22 2c 22 74 61 67 73 22 3a 22 62 69 72 64 20 65 61 67 6c 65 22 Data Ascii: :"front-facing baby chick","tags":"baby bird chick","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f986","name":"duck","tags":"bird duck","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f985","name":"eagle","tags":"bird eagle"
2023-07-21 16:50:51 UTC	5978	IN	Data Raw: 66 61 39 30 22 2c 22 6e 61 6d 65 22 3a 22 72 69 6e 67 65 64 20 70 6c 61 6e 65 74 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 ab 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 61 62 22 2c 22 6e 61 6d 65 22 3a 22 64 69 7a 7a 79 22 2c 22 74 61 67 73 22 3a 22 63 6f 6d 69 63 20 73 74 61 72 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 e2 ad 90 22 2c 22 63 6f 64 65 22 3a 22 32 62 35 30 22 2c 22 6e 61 6d 65 22 3a 22 73 74 61 72 22 2c 22 74 61 67 73 22 3a 22 73 74 61 72 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 Data Ascii: fa90","name":"ringed planet","tags":"","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f4ab","name":"dizzy","tags":"comic star","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"2b50","name":"star","tags":"star","fitzpatrick":"n/a"
2023-07-21 16:50:51 UTC	5994	IN	Data Raw: 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a5 9c 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 35 63 22 2c 22 6e 61 6d 65 22 3a 22 70 65 61 6e 75 74 73 22 2c 22 74 61 67 73 22 3a 22 66 6f 6f 64 20 6e 75 74 20 70 65 61 6e 75 74 20 76 65 67 65 74 61 62 6c 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f ab 98 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 64 38 22 2c 22 6e 61 6d 65 22 3a 22 62 65 61 6e 73 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 Data Ascii: t","fitzpatrick":"n/a","section":"food"},{"ch":"","code":"1f95c","name":"peanuts","tags":"food nut peanut vegetable","fitzpatrick":"n/a","section":"food"},{"ch":"","code":"1fad8","name":"beans","tags":"","fitzpatrick":"n/a","section":"food"},{"ch"
2023-07-21 16:50:51 UTC	6010	IN	Data Raw: 6e 20 62 6f 75 6e 63 69 6e 67 20 62 61 6c 6c 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 6c 6c 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 e2 9b b9 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 32 36 66 39 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 73 6f 6e 20 62 6f 75 6e 63 69 6e 67 20 62 61 6c 6c 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 6c 6c 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd Data Ascii: n bouncing ball: medium-light skin tone","tags":"ball medium-light skin tone","fitzpatrick":"","section":"activity"},{"ch":"","code":"26f9-1f3fd","name":"person bouncing ball: medium skin tone","tags":"ball medium skin tone","fitzpatrick":"
2023-07-21 16:50:51 UTC	6027	IN	Data Raw: 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 84 f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 34 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 73 75 72 66 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 6e 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 73 75 72 66 69 6e 67 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 84 f0 9f 8f bf e2 80 8d e2 99 82 Data Ascii: zpatrick":"","section":"activity"},{"ch":"","code":"1f3c4-1f3fe-2642","name":"man surfing: medium-dark skin tone","tags":"man medium-dark skin tone surfing","isAlt":true,"fitzpatrick":"","section":"activity"},{"ch":"
2023-07-21 16:50:51 UTC	6043	IN	Data Raw: 65 20 6d 6f 75 6e 74 61 69 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a b5 f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 62 35 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 6d 6f 75 6e 74 61 69 6e 20 62 69 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 69 63 79 63 6c 65 20 62 69 6b 65 20 63 79 63 6c 69 73 74 20 6d 61 6e 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 6f 75 6e 74 61 69 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a Data Ascii: e mountain","isAlt":true,"fitzpatrick":"","section":"activity"},{"ch":"","code":"1f6b5-1f3fe-2642","name":"man mountain biking: medium-dark skin tone","tags":"bicycle bike cyclist man medium-dark skin tone mountain","isAlt":true,"fitz
2023-07-21 16:50:51 UTC	6059	IN	Data Raw: 6e 6b 61 6e 73 65 6e 20 73 70 65 65 64 20 74 72 61 69 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a 88 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 38 38 22 2c 22 6e 61 6d 65 22 3a 22 6c 69 67 68 74 20 72 61 69 6c 22 2c 22 74 61 67 73 22 3a 22 72 61 69 6c 77 61 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a 82 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 38 32 22 2c 22 6e 61 6d 65 22 3a 22 6c 6f 63 6f 6d 6f 74 69 76 65 22 2c 22 74 61 67 73 22 3a 22 65 6e 67 69 6e 65 20 72 61 69 6c 77 61 79 20 73 74 65 61 6d 20 74 72 61 69 6e 22 2c 22 66 69 74 7a Data Ascii: nkansen speed train","fitzpatrick":"n/a","section":"travel"},{"ch":"","code":"1f688","name":"light rail","tags":"railway","fitzpatrick":"n/a","section":"travel"},{"ch":"","code":"1f682","name":"locomotive","tags":"engine railway steam train","fitz
2023-07-21 16:50:51 UTC	6075	IN	Data Raw: 3a 22 6f 70 74 69 63 61 6c 20 64 69 73 6b 22 2c 22 74 61 67 73 22 3a 22 63 64 20 63 6f 6d 70 75 74 65 72 20 64 69 73 6b 20 6f 70 74 69 63 61 6c 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 93 80 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 63 30 22 2c 22 6e 61 6d 65 22 3a 22 64 76 64 22 2c 22 74 61 67 73 22 3a 22 62 6c 75 2d 72 61 79 20 63 6f 6d 70 75 74 65 72 20 64 69 73 6b 20 64 76 64 20 6f 70 74 69 63 61 6c 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 93 bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 66 63 22 2c 22 6e 61 6d 65 22 3a 22 76 69 64 Data Ascii: :"optical disk","tags":"cd computer disk optical","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4c0","name":"dvd","tags":"blu-ray computer disk dvd optical","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4fc","name":"vid
2023-07-21 16:50:51 UTC	6091	IN	Data Raw: 34 22 2c 22 6e 61 6d 65 22 3a 22 6c 6f 74 69 6f 6e 20 62 6f 74 74 6c 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9b 8e 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 63 65 22 2c 22 6e 61 6d 65 22 3a 22 62 65 6c 6c 68 6f 70 20 62 65 6c 6c 22 2c 22 74 61 67 73 22 3a 22 62 65 6c 6c 20 62 65 6c 6c 68 6f 70 20 68 6f 74 65 6c 22 2c 22 68 61 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9b 8e ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 63 65 22 2c 22 6e 61 6d 65 22 3a 22 62 65 6c 6c 68 6f Data Ascii: 4","name":"lotion bottle","tags":"","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f6ce","name":"bellhop bell","tags":"bell bellhop hotel","hasAlt":true,"fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f6ce","name":"bellho
2023-07-21 16:50:51 UTC	6107	IN	Data Raw: 65 6e 20 68 65 61 72 74 22 2c 22 74 61 67 73 22 3a 22 67 72 65 65 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 99 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 39 39 22 2c 22 6e 61 6d 65 22 3a 22 62 6c 75 65 20 68 65 61 72 74 22 2c 22 74 61 67 73 22 3a 22 62 6c 75 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 9c 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 39 63 22 2c 22 6e 61 6d 65 22 3a 22 70 75 72 70 6c 65 20 68 65 61 72 74 22 2c 22 74 61 67 73 22 3a 22 70 75 72 70 6c 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c Data Ascii: en heart","tags":"green","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f499","name":"blue heart","tags":"blue","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f49c","name":"purple heart","tags":"purple","fitzpatrick":"n/a",
2023-07-21 16:50:51 UTC	6123	IN	Data Raw: 63 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 65 75 72 2d 64 65 2d 6c 69 73 22 2c 22 74 61 67 73 22 3a 22 66 6c 65 75 72 2d 64 65 2d 6c 69 73 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 94 b0 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 33 30 22 2c 22 6e 61 6d 65 22 3a 22 4a 61 70 61 6e 65 73 65 20 73 79 6d 62 6f 6c 20 66 6f 72 20 62 65 67 69 6e 6e 65 72 22 2c 22 74 61 67 73 22 3a 22 4a 61 70 61 6e 65 73 65 20 62 65 67 69 6e 6e 65 72 20 63 68 65 76 72 6f 6e 20 67 72 65 65 6e 20 6c 65 61 66 20 74 6f 6f 6c 20 79 65 6c 6c 6f 77 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a Data Ascii: c","name":"fleur-de-lis","tags":"fleur-de-lis","isAlt":true,"fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f530","name":"Japanese symbol for beginner","tags":"Japanese beginner chevron green leaf tool yellow","fitzpatrick":"n/a","section":
2023-07-21 16:50:51 UTC	6132	IN	Data Raw: 22 2c 22 74 61 67 73 22 3a 22 6b 65 79 63 61 70 22 2c 22 68 61 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 37 ef b8 8f e2 83 a3 22 2c 22 63 6f 64 65 22 3a 22 30 30 33 37 2d 32 30 65 33 22 2c 22 6e 61 6d 65 22 3a 22 6b 65 79 63 61 70 3a 20 37 22 2c 22 74 61 67 73 22 3a 22 6b 65 79 63 61 70 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 38 e2 83 a3 22 2c 22 63 6f 64 65 22 3a 22 30 30 33 38 2d 32 30 65 33 22 2c 22 6e 61 6d 65 22 3a 22 6b 65 79 63 61 70 3a 20 38 22 2c 22 74 61 67 73 22 3a Data Ascii: ","tags":"keycap","hasAlt":true,"fitzpatrick":"n/a","section":"symbols"},{"ch":"7","code":"0037-20e3","name":"keycap: 7","tags":"keycap","isAlt":true,"fitzpatrick":"n/a","section":"symbols"},{"ch":"8","code":"0038-20e3","name":"keycap: 8","tags":
2023-07-21 16:50:51 UTC	6148	IN	Data Raw: 9f a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 37 65 38 22 2c 22 6e 61 6d 65 22 3a 22 79 65 6c 6c 6f 77 20 73 71 75 61 72 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 94 88 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 30 38 22 2c 22 6e 61 6d 65 22 3a 22 73 70 65 61 6b 65 72 20 6c 6f 77 20 76 6f 6c 75 6d 65 22 2c 22 74 61 67 73 22 3a 22 73 6f 66 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 94 87 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 30 37 22 2c 22 6e 61 6d 65 22 3a 22 6d 75 74 65 64 20 73 70 65 61 6b 65 72 22 2c Data Ascii: ","code":"1f7e8","name":"yellow square","tags":"","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f508","name":"speaker low volume","tags":"soft","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f507","name":"muted speaker",
2023-07-21 16:50:51 UTC	6164	IN	Data Raw: 63 68 22 3a 22 f0 9f 87 aa f0 9f 87 ac 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 65 61 2d 31 66 31 65 63 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 45 67 79 70 74 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b8 f0 9f 87 bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 38 2d 31 66 31 66 62 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 45 6c 20 53 61 6c 76 61 64 6f 72 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 ac f0 9f 87 b6 22 2c 22 63 6f 64 65 22 3a 22 31 66 Data Ascii: ch":"","code":"1f1ea-1f1ec","name":"flag: Egypt","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f8-1f1fb","name":"flag: El Salvador","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f
2023-07-21 16:50:51 UTC	6180	IN	Data Raw: 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b0 f0 9f 87 b3 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 30 2d 31 66 31 66 33 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 53 74 2e 20 4b 69 74 74 73 20 26 61 6d 70 3b 20 4e 65 76 69 73 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b1 f0 9f 87 a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 31 2d 31 66 31 65 38 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 53 74 2e 20 4c 75 63 69 61 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 Data Ascii: ags"},{"ch":"","code":"1f1f0-1f1f3","name":"flag: St. Kitts & Nevis","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f1-1f1e8","name":"flag: St. Lucia","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
167	192.168.2.5	50015	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5601	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1082 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundarynXw8qTC6a867Gepl Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5602	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6e 58 77 38 71 54 43 36 61 38 36 37 47 65 70 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6e 58 77 38 71 54 43 36 61 38 36 37 47 65 70 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6e 58 77 38 71 54 43 36 61 38 36 37 47 65 70 6c 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarynXw8qTC6a867GeplContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarynXw8qTC6a867GeplContent-Disposition: form-data; name="t"deghsLEKJOGSu-1QvrwgkKX3------WebKitFormBoundarynXw8qTC6a867GeplCont
2023-07-21 16:50:50 UTC	5611	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 26 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:50 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 84b64e659c5848a19b2a836ac3e24848 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
168	192.168.2.5	50016	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5605	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1082 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryvnOvN9P1Zqqxfv37 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5606	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 6e 4f 76 4e 39 50 31 5a 71 71 78 66 76 33 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 6e 4f 76 4e 39 50 31 5a 71 71 78 66 76 33 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 6e 4f 76 4e 39 50 31 5a 71 71 78 66 76 33 37 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryvnOvN9P1Zqqxfv37Content-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryvnOvN9P1Zqqxfv37Content-Disposition: form-data; name="t"deghsLEKJOGSu-1QvrwgkKX3------WebKitFormBoundaryvnOvN9P1Zqqxfv37Cont
2023-07-21 16:50:50 UTC	5626	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:50 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e9e1a22838ed4c2aa5aa7419eb68a222 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
169	192.168.2.5	50017	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5610	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:50 UTC	5630	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Fri, 21 Jul 2023 16:50:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cab00419536c427e9015d844d58a6028 Connection: close
2023-07-21 16:50:50 UTC	5630	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.5	49772	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	1025	OUT	GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_native_desktop~paper_pifs~paper_view_only.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.tXw8zQZf9pvbUGFBhTy9aeUGTRaPB0mEMIoN_T9VyMA.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1564	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 1844 Connection: close Date: Fri, 21 Jul 2023 16:50:34 GMT Last-Modified: Fri, 21 Jul 2023 03:23:56 GMT ETag: "c027cf33b07f6299fa980db7fadf2ffc" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3d994808da6a9ce8c9e7b1364fa689ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: QcO8Bw6FIucL_f0_io9DRDuO_4jw4osWpWh6HcgDR7vP8OMQLQ_UJw==
2023-07-21 16:50:33 UTC	1564	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 58 6d 8f db 36 12 fe 9e 5f e1 43 71 40 1c ac b6 92 6c cb b6 8c 3b 20 69 9a 36 40 52 14 6d 8a a2 9f 04 5a a2 2c 66 69 52 47 52 b1 1d 61 ef b7 df f0 45 d6 8b e5 5d 37 c0 25 40 10 4b 33 c3 79 79 e6 99 a1 ee 93 9c 50 85 c5 0f 9c 29 44 18 16 c9 21 23 6b 94 04 35 a2 64 c7 3c a2 f0 5e c6 29 66 20 b3 c9 88 2c 29 3a c5 39 c5 c7 4d 81 c9 ae 50 f1 2c 2c 8f 9b 92 4b a2 08 67 31 da 4a 4e 2b 85 37 c2 bc f4 37 8a 97 f0 ef 57 8f b0 0c 1f e3 c0 b7 7f 1e ef 93 bc a2 f4 4f 92 a9 a2 39 30 a8 b7 28 7d d8 09 5e b1 cc 4b 39 e5 22 fe 82 c4 4b cf fe 3f 49 a4 42 2c 43 22 4b 92 56 6e ba 39 68 13 71 8a 68 fa 12 8c ff 73 e2 4d 02 bf 3c 4e f5 01 26 ae 37 95 52 9c 35 67 2c 6a ed ba 27 0b 41 d8 03 f8 b5 47 62 47 98 67 9d d5 8a 67 bd f7 ac ac 54 a3 b6 ae Data Ascii: Xm6_Cq@l; i6@RmZ,fiRGRaE]7%@K3yyP)D!#k5d<^)f ,):9MP,,Kg1JN+77WO90(}^K9"K?IB,C"KVn9hqhsM<N&7R5g,j'AGbGggT

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
170	192.168.2.5	50018	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:50 UTC	5629	OUT	GET /paper/comet/post?r=969207706799432086575527&v=2&id=359881680158568536413245&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&xsrf=deghsLEKJOGSu-1QvrwgkKX3&postSeq=2&remark=CLIENT_READY&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:51 UTC	5671	IN	HTTP/1.1 404 Not Found Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:51 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 378827f0-681d-4a3b-aece-3427ec49ac26 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 43 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: c50f826be25f4ea285fd66ddd78e7442 Connection: close
2023-07-21 16:50:51 UTC	5672	IN	Data Raw: 4e 6f 20 73 75 63 68 20 73 6f 63 6b 65 74 2c 20 61 6e 64 2f 6f 72 20 75 6e 6b 6e 6f 77 6e 20 63 68 61 6e 6e 65 6c 20 74 79 70 65 Data Ascii: No such socket, and/or unknown channel type

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
171	192.168.2.5	50019	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:51 UTC	5662	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:51 UTC	5736	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Fri, 21 Jul 2023 16:50:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 66d4021187eb42f7861e9b31e68ccff8 Connection: close
2023-07-21 16:50:51 UTC	5736	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
172	192.168.2.5	50020	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:51 UTC	5864	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:51 UTC	6188	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Fri, 21 Jul 2023 16:50:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9ab163b4cf374cd9bd1a8ecc59c55b07 Connection: close
2023-07-21 16:50:51 UTC	6188	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
173	192.168.2.5	50024	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:51 UTC	5865	OUT	GET /static/img/favicon/favicon-32.png HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:51 UTC	5865	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 497 Connection: close Last-Modified: Fri, 05 Apr 2019 00:05:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:49 GMT Cache-Control: max-age=60 ETag: "ec2e6e18a914b2bae990f7cc9f8cd4dd" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a1822b92cbf5d3516743d4786d5b6020.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: O8V9HL0pMEbsADhpEXC0kEa_klHUQ-MDUQr6Pa0l97ELaheDukzutg== Age: 3
2023-07-21 16:50:51 UTC	5866	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 01 b8 49 44 41 54 78 01 ed 94 81 47 43 51 14 c6 df 32 5a 85 42 50 81 08 01 4a 48 90 82 e9 bd 5a 28 11 42 ed ad 2d 40 49 4b c0 42 14 d9 ae 06 26 20 00 fa 17 1a 40 b6 b7 11 64 19 00 41 08 94 25 76 3a df 63 30 9b 6b d7 7d bb d0 e1 c7 b1 77 ce f7 dd bb 7b ef b1 fe 43 39 92 34 61 1d d0 a3 0f f2 be 46 9c 5c 36 fe 64 08 f8 b9 4b 09 8b 28 14 ac b1 4b 33 6c fe 04 d3 2e 14 fd 1a ed 91 a1 30 8b a7 99 6f 18 49 40 4d 1a 3d ba 76 3d cf bb ae 42 bc 27 d0 83 5e e5 38 a1 21 16 b9 66 7e 21 a8 04 7a 5d ba 81 56 af 97 6c 95 a9 43 44 0b d0 82 a6 34 8e 69 8c 1b ee 99 26 1a 35 d3 f4 b5 e1 d1 31 12 b4 c5 ab 7c 47 71 90 c0 03 5e c6 17 60 f6 08 a4 91 a0 15 33 97 b0 ed 19 e2 09 Data Ascii: PNGIHDR szzIDATxGCQ2ZBPJHZ(B-@IKB& @dA%v:c0k}w{C94aF\6dK(K3l.0oI@M=v=B'^8!f~!z]VlCD4i&51\|Gq^`3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
174	192.168.2.5	50021	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:51 UTC	6026	OUT	GET /paper/comet/channel?v=2&r=473432312466479119456147&id=359881680158568536413245&channel=shortpolling&seq=0&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:51 UTC	6188	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:51 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 71086aeb-cf26-4d9d-bcb1-89907ecc9cb6 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 86 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 8e8a78838ae84306855bbb6b03da76c1 Connection: close
2023-07-21 16:50:51 UTC	6189	IN	Data Raw: 37 33 3a 31 3a 30 3a 7b 22 74 79 70 65 22 3a 22 43 4f 4c 4c 41 42 52 4f 4f 4d 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 44 49 53 43 4f 4e 4e 45 43 54 5f 52 45 41 53 4f 4e 22 2c 22 72 65 61 73 6f 6e 22 3a 31 31 7d 7d 38 3a 32 3a 31 3a 6b 69 6c 6c Data Ascii: 73:1:0:{"type":"COLLABROOM","data":{"type":"DISCONNECT_REASON","reason":11}}8:2:1:kill

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
175	192.168.2.5	50022	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:51 UTC	6131	OUT	GET /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:51 UTC	6189	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:51 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 552ef26737784a21a39d5e8c3805351e Connection: close
2023-07-21 16:50:51 UTC	6189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
176	192.168.2.5	50023	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:51 UTC	6132	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:51 UTC	6191	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:51 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 04c440cd6f414e98934b7c84421f204b Connection: close
2023-07-21 16:50:51 UTC	6191	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
177	192.168.2.5	50025	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:52 UTC	6192	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:52 UTC	6193	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:52 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b7963d660c6f410a9400ac55724f11d4 Connection: close
2023-07-21 16:50:52 UTC	6194	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
178	192.168.2.5	50026	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:52 UTC	6193	OUT	GET /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:52 UTC	6196	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:52 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a9d08ef701b04b25834dc4d05bf056ac Connection: close
2023-07-21 16:50:52 UTC	6196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
179	192.168.2.5	50027	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:52 UTC	6195	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:52 UTC	6197	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:52 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 866c2994184b42caa4c64fb5391dda69 Connection: close
2023-07-21 16:50:52 UTC	6198	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.5	49785	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	1026	OUT	GET /static/fonts/AtlasGrotesk-Bold-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1045	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 78992 Connection: close Date: Fri, 21 Jul 2023 09:04:26 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:19 GMT ETag: "cbda27012ef85af41a43b5f63f8f01de" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: dLJxxoyko9bPa2ef545KhjiGilecA3cotHJ1nnU4orgQLBuGdP4Ifg== Age: 27968
2023-07-21 16:50:33 UTC	1062	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 34 90 00 10 00 00 00 04 95 5c 00 01 34 30 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 9d 74 1c d3 66 06 60 00 95 7c 08 3e 09 82 73 11 0c 0a 86 de 40 86 81 48 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 90 30 07 eb 00 0c 84 54 5b 9c 5b 94 0f ff 36 c6 de 6f 6d a0 86 a0 a8 5a 55 77 7d 8a 98 ec 2d 14 28 f6 3f f0 19 72 8d fd 1a c0 25 6a d9 35 3c 82 5f ab a6 68 f2 2b e8 e9 0a 8b c8 5d 6f 56 ea b8 2c c3 df d6 ec ff ff ff ff ff ff ff 7f 5d 32 11 73 9e e4 e6 24 39 71 1e 92 a6 5f 80 42 7f d6 8d 8d 81 46 e9 41 99 51 bb 9e 9b 92 5a a7 17 6a b9 ed 44 cf 1e 6e 70 90 18 3c 5e 32 3c 88 cc 10 14 66 d9 07 8a 9a e0 d8 38 6a 9b 4a 38 d6 32 07 a3 9d bb 0d 32 02 db 1d 6a ec a7 56 1d 67 f4 69 87 45 35 ea c4 eb 06 14 Data Ascii: wOF24\40tf`\|>s@H46$d 0T[[6omZUw}-(?r%j5<_h+]oV,]2s$9q_BFAQZjDnp<^2<f8jJ822jVgiE5
2023-07-21 16:50:33 UTC	1078	IN	Data Raw: 6a d5 aa 05 50 05 d3 61 ce f4 d2 1b d4 37 42 9a ea 23 d4 b0 7b 32 d0 ca e8 36 4f de 3e 0f c0 54 6a 15 d3 46 f6 b5 36 e3 79 d7 cf 49 d6 21 83 71 91 55 d2 1a 42 91 4c c3 a9 c9 f4 f8 4c b7 ce 35 b3 12 ef f0 92 34 63 1b 05 90 a5 f8 46 db e3 1e 50 d8 cd 79 44 fd ee 36 6e 21 f8 3e 57 06 e9 f1 51 94 9b 99 ae 05 e0 f4 5e 76 b6 3c 37 2e 38 eb 74 d1 3b 33 80 f0 ad 4b d3 f7 73 73 db cd dc 86 e8 16 e3 d0 e7 27 80 6d f2 ef 38 66 49 39 c8 89 2e 4e a1 53 04 d4 ad ea 11 63 18 ea cd 25 99 3e 6b 5f ca 34 14 80 60 a1 e1 3e cd 5f 57 3f 85 7d f4 fd 32 6f 2f 8c e0 a3 66 1f 5d f6 6a 9d fa 08 54 21 14 c6 73 82 af fb 32 e8 fc 17 9a 2e 3b 96 bd 78 91 29 47 a8 6b f1 14 6a c3 76 71 e6 98 ba 04 31 2d d5 29 c5 dc 46 c4 7d 3b 5d 51 f0 d5 77 49 3b fd f7 80 64 f8 8c f0 07 4d ba 34 fa 64 Data Ascii: jPa7B#{26O>TjF6yI!qUBLL54cFPyD6n!>WQ^v<7.8t;3Kss'm8fI9.NSc%>k_4`>_W?}2o/f]jT!s2.;x)Gkjvq1-)F};]QwI;dM4d
2023-07-21 16:50:33 UTC	1158	IN	Data Raw: 62 1a d3 9a 2e e9 91 7e 4a bf a5 ff 88 71 b4 6c 7e 15 37 41 ff 76 50 ea b8 3b 83 89 84 87 1b cc 55 05 67 e5 cf 28 2a ab 51 18 27 fc 24 3e ed f9 17 4a 49 a8 1c 29 14 7a 40 16 ed 5b 77 63 f2 e8 37 f6 23 9a 1b 59 fd 1d c4 e1 b5 fa 2f fb 7f bf 8a 0e fc f6 ec ef 3a c0 6f a6 05 bf bc 0c 00 bf 5c fe 51 08 f0 cb 15 1e 3a df e6 00 f8 ed 02 6b 15 2d 04 05 fd e6 1b 6b cc fc 74 b2 74 76 7a cc 7f f6 11 a1 e0 a7 ef 03 00 e8 27 7c ca 1b 80 00 00 df 0c be f6 01 c0 66 3b d6 71 ae f8 f8 03 00 50 c2 d6 e5 b2 01 90 19 6e 8d 84 31 5d 17 88 28 5c a4 38 09 a1 0f 4d 8a 4c d9 d8 f2 14 e0 2a c2 57 a7 68 cd 74 bc 79 14 3b 00 b7 9f 06 ee ec 83 3b fb f4 b9 00 8f cf 92 e5 05 9f a7 66 ea 02 2d 1d 3d 23 00 b8 f3 06 66 30 43 5d b7 b2 81 ba 01 dc 79 16 e0 96 89 55 3d a2 cc b0 b6 43 6c 9a Data Ascii: b.~Jql~7AvP;Ug(Q'$>JI)z@[wc7#Y/:o\Q:k-kttvz'\|f;qPn1](\8MLWhty;;f-=#f0C]yU=Cl
2023-07-21 16:50:33 UTC	1213	IN	Data Raw: 6a ec 69 ea ae b6 7a d5 9f 20 60 f8 b5 10 db 0d 55 82 4a ae a2 b3 4f 61 0c b3 6f d0 cb 2f 74 6a 93 55 f2 9e b8 b5 20 05 89 2e 61 38 90 77 4c 02 32 1e 21 a4 d5 d5 14 29 27 1a 0f 1f bd 7e e0 4a 9d 87 17 31 6f 68 0c 85 56 9d 6a ab 0c ac a7 ae c2 9a 09 91 bd 94 6f 11 3d c5 71 84 40 2a 06 17 ab fb d2 54 09 c7 1d 5a e3 80 a6 ac 96 52 0c 16 02 83 40 6e 55 77 39 57 52 3b e1 d3 24 12 7c 9d 65 27 2f bc a3 a0 c5 ae 8e 10 cb 1f 31 18 f2 47 08 31 d9 86 9b 11 5f 26 db 71 aa 2b 1c 2f 03 0d 0f a7 7e 73 c1 41 97 30 b5 13 be ae d6 3e c8 af d8 8e 28 88 d8 7a 92 51 23 19 31 e7 b1 f0 8a f1 73 0f b5 8b 2c d4 fe 78 d4 10 ff fa 43 9d 0d e7 a3 0b 46 5e 34 06 85 67 a3 15 d5 55 89 1f 64 5f dc 47 e7 41 96 04 a4 8f f6 a9 56 d9 79 7c 8b 08 16 1e bd c4 52 26 5c 7b bc d6 00 3b bd 86 00 Data Ascii: jiz `UJOao/tjU .a8wL2!)'~J1ohVjo=q@*TZR@nUw9WR;$\|e'/1G1_&q+/~sA0>(zQ#1s,xCF^4gUd_GAVy\|R&\{;
2023-07-21 16:50:33 UTC	1229	IN	Data Raw: d0 99 a6 de 04 47 fb 32 09 c2 d9 be 37 70 4e f1 74 b8 e2 20 2b 41 70 40 0b c8 97 4c d5 7d e5 fd 30 6f 31 2b c6 60 82 00 68 f5 1b e8 89 46 47 38 00 79 97 e8 9f c9 a8 8f 04 21 26 48 d8 d2 8e 4e 20 3a 5e 33 10 7e 90 8e 4f 36 20 97 1b c9 f3 e3 77 da 26 1e a9 53 81 62 81 00 77 d9 fb 4c d2 c4 31 ed e0 63 0f 9c d1 48 83 c3 bb 3c c9 4c aa a8 95 d6 25 9d 16 98 36 fa 3b df 1c f1 c9 35 19 85 bd 70 40 1f 2c df 76 12 20 23 0b 53 d4 a8 c7 0f 13 8d 6b 1c f8 cb ea 74 e0 e4 7e b1 cd 84 49 16 d2 60 1d 8d 55 09 92 7d f5 e5 d3 4a f2 f2 aa 97 4c a8 ea a8 11 27 8d 08 d1 05 e5 94 33 f7 0b 4b cd 29 74 3f de 9e 83 ad 6d e7 63 ad 9a 9f 38 61 1f 5a c6 b3 22 9c 1b 7f 42 cd 04 23 92 dc 77 4d 96 b0 37 d0 14 0b 7b b9 2b f1 49 d4 ec 04 82 f1 6a 05 23 fa cb 6d 23 aa 01 d5 8d 22 89 5e a9 Data Ascii: G27pNt +Ap@L}0o1+`hFG8y!&HN :^3~O6 w&SbwL1cH<L%6;5p@,v #Skt~I`U}JL'3K)t?mc8aZ"B#wM7{+Ij#m#"^

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
180	192.168.2.5	50029	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:53 UTC	6199	OUT	GET /paper/emoji/count?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:53 UTC	6215	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:53 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:53 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/count X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 5cbfdee6-ac7a-42fc-919b-57bb7e3febb9 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 29 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 2aa03e1efd964858a2ed27be7619d287 Connection: close
2023-07-21 16:50:53 UTC	6217	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 22 3a 33 38 33 38 7d Data Ascii: {"success":true,"count":3838}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
181	192.168.2.5	50028	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:53 UTC	6200	OUT	GET /paper/log/connection-diagnostic-info?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:53 UTC	6203	IN	HTTP/1.1 403 Forbidden Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:53 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:53 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 9cdd6e8b-fba1-4607-ac8b-fbb14469e25d X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 9 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 63271630f77a47c2bd612502c779d254 Connection: close
2023-07-21 16:50:53 UTC	6204	IN	Data Raw: 46 6f 72 62 69 64 64 65 6e Data Ascii: Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
182	192.168.2.5	50031	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:53 UTC	6200	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:53 UTC	6201	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:52 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d85dd63bbb9a4da1af8f4dd19bf135f9 Connection: close
2023-07-21 16:50:53 UTC	6201	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
183	192.168.2.5	50034	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:53 UTC	6204	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:53 UTC	6208	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:53 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 129d00e165014c628e8c7f5f91f8e84c Connection: close
2023-07-21 16:50:53 UTC	6208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
184	192.168.2.5	50033	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:53 UTC	6204	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 828 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:53 UTC	6205	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 74 69 6d 65 5f 74 6f 5f 66 69 72 73 74 5f 62 79 74 65 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 74 69 6d 65 5f 74 6f 5f 66 69 72 73 74 5f 62 79 74 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-time_to_first_byte%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-time_to_first_byte%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22%3Anull%2C%5
2023-07-21 16:50:53 UTC	6209	IN	HTTP/1.1 204 No Content Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:53 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 12b5ed8a67f747db8cfb04521b36f973 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
185	192.168.2.5	50032	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:53 UTC	6206	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 332 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:53 UTC	6207	OUT	Data Raw: 1f 8b 08 00 fd 35 bb 64 00 ff 65 51 d1 8e da 30 10 fc 95 ca cf 11 4a 20 45 90 c7 a6 54 f0 50 40 d7 bb d2 0a a1 c8 b5 37 c9 8a b0 8e bc 4e 10 3d f1 ef 6c 0a 54 95 fa 64 79 66 76 ec 99 dd bf ab 22 5c 5a 50 99 82 1e 28 a8 e8 71 66 6a 0f 54 1d 3e 58 64 e3 88 c0 04 b0 42 b6 de b5 e0 03 02 ab ec 5d 51 77 7a 63 f0 bc a1 ad b6 2a 1b 47 03 92 3f e5 ff 52 71 a4 90 f3 c6 75 f6 b3 33 2a 0b be 83 48 d5 9a df 88 75 0f 36 af 35 55 83 67 a9 1b 16 c6 95 65 83 04 0b d2 bf 1a 79 f7 09 23 61 40 dd e0 6f b0 3b 0c f5 57 64 fe 7f 96 20 9c 9d 3f 6e 68 70 f8 8b 7a d0 ec 48 62 7d 72 2e 3c be 88 8e 5e fe c0 a3 15 f5 62 6b 7f b0 2f 5f dd 11 48 92 1a 1d a0 72 fe 32 34 43 d5 3d ba ed 4c 78 bd b7 b5 d5 d2 83 a0 a4 7b ac f4 60 c5 05 23 19 28 18 98 e5 5a b4 ba 82 a2 71 43 fa 24 52 01 4f Data Ascii: 5deQ0J ETP@7N=lTdyfv"\ZP(qfjT>XdB]QwzcG?Rqu3Hu65Ugey#a@o;Wd ?nhpzHb}r.<^bk/_Hr24C=Lx{`#(ZqC$RO
2023-07-21 16:50:53 UTC	6212	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:53 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:53 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 92170eda-a44c-4f45-a3e4-670e654d7d20 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 5e342e061da343729a7a5dda4fab1d75 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
186	192.168.2.5	50035	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:53 UTC	6214	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 309 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:53 UTC	6215	OUT	Data Raw: 1f 8b 08 00 fd 35 bb 64 00 ff 4d 90 41 6b f2 40 10 86 ff 4a 99 73 90 4d aa d6 e4 d6 a6 2d f6 62 03 9f b5 94 f2 11 96 dd 69 b2 a0 bb b2 3b 1b 11 f1 bf 3b 1b 3d 78 08 61 26 93 77 9e 67 7e 4f d0 d2 71 8f 50 01 0e 68 09 b2 db bb 82 8d c1 c3 43 23 3b e4 de de bb 3d 7a 32 18 a0 3a 81 8d bb af 80 3e 7c da 46 6a a8 8a 2c 75 6a 67 2d 2a 42 7d ff 49 64 60 42 bd 75 51 bf 3a 05 15 f9 88 1c c6 99 2b b9 1b 77 6a 43 ce f3 02 1d bd 24 e3 2c 54 b9 98 88 7c 9e a6 f4 07 27 40 68 ea e1 6d b5 f8 39 6c fe fd 2d fb 5c 2c 57 3b f5 ce 7f a8 5e 7a c9 fb 7c ed 62 e2 cd 9f 66 19 1c 9c d7 b7 ba 28 ef ca 97 e3 ba 37 21 91 8d 4c 8c fb 1c a9 77 9e 75 a6 1c 25 09 3b e7 8f bc cd 58 62 fb 04 32 4a eb a8 68 7d 3d 4f 23 f9 02 dc b5 72 30 dd c8 1a da 60 ac c2 36 60 08 5c b6 c9 ab dd ba e4 9d Data Ascii: 5dMAk@JsM-bi;;=xa&wg~OqPhC#;=z2:>\|Fj,ujg-*B}Id`BuQ:+wjC$,T\|'@hm9l-\,W;^z\|bf(7!Lwu%;Xb2Jh}=O#r0`6`\
2023-07-21 16:50:54 UTC	6217	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:54 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:54 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 443e6bed-dcbb-4171-b91f-17aaac6d4d55 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 71168f7bb9f342e4b4706a8e75deffc4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
187	192.168.2.5	50036	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:54 UTC	6217	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:54 UTC	6219	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:53 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3bb3e06f131c4a7788beaa224d62487e Connection: close
2023-07-21 16:50:54 UTC	6219	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
188	192.168.2.5	50037	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:54 UTC	6221	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:54 UTC	6223	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:54 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bb82479fcef648a4901a03674664c7f8 Connection: close
2023-07-21 16:50:54 UTC	6224	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
189	192.168.2.5	50038	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:54 UTC	6221	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1083 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryShh3b48nSBfmvdaC Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:54 UTC	6222	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 68 68 33 62 34 38 6e 53 42 66 6d 76 64 61 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 68 68 33 62 34 38 6e 53 42 66 6d 76 64 61 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 68 68 33 62 34 38 6e 53 42 66 6d 76 64 61 43 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryShh3b48nSBfmvdaCContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryShh3b48nSBfmvdaCContent-Disposition: form-data; name="t"deghsLEKJOGSu-1QvrwgkKX3------WebKitFormBoundaryShh3b48nSBfmvdaCCont
2023-07-21 16:50:54 UTC	6225	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 15 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:54 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bbe3730a01ec4cd38401405ba0959b59 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.5	49788	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:33 UTC	1026	OUT	GET /static/fonts/AtlasGrotesk-BoldItalic-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1027	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 87400 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:23 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:33 GMT Cache-Control: max-age=43200 ETag: "ee4a8e042003216a751b343365276deb" Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 7eb9eadda041aaab1056a6a0f8080462.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: BSx_FHk0_T13J0U8l88Qup2xkWUBZyDaEI_L2lLDUE_IH7TfiiY6nw== Age: 7095
2023-07-21 16:50:33 UTC	1029	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 55 68 00 10 00 00 00 04 c2 ac 00 01 55 07 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 dc 40 1c ce 64 06 60 00 8c 02 08 3e 09 82 73 11 0c 0a 87 89 00 86 a8 60 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 90 6f 07 eb 00 0c 84 54 5b 43 87 94 0c 5f 8d e7 f6 6d 35 ee 53 57 e6 83 69 a0 73 88 49 a2 93 2a b0 0a b0 ff 5a 77 68 36 c4 47 3c db 38 92 d5 8e 11 ae 1c 90 aa 95 c7 cf a0 3a d6 72 f6 00 46 54 e7 d8 66 74 90 ec 75 44 f2 ec ff ff ff ff ff ff ff 95 c9 44 6c 7a 3a 13 c9 72 e2 3c 10 be 24 85 bf d0 c2 36 ba 75 1b 94 58 8c d1 35 99 c5 b2 ca 24 1a ea c6 2b a8 43 49 6b b4 aa ac 93 f3 45 9f 96 ab 52 34 6b 52 6d 10 ab 2a a1 de 22 19 55 1d 98 f1 1c a0 c1 e3 b4 22 6f c9 c4 80 11 71 8e dd 7e 8d ce 89 0d 30 31 Data Ascii: wOF2UhU@d`>s`46$d oT[C_m5SWisIZwh6G<8:rFTftuDDlz:r<$6uX5$+CIkER4kRm"U"oq~01
2023-07-21 16:50:33 UTC	1046	IN	Data Raw: 6c 3a 62 c3 11 e7 bb be 7f b7 c0 2f 46 ca 72 7d 3c dd 3c cd 51 20 9e cd e6 b2 2e da ce 6e 0f 97 fe 49 86 69 63 e5 4e 56 4a 1f f0 9c 46 a2 a3 1e ef 41 70 b1 c4 6f 3f 56 20 41 ac 6b 5e 12 7e e8 a0 c4 3f 5c 8c bb d4 62 80 98 82 48 38 e5 0e 81 fb bd 67 5d eb ca 8d 7c 20 66 91 df b6 a1 08 51 c4 f4 92 6b 22 a6 99 02 95 ed 8f 35 d0 97 46 2f bc 44 ed ad a7 70 af 94 4a fc a7 12 68 f7 96 b0 17 d7 6e fa 1b 9c f0 5f 30 13 65 84 94 2a 9e 3c 69 bf f1 9a b6 c3 f0 ac 03 dd 96 75 1d 1b 6f ea c7 12 e9 57 68 10 73 2d 9d 9d 60 58 e0 7d c9 b2 9e 81 01 25 e6 2a 49 df ba 1a 44 17 13 72 e2 b7 2f 95 ce 9f 21 ef d0 4c b7 87 f0 29 a4 68 aa 93 c2 4e 65 fd c6 7e ff 32 b0 ef de 66 ee d4 92 7e f9 6f 2b b9 81 3f e4 9c ec 83 cd fa b7 fb 80 6f 59 2a ce 9d 2d 93 92 ac f5 5a a2 cc e0 e7 ee Data Ascii: l:b/Fr}<<Q .nIicNVJFApo?V Ak^~?\bH8g]\| fQk"5F/DpJhn_0e<iuoWhs-`X}%IDr/!L)hNe~2f~o+?oY*-Z
2023-07-21 16:50:33 UTC	1094	IN	Data Raw: 61 6c a7 db 03 ff 3e 18 d8 32 f5 c7 47 d3 94 1f e2 41 77 0a cd 86 d2 aa 28 2c f3 71 33 8a 71 05 00 98 8d d9 45 44 fb d9 3e b0 62 9d 2a 0b c1 ff 76 7a 7e 51 64 20 e5 7a 1f de 6a 36 a4 4c ab 0f fe c5 37 60 99 79 3e 4a 59 f3 6a 58 3c 5c d9 ae e6 d8 60 5b f4 1f 20 2f a4 d6 eb 60 53 47 20 01 85 9d 38 f2 92 d4 3a 45 be 81 69 1b 5c 56 fe 25 e0 bf 4b ad 39 09 d9 3a a8 f9 56 a9 fb 71 19 85 8e 4c fd ad 96 40 a4 10 06 e3 87 2a 4e a1 b8 c0 99 78 82 da a8 e8 af 14 09 27 d9 66 35 97 a8 44 d9 bf 3b f4 31 9c d7 98 aa d4 b3 6a bd 7a b9 b7 4f 86 fe 92 ac 56 b7 3f c9 a7 e1 4e 3f ba 92 bb 04 f3 95 96 f2 f3 5d c4 24 95 6e 75 37 e9 41 ae 6b fa c9 00 04 fa f7 f1 3e 71 6a 1c 0c 41 d1 86 ab dd b4 c0 e5 5c 02 f3 57 d3 5e 75 87 9f dd 1d 06 19 02 e1 e7 fc c9 ea 7c cd e0 0a 29 0a 6f Data Ascii: al>2GAw(,q3qED>bvz~Qd zj6L7`y>JYjX<\`[ /`SG 8:Ei\V%K9:VqL@Nx'f5D;1jzOV?N?]$nu7Ak>qjA\W^u\|)o
2023-07-21 16:50:33 UTC	1126	IN	Data Raw: 6c 3a 95 68 f3 b2 70 e6 95 13 40 d7 5b 4a 2f a9 3d 89 7c 7f dd bd 57 6f d6 04 5d 1c bb 69 39 a8 98 b5 75 62 0f ed ff 45 46 3d c9 7e a5 16 5b 29 22 b3 02 6f c7 b3 8b 8b 7d f4 36 62 80 2c 36 0a 6f 25 14 e0 a5 57 90 02 1f f4 f2 4d 84 42 b2 19 73 b1 32 bf f0 91 b0 c7 26 fe 47 fb bc 47 9b 4f 7d 28 fa 26 b6 16 0e 15 c3 49 1b b1 93 6a ea 97 b9 ac 7e 12 fe 17 4f 7a b5 8e 18 c3 4d 54 de 8a c7 35 07 39 4d a1 cc bd 1f 4f 0a b1 df ba eb c7 cb da fb d1 9a 30 eb da d9 f6 9d 9e 9c bb 39 39 97 b9 9c 7b 3c ec cd 38 dd eb ed ac 63 a7 88 fd cf 32 8f b6 33 8f 9e 26 f5 3f ab 7b fb 2b b1 ef 97 08 74 9a b0 d0 b8 bf 41 70 7b 13 b3 08 cc 7e 75 61 db 93 6c 1f 99 44 57 c0 51 72 8a d3 0b 94 fb 60 f6 c1 67 2e f4 bc cf 6f 56 95 e9 53 b2 43 66 55 82 a4 68 8e 1c 35 a5 ad c7 d6 19 fb d6 Data Ascii: l:hp@[J/=\|Wo]i9ubEF=~[)"o}6b,6o%WMBs2&GGO}(&Ij~OzMT59MO099{<8c23&?{+tAp{~ualDWQr`g.oVSCfUh5
2023-07-21 16:50:33 UTC	1174	IN	Data Raw: 77 24 57 c6 e3 81 ce b4 03 95 7d 7f 9f 3a c4 8b 17 22 ea 54 29 e4 90 c2 82 37 6a e7 b3 55 f5 62 e9 ba 41 f9 dc 86 bf fc b9 fe 76 45 84 c3 54 51 7c a3 f5 22 84 c2 3b 70 fc 30 0d 6e 4f 56 7c db 3d a1 af 0f 4b 9c 71 6d 38 d7 ca f6 c8 f5 0b 0e 01 86 34 9f 12 dc bb 96 d3 e6 8d a5 d2 e3 65 13 c1 bb 14 0c 28 a5 0c b3 db d0 38 c4 79 c4 dd b9 54 b6 b7 b9 b5 85 1d dd f8 b6 b5 c5 09 63 21 50 09 c4 e5 2f 8a b0 29 9d 80 f3 20 ae 39 cd 45 7d 17 2e 66 9d 30 fc 56 fa 1c a2 2d 2a 04 46 65 84 bc 5c aa 70 a9 8c e2 af eb 30 d6 8d c7 ae cc fb 35 dc ce 43 2d d9 a2 bc ee e4 bc 1e ad 28 ec cf b8 56 95 c7 74 43 b2 d7 ae 7c 3e e7 1a c6 04 1d 37 0f 95 c4 90 ed 06 6b 5e 5e 93 f1 38 25 b7 d1 1c 0c 99 8a d9 54 87 22 24 db 32 cd 1b ab ab b6 02 98 b6 83 55 32 93 b1 81 f9 8d 98 8e 1f c7 Data Ascii: w$W}:"T)7jUbAvETQ\|";p0nOV\|=Kqm84e(8yTc!P/) 9E}.f0V-*Fe\p05C-(VtC\|>7k^^8%T"$2U2
2023-07-21 16:50:33 UTC	1206	IN	Data Raw: e5 24 a8 d2 73 72 1b 53 f2 8b 80 a2 fe 9e 5f d6 22 7d d9 4a 6c 73 65 79 30 38 2f 6f 5b bc 4e 82 fe 5d 45 00 90 5e 1f bf ff bf af 9c 3f 75 e6 b7 01 80 13 ff f8 07 00 be 7d bb f1 d9 34 79 d8 94 89 f4 56 c2 04 18 20 c0 58 7d 62 30 39 e9 86 ef 50 97 59 b3 df d0 f7 69 27 cb 9d 65 bb bd fe 1f 8f 3f 78 a8 03 52 8b a2 56 b3 fa fe d3 72 74 f0 50 14 7a 26 7d e7 35 ba bb cd 7a c7 bc 6f ca 51 19 2f 4b a6 6e 6d 4e d7 2a 0d ec b4 2b b3 50 ce e2 d8 e7 c1 bb 28 5d f6 48 64 61 42 8b 52 90 30 7b e2 f7 c3 4c 55 cd 4d 9f 8e e7 9f b2 49 73 4b d9 76 81 db 08 4b c2 79 62 e0 31 4e 5f 9c da b8 38 0c a2 02 10 2f 71 60 8b 1c c4 69 80 ab 0a e7 25 2e 21 03 e3 71 d4 f4 6f c0 42 8c a1 26 ae 31 1c f5 d2 bb 09 bc e0 4c b6 15 9e 34 34 8a 8f 82 42 9e 25 a4 57 30 3c 22 db e7 95 07 7c 0f ea Data Ascii: $srS_"}Jlsey08/o[N]E^?u}4yV X}b09PYi'e?xRVrtPz&}5zoQ/KnmN*+P(]HdaBR0{LUMIsKvKyb1N_8/q`i%.!qoB&1L44B%W0<"\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
190	192.168.2.5	50039	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:55 UTC	6228	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:55 UTC	6228	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:54 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4e6ed27e2e6f401487da6283d69411ba Connection: close
2023-07-21 16:50:55 UTC	6229	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
191	192.168.2.5	50040	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:55 UTC	6230	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:55 UTC	6231	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:55 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3f3317b1bb7a48d8986b43165a629ff6 Connection: close
2023-07-21 16:50:55 UTC	6231	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
192	192.168.2.5	50041	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:55 UTC	6232	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:56 UTC	6233	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:55 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 256e7d53d2d6445bbf375fe2a59c85a8 Connection: close
2023-07-21 16:50:56 UTC	6233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
193	192.168.2.5	50042	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:56 UTC	6235	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:57 UTC	6237	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:56 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9034121b76c0480ba780e63eb5c303f4 Connection: close
2023-07-21 16:50:57 UTC	6237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
194	192.168.2.5	50043	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:56 UTC	6235	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 343 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:56 UTC	6236	OUT	Data Raw: 1f 8b 08 00 00 36 bb 64 00 ff cd 51 c1 6e e2 30 10 fd 15 e4 73 02 09 65 b3 90 4b 0f 69 2b 56 aa 28 12 dd ae 2a 84 22 cb 19 12 4b c9 38 d8 e3 b4 2c e2 df 99 08 da dd 63 7b e3 e4 cc bc 99 97 f7 e6 ad 0f 22 a7 7d 0b 22 15 d0 01 92 08 2e 6f 2a d6 80 e5 66 a0 6a e3 8b b0 30 ca 85 28 3b 5d 4a d2 06 79 aa b5 a6 05 4b 1a 9c 48 0f 02 7d f3 db 81 75 4f b8 94 85 48 c7 41 df c9 0c 22 28 82 e2 7f 28 0a 84 76 59 4f 7a 67 94 48 c9 7a 08 84 23 49 9e 89 fa 0f db 6b f0 b6 e6 aa 22 6a 5d 3a 1a 35 9d a9 01 8d fc 2b 77 06 ac e7 9f e2 50 99 66 74 eb f5 6e a7 61 6b 79 43 49 82 d2 d8 7d 6f 04 cb b3 c0 c2 2b 7a 3e 9b 5b 4a 56 cb dd 7f 1e 5c ee 34 2a c8 1d 38 c7 65 de ca 12 f2 da f4 1a e3 40 90 6e 78 2d 4e a6 b3 d9 2c 4a 7e 24 c3 9b 24 61 4e 59 fc 62 5c b8 65 d6 dd 2f a6 af 6f 2f Data Ascii: 6dQn0seKi+V("K8,c{"}".ofj0(;]JyKH}uOHA"((vYOzgHz#Ik"j]:5+wPftnakyCI}o+z>[JV\4*8e@nx-N,J~$$aNYb\e/o/
2023-07-21 16:50:57 UTC	6238	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:56 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:56 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 6f87c7f3-1905-447c-aa9d-bf113f0d251f X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: f875bd299b064aada601b8d0c98e9178 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
195	192.168.2.5	50044	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:57 UTC	6240	OUT	GET /?uiqqiefr HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:57 UTC	6241	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=pkGSWwmWSwTI; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; path=/; samesite=none; secure; httponly location: /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 Date: Fri, 21 Jul 2023 16:50:57 GMT Connection: close Transfer-Encoding: chunked
2023-07-21 16:50:57 UTC	6242	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
196	192.168.2.5	50046	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:57 UTC	6241	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:57 UTC	6244	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:50:56 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dc548e63f3eb4365b473181ca77c54f1 Connection: close
2023-07-21 16:50:57 UTC	6244	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
197	192.168.2.5	50045	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:57 UTC	6242	OUT	GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU
2023-07-21 16:50:57 UTC	6245	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 8dc292c1-3d03-45b0-82dc-1d68fcd11a00 x-ms-ests-server: 2.1.15811.7 - SCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+chi"}]} x-ms-clitelem: 1,50168,0,, nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: fpc=ArQjXTss-z9PuVNWIVMS0rs; expires=Sun, 20-Aug-2023 16:50:57 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Fri, 21 Jul 2023 16:50:57 GMT Connection: close content-length: 20676 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:50:57 UTC	6247	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head> <title>Redirecting</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" conten
2023-07-21 16:50:57 UTC	6261	IN	Data Raw: 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 21 24 29 7b 76 61 72 20 65 3d 6e 65 77 20 76 2e 24 4c 6f 61 64 65 72 3b 65 2e 41 64 64 49 66 28 21 76 2e 6a 51 75 65 72 79 2c 79 2e 73 62 75 6e 64 6c 65 2c 22 57 65 62 57 61 74 73 6f 6e 5f 44 65 6d 61 6e 64 53 75 70 70 6f 72 74 22 29 2c 79 2e 73 62 75 6e 64 6c 65 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 79 2e 73 62 75 6e 64 6c 65 2c 65 2e 41 64 64 49 66 28 21 76 2e 24 41 70 69 2c 79 2e 66 62 75 6e 64 6c 65 2c 22 57 65 62 57 61 74 73 6f 6e 5f 44 65 6d 61 6e 64 46 72 61 6d 65 77 6f 72 6b 22 29 2c 0a 79 2e 66 62 75 6e 64 6c 65 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 79 2e 66 62 75 6e 64 6c 65 2c 65 2e 41 64 64 28 79 2e 62 75 6e 64 6c 65 2c 22 57 65 62 57 61 74 73 6f 6e 5f 44 65 6d 61 6e 64 4c 6f 61 64 65 64 22 Data Ascii: {function e(){if(!$){var e=new v.$Loader;e.AddIf(!v.jQuery,y.sbundle,"WebWatson_DemandSupport"),y.sbundle=null,delete y.sbundle,e.AddIf(!v.$Api,y.fbundle,"WebWatson_DemandFramework"),y.fbundle=null,delete y.fbundle,e.Add(y.bundle,"WebWatson_DemandLoaded"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
198	192.168.2.5	50047	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:58 UTC	6267	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_Idq2Hj-dVynnBd7zEp44UQ2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; fpc=ArQjXTss-z9PuVNWIVMS0rs; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2023-07-21 16:50:58 UTC	6269	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:50:58 GMT Content-Type: application/x-javascript content-length: 138680 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 28 Jun 2023 03:12:44 GMT ETag: 0x8DB77858AAB8576 x-ms-request-id: d5e0ff41-701e-0058-045b-b90c51000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165058Z-8esm33d6hp6v13nevpem49fy5s00000006tg00000001dc96 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:50:58 UTC	6270	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 7b 5f e3 38 d2 30 fa ff f3 29 82 77 0f 63 4f 4c c8 05 68 70 70 e7 4d 03 dd cd 0c b7 21 61 7a 66 69 96 9f 93 08 70 77 62 67 6d 07 9a 09 79 3f fb a9 8b 64 cb 8e 43 f7 ec 73 7e 67 2e c1 96 4a b2 54 aa 2a 55 95 4a d2 e6 cf 6b ff 53 f9 b9 b2 f1 e3 ff 54 7a fd ee 65 bf 72 fe be d2 ff 78 7c 79 58 b9 80 b7 3f 2b 67 e7 fd e3 83 a3 1f af 07 3f 8a ff f7 1f fc b8 72 e7 8f 45 05 fe 0e bc 58 8c 2a 61 50 09 a3 8a 1f 0c c3 68 1a 46 5e 22 e2 ca 04 7e 23 df 1b 57 ee a2 70 52 49 1e 44 65 1a 85 5f c4 30 89 2b 63 3f 4e a0 d0 40 8c c3 a7 8a 09 d5 45 a3 ca 85 17 25 cf 95 e3 0b ab 06 f5 0b a8 cd bf f7 03 28 3d 0c a7 cf f0 fc 90 54 82 30 f1 87 a2 e2 05 23 aa 6d 0c 2f 41 2c 2a b3 60 24 a2 ca d3 83 3f 7c a8 9c fa c3 28 8c c3 bb a4 12 89 a1 f0 1f Data Ascii: {_80)wcOLhppM!azfipwbgmy?dCs~g.JTUJkSTzerx\|yX?+g?rEXaPhF^"~#WpRIDe_0+c?N@E%(=T0#m/A,*`$?\|(
2023-07-21 16:50:58 UTC	6285	IN	Data Raw: b7 9d a4 26 e8 6c 28 c4 74 e1 94 21 a2 ca 6d 3a 0b fc 58 92 91 89 87 fb b5 c7 40 45 63 37 02 bc 9b d6 a2 36 80 a9 9c ae 75 c2 93 b1 32 82 4c 6a a1 b0 1c 84 40 e2 88 6b 30 53 69 07 94 94 5e 11 2e d4 4d 22 d9 09 b0 ea 6c b3 f4 b8 30 d1 31 f1 92 56 50 27 6c bc 5f 55 e0 e9 20 e7 c4 24 31 dd 17 8b a7 be 8b f4 ca 89 b8 13 f0 59 ca 32 03 14 15 3c 01 a9 13 60 05 6e e2 04 78 55 8f 23 8f 53 8a d6 d7 23 ae f0 78 b4 be 4e 2d e6 8b 57 e6 94 48 ca a6 81 fe 08 ee 85 61 4b 58 27 2d c5 29 34 e0 2a 91 47 9f 1e 49 03 0e 6c bd c9 4e 04 d4 9b 20 7a f0 4c 5b b9 af 05 68 86 b3 0b 48 52 77 bd e3 41 e2 f3 85 55 38 ad cc 34 92 94 08 28 81 1d ea 06 5e 8e 14 d4 4a f3 dc 35 e0 84 40 6b a7 ab bf bc bc 44 da 19 31 35 d4 1c ec f9 23 48 6d 3c 01 63 ec 08 5b d6 a9 ba 12 2c 64 3f a4 10 c4 Data Ascii: &l(t!m:X@Ec76u2Lj@k0Si^.M"l01VP'l_U $1Y2<`nxU#S#xN-WHaKX'-)4*GIlN zL[hHRwAU84(^J5@kD15#Hm<c[,d?
2023-07-21 16:50:58 UTC	6286	IN	Data Raw: 77 d2 a0 45 ab dd fd 14 b9 3d 90 ad f5 b6 bf 9f a4 b7 d3 b4 fd 6a d5 8a dc e8 3a b9 f6 6f a0 b3 f0 37 cb bc 81 1e 2c ec 5e ed 64 69 1a c3 b3 b0 51 92 f4 6a 8f f2 e4 45 83 a4 82 01 29 03 d3 78 54 81 2b 69 be 05 8f 72 9e 72 e7 23 5c bf ba 9a 8e 68 f1 15 6f de 8a c9 af c9 6b b9 24 c1 29 19 87 1d 26 1f 54 c8 e3 43 50 30 a3 f0 59 8c 20 03 3f eb e9 f2 33 1d 47 51 e8 3f 32 84 b0 7c 75 50 36 1e 7a 1d 98 89 2d f0 30 ed 6c f4 25 d6 f0 76 62 2b 57 34 50 45 03 3e ac 1b cb b9 81 7e 12 b7 58 94 33 67 45 d4 6e 6f e9 00 f0 db 5b 17 06 ba c0 8c fa 65 82 88 4a 79 16 f2 c0 c2 a9 be 8d 6c 72 08 b4 a5 12 f3 47 72 63 ee 99 07 06 03 50 0f 5f 40 89 63 e1 cb 63 e5 2b 52 3d f5 97 2f 18 c8 5b c0 a8 66 a6 4d 74 ae 6f 16 9a 4b 8f 6e 29 b0 ef 4a 64 59 85 8f 65 b6 a7 a8 a3 3e c0 4f 7b Data Ascii: wE=j:o7,^diQjE)xT+irr#\hok$)&TCP0Y ?3GQ?2\|uP6z-0l%vb+W4PE>~X3gEno[eJylrGrcP_@cc+R=/[fMtoKn)JdYe>O{
2023-07-21 16:50:58 UTC	6293	IN	Data Raw: 6f 73 ef de df b6 91 a4 8d fe 7f 3e 05 89 f5 cf 06 42 88 96 9c 64 26 01 8d f0 67 cb f2 c4 19 df d6 b2 93 cc c8 1a 2d 48 80 12 2c 0a e0 00 a0 64 8d c4 ef 7e ea a9 ea 6e 34 2e 94 9d d9 39 e7 7d 67 37 16 01 34 1a 7d ad ae eb 53 d4 63 53 5b ee 47 f5 59 1d 63 90 16 f8 67 15 3e a2 4e 2e 27 a3 51 e6 8f 46 2b 2f 7b 4c 8d 5e a8 68 db 46 db 33 f6 6e f4 69 44 38 66 53 15 30 a3 b2 e2 c7 2c 7f fd 75 ee 2e fc 58 f7 53 b9 1b 06 32 a9 9b 75 98 6e 34 8a f5 93 5a 26 2f 65 af d1 fb f0 44 bc 77 d7 22 11 2e b1 23 90 6f 73 e4 4a 7b a3 40 d9 7e 3b 88 94 ad b1 ca e9 e7 79 3e d6 9a 07 3a aa 96 49 59 72 60 27 08 01 d1 17 2a f0 80 5f 7a 30 10 01 7b 3c 78 b1 e0 02 57 29 9d 7a 54 03 2c c3 6c bf 9c 4b fe 11 a9 db 57 c1 a3 e2 33 96 c1 79 4c 67 bc b0 98 79 05 7c ec e6 e3 6c 66 07 a4 30 Data Ascii: os>Bd&g-H,d~n4.9}g74}ScS[GYcg>N.'QF+/{L^hF3niD8fS0,u.XS2un4Z&/eDw".#osJ{@~;y>:IYr`'*_z0{<xW)zT,lKW3yLgy\|lf0
2023-07-21 16:50:58 UTC	6302	IN	Data Raw: 2e c2 39 49 9b 00 13 2a 19 60 35 63 71 16 6b 68 9d a5 ff 5c 27 d8 50 ec c2 e7 36 53 0d 5b 09 7d f8 68 2c 6c 5e 9c e7 ef 29 b2 b9 c2 f5 f0 dc f1 8b fe f3 d3 a6 10 c4 72 60 85 cd a7 ae 59 74 a1 c1 4a 00 ef 45 4d 2d 30 72 fa 21 f2 37 f0 74 0f 87 55 90 72 a8 7c d5 74 42 a3 45 1b 09 b9 43 54 b8 79 91 61 fb cc 1e e1 a9 db 42 c5 34 0a 8e 25 0b f0 fe 3a 52 24 f2 f8 8b d4 ef d9 cc ad 5f 96 04 0c 07 30 db 6a 1c a3 79 59 72 03 b0 cc 3b 37 99 ce ab 17 2a 59 b0 d2 f2 b2 fc 4a b2 3b 51 86 88 aa 47 b5 57 4d bf 48 8f eb cf 67 ca ea 62 77 5e 79 73 aa 63 88 5b 26 89 dd bf b6 71 15 e8 36 31 76 9c 0c be 87 52 3a fa 99 43 14 17 40 0f fa 9a a1 60 f5 45 58 0f 8c ba b5 e5 fb 75 03 eb 96 f7 2c 69 6b b2 0d 3d 65 7f 85 36 d7 da f1 02 c9 5c fb 9c b3 3d 62 f3 1e 6d ad da b5 d8 26 79 Data Ascii: .9I`5cqkh\'P6S[}h,l^)r`YtJEM-0r!7tUr\|tBECTyaB4%:R$_0jyYr;7YJ;QGWMHgbw^ysc[&q61vR:C@`EXu,ik=e6\=bm&y

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
199	192.168.2.5	50050	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:59 UTC	6318	OUT	GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; fpc=ArQjXTss-z9PuVNWIVMS0rs; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2023-07-21 16:50:59 UTC	6328	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 8391de22-07b8-4396-b0b2-972a6fea8c00 x-ms-ests-server: 2.1.15811.5 - NCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} x-ms-clitelem: 1,0,0,, nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; expires=Sun, 20-Aug-2023 16:50:59 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; domain=mvolenoazaqoerutien.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; expires=Sun, 20-Aug-2023 16:50:59 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Fri, 21 Jul 2023 16:50:58 GMT Connection: close content-length: 44422 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:50:59 UTC	6330	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2023-07-21 16:50:59 UTC	6344	IN	Data Raw: 49 74 4e 57 52 6c 4d 69 30 30 4e 57 52 6d 4c 57 45 79 4e 47 45 74 4e 47 4d 78 4d 32 52 68 4e 6a 68 6d 4d 6d 59 31 4e 54 49 33 59 6d 4d 35 4f 54 4d 74 4f 57 45 79 4e 69 30 30 59 57 4a 6a 4c 54 67 35 5a 44 41 74 59 6d 59 79 4d 6a 67 77 4f 57 46 6a 4d 57 55 78 5c 75 30 30 32 36 78 2d 63 6c 69 65 6e 74 2d 53 4b 55 3d 49 44 5f 4e 45 54 53 54 41 4e 44 41 52 44 32 5f 30 5c 75 30 30 32 36 78 2d 63 6c 69 65 6e 74 2d 56 65 72 3d 36 2e 31 32 2e 31 2e 30 5c 75 30 30 32 36 75 61 69 64 3d 33 64 37 63 32 36 33 34 36 61 38 64 34 37 66 37 62 39 61 36 31 32 39 37 36 64 36 39 63 63 34 66 5c 75 30 30 32 36 6d 73 70 72 6f 78 79 3d 31 5c 75 30 30 32 36 69 73 73 75 65 72 3d 6d 73 6f 5c 75 30 30 32 36 74 65 6e 61 6e 74 3d 63 6f 6d 6d 6f 6e 5c 75 30 30 32 36 75 69 5f 6c 6f 63 61 Data Ascii: ItNWRlMi00NWRmLWEyNGEtNGMxM2RhNjhmMmY1NTI3YmM5OTMtOWEyNi00YWJjLTg5ZDAtYmYyMjgwOWFjMWUx\u0026x-client-SKU=ID_NETSTANDARD2_0\u0026x-client-Ver=6.12.1.0\u0026uaid=3d7c26346a8d47f7b9a612976d69cc4f\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_loca
2023-07-21 16:50:59 UTC	6360	IN	Data Raw: 63 74 69 6f 6e 20 65 28 65 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 69 29 7b 76 61 72 20 61 3d 65 5b 69 5d 3b 69 66 28 69 3c 6e 2d 31 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 28 6f 2e 72 5b 61 5d 3f 74 28 69 2b 31 29 3a 6f 2e 77 68 65 6e 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 69 2b 31 29 7d 29 29 7d 72 28 61 29 7d 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 74 28 30 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 72 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 65 3d 21 21 73 2e 6d 65 74 68 6f 64 2c 6f 3d 65 3f 73 2e 6d 65 74 68 6f 64 3a 69 5b 30 5d 2c 61 3d 73 2e 65 78 74 72 61 41 72 67 73 7c 7c 5b 5d 2c 75 3d 6e 2e 24 57 65 62 57 61 74 73 6f 6e 3b 74 72 79 7b 0a 76 61 72 20 63 3d 74 28 69 2c 21 65 29 3b 69 66 28 61 26 26 61 2e Data Ascii: ction e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{var c=t(i,!e);if(a&&a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49726	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:28 UTC	4	OUT	GET /scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:29 UTC	4	IN	HTTP/1.1 200 OK Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https:// data: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://excel.purple.officeapps.live-int.com https://onenote.purple.officeapps.live-int.com https://powerpoint.purple.officeapps.live-int.com https://visio.purple.officeapps.live-int.com https://word-view.purple.officeapps.live-int.com https://word-edit.purple.officeapps.live-int.com https://officeapps-df.live.com https://excel.officeapps-df.live.com https://onenote.officeapps-df.live.com https://powerpoint.officeapps-df.live.com https://word-view.officeapps-df.live.com https://word-edit.officeapps-df.live.com https://officeapps.live.com https://excel.officeapps.live.com https://onenote.officeapps.live.com https://powerpoint.officeapps.live.com https://word-view.officeapps.live.com https://word-edit.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-ancestors 'self' ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; expires=Wed, 19 Jul 2028 16:50:29 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=deghsLEKJOGSu-1QvrwgkKX3; Domain=dropbox.com; expires=Mon, 20 Jul 2026 16:50:29 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; expires=Mon, 20 Jul 2026 16:50:29 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=O5ZSfGCE1E; expires=Mon, 20 Jul 2026 16:50:29 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Wed, 19 Jul 2028 16:50:29 GMT; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:29 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1b902fc12cf8423d9be8fc779df1ecb3 Connection: close Transfer-Encoding: chunked
2023-07-21 16:50:29 UTC	9	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 77 69 6e 64 6f 77 2e 5f 67 6f 63 68 5f 20 3d 20 7b 7d 3b 0a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 Data Ascii: 4000<!DOCTYPE html><html class="maestro global-header" lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml"><head><script nonce="dsLPUC6uswChFUfBqMV3">window._goch_ = {};window.addEventListener('click', function(event) { 'use strict';
2023-07-21 16:50:29 UTC	25	IN	Data Raw: 20 61 6e 20 61 72 0d 0a Data Ascii: an ar
2023-07-21 16:50:29 UTC	25	IN	Data Raw: 34 30 30 30 0d 0a 72 61 79 22 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 5f 76 61 6c 69 64 61 74 65 55 73 65 72 28 65 5b 74 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 76 61 6c 69 64 61 74 65 55 73 65 72 28 65 29 7b 69 66 28 76 61 6c 69 64 61 74 65 4f 62 6a 65 63 74 50 72 6f 70 65 72 74 69 65 73 28 22 55 73 65 72 22 2c 65 2c 7b 75 73 65 72 49 64 3a 22 6e 75 6d 62 65 72 22 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 73 74 72 69 6e 67 22 2c 70 65 72 73 6f 6e 61 6c 4e 61 6d 65 3a 7b 6b 69 6e 64 3a 22 73 74 72 69 6e 67 22 2c 6e 75 6c 6c 61 62 6c 65 3a 21 30 7d 2c 69 73 41 63 74 69 76 65 3a 22 62 6f 6f 6c 65 61 6e 22 2c 69 73 54 65 61 6d 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 65 61 6d 4e 61 6d 65 3a 7b 6b 69 6e 64 3a 22 Data Ascii: 4000ray");for(let t=0;t<e.length;t++){_validateUser(e[t])}}function _validateUser(e){if(validateObjectProperties("User",e,{userId:"number",displayName:"string",personalName:{kind:"string",nullable:!0},isActive:"boolean",isTeam:"boolean",teamName:{kind:"
2023-07-21 16:50:29 UTC	41	IN	Data Raw: 68 61 72 65 64 2f 0d 0a Data Ascii: hared/
2023-07-21 16:50:29 UTC	41	IN	Data Raw: 34 30 30 30 0d 0a 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 73 69 6e 6b 2f 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 74 79 70 65 73 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 76 61 6c 69 64 61 74 65 22 5d 2c 20 22 70 6b 67 2d 74 69 6d 69 6e 67 2d 68 65 6c 70 65 72 73 22 3a 20 5b 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 5f 6d 65 74 72 69 63 73 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 2f Data Ascii: 4000apex-metrics/src/sink/serialization", "typescript/libraries/shared/apex-metrics/src/types", "typescript/libraries/shared/apex-metrics/src/validate"], "pkg-timing-helpers": ["metaserver/static/js/user_centric_perf_metrics/component_visually_complete/
2023-07-21 16:50:29 UTC	57	IN	Data Raw: 72 65 61 63 74 2d 0d 0a 31 64 34 32 0d 0a 6e 65 78 74 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 72 65 61 63 74 2d 6e 65 78 74 22 2c 20 22 72 65 61 63 74 2d 72 65 64 75 78 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 72 65 61 63 74 2d 72 65 64 75 78 22 2c 20 22 72 65 61 63 74 2d 72 65 66 72 65 73 68 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 72 65 61 63 74 2d 72 65 66 72 65 73 68 22 2c 20 22 72 65 61 63 74 2d 72 65 66 72 65 73 68 2f 72 75 6e 74 69 6d 65 22 3a 20 22 6d 65 74 61 Data Ascii: react-1d42next": "metaserver/static/prod_assets_web_modules/react-next", "react-redux": "metaserver/static/prod_assets_web_modules/react-redux", "react-refresh": "metaserver/static/prod_assets_web_modules/react-refresh", "react-refresh/runtime": "meta
2023-07-21 16:50:29 UTC	64	IN	Data Raw: 32 31 63 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 69 6e 73 65 72 74 41 66 74 65 72 54 54 49 28 22 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 6e 6f 6e 63 65 3d 5c 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 5c 22 5c 75 30 30 33 65 5c 6e 20 20 20 20 20 20 20 20 2f 2a Data Ascii: 21c<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. / ensemble.insertAfterTTI("\u003cscript type=\"text/javascript\" nonce=\"dsLPUC6uswChFUfBqMV3\"\u003e\n /
2023-07-21 16:50:29 UTC	69	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 69 6e 73 65 72 74 41 66 74 65 72 54 54 49 28 22 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 6e 6f 6e 63 65 3d 5c 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 5c 22 5c 75 30 30 33 65 5c 6e 20 20 20 20 20 20 20 20 2f Data Ascii: 4000<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.insertAfterTTI("\u003cscript type=\"text/javascript\" nonce=\"dsLPUC6uswChFUfBqMV3\"\u003e\n /
2023-07-21 16:50:29 UTC	85	IN	Data Raw: 70 6c 75 70 6c 6f 0d 0a Data Ascii: pluplo
2023-07-21 16:50:29 UTC	85	IN	Data Raw: 33 35 39 37 0d 0a 61 64 5f 64 65 76 5c 22 2c 20 5c 22 70 72 65 61 63 74 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 70 72 65 61 63 74 5c 22 2c 20 5c 22 70 72 6f 70 2d 74 79 70 65 73 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 70 72 6f 70 2d 74 79 70 65 73 5c 22 2c 20 5c 22 70 72 6f 74 6f 74 79 70 65 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 70 72 6f 74 6f 74 79 70 65 5c 22 2c 20 5c 22 70 75 6e 79 63 6f 64 65 2d 77 65 62 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 Data Ascii: 3597ad_dev\", \"preact\": \"metaserver/static/prod_assets_web_modules/preact\", \"prop-types\": \"metaserver/static/prod_assets_web_modules/prop-types\", \"prototype\": \"metaserver/static/prod_assets_web_modules/prototype\", \"punycode-web\": \"metaser
2023-07-21 16:50:29 UTC	98	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 69 6e 73 65 72 74 41 66 74 65 72 54 54 49 28 22 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 6e 6f 6e 63 65 3d 5c 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 5c 22 5c 75 30 30 33 65 5c 6e 20 20 20 20 20 20 20 20 2f Data Ascii: 4000<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.insertAfterTTI("\u003cscript type=\"text/javascript\" nonce=\"dsLPUC6uswChFUfBqMV3\"\u003e\n /
2023-07-21 16:50:29 UTC	114	IN	Data Raw: 65 62 5f 6d 6f 64 0d 0a Data Ascii: eb_mod
2023-07-21 16:50:29 UTC	114	IN	Data Raw: 34 30 30 30 0d 0a 75 6c 65 73 2f 6a 71 75 65 72 79 2d 73 63 72 6f 6c 6c 4e 61 76 5c 22 2c 20 5c 22 6a 71 75 65 72 79 2e 71 72 63 6f 64 65 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 6a 71 75 65 72 79 2e 71 72 63 6f 64 65 5c 22 2c 20 5c 22 6a 71 75 65 72 79 5f 70 61 79 6d 65 6e 74 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 6a 71 75 65 72 79 5f 70 61 79 6d 65 6e 74 5c 22 2c 20 5c 22 6a 73 71 72 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 6a 73 71 72 5c 22 2c 20 Data Ascii: 4000ules/jquery-scrollNav\", \"jquery.qrcode\": \"metaserver/static/prod_assets_web_modules/jquery.qrcode\", \"jquery_payment\": \"metaserver/static/prod_assets_web_modules/jquery_payment\", \"jsqr\": \"metaserver/static/prod_assets_web_modules/jsqr\",
2023-07-21 16:50:29 UTC	130	IN	Data Raw: 76 65 72 2f 73 74 0d 0a 39 39 34 0d 0a 61 74 69 63 2f 6a 73 2f 75 78 5f 61 6e 61 6c 79 74 69 63 73 2f 65 6c 65 6d 65 6e 74 5f 6f 62 73 65 72 76 65 72 73 2f 69 6e 74 65 72 61 63 74 69 6f 6e 5f 6f 62 73 65 72 76 65 72 73 5c 22 2c 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 78 5f 61 6e 61 6c 79 74 69 63 73 2f 65 6c 65 6d 65 6e 74 5f 6f 62 73 65 72 76 65 72 73 2f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 6f 62 73 65 72 76 65 72 5c 22 2c 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 78 5f 61 6e 61 6c 79 74 69 63 73 2f 65 6c 65 6d 65 6e 74 5f 6f 62 73 65 72 76 65 72 73 2f 6d 75 74 61 74 69 6f 6e 5f 6f 62 73 65 72 76 65 72 5c 22 2c 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 Data Ascii: ver/st994atic/js/ux_analytics/element_observers/interaction_observers\", \"metaserver/static/js/ux_analytics/element_observers/intersection_observer\", \"metaserver/static/js/ux_analytics/element_observers/mutation_observer\", \"metaserver/static/js/u
2023-07-21 16:50:29 UTC	146	IN	Data Raw: 72 63 2f 74 79 70 65 73 5c 22 2c 20 5c 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 76 61 6c 69 64 61 74 65 5c 22 5d 2c 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 29 7b 5c 6e 6d 6f 64 2e 69 6e 69 74 69 61 6c 69 7a 65 5f 6d 6f 64 75 6c 65 28 7b 5c 22 55 58 41 43 6f 6e 66 69 67 73 5c 22 3a 20 7b 5c 22 72 65 71 75 65 73 74 49 64 5c 22 3a 20 5c 22 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 5c 22 2c 20 5c 22 6f 72 67 52 65 66 65 72 72 65 72 5c 22 3a 20 5c 22 5c 22 2c 20 5c 22 68 74 74 70 52 65 66 65 72 72 65 72 5c 22 3a 20 5c 22 5c 22 2c 20 5c 22 70 72 65 76 69 6f 75 73 55 72 6c 5c 22 3a 20 5c 22 5c 22 2c 20 5c 22 76 Data Ascii: rc/types\", \"typescript/libraries/shared/apex-metrics/src/validate\"], (function(mod){\nmod.initialize_module({\"UXAConfigs\": {\"requestId\": \"1b902fc12cf8423d9be8fc779df1ecb3\", \"orgReferrer\": \"\", \"httpReferrer\": \"\", \"previousUrl\": \"\", \"v
2023-07-21 16:50:29 UTC	161	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 20 63 6f 6d 65 73 20 66 72 6f 6d 20 74 68 65 0a 20 20 20 20 20 20 20 20 20 20 20 66 61 6b 65 5f 72 65 71 75 69 72 65 5f 73 6e 69 70 70 65 74 20 28 75 69 2f 70 61 67 65 2f 73 63 72 69 70 74 5f 74 61 67 73 2e 70 79 29 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c Data Ascii: 4000<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. / / global: configureRequire comes from the fake_require_snippet (ui/page/script_tags.py) */ ensembl
2023-07-21 16:50:29 UTC	177	IN	Data Raw: 73 2f 73 65 6c 65 0d 0a Data Ascii: s/sele
2023-07-21 16:50:29 UTC	177	IN	Data Raw: 34 30 30 30 0d 0a 63 74 5f 72 65 71 75 65 73 74 5f 61 70 70 72 6f 76 61 6c 5f 61 70 70 72 6f 76 65 72 5f 6f 70 74 69 6f 6e 22 3a 20 22 73 74 61 74 69 63 2f 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 6b 66 6c 6f 77 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 61 70 70 72 6f 76 61 6c 73 2f 73 65 6c 65 63 74 5f 72 65 71 75 65 73 74 5f 61 70 70 72 6f 76 61 6c 5f 61 70 70 72 6f 76 65 72 5f 6f 70 74 69 6f 6e 2e 6d 69 6e 2d 76 66 6c 59 54 5f 72 6b 4c 22 2c 20 22 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 6b 66 6c 6f 77 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 61 70 70 72 6f 76 61 6c 73 2f 73 65 6c 65 63 74 5f 72 65 71 75 65 73 74 5f 61 70 70 72 6f 76 61 6c 5f 62 75 74 74 6f 6e 22 3a 20 22 73 74 61 74 69 63 2f 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 Data Ascii: 4000ct_request_approval_approver_option": "static/js/pap-events/workflow_automation_approvals/select_request_approval_approver_option.min-vflYT_rkL", "js/pap-events/workflow_automation_approvals/select_request_approval_button": "static/js/pap-events/wor
2023-07-21 16:50:29 UTC	193	IN	Data Raw: 73 5f 6d 6f 64 61 0d 0a Data Ascii: s_moda
2023-07-21 16:50:29 UTC	193	IN	Data Raw: 34 30 30 30 0d 0a 6c 2e 6d 69 6e 2d 76 66 6c 75 53 6f 6e 78 4f 22 2c 20 22 70 6b 67 2d 77 6f 72 6b 66 6c 6f 77 2d 62 75 69 6c 64 65 72 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 2f 70 6b 67 2d 77 6f 72 6b 66 6c 6f 77 2d 62 75 69 6c 64 65 72 2e 6d 69 6e 2d 76 66 6c 66 6a 70 38 75 6e 22 2c 20 22 70 6b 67 2d 66 6c 6f 77 73 2d 61 63 74 69 6f 6e 73 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 2f 70 6b 67 2d 66 6c 6f 77 73 2d 61 63 74 69 6f 6e 73 2e 6d 69 6e 2d 76 66 6c 43 43 31 37 46 38 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 66 6c 6f 77 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f Data Ascii: 4000l.min-vfluSonxO", "pkg-workflow-builder": "static/metaserver/static/js/packaged/pkg-workflow-builder.min-vflfjp8un", "pkg-flows-actions": "static/metaserver/static/js/packaged/pkg-flows-actions.min-vflCC17F8", "metaserver/static/js/flows/components/
2023-07-21 16:50:29 UTC	209	IN	Data Raw: 6b 67 2d 64 69 67 0d 0a Data Ascii: kg-dig
2023-07-21 16:50:29 UTC	209	IN	Data Raw: 34 30 30 30 0d 0a 2d 66 2e 6d 69 6e 2d 76 66 6c 4a 32 47 45 44 30 22 2c 20 22 70 6b 67 2d 64 69 67 2d 63 68 69 70 73 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 2f 70 6b 67 2d 64 69 67 2d 63 68 69 70 73 2e 6d 69 6e 2d 76 66 6c 57 36 58 62 7a 62 22 2c 20 22 70 6b 67 2d 64 69 67 2d 70 72 6f 67 72 65 73 73 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 2f 70 6b 67 2d 64 69 67 2d 70 72 6f 67 72 65 73 73 2e 6d 69 6e 2d 76 66 6c 56 47 6e 62 35 31 22 2c 20 22 70 6b 67 2d 64 69 67 2d 74 61 62 6c 65 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 Data Ascii: 4000-f.min-vflJ2GED0", "pkg-dig-chips": "static/metaserver/static/js/packaged/pkg-dig-chips.min-vflW6Xbzb", "pkg-dig-progress": "static/metaserver/static/js/packaged/pkg-dig-progress.min-vflVGnb51", "pkg-dig-table": "static/metaserver/static/js/packaged
2023-07-21 16:50:29 UTC	225	IN	Data Raw: 65 72 76 65 72 2f 0d 0a Data Ascii: erver/
2023-07-21 16:50:29 UTC	225	IN	Data Raw: 34 30 30 30 0d 0a 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 40 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 2f 73 64 6b 2d 74 72 61 63 65 2d 62 61 73 65 22 2c 20 22 40 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 2f 73 64 6b 2d 74 72 61 63 65 2d 77 65 62 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 40 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 2f 73 64 6b 2d 74 72 61 63 65 2d 77 65 62 22 2c 20 22 40 70 64 66 74 72 6f 6e 2f 77 65 62 76 69 65 77 65 72 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 40 70 64 66 74 72 6f 6e 2f 77 65 62 76 69 65 Data Ascii: 4000static/prod_assets_web_modules/@opentelemetry/sdk-trace-base", "@opentelemetry/sdk-trace-web": "metaserver/static/prod_assets_web_modules/@opentelemetry/sdk-trace-web", "@pdftron/webviewer": "metaserver/static/prod_assets_web_modules/@pdftron/webvie
2023-07-21 16:50:29 UTC	241	IN	Data Raw: 6e 2f 65 78 70 6f 0d 0a Data Ascii: n/expo
2023-07-21 16:50:29 UTC	241	IN	Data Raw: 34 30 30 30 0d 0a 73 75 72 65 5f 73 74 6f 72 6d 63 72 6f 77 22 2c 20 22 6a 73 2f 75 75 69 64 2f 75 75 69 64 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 61 70 69 5f 76 32 2f 74 72 61 6e 73 70 6f 72 74 2f 62 65 61 63 6f 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 65 64 69 73 6f 6e 2f 75 69 2f 73 70 61 5f 70 72 6f 64 75 63 74 5f 6e 61 6d 65 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 70 2f 61 6e 61 6c 79 74 69 63 73 5f 63 6c 69 65 6e 74 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 73 65 63 75 72 69 74 79 2f 73 6a 63 6c 5f 63 72 79 70 74 6f 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 75 69 64 2f Data Ascii: 4000sure_stormcrow", "js/uuid/uuid", "metaserver/static/js/api_v2/transport/beacon", "metaserver/static/js/edison/ui/spa_product_name", "metaserver/static/js/pap/analytics_client", "metaserver/static/js/security/sjcl_crypto", "metaserver/static/js/uuid/
2023-07-21 16:50:29 UTC	257	IN	Data Raw: 5f 73 65 74 74 69 0d 0a Data Ascii: _setti
2023-07-21 16:50:29 UTC	257	IN	Data Raw: 34 30 30 30 0d 0a 6e 67 73 5f 72 69 67 68 74 65 6f 75 73 5f 6c 69 6e 6b 5f 70 6f 6c 69 63 79 5f 76 69 65 77 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 73 68 61 72 69 6e 67 2f 76 69 65 77 73 2f 76 69 65 77 65 72 5f 69 6e 66 6f 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 73 68 61 72 69 6e 67 2f 76 69 65 77 73 2f 77 72 61 70 70 65 64 5f 67 72 6f 75 70 5f 76 69 65 77 65 72 73 5f 6d 61 6b 65 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 73 79 6e 63 5f 65 76 65 72 79 74 68 69 6e 67 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 6f 64 61 6c 73 2f 62 61 63 6b 75 70 5f 64 65 6c 65 74 65 5f 64 65 76 69 63 65 5f 66 6f 6c 64 65 72 5f 6d 6f 64 61 6c 22 2c 20 22 6d 65 74 61 73 65 72 Data Ascii: 4000ngs_righteous_link_policy_view", "metaserver/static/js/sharing/views/viewer_info", "metaserver/static/js/sharing/views/wrapped_group_viewers_maker", "metaserver/static/js/sync_everything/components/modals/backup_delete_device_folder_modal", "metaser
2023-07-21 16:50:29 UTC	273	IN	Data Raw: 2c 20 22 6a 73 2f 0d 0a Data Ascii: , "js/
2023-07-21 16:50:29 UTC	273	IN	Data Raw: 34 30 30 30 0d 0a 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 6b 66 6c 6f 77 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 61 70 69 2f 73 75 63 63 65 65 64 5f 61 75 74 6f 5f 66 6f 6c 64 65 72 5f 6d 6f 64 61 6c 5f 66 6f 6c 64 65 72 5f 63 72 65 61 74 65 22 2c 20 22 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 6b 66 6c 6f 77 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 61 70 69 2f 73 75 63 63 65 65 64 5f 73 75 62 6d 69 74 5f 6d 61 6e 75 61 6c 5f 77 6f 72 6b 66 6c 6f 77 22 2c 20 22 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 6b 66 6c 6f 77 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 62 72 6f 77 73 65 2f 73 65 6c 65 63 74 5f 61 75 74 6f 5f 66 6f 6c 64 65 72 5f 61 64 64 5f 62 75 74 74 6f 6e 22 2c 20 22 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 6b 66 6c 6f 77 5f 61 75 Data Ascii: 4000pap-events/workflow_automation_api/succeed_auto_folder_modal_folder_create", "js/pap-events/workflow_automation_api/succeed_submit_manual_workflow", "js/pap-events/workflow_automation_browse/select_auto_folder_add_button", "js/pap-events/workflow_au
2023-07-21 16:50:29 UTC	289	IN	Data Raw: 2f 6a 73 2f 61 75 0d 0a Data Ascii: /js/au
2023-07-21 16:50:29 UTC	289	IN	Data Raw: 34 30 30 30 0d 0a 74 68 2f 6c 6f 67 69 6e 5f 6f 72 5f 72 65 67 69 73 74 65 72 2f 74 79 70 65 73 22 5d 2c 20 22 70 6b 67 2d 63 6f 72 65 75 69 2d 77 69 74 68 2d 69 31 38 6e 22 3a 20 5b 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 61 76 61 74 61 72 2f 61 76 61 74 61 72 5f 77 69 74 68 5f 64 65 66 61 75 6c 74 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 61 76 61 74 61 72 2f 69 6e 69 74 69 61 6c 73 5f 61 76 61 74 61 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 61 76 61 74 61 72 2f 70 68 6f 74 6f 5f 61 76 61 74 61 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 61 76 61 74 61 72 2f 73 69 7a 65 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 Data Ascii: 4000th/login_or_register/types"], "pkg-coreui-with-i18n": ["metaserver/static/js/avatar/avatar_with_default", "metaserver/static/js/avatar/initials_avatar", "metaserver/static/js/avatar/photo_avatar", "metaserver/static/js/avatar/size", "metaserver/stat
2023-07-21 16:50:29 UTC	305	IN	Data Raw: 69 63 2f 6a 73 2f 0d 0a 34 30 30 30 0d 0a 66 69 6c 65 5f 73 74 6f 72 65 2f 75 74 69 6c 73 22 5d 2c 20 22 70 6b 67 2d 77 6f 72 6b 66 6c 6f 77 2d 62 75 69 6c 64 65 72 22 3a 20 5b 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 66 6c 6f 77 73 2f 61 75 74 6f 6d 61 74 69 6f 6e 73 2f 6c 69 76 65 5f 70 72 65 76 69 65 77 5f 75 74 69 6c 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 66 6c 6f 77 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 61 75 74 6f 5f 6e 61 6d 69 6e 67 5f 63 6f 6e 76 65 6e 74 69 6f 6e 73 2f 63 6f 6e 73 74 61 6e 74 73 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 66 6c 6f 77 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 61 75 74 6f 5f 6e 61 6d 69 6e 67 5f 63 6f 6e 76 65 6e 74 69 6f 6e Data Ascii: ic/js/4000file_store/utils"], "pkg-workflow-builder": ["metaserver/static/js/flows/automations/live_preview_util", "metaserver/static/js/flows/components/auto_naming_conventions/constants", "metaserver/static/js/flows/components/auto_naming_convention
2023-07-21 16:50:29 UTC	321	IN	Data Raw: 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 0d 0a 34 30 30 30 0d 0a 61 74 69 63 2f 6a 73 2f 70 61 79 6d 65 6e 74 73 2f 75 69 2f 63 6f 6d 6d 6f 6e 2f 61 64 61 70 74 65 72 73 2f 73 65 74 75 70 5f 63 61 73 68 22 5d 2c 20 22 70 6b 67 2d 70 61 79 6d 65 6e 74 73 2d 63 6f 6d 6d 6f 6e 22 3a 20 5b 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 79 6d 65 6e 74 73 2f 70 61 79 6d 65 6e 74 5f 66 6f 72 6d 2f 69 66 72 61 6d 65 5f 72 70 63 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 79 6d 65 6e 74 73 2f 70 61 79 6d 65 6e 74 5f 66 6f 72 6d 2f 70 61 79 6d 65 6e 74 5f 66 6f 72 6d 5f 73 70 65 63 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 79 6d 65 6e 74 73 2f 73 6b 75 73 2f 62 69 Data Ascii: "metaserver/st4000atic/js/payments/ui/common/adapters/setup_cash"], "pkg-payments-common": ["metaserver/static/js/payments/payment_form/iframe_rpc", "metaserver/static/js/payments/payment_form/payment_form_spec", "metaserver/static/js/payments/skus/bi
2023-07-21 16:50:29 UTC	337	IN	Data Raw: 6e 61 63 6b 62 61 72 22 3a 20 5b 22 73 70 65 63 74 72 75 6d 2f 62 0d 0a 34 30 30 30 0d 0a 75 74 74 6f 6e 2f 62 75 74 74 6f 6e 22 2c 20 22 73 70 65 63 74 72 75 6d 2f 62 75 74 74 6f 6e 2f 69 6e 64 65 78 22 2c 20 22 73 70 65 63 74 72 75 6d 2f 70 72 6f 67 72 65 73 73 5f 62 61 72 2f 69 6e 64 65 78 22 2c 20 22 73 70 65 63 74 72 75 6d 2f 70 72 6f 67 72 65 73 73 5f 62 61 72 2f 70 72 6f 67 72 65 73 73 5f 62 61 72 22 2c 20 22 73 70 65 63 74 72 75 6d 2f 73 6e 61 63 6b 62 61 72 2f 69 6e 64 65 78 22 2c 20 22 73 70 65 63 74 72 75 6d 2f 73 6e 61 63 6b 62 61 72 2f 73 6e 61 63 6b 62 61 72 22 5d 2c 20 22 70 6b 67 2d 64 72 6f 70 69 6e 73 2d 69 63 6f 6e 73 22 3a 20 5b 22 73 70 65 63 74 72 75 6d 2f 63 6f 6c 6f 72 69 7a 65 64 5f 69 63 6f 6e 2f 63 6f 6c 6f 72 69 7a 65 64 5f 69 Data Ascii: nackbar": ["spectrum/b4000utton/button", "spectrum/button/index", "spectrum/progress_bar/index", "spectrum/progress_bar/progress_bar", "spectrum/snackbar/index", "spectrum/snackbar/snackbar"], "pkg-dropins-icons": ["spectrum/colorized_icon/colorized_i
2023-07-21 16:50:29 UTC	353	IN	Data Raw: 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 63 6f 6d 6d 6f 6e 2f 63 6c 6f 63 0d 0a 31 34 65 31 0d 0a 6b 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 63 6f 6d 6d 6f 6e 2f 63 6c 6f 73 65 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 63 6f 6d 6d 6f 6e 2f 65 78 74 65 6e 64 73 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 63 6f 6d 6d 6f 6e 2f 66 6c 6f 61 74 69 6e 67 2d 75 69 2e 64 6f 6d 2e 62 72 6f 77 73 65 72 2e 6d 69 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 Data Ascii: assets_web_modules/common/cloc14e1k", "metaserver/static/prod_assets_web_modules/common/close", "metaserver/static/prod_assets_web_modules/common/extends", "metaserver/static/prod_assets_web_modules/common/floating-ui.dom.browser.min", "metaserver/sta
2023-07-21 16:50:29 UTC	358	IN	Data Raw: 37 33 36 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 Data Ascii: 736<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-1", function(){ensemble.defineConstModule("metaserver/static/js/mod
2023-07-21 16:50:29 UTC	360	IN	Data Raw: 39 31 63 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 32 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 Data Ascii: 91c<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-2", function(){ensemble.defineConstModule("metaserver/static/js/mod
2023-07-21 16:50:29 UTC	363	IN	Data Raw: 66 61 32 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 33 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 Data Ascii: fa2<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-3", function(){ensemble.defineConstModule("metaserver/static/js/mod
2023-07-21 16:50:29 UTC	366	IN	Data Raw: 39 66 37 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 34 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 Data Ascii: 9f7<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-4", function(){ensemble.defineConstModule("metaserver/static/js/mod
2023-07-21 16:50:29 UTC	369	IN	Data Raw: 31 61 63 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 35 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 Data Ascii: 1ac<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-5", function(){ensemble.defineConstModule("metaserver/static/js/mod
2023-07-21 16:50:29 UTC	370	IN	Data Raw: 32 33 32 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 37 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 Data Ascii: 232<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-7", function(){ensemble.defineConstModule("metaserver/static/js/mod
2023-07-21 16:50:29 UTC	370	IN	Data Raw: 32 64 32 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 38 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 Data Ascii: 2d2<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-8", function(){ensemble.defineConstModule("metaserver/static/js/mod
2023-07-21 16:50:29 UTC	371	IN	Data Raw: 32 36 63 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 39 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f 64 Data Ascii: 26c<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-9", function(){ensemble.defineConstModule("metaserver/static/js/mod
2023-07-21 16:50:29 UTC	372	IN	Data Raw: 31 30 39 35 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 30 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d Data Ascii: 1095<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-10", function(){ensemble.defineConstModule("metaserver/static/js/m
2023-07-21 16:50:29 UTC	376	IN	Data Raw: 31 39 36 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 31 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f Data Ascii: 196<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-11", function(){ensemble.defineConstModule("metaserver/static/js/mo
2023-07-21 16:50:29 UTC	376	IN	Data Raw: 31 64 65 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 32 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f Data Ascii: 1de<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-12", function(){ensemble.defineConstModule("metaserver/static/js/mo
2023-07-21 16:50:29 UTC	377	IN	Data Raw: 32 63 63 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 33 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f Data Ascii: 2cc<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-13", function(){ensemble.defineConstModule("metaserver/static/js/mo
2023-07-21 16:50:29 UTC	377	IN	Data Raw: 31 38 39 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 34 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f Data Ascii: 189<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-14", function(){ensemble.defineConstModule("metaserver/static/js/mo
2023-07-21 16:50:29 UTC	378	IN	Data Raw: 32 34 62 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 35 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f Data Ascii: 24b<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-15", function(){ensemble.defineConstModule("metaserver/static/js/mo
2023-07-21 16:50:29 UTC	378	IN	Data Raw: 33 62 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 36 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f Data Ascii: 3b0<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-16", function(){ensemble.defineConstModule("metaserver/static/js/mo
2023-07-21 16:50:29 UTC	382	IN	Data Raw: 33 33 33 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 32 33 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f Data Ascii: 333<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-23", function(){ensemble.defineConstModule("metaserver/static/js/mo
2023-07-21 16:50:29 UTC	383	IN	Data Raw: 31 61 34 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 32 34 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 6f Data Ascii: 1a4<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-24", function(){ensemble.defineConstModule("metaserver/static/js/mo
2023-07-21 16:50:29 UTC	384	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 73 4c 50 55 43 36 75 73 77 43 68 46 55 66 42 71 4d 56 33 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 65 6e 73 65 6d 62 6c 65 5f 61 70 70 73 68 65 6c 6c 2e 6a 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 20 63 6f 6d 65 73 20 66 72 6f 6d 20 74 68 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 6b 65 5f 72 65 71 75 69 72 65 5f 73 6e 69 70 70 65 74 20 28 75 69 2f 70 61 67 65 2f 73 63 72 69 70 74 5f 74 61 67 73 2e 70 79 29 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 Data Ascii: 4000<script type="text/javascript" nonce="dsLPUC6uswChFUfBqMV3"> /* global: ensemble is from ensemble_appshell.js / / global: configureRequire comes from the fake_require_snippet (ui/page/script_tags.py) / / globa
2023-07-21 16:50:29 UTC	400	IN	Data Raw: 65 72 74 22 2c 20 0d 0a 31 36 31 36 0d 0a 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 61 74 74 72 69 62 75 74 69 6f 6e 5f 68 65 61 64 65 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 62 72 6f 77 73 65 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 62 72 6f 77 73 65 72 5f 64 65 74 65 63 74 69 6f 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 65 78 63 65 70 74 69 6f 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 65 78 63 65 70 74 69 6f 6e 5f 69 6e 66 6f 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 Data Ascii: ert", 1616"metaserver/static/js/core/attribution_header", "metaserver/static/js/core/browser", "metaserver/static/js/core/browser_detection", "metaserver/static/js/core/exception", "metaserver/static/js/core/exception_info", "metaserver/static/js/core
2023-07-21 16:50:29 UTC	406	IN	Data Raw: 31 30 32 0d 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 20 73 72 63 3d 22 2f 70 61 67 65 5f 73 75 63 63 65 73 73 2f 65 6e 64 3f 64 77 73 5f 70 61 67 65 5f 6e 61 6d 65 3d 63 6c 6f 75 64 5f 64 6f 63 73 5f 70 61 70 65 72 5f 63 6f 6e 74 65 6e 74 5f 70 61 67 65 26 61 6d 70 3b 70 61 74 68 3d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 55 6e 74 69 74 6c 65 64 2e 70 61 70 65 72 26 61 6d 70 3b 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 61 6d 70 3b 74 69 6d 65 3d 31 36 38 39 39 35 38 32 32 39 22 20 6e 6f 6e 63 65 3d 22 52 79 46 35 34 36 5a 4b 50 43 54 38 78 77 74 51 4d 61 70 41 22 3e 3c Data Ascii: 102<script async="async" src="/page_success/end?dws_page_name=cloud_docs_paper_content_page&path=%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FUntitled.paper&request_id=1b902fc12cf8423d9be8fc779df1ecb3&time=1689958229" nonce="RyF546ZKPCT8xwtQMapA"><
2023-07-21 16:50:29 UTC	406	IN	Data Raw: 65 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: e</body></html>
2023-07-21 16:50:29 UTC	406	IN	Data Raw: 31 31 0d 0a 3c 21 2d 2d 73 74 61 74 75 73 3d 32 30 30 2d 2d 3e 0d 0a Data Ascii: 11...status=200-->
2023-07-21 16:50:29 UTC	406	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.5	49783	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:33 UTC	1260	OUT	GET /static/fonts/SourceCodePro-Regular-2038.otf.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1261	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 76848 Connection: close Date: Fri, 21 Jul 2023 10:08:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 02 Feb 2023 02:19:59 GMT ETag: "7b64ae005dcd81a935c942003bc42592" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 b50b0f4274b74414c7dcdb544e6090a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: CTjcDnlnqN290fNOYhLKG8PxNTFbFnpynARv9_RT7Rkwu9WSE3uhew== Age: 24152
2023-07-21 16:50:33 UTC	1262	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 01 2c 30 00 0d 00 00 00 02 06 6c 00 01 2b de 00 02 09 ba 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 85 fe 53 1a 85 6a 1b a8 5c 1c ba 4a 06 60 00 e6 66 01 36 02 24 03 98 42 04 06 05 a1 4e 07 20 5b 7e 05 92 0c a1 32 da dd 97 f1 2e fb 60 ba ac 41 44 54 3d a2 e4 03 6d cd dc 6f 66 e8 08 3a c6 36 5e 48 5a a9 1b 73 f9 d9 7c 7b e0 03 8a 14 1d a8 dd 0e 22 01 a5 1e cc fe ff ff ff ff ff ff df 98 2c c2 36 67 37 64 df bb cb 07 18 51 44 ff 8a b5 7e 6d 89 40 c5 20 70 2e b2 54 c6 10 1d 73 03 8d 0f 3a 08 33 4e 3e bb d4 d9 48 91 c5 dd 50 04 5b d8 6e 7f d1 1a 5a ae 97 f3 21 51 32 ae 6c 4b ae 5d 8e 90 42 6e d8 41 8e ab 55 4c 88 de ad b3 48 88 21 bc 94 74 a4 1e fb b7 ef 90 e9 09 ef e3 05 7b ba 2d a5 14 dc e1 be 7f 0f 8f dc Data Ascii: wOF2OTTO,0l+FSj\J`f6$BN [~2.`ADT=mof:6^HZs\|{",6g7dQD~m@ p.Ts:3N>HP[nZ!Q2lK]BnAULH!t{-
2023-07-21 16:50:33 UTC	1277	IN	Data Raw: 24 ea 80 7a a6 b7 08 ed 40 47 d1 d5 b9 6b a3 e7 e8 63 6f d0 fa 77 b9 f7 cf 9e fd e0 ea 4b e9 16 ab ea 7a 72 0a e6 3c a9 dc ae 49 2d af dc 45 e5 eb 05 73 bb 71 aa ec 13 a2 ca 0a 99 21 11 d2 2c 41 21 10 b9 bf 6d 6f 35 3c 45 ca 94 0d ef 73 dc b6 82 23 58 8b d2 2d 5a 02 00 36 04 0a 57 7f ea 74 f0 a1 86 9f 0b e6 22 6e 87 ef f8 c3 2d 7b ad 4e fd ae 87 7b f2 8a 7b 49 c7 5b dc b6 e6 d4 14 cc cf b9 77 d2 71 fe 2f fa a0 8d 39 3b 9e 76 c6 55 2f 12 4d 63 68 ce de f9 0d b8 5c 88 4a 99 d7 3d 06 f1 91 13 0e 8c 5a b2 6a c7 86 10 80 3d d4 16 ed c7 9f f0 b5 bf 9f 6b dc d8 c5 5d be 8c 92 41 a2 a9 65 99 7b 5c 52 b9 92 b3 12 3d b5 a1 e6 f4 2b db 67 8e 29 f0 88 f1 f1 1f f1 d7 be 7f fd f1 bf 8a fe eb 19 19 bf 21 e2 43 a6 1a fb 78 7a a5 7a cc fe 81 f3 52 c0 30 b4 5a ab d2 1a b5 Data Ascii: $z@GkcowKzr<I-Esq!,A!mo5<Es#X-Z6Wt"n-{N{{I[wq/9;vU/Mch\J=Zj=k]Ae{\R=+g)!CxzzR0Z
2023-07-21 16:50:33 UTC	1278	IN	Data Raw: ea 14 68 0e 6c 3c 3c 01 af 85 4f 85 ef 47 8e 44 4e 20 2f a1 3b a0 23 68 1b ed a0 0f 61 bb 60 8b b1 13 b0 3e be 13 7e 0d ef e0 73 22 81 c8 88 24 31 4b dc 9f de 37 2d a5 c3 f4 7b 99 ff cd 2c ca 3c 96 09 b2 7b 64 3b 59 2f 5b cc be 40 3a c8 f5 e4 a5 a4 40 aa 64 85 5c 22 39 72 3d e7 93 73 73 ad 5c 27 77 5a 6e 90 33 a8 2d e0 b1 d4 1a aa 47 c5 a9 d3 14 4b a9 54 4c ab 4e 61 74 9d a6 e8 0e 7d 16 f3 1e 66 1f 73 3f d3 66 96 98 55 a6 c1 b4 18 8e 11 c5 b1 57 f6 0b 3b 60 1f d8 3c 2b b0 93 fa 0d 1a b6 cd de d9 07 77 e3 46 dc 8a 33 b9 87 38 e5 4f 9a ca c3 f9 b3 76 57 fe 13 5e c8 16 de 06 ce 1f ce bf c5 13 fc 1b 02 6e d3 42 4e b8 bb 78 ad bb e2 5e ab f8 6c b1 23 9e 2e 3e 16 9f 2d 1d 59 12 4b 4a e9 70 e9 8d 12 2c 1f 54 fe aa 82 54 60 e5 65 85 a8 70 15 b5 92 af 9c c2 37 ab Data Ascii: hl<<OGDN /;#ha`>~s"$1K7-{,<{d;Y/[@:@d\"9r=ss\'wZn3-GKTLNat}fs?fUW;`<+wF38OvW^nBNx^l#.>-YKJp,TT`ep7
2023-07-21 16:50:33 UTC	1294	IN	Data Raw: d3 31 ed ba a5 21 4e 47 71 29 1d b6 5e e3 18 a2 82 62 6a 07 9a 52 da 41 71 88 3c 2c ce 4b 35 e9 8a 64 77 be 5c 97 aa 74 0d a5 06 47 c0 e7 9d df d2 4b a0 30 66 c3 ea 01 b2 fd 00 84 37 c6 ac 2e 74 56 37 50 aa 07 a8 b0 59 36 f6 61 a5 1f 04 45 15 e8 29 48 a6 1c 3c c4 8a 73 33 61 bc 01 0b 2c 54 bf aa f6 a8 e1 1e 8e 44 29 f5 e2 71 d6 32 d0 34 00 07 72 ee 05 e8 85 4a ed 86 84 ef 3e 58 80 50 bb d0 ee 86 19 82 c8 50 bc e0 a0 ff b1 42 6c d7 dd 6a 50 c6 24 e3 52 1b f6 e1 3a 54 eb b8 da c6 d5 36 11 6e c3 d5 58 c9 3a 6e 18 88 26 16 29 dc 8b 1a 69 00 b1 c0 02 30 d4 0b f9 f9 b2 fd 2d db 14 9e 87 2e 26 88 cd be 5c ba f0 f9 7b 40 42 f4 a9 84 cf 45 2b a5 50 e4 a0 b9 f5 96 7d 6e f2 42 6d b6 c2 2e 4b 75 85 d5 e6 b0 da 6c a8 cd d6 44 1d e6 7d d6 39 40 50 bb d9 2f 24 02 62 af Data Ascii: 1!NGq)^bjRAq<,K5dw\tGK0f7.tV7PY6aE)H<s3a,TD)q24rJ>XPPBljP$R:T6nX:n&)i0-.&\{@BE+P}nBm.KulD}9@P/$b
2023-07-21 16:50:33 UTC	1310	IN	Data Raw: d9 e5 33 77 73 f1 d4 97 87 c1 34 4d c7 a0 a7 8a f0 7e ac 84 a9 9a 98 22 30 55 11 b5 42 14 9e 8a e1 9a 81 e2 f7 88 2e a8 f3 ab b3 f5 64 67 6e 68 22 30 f1 36 fc 0a 86 68 10 c9 4f 85 78 2e c7 61 d3 49 58 39 0e 93 a4 ab 45 78 a5 e6 ec 3d f4 69 88 88 2a 40 0e d1 44 86 f6 eb ab 2a 92 ca f2 b5 c5 13 60 d9 72 a3 af 08 0e 9c f5 00 f0 c7 35 ec ac 19 0f c9 53 17 1c e1 b0 fe ec f1 a0 33 88 60 a1 66 7c 41 02 f1 a5 bd e1 99 f1 5e ea 01 fb 08 ca ca 85 ee 2c 97 8e 6c 85 9c c6 9d ce 71 15 f7 87 d1 b4 3a c0 85 3e 01 f9 94 d9 31 37 a7 0f 38 3e bb 3b 89 f8 d4 03 4e f4 b9 23 8b e2 fb a7 df 82 56 48 9b e0 37 e5 01 56 62 ae f0 cb 03 6c 00 d8 3a 1a 8f fb 77 d3 3d c2 fe ff 44 d4 9f ae 33 b9 e4 ed 17 e6 6e f3 db 79 c3 8e 0c ac a8 c4 60 e9 78 8f ff e4 85 5b fc fb 0d 3d 85 7b 33 78 Data Ascii: 3ws4M~"0UB.dgnh"06hOx.aIX9Ex=i@D`r5S3`f\|A^,lq:>178>;N#VH7Vbl:w=D3ny`x[={3x
2023-07-21 16:50:33 UTC	1326	IN	Data Raw: 5e 43 c6 d2 92 b2 45 53 e5 c4 bf de f2 57 5e 7a c5 2a 6c 19 9f 78 db 07 cf 25 53 62 24 6f c4 97 11 3a 5e 6f d2 38 c5 cb 6f 11 59 fa bf ff 67 f7 99 66 11 ce 1d f8 72 a6 d7 36 51 ab 34 06 76 32 60 c5 18 7d 19 3b e2 50 8a 1f 14 18 7d 1a 7b ee e1 f1 07 bd 1d dd ae 3e d8 11 dc ee 21 76 bc 10 ad 3e 1d 1c ba f9 95 24 c9 53 6d b9 dd df 83 10 90 70 28 18 b8 f4 ae 7e 31 ff f2 9d be fd 49 ea ff 55 0e 26 f7 a5 a2 d5 8a 64 53 8f ac 92 26 8e 30 11 12 8b d2 53 3d 4f fa 91 da 4b a0 2f df 77 db bc eb fa bb ac d1 42 25 fe b1 0e d3 97 ab 74 53 2a ee 2b b5 ba 29 2b aa 99 24 66 2f 7c 64 f0 af c5 cf 3c 1c f8 6f 97 97 ad dc f4 d1 c0 db 5b 6f b7 db 31 cb 41 e9 2e bd 55 ba c2 86 dc 71 74 df e6 a5 64 e0 16 ec 45 bd 0e 9a 8e de 25 2d ea 9b 8a 9b 84 9b e9 e6 24 b6 05 d3 c0 28 53 5e Data Ascii: ^CESW^zlx%Sb$o:^o8oYgfr6Q4v2`};P}{>!v>$Smp(~1IU&dS&0S=OK/wB%tS+)+$f/\|d<o[o1A.UqtdE%-$(S^

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
200	192.168.2.5	50049	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:59 UTC	6320	OUT	GET /favicon.ico HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; fpc=ArQjXTss-z9PuVNWIVMS0rs; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2023-07-21 16:50:59 UTC	6324	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: efaf66c3-8488-4dfc-9632-a2e995d21200 x-ms-ests-server: 2.1.15811.7 - WUS2 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Date: Fri, 21 Jul 2023 16:50:59 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
201	192.168.2.5	50052	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:59 UTC	6321	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1127 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:59 UTC	6323	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-visually_complete%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-visually_complete%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22%3Anull%2C%5C%
2023-07-21 16:50:59 UTC	6325	IN	HTTP/1.1 204 No Content Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:59 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 714eabe8f02644e6a9098ac99fd95c42 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
202	192.168.2.5	50058	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:00 UTC	6373	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1083 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundarydAhPLaeB7h2c2gbk Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:00 UTC	6374	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 64 41 68 50 4c 61 65 42 37 68 32 63 32 67 62 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 64 41 68 50 4c 61 65 42 37 68 32 63 32 67 62 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 64 41 68 50 4c 61 65 42 37 68 32 63 32 67 62 6b 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarydAhPLaeB7h2c2gbkContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarydAhPLaeB7h2c2gbkContent-Disposition: form-data; name="t"deghsLEKJOGSu-1QvrwgkKX3------WebKitFormBoundarydAhPLaeB7h2c2gbkCont
2023-07-21 16:51:00 UTC	6382	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:51:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a7e7aaa2769d42798729277d69de9735 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
203	192.168.2.5	50055	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:00 UTC	6375	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
2023-07-21 16:51:00 UTC	6418	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 20105 Content-Type: text/css Content-Encoding: gzip Content-MD5: 51nXYTkRfeACFNqVw7bA7Q== Last-Modified: Wed, 17 May 2023 19:54:03 GMT ETag: 0x8DB5710770A6D5D X-Cache: TCP_HIT x-ms-request-id: ae453ac9-f01e-0038-1d92-b74e73000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0QF6zZAAAAABPVA6SDCQLTLZldMmDUDVzRE0yQUExMDkxMjA3MDM5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0dLe6ZAAAAACun4ZPirWcSbbsJJQjDDyiQ0gxQUEyMDIwNjA4MDE5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:00 GMT Connection: close
2023-07-21 16:51:00 UTC	6419	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2023-07-21 16:51:00 UTC	6434	IN	Data Raw: 1f 79 d1 1f 8d 39 f3 8f 3c 63 d1 2a 2c d3 2a 25 65 f0 2a c7 21 c8 58 c0 2f 2d e3 97 63 b7 a4 93 c1 67 70 06 f6 16 07 bf b7 9b 5f 39 2f ee 6d d5 57 b8 f2 d6 23 56 5b e6 64 62 b3 89 48 c7 44 40 ac 8b 12 82 6c 7a 5c c7 f4 9f 96 fe 0c cf 79 63 c5 45 b2 fa 4e 59 d1 58 57 59 54 63 11 b5 97 8d 45 92 a5 45 63 85 a6 3c b4 b1 ce cb 2b 6a f7 4b 2d 63 8c 4b 17 b9 2a b1 1e ee 68 d2 73 79 df d3 b9 a3 aa c8 97 1f 8b 22 c0 04 59 14 41 74 15 c2 3b 5a 66 75 4b a4 d5 66 a0 4a b0 d8 50 2b 04 d0 d6 ad 06 75 6b 41 43 ba e8 55 c3 c1 60 bc 4c 26 6e 9f b4 c6 19 64 a0 f6 21 80 d6 3e f9 b5 b2 05 0d eb 93 4f 5b 79 9f 1e a6 8c 7d 1e cf dc 03 77 34 cb c1 26 7e a1 a3 0d 81 a9 e1 86 c0 e4 78 03 95 19 dc f7 94 9b 0d c2 20 ad 02 68 68 68 1b 1e 26 02 71 8b b5 e1 a4 a0 a7 c9 e6 8d ae 15 59 Data Ascii: y9<c,%e!X/-cgp_9/mW#V[dbHD@lz\ycENYXWYTcEEc<+jK-cKhsy"YAt;ZfuKfJP+ukACU`L&nd!>O[y}w4&~x hhh&qY

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
204	192.168.2.5	50054	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:00 UTC	6377	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
2023-07-21 16:51:00 UTC	6386	IN	HTTP/1.1 200 OK Content-Length: 689016 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:00 GMT Connection: close
2023-07-21 16:51:00 UTC	6386	IN	Data Raw: 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.protot
2023-07-21 16:51:00 UTC	6402	IN	Data Raw: 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 30 Data Ascii: cked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 110
2023-07-21 16:51:00 UTC	6452	IN	Data Raw: 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2023-07-21 16:51:00 UTC	6468	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 75 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromCu
2023-07-21 16:51:00 UTC	6484	IN	Data Raw: 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: /g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", }, r
2023-07-21 16:51:00 UTC	6500	IN	Data Raw: 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 73 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(s
2023-07-21 16:51:00 UTC	6516	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2023-07-21 16:51:00 UTC	6532	IN	Data Raw: 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2023-07-21 16:51:00 UTC	6548	IN	Data Raw: 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2023-07-21 16:51:00 UTC	6564	IN	Data Raw: 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 69 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onRegi
2023-07-21 16:51:00 UTC	6580	IN	Data Raw: 74 65 6e 73 69 6f 6e 73 3a 20 21 30 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 73 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 70 69 63 6b 65 72 5f 61 63 63 6f 75 6e 74 5f 6d 73 61 5f 34 65 33 36 31 39 61 34 39 39 66 64 37 34 63 30 63 36 36 64 35 32 31 35 35 31 34 62 35 36 36 61 2e 70 6e 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 Data Ascii: tensions: !0, }), (e.exports = s); }, function (e, n, t) { e.exports = t.p + "content/images/picker_account_msa_4e3619a499fd74c0c66d5215514b566a.png"; }, function (e, n, t) { e.exports = t.p + "content/ima
2023-07-21 16:51:00 UTC	6596	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 20 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 47 69 74 48 75 62 46 65 64 3a 20 65 2e 69 73 47 69 74 48 75 62 46 65 64 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 Data Ascii: , isWindowsSso: e.isWindowsSso \|\| !1, isMeControlSession: !0, isGitHubFed: e.isGitHubFed \|\| !1, } ); }); }, parseBssoSessions: function (e) { ret
2023-07-21 16:51:01 UTC	6612	IN	Data Raw: 6f 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 43 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 55 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 53 68 61 72 65 64 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: o.setDefaultFocus = function () { var e = M(); e && e.setDefaultFocus && e.setDefaultFocus(); }), (o.getCurrentViewId = function () { return U(); }), (o.getSharedData = function () {
2023-07-21 16:51:01 UTC	6628	IN	Data Raw: 6e 20 6e 29 20 61 2e 63 61 6c 6c 28 6e 2c 20 74 29 20 26 26 20 28 65 5b 74 5d 20 3d 20 6e 5b 74 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 6e 29 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 20 6e 2c 20 74 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 65 5b 6e 5d 2e 6d 61 74 63 68 28 68 29 20 7c 7c 20 5b 5d 3b Data Ascii: n n) a.call(n, t) && (e[t] = n[t]); return e; } function t(e, n) { return (e.__proto__ = n), e; } function i(e, n, t, i) { var a = e[n].match(h) \|\| [];
2023-07-21 16:51:01 UTC	6644	IN	Data Raw: 20 20 61 5b 64 5b 6c 5d 2e 6e 61 6d 65 5d 20 3d 20 64 5b 6c 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 53 2e 61 2e 66 28 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 28 28 75 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 61 63 74 69 6f 6e 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 6d 65 74 68 6f 64 20 Data Ascii: a[d[l].name] = d[l].value; } t = S.a.f(t); var u = c.createElement("form"); for (var p in ((u.style.display = "none"), (u.action = r), (u.method
2023-07-21 16:51:01 UTC	6660	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 28 69 20 3d 20 21 30 29 2c 20 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 72 2c 20 22 64 69 72 74 79 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 21 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f Data Ascii: (i = !0), e.notifySubscribers(r, "dirty"); } finally { i = !1; } } }; })); }, no
2023-07-21 16:51:01 UTC	6676	IN	Data Raw: 20 20 20 20 20 20 20 20 63 20 3d 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 54 20 3d 20 53 2e 61 2e 44 61 28 22 5f 73 74 61 74 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 2e 6f 20 3d 20 53 2e 24 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: c = a; } }); } }); var T = S.a.Da("_state"); S.o = S.$ = function (e, n, t) { function i() { if (0 < arguments.length) {
2023-07-21 16:51:01 UTC	6692	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 2c 20 6c 20 3d 20 30 3b 20 28 64 20 3d 20 72 5b 6c 5d 29 3b 20 2b 2b 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 64 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 34 20 3d 3d 3d 20 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3e 3d 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 75 73 68 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 73 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (var d, l = 0; (d = r[l]); ++l) { var u = d.charCodeAt(0); if (44 === u) { if (0 >= c) { t.push( n && s.length
2023-07-21 16:51:01 UTC	6708	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 20 26 26 20 69 28 62 28 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 68 61 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 69 6e 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return a[e]; }; (g.get = function (e) { return a[e] && i(b(e)); }), (g.has = function (e) { return e in a;
2023-07-21 16:51:01 UTC	6724	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 20 2b 20 65 20 2b 20 22 27 3a 20 22 20 2b 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 53 2e 6a 2e 72 65 67 69 73 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 Data Ascii: } function o(e) { return function (n) { throw Error("Component '" + e + "': " + n); }; } var r = {}; (S.j.register = function (e, n) {
2023-07-21 16:51:01 UTC	6740	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 20 3d 20 61 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 6f 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 61 2c 20 74 2c 20 22 68 61 73 66 6f 63 75 73 22 2c 20 69 2c 20 21 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 4c 61 73 74 56 61 6c 75 65 20 3d 20 69 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b Data Ascii: o = a.body; } i = o === e; } (a = n()), S.m.eb(a, t, "hasfocus", i, !0), (e.__ko_hasfocusLastValue = i), (e.__k
2023-07-21 16:51:01 UTC	6756	IN	Data Raw: 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 69 2c 20 74 2c 20 22 76 61 6c 75 65 22 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 53 2e 61 2e 57 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 61 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 20 21 3d 20 65 2e 74 79 70 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 66 66 22 20 3d 3d 20 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 66 6f 72 6d 20 26 26 20 22 6f 66 66 22 20 3d 3d 20 65 2e 66 6f 72 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: S.m.eb(i, t, "value", a); }; !S.a.W \|\| !a \|\| "text" != e.type \|\| "off" == e.autocomplete \|\| (e.form && "off" == e.form.autocomplete
2023-07-21 16:51:01 UTC	6772	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 3d 3d 20 72 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 21 53 2e 61 2e 66 28 65 2e 5f 64 65 73 74 72 6f 79 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return ( e === r \|\| null === e \|\| !S.a.f(e._destroy) ); })), d(e); }, null,
2023-07-21 16:51:01 UTC	6788	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 28 69 2c 20 74 2e 65 6c 65 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6f 2c 20 72 2c 20 73 2c 20 63 Data Ascii: })(i, t.element), i ); })), i(n); }); }, }), (n = e.bindingHandlers.component.init), (e.bindingHandlers.component.init = function (t, o, r, s, c
2023-07-21 16:51:01 UTC	6804	IN	Data Raw: 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 33 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 69 2e 53 74 72 69 6e 67 3b 0a 20 20 20 20 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 3b 0a 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 Data Ascii: n, t) { var i = t(3), a = t(1), o = i.String; n.applyExtensions = function (e) { var n; (n = e.bindingProvider.instance.preprocessNode), (e.bindingProvider.instance.preprocessNode = function (t) { if (
2023-07-21 16:51:01 UTC	6820	IN	Data Raw: 20 3a 20 66 65 20 26 26 20 6e 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 26 26 20 28 73 20 3d 20 44 2e 55 73 65 72 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 65 20 7c 7c 20 6f 20 7c 7c 20 62 65 20 7c 7c 20 67 65 29 20 26 26 20 28 72 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6e 20 26 26 20 28 72 20 3d 20 73 20 3d 20 44 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 4c 6f 63 61 74 69 6f 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 69 6e 69 74 69 61 6c 56 69 65 77 49 64 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 63 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 28 74 2c Data Ascii: : fe && n.getServerError() && (s = D.Username); (ue \|\| o \|\| be \|\| ge) && (r = s); } sn && (r = s = D.RemoteConnectLocation), (n.initialViewId = r), (n.currentViewId = s); })(t,
2023-07-21 16:51:01 UTC	6836	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6e 28 65 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 61 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 Data Ascii: , (n.fetchSessions_onUpdateUserTiles = function (e, n) { setTimeout(function () { hn(e, n); }); }), (n.fetchSessions_onIncrementAsyncTileRequestCount = function () { n.asyncTileRequestCount
2023-07-21 16:51:01 UTC	6852	IN	Data Raw: 20 20 20 28 6e 2e 76 69 65 77 5f 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 69 73 52 65 71 75 65 73 74 50 65 6e 64 69 6e 67 28 65 29 2c 20 6e 2e 73 68 6f 77 4c 69 67 68 74 62 6f 78 50 72 6f 67 72 65 73 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6e 2e 61 67 72 65 65 6d 65 6e 74 54 79 70 65 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 76 69 65 77 5f 6f 6e 53 77 69 74 Data Ascii: (n.view_onSetPendingRequest = function (e) { n.isRequestPending(e), n.showLightboxProgress(e); }), (n.footer_agreementClick = function (e) { (n.agreementType = e), n.paginationControlMethods().view_onSwit
2023-07-21 16:51:01 UTC	6868	IN	Data Raw: 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 31 5f 63 66 65 39 63 62 36 32 65 62 62 36 36 30 35 65 30 33 66 62 38 64 32 38 35 63 36 31 31 62 34 38 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 33 2d 73 6d 61 6c 6c 5f 61 31 39 65 37 62 63 61 34 34 36 36 30 35 39 65 61 64 64 33 34 34 61 62 31 31 65 36 39 30 34 66 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 Data Ascii: p + "content/images/appbackgrounds/11_cfe9cb62ebb6605e03fb8d285c611b48.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/13-small_a19e7bca4466059eadd344ab11e6904f.jpg"; }, function (e, n, t) {
2023-07-21 16:51:01 UTC	6884	IN	Data Raw: 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 2d 73 6d 61 6c 6c 5f 34 66 36 33 63 34 33 37 61 32 30 39 61 37 61 64 30 62 63 66 37 63 35 33 32 61 34 62 35 63 32 62 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 5f 37 34 39 36 32 64 39 36 65 64 34 34 39 38 61 35 33 62 32 37 33 64 37 63 37 66 39 37 63 64 39 35 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 Data Ascii: e.exports = t.p + "content/images/appbackgrounds/67-small_4f63c437a209a7ad0bcf7c532a4b5c2b.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/67_74962d96ed4498a53b273d7c7f97cd95.jpg"; },
2023-07-21 16:51:01 UTC	6900	IN	Data Raw: 20 20 20 20 20 28 6e 20 3d 20 5f 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 75 2e 45 72 72 6f 72 28 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 20 22 45 78 74 65 6e 73 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 2e 22 2c 20 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 44 61 74 61 50 6f 69 6e 74 28 22 65 78 74 65 6e 73 69 6f 6e 2e 69 64 22 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 55 73 69 6e 67 20 43 68 72 6f 6d 65 20 65 78 74 65 6e 73 69 6f 6e 20 77 69 74 68 20 69 64 20 22 20 2b 20 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: (n = _.firstChild); if (!e) throw new u.Error("NoExtension", "Extension is not installed.", null); return ( p.logDataPoint("extension.id", e), p.logMessage("Using Chrome extension with id " + e),
2023-07-21 16:51:01 UTC	6916	IN	Data Raw: 20 20 20 43 68 65 63 6b 62 6f 78 3a 20 22 63 68 65 63 6b 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 42 75 74 74 6f 6e 3a 20 22 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 44 61 74 61 3a 20 22 45 78 63 65 70 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 3a 20 22 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 45 78 63 65 70 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 55 73 65 72 41 63 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: Checkbox: "checkbox", Button: "button", ExceptionData: "ExceptionData", PageActionData: "PageActionData", ExceptionsTablesuffix: "Exceptions", PageActtionsTablesuffix: "UserActions",
2023-07-21 16:51:01 UTC	6932	IN	Data Raw: 6f 76 69 64 65 72 20 3d 20 69 2e 45 6d 70 74 79 45 76 65 6e 74 50 72 6f 76 69 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 69 2e 45 76 65 6e 74 41 70 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 69 Data Ascii: ovider = i.EmptyEventProvider); }, , , , , function (e, n, t) { var i; !(function (e) { var n = t(1), i = t(2), a = i.EventApi, o = i
2023-07-21 16:51:01 UTC	6948	IN	Data Raw: 61 6c 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 3a 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 3a 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 45 72 72 6f 72 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 5f 6f 6e 43 61 6e 63 65 6c 2c 5c 6e 20 20 20 20 20 Data Ascii: alViewId,\n currentViewId: currentViewId,\n initialSharedData: initialSharedData,\n initialError: $loginPage.getServerError() },\n event: {\n cancel: paginationControl_onCancel,\n
2023-07-21 16:51:01 UTC	6964	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 20 2b 0a 20 20 20 20 20 20 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 49 64 70 52 65 64 69 72 65 63 74 53 70 65 65 64 62 75 6d 70 20 2b 0a 20 20 20 20 20 20 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 69 Data Ascii: redirect: $loginPage.view_onRedirect } }">\n </div>\n\n <div data-viewid="' + t(0).PaginatedState.IdpRedirectSpeedbump + '" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-i
2023-07-21 16:51:01 UTC	6980	IN	Data Raw: 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 4e 65 77 55 73 65 72 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 46 6f 75 6e 64 4d 53 41 73 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 73 46 6f 75 6e 64 4d 53 41 73 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 73 70 6f 73 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 66 50 4f 53 54 5f 46 6f 72 63 65 53 69 67 6e 69 6e 20 3f 20 31 20 3a 20 30 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 Data Ascii: \n <input type="hidden" name="NewUser" value="1" />\n <input type="hidden" name="FoundMSAs" data-bind="value: svr.sFoundMSAs" />\n <input type="hidden" name="fspost" data-bind="value: svr.fPOST_ForceSignin ? 1 : 0" />\n <input
2023-07-21 16:51:01 UTC	6996	IN	Data Raw: 69 20 3d 20 7b 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 70 6e 67 22 3a 20 33 34 33 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 73 76 67 22 3a 20 33 34 34 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 70 6e 67 22 3a 20 33 34 35 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 73 76 67 22 3a 20 33 34 36 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 70 6e 67 22 3a 20 33 34 37 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 73 76 67 22 3a 20 33 34 38 2c 0a 20 20 20 20 20 20 22 2e 2f Data Ascii: i = { "./AppCentipede_Beam.png": 343, "./AppCentipede_Beam.svg": 344, "./AppCentipede_Beam_white.png": 345, "./AppCentipede_Beam_white.svg": 346, "./AppCentipede_Bing.png": 347, "./AppCentipede_Bing.svg": 348, "./
2023-07-21 16:51:01 UTC	7012	IN	Data Raw: 6e 74 61 69 6e 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 68 65 61 64 65 72 5c 27 3a 20 74 72 75 65 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 65 61 64 65 72 4c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 68 65 61 64 65 72 4c 6f 67 6f 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3a 20 73 74 72 5b 5c 27 Data Ascii: ntainer">\n <div id="header" data-bind="externalCss: { \'header\': true }">\n <img id="headerLogo" role="img" data-bind="\n attr: {\n src: headerLogo,\n alt: str[\'
2023-07-21 16:51:01 UTC	7028	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 62 75 67 44 65 74 61 69 6c 73 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 6c 64 20 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 69 6e 67 2d 74 65 78 74 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 Data Ascii: <div class="table-cell">\n \x3c!-- ko if: svr.fShowCopyDebugDetailsLink --\x3e\n <div class="debug-details-header">\n <div id="debugDetailsHeader" class="bold debug-details-heading-text" role="heading" aria-leve
2023-07-21 16:51:01 UTC	7044	IN	Data Raw: 69 64 65 49 6e 4e 65 78 74 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 6f 75 74 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 4f 75 74 42 61 63 6b 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 69 6e 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 49 6e 42 61 63 6b 28 29 20 7d 5c 22 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 66 6f 72 65 61 63 68 3a 20 76 69 65 77 73 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 56 69 65 77 49 6e 64 65 78 28 29 20 3d 3d 3d 20 24 69 6e 64 65 78 28 29 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ideInNext(),\n 'slide-out-back': animate.isSlideOutBack(),\n 'slide-in-back': animate.isSlideInBack() }\">\n\n \x3c!-- ko foreach: views --\x3e\n \x3c!-- ko if: $parent.currentViewIndex() === $index() --\x3e\n
2023-07-21 16:51:01 UTC	7060	IN	Data Raw: 76 69 63 65 43 6f 64 65 20 3d 20 74 20 3f 20 74 2e 64 65 76 69 63 65 43 6f 64 65 20 3a 20 6e 75 6c 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 3d 20 22 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 75 73 65 45 76 69 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 73 68 6f 77 43 72 65 64 56 69 65 77 42 72 61 6e 64 69 6e 67 44 65 73 63 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 69 73 53 69 67 6e 75 70 50 6f 73 74 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 65 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 20 3d Data Ascii: viceCode = t ? t.deviceCode : null), (e.proofConfirmation = ""), (e.useEvictedCredentials = !1), (e.showCredViewBrandingDesc = !1), (e.isSignupPost = !1), Ne && ((e.availableCreds =
2023-07-21 16:51:01 UTC	7076	IN	Data Raw: 20 73 74 72 5b 5c 27 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 5c 27 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3a 20 73 76 72 2e 75 72 6c 53 69 67 6e 55 70 20 7c 7c 20 5c 27 23 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 73 69 67 6e 75 70 5f 6f 6e 43 6c 69 63 6b 22 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 49 73 53 65 6c 66 53 65 72 76 69 63 65 Data Ascii: str[\'STR_SSSU_Signup_Link\'],\n href: svr.urlSignUp \|\| \'#\',\n click: signup_onClick"></a>\n </div>\n \x3c!-- /ko --\x3e\n\n \x3c!-- ko ifnot: svr.fIsSelfService
2023-07-21 16:51:01 UTC	7092	IN	Data Raw: 3d 20 64 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 22 5c 78 33 63 21 2d 2d 20 22 20 2b 0a 20 20 20 20 20 20 28 74 28 31 33 29 2c 0a 20 20 20 20 20 20 27 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 69 64 3d 22 6d 6f 72 65 49 6e 66 6f 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 2c 20 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 74 Data Ascii: = d); }, function (e, n, t) { e.exports = "\x3c!-- " + (t(13), ' --\x3e\n\n\x3c!-- ko if: moreInfoTitle --\x3e\n<div id="moreInfoHeader" class="row" role="heading" aria-level="1" data-bind="text: moreInfoTitle, externalCss: { \'t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
205	192.168.2.5	50056	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:00 UTC	6379	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_zrspqvfkkfzwifqf_ppbrg2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
2023-07-21 16:51:00 UTC	6384	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:00 GMT Content-Type: application/x-javascript content-length: 49914 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Jun 2023 07:28:04 GMT ETag: 0x8DB6D720EE3C482 x-ms-request-id: 3f703eec-701e-0098-1814-b88815000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165100Z-h0px9u2brt7597d9ax5v6qvf1s000000073g000000004qxu X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:00 UTC	6386	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-07-21 16:51:00 UTC	6438	IN	Data Raw: dd 7d cb 76 23 47 b2 d8 de 5f 51 83 f1 51 37 af aa 21 3c f8 44 0b 6a 83 00 d8 c4 6d 10 80 00 b0 29 1d 49 c6 29 02 09 b2 a6 81 2a dc aa 42 b3 31 54 fb cc ce 8b bb f0 d6 de 79 e1 95 97 de 78 ef 4f 99 73 ae bf c3 f1 c8 cc ca 7a 00 20 25 8d e6 5e cf 99 d3 22 f2 11 19 19 19 19 19 11 19 19 f5 87 f9 da 9b 46 ae ef bd 14 07 8f ea 6f cb 7f e9 1d 3c ba f3 97 ee 0f de 4f 07 81 88 d6 81 67 e1 df 45 f1 69 e5 07 51 f8 fa a3 13 58 51 1d 8b ea 8f b2 ac f6 f8 d9 76 67 35 cf 5e f8 ce 4c cc 6a 7f 28 7f 7e 2d bb 0a ec 3a 75 16 8b 97 91 82 60 47 76 fc b7 7f 00 3f b8 5b fd 0f a5 b8 e2 33 0e e3 d6 1f 35 20 bf b8 ac 0b db 2f 4e eb 2e fc bb aa 17 0a b6 ff b2 74 f0 f9 e5 0f f1 34 6c df 76 01 f9 97 95 03 c2 d2 ab bb 2f cb 00 1f fe 73 74 60 07 f0 9f e3 03 db a9 07 c5 51 14 b8 de 5d Data Ascii: }v#G_QQ7!<Djm)I)*B1TyxOsz %^"Fo<OgEiQXQvg5^Lj(~-:u`Gv?[35 /N.t4lv/st`Q]

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
206	192.168.2.5	50059	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:01 UTC	7093	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
2023-07-21 16:51:02 UTC	7097	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:01 GMT Content-Type: application/x-javascript content-length: 190151 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 27 Oct 2022 14:24:13 GMT ETag: 0x8DAB826EBE74413 x-ms-request-id: f1f3b3c3-a01e-0035-35f3-bb9168000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165101Z-h0px9u2brt7597d9ax5v6qvf1s000000072g000000007wk6 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:02 UTC	7098	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2023-07-21 16:51:02 UTC	7113	IN	Data Raw: b6 bd 79 61 b5 15 fd 9b 44 b7 7f eb f6 e5 f6 0e f1 49 f8 cc a8 e9 63 a1 4e e0 6e 1f 8b 70 b8 ba 3a b4 fa 58 95 37 51 ca 7d ae 6a 4c 82 2a ca 33 a3 14 93 89 6d 53 35 e5 2f d0 a1 62 11 99 d6 ad 0d b7 66 84 ff 4e f2 a3 4f b8 0f 2c 5d cb a9 00 b0 ea ca 42 99 8c 64 f0 d1 2f 59 14 e3 cd 17 ac 76 fc 7e cd 7d 7b 59 c7 cc 76 48 00 45 b0 e5 9e 35 c8 67 46 e0 5a 6a b2 6b 8b 86 5c 3f 91 80 19 96 74 d1 ca 5f ec 60 a8 8e 6a fb 44 2a 8c d3 18 93 1c ca d4 80 a8 4b cd 60 56 4d b0 52 77 d2 c0 86 a3 d2 29 7f d7 0c 9f a5 89 f0 b1 e1 48 d1 84 a4 4d f7 0b 7d 44 d0 cb 75 a1 24 f3 2b 8b fb 4e aa f6 9d 2c 8c 9b c4 fb 89 23 60 24 32 cf b2 31 ea 1c 95 6d 69 82 e6 f1 c1 36 d9 59 2b 07 1d b0 82 94 af 27 d1 b6 ff f1 d6 22 e1 2e ac b0 1c 86 a0 f9 a1 4a b5 fd 86 60 3a 9c 93 ee 54 71 9d Data Ascii: yaDIcNnp:X7Q}jL3mS5/bfNO,]Bd/Yv~}{YvHE5gFZjk\?t_`jDK`VMRw)HM}Du$+N,#`$21mi6Y+'".J`:Tq
2023-07-21 16:51:02 UTC	7114	IN	Data Raw: 6b a7 6c 65 28 14 c8 04 77 82 2b 8d 38 5f 27 cc 30 79 b0 2d 27 fb b8 04 c8 a4 d1 b8 cf d6 40 fb e3 19 f0 f7 3e 5e 37 aa 6b 46 13 c0 46 7c f4 82 92 df 84 29 25 37 a5 3f 09 54 4b f3 d1 71 4f a1 76 78 aa 18 e3 c5 91 6a 75 11 de 41 3d c4 01 2d de b5 a5 84 7e 73 38 d0 94 20 80 a0 44 ab ab 51 53 7e f0 29 f0 0b 99 80 01 b4 89 9e 5c 59 24 5d 64 0c b6 a8 d4 05 38 ab 60 15 81 99 eb c9 9c 70 3c bd 53 00 50 5d 0c 45 17 86 1a 31 86 6c 4d 85 c2 f5 87 ac b1 0c 67 55 28 3e b9 f5 71 5d 9f 2a 45 55 48 cd 7b 3f 8e 2e f3 fa 5e d2 67 d3 d1 12 74 b9 af f4 59 0c a5 c9 0d 03 8a 07 30 69 16 cf 52 6d dc 30 57 a1 70 ef 0a 7b b4 64 d3 45 18 6d e5 e0 db 3b 9b 25 5f 93 f4 26 39 f3 84 c7 26 65 c9 4e 16 3d e6 75 0d ad 2e a3 fc 4a 78 55 16 56 af 34 bf 7f f8 ae 2c 20 98 e7 22 1e 2f 90 4e Data Ascii: kle(w+8_'0y-'@>^7kFF\|)%7?TKqOvxjuA=-~s8 DQS~)\Y$]d8`p<SP]E1lMgU(>q]*EUH{?.^gtY0iRm0Wp{dEm;%_&9&eN=u.JxUV4, "/N
2023-07-21 16:51:02 UTC	7130	IN	Data Raw: 9e 7c da de 1b 0e 33 da db ed 2d 99 72 b7 ab 52 b6 39 e5 03 c1 a5 d3 a9 f0 3c b0 c3 29 27 d7 69 12 49 77 02 bb 9c f2 2b 23 62 42 0b e3 47 4e 39 8d 27 aa 9a e7 22 e1 b6 d0 29 2f 44 53 8c 9b 16 8f ed 96 e8 36 e2 50 b7 44 4f df fe 35 4c da ad 85 3e be 8f ae c2 01 95 df f2 f7 a7 79 91 de 46 2a 00 b9 1a 9a 7c 6d 6f 6d 9a f0 4f 4d 11 91 ea 63 9a 8a fd 34 87 bb 7f 84 c1 1e d2 3c 10 41 cb 91 ee 68 02 0e 6f 6f a3 61 0c b7 05 db 26 38 14 df 9f 27 f9 24 1a c0 aa 6d 48 f3 2c 07 db c2 9d b9 b5 49 d5 9c 8b 87 2d 24 ec 6e d3 dc 9d 8b 87 1d ff 4d 3a 85 32 c3 ae 0f ea 83 a6 87 dd 15 3c f7 a1 0e c0 ed be 30 21 64 b5 af 59 5c c4 04 45 da 9b 26 d4 93 85 8e 8f 0e a8 27 07 1f 3f 1e 7f a4 a2 9f f7 3e 1e 1d 1e fd 44 5d 39 3c 7a 7b fc f1 c3 de d9 e1 f1 51 7b cb 04 73 84 72 db 42 Data Ascii: \|3-rR9<)'iIw+#bBGN9'")/DS6PDO5L>yF*\|momOMc4<Ahooa&8'$mH,I-$nM:2<0!dY\E&'?>D]9<z{Q{srB
2023-07-21 16:51:02 UTC	7146	IN	Data Raw: 31 43 fb fe 73 3c 81 bb 1e 65 55 74 81 f6 db 0d 98 04 d5 c5 78 b3 be ee 43 df d2 c4 94 b6 56 2b 08 8f 22 7f f8 e2 dc 93 16 2a fa c6 dc 33 a4 40 ea de 34 89 20 da 55 7b a5 54 44 5d 97 7b 8a 5f ea db 57 64 bb 7a 67 42 44 52 ca 2f ff ed 29 01 be 58 9d 14 66 70 ea dc ea 29 61 ad f8 8f 70 b0 64 5c ff ec 2f d3 78 0f 2a b9 7b 16 6b d3 12 49 d9 02 2a 2e 5a be 7a 3e 94 1b 38 fc b2 02 20 e6 16 36 35 5e 66 b3 1b 77 4f c0 7c 66 fd f1 9b f7 04 1d 6e 21 2e 8b e8 18 d1 e3 f5 68 58 3b b6 68 f1 b9 d1 33 c4 1b 2e 35 d8 38 f4 4c a9 cf 56 52 82 0c 1c ca 1c c1 ba 34 b0 73 7a 2e 15 da 50 8b a1 de 56 a9 a5 cc 41 2d 9b 66 2d 25 5d 91 69 6a a4 e8 12 a5 24 85 9b 1c 95 b3 34 4a 8c ca e8 4a d1 a2 2c bf b3 18 82 48 a9 58 70 08 22 64 43 23 bc 8c ee bc c0 77 80 33 c6 17 be a3 38 d8 da Data Ascii: 1Cs<eUtxCV+"3@4 U{TD]{_WdzgBDR/)Xfp)apd\/x{kI*.Zz>8 65^fwO\|fn!.hX;h3.58LVR4sz.PVA-f-%]ij$4JJ,HXp"dC#w38

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
207	192.168.2.5	50060	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:02 UTC	7095	OUT	GET /paper/cloud-docs/get-seen-users?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:02 UTC	7157	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:51:02 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:51:02 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: a949a920-dab9-4f02-9dff-8c3d45ddf31b X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 33de553b59e14cdda03f0b6621c1805f Connection: close
2023-07-21 16:51:02 UTC	7159	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
208	192.168.2.5	50061	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:02 UTC	7159	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
2023-07-21 16:51:03 UTC	7163	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:02 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: d2797436-901e-002e-1561-b8045d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165102Z-dhghddyytx3t76qmmn1wgnc6cs000000031g000000005mdk X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:03 UTC	7164	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-07-21 16:51:03 UTC	7179	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
209	192.168.2.5	50062	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:02 UTC	7161	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA
2023-07-21 16:51:03 UTC	7182	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 content-length: 109863 Content-Type: application/x-javascript Content-Encoding: gzip Content-MD5: todPgSbCBNAfnMYQ5LVdvw== Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 X-Cache: TCP_MISS x-ms-request-id: 43338fa7-301e-0018-35f3-bbdf40000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0dre6ZAAAAABfSGKJEhEtSq6ORVCrM/bCRE0yQUExMDkxMjA4MDM3ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0dre6ZAAAAABaBqXtymp5QbGCdvbWhy+GQ0gxQUEyMDIwNjA5MDI3ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:02 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:03 UTC	7184	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2023-07-21 16:51:03 UTC	7198	IN	Data Raw: ba e9 1c 49 ef 5b 1e ef ee f8 e4 70 f0 d8 bf 43 5f ae 43 ff bc 3b c0 34 36 dc 4b ed f0 71 30 78 0c cc e9 d9 63 7f 8c b1 b8 e2 b4 a2 30 23 05 39 3a e6 0f ff 06 c3 c9 9a 0d c0 38 d0 8f e6 be 06 02 eb bb 94 bb e7 74 bc ac 4b ee 38 93 c9 a0 bf 4e bb bc 25 ee 4f 89 9e 89 bb 87 84 be 57 1c 76 29 ba 5a 71 80 61 fa 26 f4 62 13 d1 a4 f9 67 a9 6f 38 2c 0f fb 47 ba ee b0 59 f7 fc fc 64 8d be 1a 27 87 fb e9 1a db 35 be a5 51 ab 8f 0f 5d 1f 0f 86 eb 21 30 3f d8 cc fe c9 21 36 50 6b 89 07 8b 4a a5 4f 93 c3 3e 49 7a 56 62 d6 e4 d6 2a 53 57 f2 d8 e7 91 b3 cf b3 f5 f0 a8 1f 50 ef b2 53 f7 00 94 2d 9a c6 d6 bf 18 98 9e 03 46 6b 07 bb 9a ad a7 e7 f4 64 80 4d 90 c7 37 53 fe c7 f3 c9 3d 57 e4 2c f8 eb fb a2 b3 86 ff fe c0 d3 16 6c d0 d4 5e be fc 89 32 3b d4 7d 82 45 6c 83 b1 Data Ascii: I[pC_C;46Kq0xc0#9:8tK8N%OWv)Zqa&bgo8,GYd'5Q]!0?!6PkJO>IzVb*SWPS-FkdM7S=W,l^2;}El
2023-07-21 16:51:03 UTC	7200	IN	Data Raw: 47 3a 46 60 44 ea 82 43 b7 40 cf b8 46 b1 64 4e 34 c5 8e 43 9b 09 94 de 68 8a e0 06 66 3f 71 77 89 ce 72 71 60 77 6e 12 e4 ee a0 3b 27 8f bb 5a e9 96 4f c4 70 2b 9f c2 99 d9 a5 6a b4 82 74 0b 5d b1 60 38 f5 48 89 92 5b ed a7 3c 92 17 b2 63 d7 9d 90 49 1d c9 75 0d b7 24 74 de 5a ec 8b db e4 89 61 d0 fa 46 22 c8 3d 37 7f 24 2d a2 61 fc 92 95 e4 0a 6b 53 be 61 be 34 d6 b3 d9 30 a6 04 4b c1 88 e9 11 c3 49 f3 ea 73 2a 63 6c 98 ee 3f b5 11 00 47 35 75 b3 7c e9 8c 98 66 37 99 6f 7a 24 71 3f dc 3b 21 46 0b 2e 53 3c 89 7d 5c d8 bc a7 b1 ad 68 a1 46 e6 a2 e9 77 72 17 ca 8f eb db dc f3 37 63 03 8c 92 19 47 ee 0a 41 49 6c 96 51 a6 f8 ee 26 cb 6e 8a f5 8d f7 5b 78 6c e3 33 85 16 bc a2 1b 67 74 ed c0 ec 0e c5 e0 3a 84 b7 66 87 aa 51 4c ea 8e 2f 08 66 bc 09 9c 8a a9 08 Data Ascii: G:F`DC@FdN4Chf?qwrq`wn;'ZOp+jt]`8H[<cIu$tZaF"=7$-akSa40KIs*cl?G5u\|f7oz$q?;!F.S<}\hFwr7cGAIlQ&n[xl3gt:fQL/f
2023-07-21 16:51:03 UTC	7209	IN	Data Raw: 9f e6 9e fd b9 6d 1b e9 df bf bf c2 66 3d 0e 11 c1 cf 3c 9a 90 61 75 8e ab 76 da 89 e3 8c d5 5c e6 46 56 3c b4 4c d9 6c 64 31 25 29 3b 89 a5 fb db 6f 1f 00 08 90 94 e2 e4 7a 33 df 0f 36 29 10 cf c5 62 81 7d 60 97 82 96 eb 1f 05 67 82 d4 4b cc 7b 71 81 5e 3b 90 a8 d3 6f c0 f5 84 5f c6 63 7a b2 eb 76 27 0f 27 1d 4c 26 3a b5 a0 e4 e4 3a 2d e9 45 b1 61 4e 19 95 76 0c d5 3b e9 13 53 45 53 8d 3a 18 62 47 55 6c b2 c8 65 80 6b 24 56 05 45 d1 99 b5 4e d2 dc d8 27 ab 98 ed d1 ed 45 53 84 e5 a1 a7 65 f8 76 75 91 e6 f7 6b 84 b2 2e 69 62 76 1d 17 1f 5a e4 64 bb 24 ac fc aa d3 c8 15 81 3e ea eb 7d 90 0c d5 7a 0d f1 1d f3 b7 f9 cf 43 15 53 36 81 b3 96 7a 81 6d 37 9f ba bf 4c f4 93 1c f7 c2 a5 f1 4e 9e 3f fe 9b a2 22 c1 ee 4b c1 6f 9e 3e 7f f2 b5 70 9e f6 ce dc a6 05 6f Data Ascii: mf=<auv\FV<Lld1%);oz36)b}`gK{q^;o_czv''L&::-EaNv;SES:bGUlek$VEN'ESevuk.ibvZd$>}zCS6zm7LN?"Ko>po

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.5	49786	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:33 UTC	1419	OUT	GET /static/fonts/SourceCodePro-It-1058.otf.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1420	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 64312 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 02 Feb 2023 02:19:58 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:33 GMT Cache-Control: max-age=43200 ETag: "39746fa9261b312cccbdc84fa3868586" Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 d75d7156b5e1833582c3070298720664.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: D6NRZ8oYY5JcSDKQAa-8hBaVE9ihTxNIAw1a9O06ltyeT4ScpL1-JA== Age: 7095
2023-07-21 16:50:33 UTC	1421	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 fb 38 00 0d 00 00 00 01 a6 5c 00 00 fa e5 00 01 0e d9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 84 ea 71 1a 84 06 1b a5 7e 1c ad 3e 06 60 00 d9 0e 01 36 02 24 03 93 70 04 06 05 99 16 07 20 5b 6c a5 91 09 99 43 76 7d 81 a1 2c 4d e0 dd 98 51 e7 10 93 8f 21 c5 aa 28 b8 ff bc 11 cd b1 7b 52 22 9b 76 c6 86 3b 7c ff 89 da 32 67 23 63 8f 03 48 ea 72 b3 ff ff ff ff ff ff 5f 97 2c 62 6c ed 2c b0 b7 b3 c7 a9 20 42 a2 9a e9 67 a6 e5 d7 bf 6e 86 c9 93 38 25 85 e5 d4 b2 04 92 94 05 b6 ee cb 95 94 88 2e 2f 60 25 ec 69 6b 19 36 01 a3 36 c9 8b b6 06 57 cc 53 53 b6 9d 74 38 27 58 6e e6 5d df f6 b2 da 1f e0 85 1b 70 d9 92 b0 a7 90 52 8e fd 1c 12 2d 4c 38 ba 64 29 d5 8e af 7e 1a df ce 92 73 9e 33 f2 4d 35 53 cd 54 33 Data Ascii: wOF2OTTO8\Fq~>`6$p [lCv},MQ!({R"v;\|2g#cHr_,bl, Bgn8%./`%ik66WSSt8'Xn]pR-L8d)~s3M5ST3
2023-07-21 16:50:33 UTC	1437	IN	Data Raw: cb e1 92 d6 a5 3c 54 e4 53 92 af d8 d9 e1 32 af cb 91 5c a9 ed f0 04 b7 8d b7 6f ae 6e eb 7f 6a df 63 1a 31 00 11 07 34 20 a6 56 f6 55 d8 f6 32 47 21 94 48 39 d9 79 38 63 45 c5 00 7a 85 53 8f bd c2 ac ba c5 be 1e 09 a9 c1 2a e6 6e 77 96 9f cf c0 e4 5f 2b 60 5c fe 7d 15 0e dd 3a dd 4e e7 51 e4 21 70 ab 0b e9 bd 1e 4c 8b e0 70 aa 94 50 a1 a9 c8 2b 68 01 24 fa 51 8f 3b a7 a6 2b cb 1e ba 8c 5d 5b eb 4a c4 ce 7a 5d 81 a9 3a 23 66 d7 37 9c f7 7b 85 c6 71 95 c2 e5 a2 52 8c d4 94 ac b8 54 c3 53 b1 7c 24 af 28 93 70 4d c9 06 2a da b0 27 ac 42 14 c0 0e 22 27 0d 68 b1 12 8a 23 35 e3 44 61 5c 6e a6 28 90 a7 74 23 8f c9 e9 b2 a7 53 56 5a c2 24 4f 5b 03 f2 cf e7 42 3d 34 84 b0 f1 d0 12 e6 b7 56 ec 3d 2b c8 37 9d 78 d3 7f 40 6d 7a a4 b5 75 ed f6 c9 c6 3c 92 c5 23 ba 1c Data Ascii: <TS2\onjc14 VU2G!H9y8cEzSnw_+`\}:NQ!pLpP+h$Q;+][Jz]:#f7{qRTS\|$(pM'B"'h#5Da\n(t#SVZ$O[B=4V=+7x@mzu<#
2023-07-21 16:50:33 UTC	1487	IN	Data Raw: 39 07 99 ed 9f 0e 00 a0 07 c9 47 e0 83 6c 70 7c 2b ea 00 65 32 89 c9 1c cd 4b 3c 64 5f c9 b4 e3 83 46 33 7d a1 9f 81 27 8d fa 3d 8e 90 c8 00 11 44 44 63 89 07 f6 4f 81 7e fb 53 5f 60 24 78 7e 5f 75 1f 62 78 28 f9 7e f2 e2 5c e6 fa 58 be 01 50 99 a1 30 a0 4c b4 a2 cc ce 37 4a 94 59 2f 61 27 89 01 01 63 e2 13 de b5 49 71 ad 95 a8 48 30 d4 d9 88 8e 7f 16 b6 06 ac 31 76 92 03 c8 1f 0b d0 3c e1 1b d0 3c 0a 5c 1b 0a 82 49 a8 b5 b7 95 c7 25 64 56 4a a1 bf 76 bc 27 4f 5d ff e9 e1 f7 8f 7e 5a ea 7d 23 7f 2a b1 ed 7d 8a 82 5e 34 51 3a db cb f2 ca 26 98 74 a2 ba 40 92 cd 8c 4a b6 5d c4 24 6f 8a 10 00 b5 ca ff 32 5c 52 84 a9 ff 24 f8 40 44 a1 fd 05 9f 55 f9 87 c3 9f 3d b1 b4 c7 f0 7b f9 1f c8 83 e7 ff f3 8f 5e a7 78 66 d9 fd 95 4f 7a ff 7e 34 5e e6 48 de 7d 43 88 0f Data Ascii: 9Glp\|+e2K<d_F3}'=DDcO~S_`$x~_ubx(~\XP0L7JY/a'cIqH01v<<\I%dVJv'O]~Z}#*}^4Q:&t@J]$o2\R$@DU={^xfOz~4^H}C
2023-07-21 16:50:33 UTC	1503	IN	Data Raw: 4a 66 bc ac 0a 45 9e 78 c8 b9 1e 31 aa a5 c9 7d 65 f1 8a 33 ba e2 b0 a1 f3 7a 7e 86 a8 8b 76 6b 55 cf e4 f2 fb 54 b1 a3 f1 c0 43 4e 93 46 2b 05 49 ae 88 b7 4b 4e e0 10 84 d1 22 55 61 64 4c 4e 2d a5 13 91 95 12 a7 64 f5 08 f6 e7 68 e9 80 55 f2 f3 c6 98 a9 e4 71 50 2b 97 a5 8a 2e 08 60 7f 00 cb e4 cd 8a 62 92 fa 21 c1 2d f3 a1 95 63 22 6a 28 05 23 86 25 65 f6 2d 2f 56 09 cd f5 d0 87 72 31 b1 cb 69 d9 36 aa e2 8c 32 5f 44 e7 cb d9 fb 02 15 44 5b a2 9f 3d 25 ef 6d 65 66 b6 19 cb e4 63 0b 9b 73 52 fc 44 01 ed d9 0c 2e 56 f0 4d d5 e0 35 13 48 4a 30 43 17 59 54 18 79 4e 99 51 7f b7 e3 d0 91 c0 a6 1e 86 52 e9 4f 51 01 7e 86 10 23 11 b1 d1 c9 22 42 09 1c 1a e2 74 e3 1a 5d b3 a7 03 fa 7a 07 ab 34 66 f4 5f bc 8e bf b4 4a c8 48 34 7a a2 e3 41 9f f6 e3 96 45 ff 68 75 Data Ascii: JfEx1}e3z~vkUTCNF+IKN"UadLN-dhUqP+.`b!-c"j(#%e-/Vr1i62_DD[=%mefcsRD.VM5HJ0CYTyNQROQ~#"Bt]z4f_JH4zAEhu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
210	192.168.2.5	50063	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:03 UTC	7181	OUT	GET /?uiqqiefr HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
2023-07-21 16:51:03 UTC	7216	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 4a6d94ff-9eaa-4024-a4e4-dffcde148500 x-ms-ests-server: 2.1.15811.5 - SCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+chi"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; expires=Sun, 20-Aug-2023 16:51:03 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; domain=mvolenoazaqoerutien.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA; expires=Sun, 20-Aug-2023 16:51:03 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Fri, 21 Jul 2023 16:51:02 GMT Connection: close content-length: 36948 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:03 UTC	7218	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2023-07-21 16:51:03 UTC	7232	IN	Data Raw: 54 43 37 4b 4c 38 35 50 4b 38 6e 50 79 38 6e 4d 53 39 56 4c 7a 73 5f 56 79 79 39 4b 7a 30 77 42 73 59 71 45 75 41 52 59 6e 71 78 61 59 4d 30 68 36 6a 56 78 5f 71 46 6a 32 57 79 70 41 72 4d 59 4f 65 4e 7a 4d 73 76 41 4b 6c 63 78 4b 68 4d 32 54 76 38 43 49 2d 4d 4c 52 73 5a 62 54 49 4c 2d 52 65 6d 65 4b 65 48 46 62 71 6b 70 71 55 57 4a 4a 5a 6e 35 65 52 64 59 42 46 36 78 38 42 67 77 57 33 46 77 63 41 6b 77 53 44 41 6f 4d 50 78 67 59 56 7a 45 43 72 54 31 5f 35 52 63 72 31 58 7a 56 42 79 57 50 4c 6e 5f 35 35 35 49 4b 38 4d 70 56 76 31 45 54 35 65 4d 6c 4c 51 71 34 39 78 4b 78 37 49 30 43 34 73 30 37 64 78 77 66 38 64 79 62 38 74 43 66 38 2d 69 4c 4a 38 53 6c 30 53 33 41 4c 4d 41 31 37 7a 55 35 4a 78 51 57 32 4d 72 77 77 6c 73 51 68 50 59 6d 45 36 78 4d 58 78 Data Ascii: TC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARYnqxaYM0h6jVx_qFj2WypArMYOeNzMsvAKlcxKhM2Tv8CI-MLRsZbTIL-RemeKeHFbqkpqUWJJZn5eRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECrT1_5Rcr1XzVByWPLn_555IK8MpVv1ET5eMlLQq49xKx7I0C4s07dxwf8dyb8tCf8-iLJ8Sl0S3ALMA17zU5JxQW2MrwwlsQhPYmE6xMXx
2023-07-21 16:51:03 UTC	7248	IN	Data Raw: 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 65 3d 62 2e 73 68 69 66 74 28 29 3b 65 26 26 76 2e 24 57 65 62 57 61 74 73 6f 6e 5b 65 2e 63 6d 64 4e 61 6d 65 5d 2e 61 70 70 6c 79 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 2c 65 2e 61 72 67 73 29 7d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 76 2e 24 57 65 62 57 61 74 73 6f 6e 7c 7c 76 2e 24 57 65 62 57 61 74 73 6f 6e 2e 69 73 50 72 6f 78 79 29 7b 69 66 28 21 77 26 26 4a 53 4f 4e 29 7b 74 72 79 7b 76 61 72 20 65 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 79 2e 75 72 6c 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 41 63 63 65 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 2c 0a 65 2e 73 65 74 Data Ascii: length>0;){var e=b.shift();e&&v.$WebWatson[e.cmdName].apply(v.$WebWatson,e.args)}})}}function t(){if(!v.$WebWatson\|\|v.$WebWatson.isProxy){if(!w&&JSON){try{var e=new XMLHttpRequest;e.open("POST",y.url),e.setRequestHeader("Accept","application/json"),e.set

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
211	192.168.2.5	50065	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:03 UTC	7215	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
2023-07-21 16:51:04 UTC	7265	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:03 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: d2797436-901e-002e-1561-b8045d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165103Z-h0px9u2brt7597d9ax5v6qvf1s0000000720000000008xw6 X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:04 UTC	7266	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-07-21 16:51:04 UTC	7281	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
212	192.168.2.5	50066	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:03 UTC	7255	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_zrspqvfkkfzwifqf_ppbrg2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:04 UTC	7264	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 content-length: 49914 Content-Type: application/x-javascript Content-Encoding: gzip Content-MD5: 3kYC/BFvllaJ8q8QYmfF9w== Last-Modified: Thu, 15 Jun 2023 07:28:04 GMT ETag: 0x8DB6D720EE3C482 X-Cache: TCP_HIT x-ms-request-id: 098cb751-c01e-009b-0ff8-b4f513000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0OkazZAAAAAADWrT1ITDvS41Kb7LOTIhnRE0yQUExMDkxMjA3MDQ1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0d7e6ZAAAAACUffClP0RCQ4z1xlHUY88WQ0gxQUEyMDIwNjA4MDQ5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:03 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:04 UTC	7265	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-07-21 16:51:04 UTC	7322	IN	Data Raw: dd 7d cb 76 23 47 b2 d8 de 5f 51 83 f1 51 37 af aa 21 3c f8 44 0b 6a 83 00 d8 c4 6d 10 80 00 b0 29 1d 49 c6 29 02 09 b2 a6 81 2a dc aa 42 b3 31 54 fb cc ce 8b bb f0 d6 de 79 e1 95 97 de 78 ef 4f 99 73 ae bf c3 f1 c8 cc ca 7a 00 20 25 8d e6 5e cf 99 d3 22 f2 11 19 19 19 19 19 11 19 19 f5 87 f9 da 9b 46 ae ef bd 14 07 8f ea 6f cb 7f e9 1d 3c ba f3 97 ee 0f de 4f 07 81 88 d6 81 67 e1 df 45 f1 69 e5 07 51 f8 fa a3 13 58 51 1d 8b ea 8f b2 ac f6 f8 d9 76 67 35 cf 5e f8 ce 4c cc 6a 7f 28 7f 7e 2d bb 0a ec 3a 75 16 8b 97 91 82 60 47 76 fc b7 7f 00 3f b8 5b fd 0f a5 b8 e2 33 0e e3 d6 1f 35 20 bf b8 ac 0b db 2f 4e eb 2e fc bb aa 17 0a b6 ff b2 74 f0 f9 e5 0f f1 34 6c df 76 01 f9 97 95 03 c2 d2 ab bb 2f cb 00 1f fe 73 74 60 07 f0 9f e3 03 db a9 07 c5 51 14 b8 de 5d Data Ascii: }v#G_QQ7!<Djm)I)*B1TyxOsz %^"Fo<OgEiQXQvg5^Lj(~-:u`Gv?[35 /N.t4lv/st`Q]

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
213	192.168.2.5	50067	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:03 UTC	7256	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:04 UTC	7284	IN	HTTP/1.1 200 OK Content-Length: 689016 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:03 GMT Connection: close
2023-07-21 16:51:04 UTC	7284	IN	Data Raw: 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.protot
2023-07-21 16:51:04 UTC	7300	IN	Data Raw: 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 30 Data Ascii: cked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 110
2023-07-21 16:51:04 UTC	7340	IN	Data Raw: 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2023-07-21 16:51:04 UTC	7356	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 75 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromCu
2023-07-21 16:51:04 UTC	7372	IN	Data Raw: 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: /g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", }, r
2023-07-21 16:51:04 UTC	7388	IN	Data Raw: 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 73 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(s
2023-07-21 16:51:04 UTC	7404	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2023-07-21 16:51:04 UTC	7420	IN	Data Raw: 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2023-07-21 16:51:04 UTC	7436	IN	Data Raw: 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2023-07-21 16:51:04 UTC	7452	IN	Data Raw: 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 69 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onRegi
2023-07-21 16:51:04 UTC	7468	IN	Data Raw: 74 65 6e 73 69 6f 6e 73 3a 20 21 30 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 73 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 70 69 63 6b 65 72 5f 61 63 63 6f 75 6e 74 5f 6d 73 61 5f 34 65 33 36 31 39 61 34 39 39 66 64 37 34 63 30 63 36 36 64 35 32 31 35 35 31 34 62 35 36 36 61 2e 70 6e 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 Data Ascii: tensions: !0, }), (e.exports = s); }, function (e, n, t) { e.exports = t.p + "content/images/picker_account_msa_4e3619a499fd74c0c66d5215514b566a.png"; }, function (e, n, t) { e.exports = t.p + "content/ima
2023-07-21 16:51:04 UTC	7484	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 20 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 47 69 74 48 75 62 46 65 64 3a 20 65 2e 69 73 47 69 74 48 75 62 46 65 64 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 Data Ascii: , isWindowsSso: e.isWindowsSso \|\| !1, isMeControlSession: !0, isGitHubFed: e.isGitHubFed \|\| !1, } ); }); }, parseBssoSessions: function (e) { ret
2023-07-21 16:51:04 UTC	7501	IN	Data Raw: 6f 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 43 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 55 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 53 68 61 72 65 64 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: o.setDefaultFocus = function () { var e = M(); e && e.setDefaultFocus && e.setDefaultFocus(); }), (o.getCurrentViewId = function () { return U(); }), (o.getSharedData = function () {
2023-07-21 16:51:04 UTC	7517	IN	Data Raw: 6e 20 6e 29 20 61 2e 63 61 6c 6c 28 6e 2c 20 74 29 20 26 26 20 28 65 5b 74 5d 20 3d 20 6e 5b 74 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 6e 29 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 20 6e 2c 20 74 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 65 5b 6e 5d 2e 6d 61 74 63 68 28 68 29 20 7c 7c 20 5b 5d 3b Data Ascii: n n) a.call(n, t) && (e[t] = n[t]); return e; } function t(e, n) { return (e.__proto__ = n), e; } function i(e, n, t, i) { var a = e[n].match(h) \|\| [];
2023-07-21 16:51:04 UTC	7533	IN	Data Raw: 20 20 61 5b 64 5b 6c 5d 2e 6e 61 6d 65 5d 20 3d 20 64 5b 6c 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 53 2e 61 2e 66 28 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 28 28 75 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 61 63 74 69 6f 6e 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 6d 65 74 68 6f 64 20 Data Ascii: a[d[l].name] = d[l].value; } t = S.a.f(t); var u = c.createElement("form"); for (var p in ((u.style.display = "none"), (u.action = r), (u.method
2023-07-21 16:51:04 UTC	7549	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 28 69 20 3d 20 21 30 29 2c 20 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 72 2c 20 22 64 69 72 74 79 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 21 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f Data Ascii: (i = !0), e.notifySubscribers(r, "dirty"); } finally { i = !1; } } }; })); }, no
2023-07-21 16:51:04 UTC	7565	IN	Data Raw: 20 20 20 20 20 20 20 20 63 20 3d 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 54 20 3d 20 53 2e 61 2e 44 61 28 22 5f 73 74 61 74 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 2e 6f 20 3d 20 53 2e 24 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: c = a; } }); } }); var T = S.a.Da("_state"); S.o = S.$ = function (e, n, t) { function i() { if (0 < arguments.length) {
2023-07-21 16:51:04 UTC	7581	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 2c 20 6c 20 3d 20 30 3b 20 28 64 20 3d 20 72 5b 6c 5d 29 3b 20 2b 2b 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 64 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 34 20 3d 3d 3d 20 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3e 3d 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 75 73 68 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 73 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (var d, l = 0; (d = r[l]); ++l) { var u = d.charCodeAt(0); if (44 === u) { if (0 >= c) { t.push( n && s.length
2023-07-21 16:51:04 UTC	7597	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 20 26 26 20 69 28 62 28 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 68 61 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 69 6e 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return a[e]; }; (g.get = function (e) { return a[e] && i(b(e)); }), (g.has = function (e) { return e in a;
2023-07-21 16:51:04 UTC	7613	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 20 2b 20 65 20 2b 20 22 27 3a 20 22 20 2b 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 53 2e 6a 2e 72 65 67 69 73 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 Data Ascii: } function o(e) { return function (n) { throw Error("Component '" + e + "': " + n); }; } var r = {}; (S.j.register = function (e, n) {
2023-07-21 16:51:04 UTC	7629	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 20 3d 20 61 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 6f 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 61 2c 20 74 2c 20 22 68 61 73 66 6f 63 75 73 22 2c 20 69 2c 20 21 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 4c 61 73 74 56 61 6c 75 65 20 3d 20 69 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b Data Ascii: o = a.body; } i = o === e; } (a = n()), S.m.eb(a, t, "hasfocus", i, !0), (e.__ko_hasfocusLastValue = i), (e.__k
2023-07-21 16:51:04 UTC	7648	IN	Data Raw: 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 69 2c 20 74 2c 20 22 76 61 6c 75 65 22 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 53 2e 61 2e 57 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 61 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 20 21 3d 20 65 2e 74 79 70 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 66 66 22 20 3d 3d 20 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 66 6f 72 6d 20 26 26 20 22 6f 66 66 22 20 3d 3d 20 65 2e 66 6f 72 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: S.m.eb(i, t, "value", a); }; !S.a.W \|\| !a \|\| "text" != e.type \|\| "off" == e.autocomplete \|\| (e.form && "off" == e.form.autocomplete
2023-07-21 16:51:04 UTC	7664	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 3d 3d 20 72 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 21 53 2e 61 2e 66 28 65 2e 5f 64 65 73 74 72 6f 79 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return ( e === r \|\| null === e \|\| !S.a.f(e._destroy) ); })), d(e); }, null,
2023-07-21 16:51:04 UTC	7680	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 28 69 2c 20 74 2e 65 6c 65 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6f 2c 20 72 2c 20 73 2c 20 63 Data Ascii: })(i, t.element), i ); })), i(n); }); }, }), (n = e.bindingHandlers.component.init), (e.bindingHandlers.component.init = function (t, o, r, s, c
2023-07-21 16:51:04 UTC	7699	IN	Data Raw: 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 33 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 69 2e 53 74 72 69 6e 67 3b 0a 20 20 20 20 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 3b 0a 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 Data Ascii: n, t) { var i = t(3), a = t(1), o = i.String; n.applyExtensions = function (e) { var n; (n = e.bindingProvider.instance.preprocessNode), (e.bindingProvider.instance.preprocessNode = function (t) { if (
2023-07-21 16:51:04 UTC	7715	IN	Data Raw: 20 3a 20 66 65 20 26 26 20 6e 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 26 26 20 28 73 20 3d 20 44 2e 55 73 65 72 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 65 20 7c 7c 20 6f 20 7c 7c 20 62 65 20 7c 7c 20 67 65 29 20 26 26 20 28 72 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6e 20 26 26 20 28 72 20 3d 20 73 20 3d 20 44 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 4c 6f 63 61 74 69 6f 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 69 6e 69 74 69 61 6c 56 69 65 77 49 64 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 63 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 28 74 2c Data Ascii: : fe && n.getServerError() && (s = D.Username); (ue \|\| o \|\| be \|\| ge) && (r = s); } sn && (r = s = D.RemoteConnectLocation), (n.initialViewId = r), (n.currentViewId = s); })(t,
2023-07-21 16:51:04 UTC	7731	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6e 28 65 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 61 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 Data Ascii: , (n.fetchSessions_onUpdateUserTiles = function (e, n) { setTimeout(function () { hn(e, n); }); }), (n.fetchSessions_onIncrementAsyncTileRequestCount = function () { n.asyncTileRequestCount
2023-07-21 16:51:04 UTC	7747	IN	Data Raw: 20 20 20 28 6e 2e 76 69 65 77 5f 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 69 73 52 65 71 75 65 73 74 50 65 6e 64 69 6e 67 28 65 29 2c 20 6e 2e 73 68 6f 77 4c 69 67 68 74 62 6f 78 50 72 6f 67 72 65 73 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6e 2e 61 67 72 65 65 6d 65 6e 74 54 79 70 65 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 76 69 65 77 5f 6f 6e 53 77 69 74 Data Ascii: (n.view_onSetPendingRequest = function (e) { n.isRequestPending(e), n.showLightboxProgress(e); }), (n.footer_agreementClick = function (e) { (n.agreementType = e), n.paginationControlMethods().view_onSwit
2023-07-21 16:51:04 UTC	7763	IN	Data Raw: 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 31 5f 63 66 65 39 63 62 36 32 65 62 62 36 36 30 35 65 30 33 66 62 38 64 32 38 35 63 36 31 31 62 34 38 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 33 2d 73 6d 61 6c 6c 5f 61 31 39 65 37 62 63 61 34 34 36 36 30 35 39 65 61 64 64 33 34 34 61 62 31 31 65 36 39 30 34 66 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 Data Ascii: p + "content/images/appbackgrounds/11_cfe9cb62ebb6605e03fb8d285c611b48.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/13-small_a19e7bca4466059eadd344ab11e6904f.jpg"; }, function (e, n, t) {
2023-07-21 16:51:04 UTC	7779	IN	Data Raw: 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 2d 73 6d 61 6c 6c 5f 34 66 36 33 63 34 33 37 61 32 30 39 61 37 61 64 30 62 63 66 37 63 35 33 32 61 34 62 35 63 32 62 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 5f 37 34 39 36 32 64 39 36 65 64 34 34 39 38 61 35 33 62 32 37 33 64 37 63 37 66 39 37 63 64 39 35 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 Data Ascii: e.exports = t.p + "content/images/appbackgrounds/67-small_4f63c437a209a7ad0bcf7c532a4b5c2b.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/67_74962d96ed4498a53b273d7c7f97cd95.jpg"; },
2023-07-21 16:51:04 UTC	7795	IN	Data Raw: 20 20 20 20 20 28 6e 20 3d 20 5f 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 75 2e 45 72 72 6f 72 28 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 20 22 45 78 74 65 6e 73 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 2e 22 2c 20 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 44 61 74 61 50 6f 69 6e 74 28 22 65 78 74 65 6e 73 69 6f 6e 2e 69 64 22 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 55 73 69 6e 67 20 43 68 72 6f 6d 65 20 65 78 74 65 6e 73 69 6f 6e 20 77 69 74 68 20 69 64 20 22 20 2b 20 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: (n = _.firstChild); if (!e) throw new u.Error("NoExtension", "Extension is not installed.", null); return ( p.logDataPoint("extension.id", e), p.logMessage("Using Chrome extension with id " + e),
2023-07-21 16:51:04 UTC	7811	IN	Data Raw: 20 20 20 43 68 65 63 6b 62 6f 78 3a 20 22 63 68 65 63 6b 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 42 75 74 74 6f 6e 3a 20 22 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 44 61 74 61 3a 20 22 45 78 63 65 70 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 3a 20 22 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 45 78 63 65 70 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 55 73 65 72 41 63 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: Checkbox: "checkbox", Button: "button", ExceptionData: "ExceptionData", PageActionData: "PageActionData", ExceptionsTablesuffix: "Exceptions", PageActtionsTablesuffix: "UserActions",
2023-07-21 16:51:04 UTC	7827	IN	Data Raw: 6f 76 69 64 65 72 20 3d 20 69 2e 45 6d 70 74 79 45 76 65 6e 74 50 72 6f 76 69 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 69 2e 45 76 65 6e 74 41 70 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 69 Data Ascii: ovider = i.EmptyEventProvider); }, , , , , function (e, n, t) { var i; !(function (e) { var n = t(1), i = t(2), a = i.EventApi, o = i
2023-07-21 16:51:04 UTC	7843	IN	Data Raw: 61 6c 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 3a 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 3a 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 45 72 72 6f 72 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 5f 6f 6e 43 61 6e 63 65 6c 2c 5c 6e 20 20 20 20 20 Data Ascii: alViewId,\n currentViewId: currentViewId,\n initialSharedData: initialSharedData,\n initialError: $loginPage.getServerError() },\n event: {\n cancel: paginationControl_onCancel,\n
2023-07-21 16:51:04 UTC	7859	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 20 2b 0a 20 20 20 20 20 20 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 49 64 70 52 65 64 69 72 65 63 74 53 70 65 65 64 62 75 6d 70 20 2b 0a 20 20 20 20 20 20 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 69 Data Ascii: redirect: $loginPage.view_onRedirect } }">\n </div>\n\n <div data-viewid="' + t(0).PaginatedState.IdpRedirectSpeedbump + '" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-i
2023-07-21 16:51:04 UTC	7875	IN	Data Raw: 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 4e 65 77 55 73 65 72 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 46 6f 75 6e 64 4d 53 41 73 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 73 46 6f 75 6e 64 4d 53 41 73 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 73 70 6f 73 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 66 50 4f 53 54 5f 46 6f 72 63 65 53 69 67 6e 69 6e 20 3f 20 31 20 3a 20 30 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 Data Ascii: \n <input type="hidden" name="NewUser" value="1" />\n <input type="hidden" name="FoundMSAs" data-bind="value: svr.sFoundMSAs" />\n <input type="hidden" name="fspost" data-bind="value: svr.fPOST_ForceSignin ? 1 : 0" />\n <input
2023-07-21 16:51:04 UTC	7891	IN	Data Raw: 69 20 3d 20 7b 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 70 6e 67 22 3a 20 33 34 33 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 73 76 67 22 3a 20 33 34 34 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 70 6e 67 22 3a 20 33 34 35 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 73 76 67 22 3a 20 33 34 36 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 70 6e 67 22 3a 20 33 34 37 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 73 76 67 22 3a 20 33 34 38 2c 0a 20 20 20 20 20 20 22 2e 2f Data Ascii: i = { "./AppCentipede_Beam.png": 343, "./AppCentipede_Beam.svg": 344, "./AppCentipede_Beam_white.png": 345, "./AppCentipede_Beam_white.svg": 346, "./AppCentipede_Bing.png": 347, "./AppCentipede_Bing.svg": 348, "./
2023-07-21 16:51:04 UTC	7907	IN	Data Raw: 6e 74 61 69 6e 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 68 65 61 64 65 72 5c 27 3a 20 74 72 75 65 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 65 61 64 65 72 4c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 68 65 61 64 65 72 4c 6f 67 6f 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3a 20 73 74 72 5b 5c 27 Data Ascii: ntainer">\n <div id="header" data-bind="externalCss: { \'header\': true }">\n <img id="headerLogo" role="img" data-bind="\n attr: {\n src: headerLogo,\n alt: str[\'
2023-07-21 16:51:04 UTC	7923	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 62 75 67 44 65 74 61 69 6c 73 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 6c 64 20 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 69 6e 67 2d 74 65 78 74 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 Data Ascii: <div class="table-cell">\n \x3c!-- ko if: svr.fShowCopyDebugDetailsLink --\x3e\n <div class="debug-details-header">\n <div id="debugDetailsHeader" class="bold debug-details-heading-text" role="heading" aria-leve
2023-07-21 16:51:04 UTC	7939	IN	Data Raw: 69 64 65 49 6e 4e 65 78 74 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 6f 75 74 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 4f 75 74 42 61 63 6b 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 69 6e 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 49 6e 42 61 63 6b 28 29 20 7d 5c 22 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 66 6f 72 65 61 63 68 3a 20 76 69 65 77 73 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 56 69 65 77 49 6e 64 65 78 28 29 20 3d 3d 3d 20 24 69 6e 64 65 78 28 29 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ideInNext(),\n 'slide-out-back': animate.isSlideOutBack(),\n 'slide-in-back': animate.isSlideInBack() }\">\n\n \x3c!-- ko foreach: views --\x3e\n \x3c!-- ko if: $parent.currentViewIndex() === $index() --\x3e\n
2023-07-21 16:51:04 UTC	7955	IN	Data Raw: 76 69 63 65 43 6f 64 65 20 3d 20 74 20 3f 20 74 2e 64 65 76 69 63 65 43 6f 64 65 20 3a 20 6e 75 6c 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 3d 20 22 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 75 73 65 45 76 69 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 73 68 6f 77 43 72 65 64 56 69 65 77 42 72 61 6e 64 69 6e 67 44 65 73 63 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 69 73 53 69 67 6e 75 70 50 6f 73 74 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 65 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 20 3d Data Ascii: viceCode = t ? t.deviceCode : null), (e.proofConfirmation = ""), (e.useEvictedCredentials = !1), (e.showCredViewBrandingDesc = !1), (e.isSignupPost = !1), Ne && ((e.availableCreds =
2023-07-21 16:51:04 UTC	7971	IN	Data Raw: 20 73 74 72 5b 5c 27 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 5c 27 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3a 20 73 76 72 2e 75 72 6c 53 69 67 6e 55 70 20 7c 7c 20 5c 27 23 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 73 69 67 6e 75 70 5f 6f 6e 43 6c 69 63 6b 22 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 49 73 53 65 6c 66 53 65 72 76 69 63 65 Data Ascii: str[\'STR_SSSU_Signup_Link\'],\n href: svr.urlSignUp \|\| \'#\',\n click: signup_onClick"></a>\n </div>\n \x3c!-- /ko --\x3e\n\n \x3c!-- ko ifnot: svr.fIsSelfService
2023-07-21 16:51:04 UTC	7987	IN	Data Raw: 3d 20 64 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 22 5c 78 33 63 21 2d 2d 20 22 20 2b 0a 20 20 20 20 20 20 28 74 28 31 33 29 2c 0a 20 20 20 20 20 20 27 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 69 64 3d 22 6d 6f 72 65 49 6e 66 6f 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 2c 20 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 74 Data Ascii: = d); }, function (e, n, t) { e.exports = "\x3c!-- " + (t(13), ' --\x3e\n\n\x3c!-- ko if: moreInfoTitle --\x3e\n<div id="moreInfoHeader" class="row" role="heading" aria-level="1" data-bind="text: moreInfoTitle, externalCss: { \'t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
214	192.168.2.5	50068	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:03 UTC	7257	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
2023-07-21 16:51:04 UTC	7283	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 content-length: 15748 Content-Type: application/x-javascript Content-Encoding: gzip Content-MD5: 9GQ+Rbv+K66xwlL4OWRpYA== Last-Modified: Thu, 26 Jan 2023 00:32:55 GMT ETag: 0x8DAFF34DE08B462 X-Cache: TCP_MISS x-ms-request-id: 5ff748fc-501e-001e-49f3-bb254c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0d7e6ZAAAAABmv1UvGAAaQ7XHR+opHcdfRE0yQUExMDkxMjA3MDUxADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0d7e6ZAAAAACrRtshCeS9Rp9CwFUKyJWMQ0gxQUEyMDIwNjA4MDIxADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:03 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:04 UTC	7284	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-07-21 16:51:04 UTC	7316	IN	Data Raw: ad 5b 7d 77 da c6 d2 ff ff 7e 0a a1 db 43 a4 9b b5 6c da a4 ed c5 55 7d 1c 5e 12 5a 3b 76 0d ee 5b 92 c3 11 68 01 c5 42 52 b5 c2 98 1a be fb f3 9b 5d 09 09 10 d8 e9 73 73 1c 83 76 67 67 67 67 e7 7d e4 e3 ff 54 fe a5 fd 47 3b 7a fe 3f ad db 3b bf e9 69 57 6d ad f7 ae 73 d3 d4 ae f1 f4 87 f6 fe aa d7 69 b4 9e 8f 87 36 a5 ff bd 89 27 b4 91 e7 73 0d 9f 03 47 70 57 0b 03 2d 8c 35 2f 18 86 71 14 c6 4e c2 85 36 c5 ef d8 73 7c 6d 14 87 53 2d 99 70 2d 8a c3 cf 7c 98 08 cd f7 44 82 45 03 ee 87 73 cd 00 ba d8 d5 ae 9d 38 59 68 9d 6b d3 02 7e 0e 6c de d8 0b b0 7a 18 46 0b 7c 9f 24 5a 10 26 de 90 6b 4e e0 4a 6c 3e 1e 02 c1 b5 59 e0 f2 58 9b 4f bc e1 44 bb f4 86 71 28 c2 51 a2 c5 7c c8 bd 7b 6c 22 66 18 df dc 82 69 4e cc 35 c1 13 6d 14 c6 c9 44 d1 61 69 5d 82 4c b1 0a Data Ascii: [}w~ClU}^Z;v[hBR]ssvgggg}TG;z?;iWmsi6'sGpW-5/qN6s\|mS-p-\|DEs8Yhk~lzF\|$Z&kNJl>YXODq(Q\|{l"fiN5mDai]L

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
215	192.168.2.5	50070	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:03 UTC	7259	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
2023-07-21 16:51:04 UTC	7696	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:04 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD x-ms-request-id: a88563b8-801e-004f-0af3-bb6d7d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165104Z-f8e11c4uv147v4uw0z182p742g00000004w0000000007kce X-Cache: TCP_MISS Accept-Ranges: bytes
2023-07-21 16:51:04 UTC	7696	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
216	192.168.2.5	50069	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:03 UTC	7261	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrO7FbUF5a0LVitXk5K0LqiDaJNjZB_fKrhBCBFv3ZJ4720teHyO31OYfHboaMpY9IljJfOjQIO9WioYzgTZsEbrkWppcMzg3N7QDOLu3arQcgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHq9Pz4WAuX44fTv45xHbiVQ3kOhNWKHUv3o3mxbWEI4ZMkQvoRyaqMBUbDurj3LblWhkH1gEAWIPx_j9AKBeltJjYUS_AIhrHgnuV_jwTHLCdGZGjxOXGjAFa0u2b_by7R6RGL-SKmblvL6JasHmnfPH-vr6Fd2t5F2dPliXgNYU0OWCYGDckyMDk7_mZ6W46bz-4AieJ4UWdldnX3jxE8SCT9DRrcO5J5qMbn7rfSQgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAA; brcap=0
2023-07-21 16:51:04 UTC	7336	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 3620 Content-Type: image/gif Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 X-Cache: TCP_HIT x-ms-request-id: e55e42c8-e01e-0021-0da5-bb8d42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0ijS6ZAAAAABvMZBX4tCORY5yeHrMDTjnRE0yQUExMDkxMjA4MDQ1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0eLe6ZAAAAAAkTgGcyG5FRJuF9+GJSWm5Q0gxQUEyMDIwNjA4MDE5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:04 GMT Connection: close
2023-07-21 16:51:04 UTC	7337	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
217	192.168.2.5	50071	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:04 UTC	7500	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:04 UTC	7989	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 3620 Content-Type: image/gif Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 X-Cache: TCP_HIT x-ms-request-id: e55e42c8-e01e-0021-0da5-bb8d42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0ijS6ZAAAAABvMZBX4tCORY5yeHrMDTjnRE0yQUExMDkxMjA4MDQ1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0eLe6ZAAAAABbUqUy+Lv0R6vPytR3jY4VQ0gxQUEyMDIwNjA5MDI5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:03 GMT Connection: close
2023-07-21 16:51:04 UTC	7990	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
218	192.168.2.5	50072	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:04 UTC	7645	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:04 UTC	7993	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 1435 Content-Type: image/svg+xml Content-Encoding: gzip Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 X-Cache: TCP_HIT x-ms-request-id: 02618489-001e-0087-42f1-b7b128000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0n/2zZAAAAACwrUD2MP6tR45WMzJwMLe4RE0yQUExMDkxMjA3MDM1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0eLe6ZAAAAAADXXJn7DgtTa9uVv10/yLBQ0gxQUEyMDIwNjA5MDUzADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:04 GMT Connection: close
2023-07-21 16:51:04 UTC	7994	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
219	192.168.2.5	50074	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:04 UTC	7988	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:04 UTC	7998	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 2672 Content-Type: image/gif Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD X-Cache: TCP_HIT x-ms-request-id: 3420c08c-f01e-0014-6d9e-ba2b59000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0Onu4ZAAAAABPVC9lK6rpRKu96nFZSdKTRE0yQUExMDkxMjA3MDE3ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0eLe6ZAAAAACYpoIaebxvQ6E4oeqTAASLQ0gxQUEyMDIwNjA4MDExADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:03 GMT Connection: close
2023-07-21 16:51:04 UTC	7999	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.5	49791	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:33 UTC	1420	OUT	GET /static/fonts/SourceCodePro-Bold-2038.otf.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1453	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 77628 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 02 Feb 2023 02:19:54 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:33 GMT Cache-Control: max-age=43200 ETag: "748fd04df3aee82492ec3b5615213218" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 ff571229df9f46b01b0e434bcb36f9e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: LeSxkQo_EHZezWZhr_15Fa9hHEK3Rm-cZZOeeKDSLPDHPF1HZL3roQ== Age: 7095
2023-07-21 16:50:33 UTC	1454	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 01 2f 3c 00 0d 00 00 00 02 0e 54 00 01 2e ea 00 02 09 ba 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 86 8e 1f 1a 85 6a 1b a8 62 1c ba 4a 06 60 00 e6 66 01 36 02 24 03 98 42 04 06 05 a1 64 07 20 5b 66 0d 92 0c 91 63 e8 5d 7d 8c a2 d2 0f 2e b0 d5 66 76 8e b6 5f c9 09 05 1f ed 0a b2 8e b6 0a c2 df eb 1c 1b c8 19 a0 2f c5 95 ad 60 ba cd 47 e0 3c 10 ea 0c cf cf ca fe ff ff ff ff ff ff df 9d 7c 3f 96 da 97 78 48 33 d2 00 06 0c 36 e0 f8 8a 8f da 39 9a b4 6e 8e dd 6c ba 44 a0 81 04 44 98 10 f5 94 98 80 42 b9 92 ab 10 33 27 7e 56 a1 6e da 79 53 98 77 f3 62 0e 2f aa 9a f4 88 d1 e6 e8 48 8c 58 30 aa 19 3a 6e 39 d0 11 d3 6a c6 2d 04 aa da cb 9d cc d6 ad 6d e2 76 a9 de d2 80 10 88 52 55 26 86 10 76 34 ee bb 02 2e 21 Data Ascii: wOF2OTTO/<T.FjbJ`f6$Bd [fc]}.fv_/`G<\|?xH369nlDDB3'~VnySwb/HX0:n9j-mvRU&v4.!
2023-07-21 16:50:33 UTC	1470	IN	Data Raw: 89 99 a8 13 dd 62 a7 d8 17 f7 c4 7a 89 4b 2f 12 27 f5 4a ae 14 4a 67 a5 4a c9 2f b3 e4 33 79 5a 26 65 4e ee 91 33 d9 ad fc 5e b1 95 29 25 a1 cc 29 b9 52 a3 fc 47 75 ab 33 6a b7 1a a9 27 da 40 cd d6 22 6d 5b 6b d4 28 8d d3 54 ed 2c 99 48 d4 c4 4f 32 e4 02 d1 c8 6d 24 a4 87 e8 99 5e aa 57 ea 4a dd a7 7f a8 07 0c d2 b0 8c 3f 46 a9 d9 81 d9 3c 6f 8e 98 c7 e6 ff 44 6b d3 0a ad 7d d6 75 eb 36 4b da 72 fb b1 4d d8 73 e7 5d 67 d3 c9 1c b3 b3 ee be d3 cd bb 15 37 75 6f bb b2 3b 77 e1 f1 bc 03 6f c6 9b f2 ce 7a 15 3e f3 67 fc c4 bf e3 d7 7c d0 27 fc 45 f0 9b c0 0e ae 04 99 20 1f 40 e1 db c3 ed 30 0d b7 c2 74 38 1e 9e 09 1b a3 5f 47 f5 c8 8c 26 a3 58 d4 1e cd e3 b1 f1 40 fc 78 fc 4f e2 4d 7e 27 b7 a5 b3 d3 f9 ec cb a7 4f 9d fe d9 99 71 67 7e 50 e2 29 b1 da fe b1 77 Data Ascii: bzK/'JJgJ/3yZ&eN3^)%)RGu3j'@"m[k(T,HO2m$^WJ?F<oDk}u6KrMs]g7uo;woz>g\|'E @0t8_G&X@xOM~'Oqg~P)w
2023-07-21 16:50:33 UTC	1518	IN	Data Raw: 33 d8 7d 91 28 dd 9c 6c 31 ae a9 e1 9f 6c 46 3d 3c c6 11 55 3d 70 75 cf 15 e0 0a 70 05 b8 02 5c 81 2e 9b ee 1c 9f 02 ca 37 9c 81 2d 07 be a7 50 b8 01 dc 00 66 4a e4 b3 46 4e 37 f2 59 83 97 b6 d7 4e 13 6d fd 27 73 ff 18 8b 15 af 87 db 8c a5 cc 89 17 4a b1 de 51 9d eb d3 ce e2 d8 64 f7 06 de e4 c8 65 99 51 29 a8 ec 9c ea 01 cb d9 ca 39 6e 72 ee c7 f2 3b 77 1a f3 44 7f b1 81 71 e7 48 a9 85 32 d2 c8 a2 90 12 0a f9 6b c5 d3 45 53 a0 b4 a5 b6 93 f7 f3 75 70 66 c1 7d 45 6d 71 b5 3e 2d 9b 2e 81 89 99 f1 ae 32 31 84 c2 42 a0 f4 32 99 7e 56 9d 53 49 e3 0a 70 05 b8 02 5c 01 ae 2a 4b c1 7a 68 d5 b5 ae 6d eb fd 4e c7 f4 1a 04 77 e9 6a f4 f7 46 5e 6c e4 4d 46 fe de 48 37 0c d9 f9 d4 77 c9 13 ed 93 9a 2d fd 4f 6f 6d b4 48 5c ca 37 cc 06 f7 65 95 17 c1 8c 90 2e 64 0b 45 Data Ascii: 3}(l1lF=<U=pup\.7-PfJFN7YNm'sJQdeQ)9nr;wDqH2kESupf}Emq>-.21B2~VSIp\*KzhmNwjF^lMFH7w-OomH\7e.dE
2023-07-21 16:50:33 UTC	1534	IN	Data Raw: 19 82 8a 18 70 cf 8b 4f e4 d9 dc 3b 69 6d 87 b8 ee 03 c4 14 e1 95 fa 72 5b 0d ac d6 fa c2 cf a3 71 64 4b f8 99 68 9c e5 dc 32 a7 52 19 9d b6 3b 82 b4 cb 35 13 5a 45 f2 65 b7 3f 43 59 88 e3 52 99 a5 a9 4a 75 6c 86 24 83 41 67 52 a6 af ad d6 aa 4a 17 4e 41 9c ce 29 61 15 33 2e 99 71 52 cc ba 0a 17 c6 62 47 cc 58 77 1d 73 47 05 bf 43 27 d2 a0 86 d7 09 15 70 02 c0 0d 34 80 8f 1b fd 3f 1a 3e c8 74 82 8f 18 e8 93 fd 62 e2 f4 65 5f 09 76 7c cd 2a 39 f4 e4 82 ac aa 76 77 cc 9a 69 52 a5 85 ed cd af 44 67 e1 ed ed 5d fa 5b 84 b9 cb 9f 73 77 bb c1 10 32 97 f2 a3 f0 27 d7 ae fd b8 9d eb 79 91 73 11 78 ef 3e d7 38 05 6b 54 77 f9 9b e0 f6 43 cc 62 d7 eb 2f 34 9c d2 b6 db d5 db 6a 14 4e a7 01 89 42 d8 a6 1c 70 f0 0a 2b 0a 5e c1 b0 e7 bd 0c f4 2a aa 15 98 95 6b ff fe 8c Data Ascii: pO;imr[qdKh2R;5ZEe?CYRJul$AgRJNA)a3.qRbGXwsGC'p4?>tbe_v\|9vwiRDg][sw2'ysx>8kTwCb/4jNBp+^k
2023-07-21 16:50:33 UTC	1550	IN	Data Raw: 76 06 ce 12 be 5a e8 74 d9 f7 d2 6b 15 77 12 b8 64 0c b5 9d f1 1f d0 05 63 88 df fa 2b 78 a7 5b f0 d0 73 63 ca 30 1f c9 88 ea ec 0a 05 dd 95 2c 0c fb 90 48 d7 44 8c 33 fb 79 fd f3 a9 86 63 2e 4e d2 83 91 2f 1a 3b f1 ee 0e 3b 1e 7d 7f 0d 51 47 12 68 1f ff 73 f8 71 50 00 22 70 2c c8 e4 90 92 18 eb 0f 8c 33 52 4d ec 4a ef ca 93 90 8e dc ee ff f2 83 1f 49 c0 e3 f9 a0 19 02 20 e4 70 ec 65 22 f6 c3 db 60 07 26 4f 20 80 51 f3 d9 0c 38 49 a2 ab c8 3d bd 04 55 53 f1 2b 1d 8c 99 62 5d 6d 1a 19 b6 45 60 37 ff d8 e3 7c 75 c5 d7 f8 13 58 5b 19 41 5b 82 0e 04 0a 82 38 82 1c 82 7c 82 32 82 ee 24 86 13 4c 25 58 46 b0 9a 60 33 c1 1e 82 bb 45 f0 64 8e f2 5f f3 4e fc a8 67 83 84 10 d2 45 c8 2c 10 42 79 6e d4 84 1a 4d a1 99 0e 08 92 70 0b 42 f8 04 49 74 9a 43 70 92 33 09 41 Data Ascii: vZtkwdc+x[sc0,HD3yc.N/;;}QGhsqP"p,3RMJI pe"`&O Q8I=US+b]mE`7\|uX[A[8\|2$L%XF`3Ed_NgE,BynMpBItCp3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
220	192.168.2.5	50075	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:04 UTC	7996	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:05 UTC	8004	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 673 Content-Type: image/svg+xml Content-Encoding: gzip Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 X-Cache: TCP_REMOTE_HIT x-ms-request-id: c96fa2e9-601e-0039-469e-ba6571000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0ebe6ZAAAAABi3zAV98sQSq82MMVg2mOtRE0yQUExMDkxMjA4MDM5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0eLe6ZAAAAAD1Vsebb371QoA9dCiQoxI/Q0gxQUEyMDIwNjA5MDQ1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:04 GMT Connection: close
2023-07-21 16:51:05 UTC	8005	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
221	192.168.2.5	50076	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:04 UTC	8001	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:05 UTC	8011	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 1435 Content-Type: image/svg+xml Content-Encoding: gzip Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 X-Cache: TCP_HIT x-ms-request-id: 02618489-001e-0087-42f1-b7b128000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0n/2zZAAAAACwrUD2MP6tR45WMzJwMLe4RE0yQUExMDkxMjA3MDM1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0ebe6ZAAAAAD4BJQffxgXRpm4MLxylk36Q0gxQUEyMDIwNjA4MDM5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:04 GMT Connection: close
2023-07-21 16:51:05 UTC	8012	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
222	192.168.2.5	50077	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	8003	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:05 UTC	9445	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:05 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: ad7c162f-101e-0026-39f3-bb5c4c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165105Z-t6cyrgtkgd5eb5kf284q27ypk400000006v00000000095zz X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:05 UTC	9447	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2023-07-21 16:51:05 UTC	9461	IN	Data Raw: 9e 03 46 6b 07 bb 9a ad a7 e7 f4 64 80 4d 90 c7 37 53 fe c7 f3 c9 3d 57 e4 2c f8 eb fb a2 b3 86 ff fe c0 d3 16 6c d0 d4 5e be fc 89 32 3b d4 7d 82 45 6c 83 b1 dc 1c 64 62 0c 12 5e 27 6c 87 6d 33 14 8f e9 f0 f7 77 7d fa 18 17 db 40 f8 91 06 7b 70 fe 9d 87 3a c0 4d 66 38 b8 d3 59 59 d2 09 49 5e 05 da 96 62 e3 1b c9 67 53 0f d6 dc c7 20 6e 87 8d 20 6e 65 8f 27 58 fc 25 5a fd 89 07 05 cc 78 5c fd 23 df f1 26 30 aa 3f cd d2 02 43 57 53 3c b5 33 bf f9 42 55 7e 89 59 45 31 ee f6 c0 37 4a 70 3c 47 5b 52 19 e3 00 8e 79 d0 b6 e3 be 08 da 76 7c 72 e2 f7 68 5d df b2 12 08 0d 76 7b ea f7 a0 c3 15 10 b0 17 71 51 d6 c2 78 73 52 8e 41 9d 89 cc 7f a0 94 ba 19 a6 fb 7d 92 63 a0 8c 36 16 b4 29 9b 82 ac c2 b9 a9 37 98 81 d0 ac a8 8b 6b d5 3f c6 ab 3f 23 a6 47 d8 ab fd 89 f5 Data Ascii: FkdM7S=W,l^2;}Eldb^'lm3w}@{p:Mf8YYI^bgS n ne'X%Zx\#&0?CWS<3BU~YE17Jp<G[Ryv\|rh]v{qQxsRA}c6)7k??#G
2023-07-21 16:51:05 UTC	9463	IN	Data Raw: 47 3a 46 60 44 ea 82 43 b7 40 cf b8 46 b1 64 4e 34 c5 8e 43 9b 09 94 de 68 8a e0 06 66 3f 71 77 89 ce 72 71 60 77 6e 12 e4 ee a0 3b 27 8f bb 5a e9 96 4f c4 70 2b 9f c2 99 d9 a5 6a b4 82 74 0b 5d b1 60 38 f5 48 89 92 5b ed a7 3c 92 17 b2 63 d7 9d 90 49 1d c9 75 0d b7 24 74 de 5a ec 8b db e4 89 61 d0 fa 46 22 c8 3d 37 7f 24 2d a2 61 fc 92 95 e4 0a 6b 53 be 61 be 34 d6 b3 d9 30 a6 04 4b c1 88 e9 11 c3 49 f3 ea 73 2a 63 6c 98 ee 3f b5 11 00 47 35 75 b3 7c e9 8c 98 66 37 99 6f 7a 24 71 3f dc 3b 21 46 0b 2e 53 3c 89 7d 5c d8 bc a7 b1 ad 68 a1 46 e6 a2 e9 77 72 17 ca 8f eb db dc f3 37 63 03 8c 92 19 47 ee 0a 41 49 6c 96 51 a6 f8 ee 26 cb 6e 8a f5 8d f7 5b 78 6c e3 33 85 16 bc a2 1b 67 74 ed c0 ec 0e c5 e0 3a 84 b7 66 87 aa 51 4c ea 8e 2f 08 66 bc 09 9c 8a a9 08 Data Ascii: G:F`DC@FdN4Chf?qwrq`wn;'ZOp+jt]`8H[<cIu$tZaF"=7$-akSa40KIs*cl?G5u\|f7oz$q?;!F.S<}\hFwr7cGAIlQ&n[xl3gt:fQL/f
2023-07-21 16:51:05 UTC	9472	IN	Data Raw: 9f e6 9e fd b9 6d 1b e9 df bf bf c2 66 3d 0e 11 c1 cf 3c 9a 90 61 75 8e ab 76 da 89 e3 8c d5 5c e6 46 56 3c b4 4c d9 6c 64 31 25 29 3b 89 a5 fb db 6f 1f 00 08 90 94 e2 e4 7a 33 df 0f 36 29 10 cf c5 62 81 7d 60 97 82 96 eb 1f 05 67 82 d4 4b cc 7b 71 81 5e 3b 90 a8 d3 6f c0 f5 84 5f c6 63 7a b2 eb 76 27 0f 27 1d 4c 26 3a b5 a0 e4 e4 3a 2d e9 45 b1 61 4e 19 95 76 0c d5 3b e9 13 53 45 53 8d 3a 18 62 47 55 6c b2 c8 65 80 6b 24 56 05 45 d1 99 b5 4e d2 dc d8 27 ab 98 ed d1 ed 45 53 84 e5 a1 a7 65 f8 76 75 91 e6 f7 6b 84 b2 2e 69 62 76 1d 17 1f 5a e4 64 bb 24 ac fc aa d3 c8 15 81 3e ea eb 7d 90 0c d5 7a 0d f1 1d f3 b7 f9 cf 43 15 53 36 81 b3 96 7a 81 6d 37 9f ba bf 4c f4 93 1c f7 c2 a5 f1 4e 9e 3f fe 9b a2 22 c1 ee 4b c1 6f 9e 3e 7f f2 b5 70 9e f6 ce dc a6 05 6f Data Ascii: mf=<auv\FV<Lld1%);oz36)b}`gK{q^;o_czv''L&::-EaNv;SES:bGUlek$VEN'ESevuk.ibvZd$>}zCS6zm7LN?"Ko>po

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
223	192.168.2.5	50079	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	8006	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/embeddedfonts.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:05 UTC	8006	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73250 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Fri, 21 Jul 2023 16:51:05 GMT Last-Modified: Wed, 19 Jul 2023 22:15:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=60248638166443686776606682757142829148"}],"include_subdomains ":true} Server: ECAcc (muc/333D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: c26a9ee2-001e-0073-0b48-bb9252000000 Content-Length: 3002 Connection: close
2023-07-21 16:51:05 UTC	8007	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 55 49 2d 52 65 67 75 6c 61 72 2d 66 69 6e 61 6c 27 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2f 65 6e 2f 63 73 73 2f 77 65 62 66 6f 6e 74 73 2f 73 65 67 6f 65 75 69 2d 72 65 67 75 6c 61 72 2d 66 69 6e 61 6c 2e 65 6f 74 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d Data Ascii: @font-face{font-family:'SegoeUI-Regular-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot') format('embedded-opentype');src:url('https://res-h3.public.cdn.office.net/admincenter/admin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
224	192.168.2.5	50080	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	8010	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/admin/css/admin.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:05 UTC	8013	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72403 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Fri, 21 Jul 2023 16:51:05 GMT Last-Modified: Wed, 19 Jul 2023 22:13:45 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=939328336131538693011368511491195535794"}],"include_subdomains ":true} Server: ECAcc (muc/336D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 514bbde6-701e-0079-144a-bb36e5000000 Content-Length: 1314761 Connection: close
2023-07-21 16:51:05 UTC	8014	IN	Data Raw: 2e 66 61 6b 65 7b 63 6f 6c 6f 72 3a 72 65 64 7d 2e 6b 2d 72 65 73 65 74 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6b 2d 66 6c 6f 61 74 77 72 61 70 3a 61 66 74 65 72 2c 2e 6b 2d 73 6c 69 64 65 72 2d 69 74 65 6d 73 3a 61 66 74 65 72 2c 2e 6b 2d 67 72 69 64 2d 74 6f 6f 6c 62 61 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 Data Ascii: .fake{color:red}.k-reset{margin:0;padding:0;border:0;outline:0;text-decoration:none;font-size:100%;list-style:none}.k-floatwrap:after,.k-slider-items:after,.k-grid-toolbar:after{content:"";display:block;clear:both;visibility:hidden;height:0;overflow:hidde
2023-07-21 16:51:05 UTC	8030	IN	Data Raw: 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 2d 64 65 6c 65 74 65 2c 2e 6b 2d 6c 69 6e 6b 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 2d 67 72 6f 75 70 2d 64 65 6c 65 74 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 69 2d 63 6c 6f 73 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 64 65 6c 65 74 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 67 72 6f 75 70 2d 64 65 6c 65 74 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 69 2d 63 6c 6f 73 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 64 65 6c 65 74 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 67 72 6f 75 70 2d 64 65 6c 65 74 65 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e Data Ascii: led):hover>.k-delete,.k-link:not(.k-state-disabled):hover>.k-group-delete,.k-state-hover>.k-i-close,.k-state-hover>.k-delete,.k-state-hover>.k-group-delete,.k-state-hover>>.k-i-close,.k-state-hover>>.k-delete,.k-state-hover>*>.k-group-delete,.k-button:n
2023-07-21 16:51:05 UTC	8046	IN	Data Raw: 3a 68 Data Ascii: :h
2023-07-21 16:51:05 UTC	8046	IN	Data Raw: 6f 76 65 72 3e 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 2d 69 2d 73 68 61 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 30 70 78 20 2d 31 37 36 70 78 7d 2e 6b 2d 69 2d 63 6f 6e 6e 65 63 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 34 70 78 20 2d 31 39 32 70 Data Ascii: over>.k-i-shape,.k-state-hover>.k-i-shape,.k-state-hover>*>.k-i-shape,.k-button:not(.k-state-disabled):hover .k-i-shape,.k-textbox:hover .k-i-shape,.k-button:active .k-i-shape{background-position:-80px -176px}.k-i-connector{background-position:-64px -192p
2023-07-21 16:51:05 UTC	8062	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6b 2d 74 61 62 73 74 72 69 70 2d 62 6f 74 74 6f 6d 3e 2e 6b 2d 74 61 62 73 74 72 69 70 2d 69 74 65 6d 73 20 2e 6b 2d 69 74 65 6d 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 20 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 34 70 78 20 34 70 78 7d 2e 6b 2d 74 61 62 73 74 72 69 70 2d 62 6f 74 74 6f 6d 3e 2e 6b 2d 74 61 62 73 74 72 69 70 2d 69 74 65 6d 73 20 2e 6b 2d 73 74 61 74 65 2d 61 63 74 69 76 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6b 2d 74 61 62 73 74 72 69 70 2d 62 6f 74 74 6f 6d 3e 2e 6b 2d 63 6f 6e 74 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 70 78 7d 2e 6b 2d 74 61 62 73 74 72 69 Data Ascii: position:relative}.k-tabstrip-bottom>.k-tabstrip-items .k-item{border-width:0 1px 1px;border-radius:0 0 4px 4px}.k-tabstrip-bottom>.k-tabstrip-items .k-state-active{margin-bottom:0;padding-bottom:0}.k-tabstrip-bottom>.k-content{min-height:100px}.k-tabstri
2023-07-21 16:51:05 UTC	8078	IN	Data Raw: 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 20 2e 6b 2d 6c 69 6e 6b 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 20 2e 6b 2d 6c 69 6e 6b 7b 77 69 64 74 68 3a 33 2e 32 65 6d 3b 70 61 64 64 69 6e 67 3a 30 20 2e 34 32 39 65 6d 20 30 20 2e 37 31 34 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 2e 30 38 33 33 65 6d 7d 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2b 2e 6b 2d 6c 69 6e 6b 2c 2e 6b 2d 66 66 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2b 2e 6b 2d 6c 69 6e 6b 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2b 2e 6b 2d 6c 69 6e 6b 7b 6d 61 72 67 69 6e 2d 6c Data Ascii: pager-numbers .k-current-page .k-link,.k-ie11 .k-pager-numbers .k-current-page .k-link{width:3.2em;padding:0 .429em 0 .714em;border-radius:1.0833em}.k-webkit .k-pager-numbers+.k-link,.k-ff .k-pager-numbers+.k-link,.k-ie11 .k-pager-numbers+.k-link{margin-l
2023-07-21 16:51:05 UTC	8095	IN	Data Raw: 6f 6f 6c 62 61 72 20 2e 6b 2d 73 70 6c 69 74 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 6b 2d 64 61 74 65 74 69 6d 65 70 69 63 6b 65 72 7b 77 69 64 74 68 3a 31 35 65 6d 7d 2e 6b 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2c 2e 6b 2d 70 69 63 6b 65 72 2d 77 72 61 70 2c 2e 6b 2d 6e 75 6d 65 72 69 63 2d 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 6b 2d 64 72 6f 70 64 6f 77 6e 2d 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6b 2d 64 72 6f 70 64 6f 77 6e 2d 77 72 61 70 2c 2e 6b 2d 70 69 63 6b 65 72 2d 77 72 61 70 2c 2e 6b 2d 6e 75 6d 65 72 69 63 2d 77 72 61 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6b 2d 62 6c 6f 63 6b 2c 2e 6b 2d 77 69 64 Data Ascii: oolbar .k-split-button{width:auto}.k-datetimepicker{width:15em}.k-autocomplete,.k-picker-wrap,.k-numeric-wrap{position:relative;cursor:default}.k-dropdown-wrap{position:relative}.k-dropdown-wrap,.k-picker-wrap,.k-numeric-wrap{display:block}.k-block,.k-wid
2023-07-21 16:51:05 UTC	8111	IN	Data Raw: 74 6f 72 2d Data Ascii: tor-
2023-07-21 16:51:05 UTC	8111	IN	Data Raw: 74 6f 6f 6c 62 61 72 20 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 2c 2e 6b 2d 66 66 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 2c 2e 6b 2d 69 65 39 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 2c 2e 6b 2d 73 61 66 61 72 69 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 2c 2e 6b 2d 66 66 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 2c 2e 6b 2d 69 65 39 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 2c 2e 6b 2d 69 65 31 30 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 Data Ascii: toolbar li{display:inline}.k-webkit .k-editor-toolbar,.k-ff .k-editor-toolbar,.k-ie9 .k-editor-toolbar{padding:0}.k-webkit .k-editor-toolbar li,.k-safari .k-editor-toolbar li,.k-ff .k-editor-toolbar li,.k-ie9 .k-editor-toolbar li,.k-ie10 .k-editor-toolbar
2023-07-21 16:51:05 UTC	8127	IN	Data Raw: 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 32 70 78 20 63 65 6e 74 65 72 7d 2e 6b 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 66 69 72 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 39 32 70 78 7d 2e 6b 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 74 69 63 6b 2d 6c 61 72 67 65 2e 6b 2d 66 69 72 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 32 70 78 7d 2e 6b 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 73 6c 69 64 65 72 2d 74 6f 70 6c 65 66 74 20 2e 6b 2d 66 69 72 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 32 32 70 78 7d 2e 6b 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 73 6c Data Ascii: d-position:-62px center}.k-slider-horizontal .k-first{background-position:0 -92px}.k-slider-horizontal .k-tick-large.k-first{background-position:0 -2px}.k-slider-horizontal .k-slider-topleft .k-first{background-position:0 -122px}.k-slider-horizontal .k-sl
2023-07-21 16:51:05 UTC	8143	IN	Data Raw: 75 6c 65 72 2d 76 69 65 77 73 3e 6c 69 2e 6b 2d 63 75 72 72 65 6e 74 2d 76 69 65 77 3e 2e 6b 2d 6c 69 6e 6b 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 74 6f 6f 6c 62 61 72 3e 75 6c 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 76 69 65 77 73 3e 6c 69 2e 6b 2d 63 75 72 72 65 6e 74 2d 76 69 65 77 3e 2e 6b 2d 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 2e 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 74 6f 6f 6c 62 61 72 3e 75 6c 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 76 69 65 77 73 3e 6c 69 2e 6b 2d 63 75 72 72 65 6e 74 2d 76 Data Ascii: uler-views>li.k-current-view>.k-link,.k-ie11 .k-scheduler-toolbar>ul.k-scheduler-views>li.k-current-view>.k-link{display:block;position:relative;padding-right:2.5em;padding-left:1em}.k-webkit .k-rtl .k-scheduler-toolbar>ul.k-scheduler-views>li.k-current-v
2023-07-21 16:51:05 UTC	8159	IN	Data Raw: 64 74 68 3a 31 34 25 7d 2e 6b 2d 66 69 6c 65 62 72 6f 77 73 65 72 20 2e 6b 2d 66 6f 72 6d 2d 74 65 78 74 2d 72 6f 77 20 69 6e 70 75 74 7b 77 69 64 74 68 3a 38 30 25 7d 2e 6b 2d 74 69 6c 65 2d 65 6d 70 74 79 7b 6d 61 72 67 69 6e 3a 31 36 30 70 78 20 30 20 30 7d 2e 6b 2d 74 69 6c 65 2d 65 6d 70 74 79 20 2e 6b 2d 64 69 61 6c 6f 67 2d 75 70 6c 6f 61 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 30 25 7d 2e 6b 2d 74 69 6c 65 2d 65 6d 70 74 79 20 73 74 72 6f 6e 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 30 20 2e 32 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6b 2d 74 69 6c 65 2d 65 6d 70 74 79 2c 2e 6b 2d 74 69 6c 65 Data Ascii: dth:14%}.k-filebrowser .k-form-text-row input{width:80%}.k-tile-empty{margin:160px 0 0}.k-tile-empty .k-dialog-upload{font-weight:bold;font-size:120%}.k-tile-empty strong{display:block;margin:0 0 .2em;font-size:3em;font-weight:normal}.k-tile-empty,.k-tile
2023-07-21 16:51:05 UTC	8175	IN	Data Raw: 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 6e 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 6e 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 65 6d 20 30 7d 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 65 6d 7d 2e 6b 2d 6c 69 6e 6b 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 Data Ascii: t(.k-state-disabled):hover .km-pane-wrapper .k-i-arrow-n,.k-textbox:hover .km-pane-wrapper .k-i-arrow-n,.k-button:active .km-pane-wrapper .k-i-arrow-n{background-position:-1em 0}.km-pane-wrapper .k-i-arrow-e{background-position:0 -1em}.k-link:not(.k-state
2023-07-21 16:51:05 UTC	8191	IN	Data Raw: 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 6d 6f 62 69 6c 65 2d 6c 69 73 74 20 2e 6b 2d 65 64 69 74 2d 66 69 65 6c 64 20 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 6d 6f 62 69 6c 65 2d 6c 69 73 74 20 2e 6b 2d 65 64 69 74 2d 66 69 65 6c 64 20 5b 74 79 70 65 3d 72 61 64 69 Data Ascii: .k-state-disabled):hover .km-pane-wrapper .k-check:checked,.k-button:not(.k-state-disabled):hover .km-pane-wrapper .k-mobile-list .k-edit-field [type=checkbox],.k-button:not(.k-state-disabled):hover .km-pane-wrapper .k-mobile-list .k-edit-field [type=radi
2023-07-21 16:51:05 UTC	8207	IN	Data Raw: 2d 66 78 2d 72 65 76 65 72 73 65 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 6e 65 78 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6b 2d 66 78 2d 7a 6f 6f 6d 2e 6b 2d 66 78 2d 72 65 76 65 72 73 65 2e 6b 2d 66 78 2d 73 74 61 72 74 20 2e 6b 2d 66 78 2d 63 75 72 72 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 74 Data Ascii: -fx-reverse.k-fx-end .k-fx-next{-webkit-transform:scale(1)!important;-moz-transform:scale(1)!important;-ms-transform:scale(1)!important;-o-transform:scale(1)!important;transform:scale(1)!important}.k-fx-zoom.k-fx-reverse.k-fx-start .k-fx-current{-webkit-t
2023-07-21 16:51:05 UTC	8223	IN	Data Raw: 3a 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 7d 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 78 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6b 2d 74 6f 6f 6c 62 61 72 20 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 78 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 38 65 6d 7d 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 78 74 20 2e 6b 2d 69 63 6f 6e 2c 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 78 74 20 2e 6b 2d 69 6d 61 67 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 33 72 65 6d 7d 2e 6b 2d 62 75 74 74 6f 6e 2e 6b 2d 62 75 74 74 6f 6e 2d 69 Data Ascii: :5px;padding-right:5px}.k-button-icontext{overflow:visible}.k-toolbar .k-button-icontext{padding-right:.8em}.k-button-icontext .k-icon,.k-button-icontext .k-image{margin-right:3px;margin-right:.3rem;margin-left:-3px;margin-left:-.3rem}.k-button.k-button-i
2023-07-21 16:51:05 UTC	8247	IN	Data Raw: 2d 74 69 63 6b 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 2d 69 6e 73 65 72 74 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 2d 75 70 64 61 74 65 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 2d 69 2d 74 69 63 6b 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 2d 69 6e 73 65 72 74 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 2d 75 70 64 61 74 65 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 2d 69 2d 74 69 63 6b 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 2d 69 6e 73 65 72 74 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 Data Ascii: -tick,.k-button:not(.k-state-disabled):hover .k-insert,.k-button:not(.k-state-disabled):hover .k-update,.k-textbox:hover .k-i-tick,.k-textbox:hover .k-insert,.k-textbox:hover .k-update,.k-button:active .k-i-tick,.k-button:active .k-insert,.k-button:active
2023-07-21 16:51:05 UTC	8263	IN	Data Raw: 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 2d 69 2d 66 6f 6c 64 65 72 2d 61 64 64 2c 2e 6b 2d 6c 69 6e 6b 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 2d 61 64 64 66 6f 6c 64 65 72 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 69 2d 66 6f 6c 64 65 72 2d 61 64 64 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 61 64 64 66 6f 6c 64 65 72 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 69 2d 66 6f 6c 64 65 72 2d 61 64 64 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 61 64 64 66 6f 6c 64 65 72 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 2d 69 2d 66 Data Ascii: state-disabled):hover>.k-i-folder-add,.k-link:not(.k-state-disabled):hover>.k-addfolder,.k-state-hover>.k-i-folder-add,.k-state-hover>.k-addfolder,.k-state-hover>>.k-i-folder-add,.k-state-hover>>.k-addfolder,.k-button:not(.k-state-disabled):hover .k-i-f
2023-07-21 16:51:05 UTC	8279	IN	Data Raw: 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: line-heigh
2023-07-21 16:51:05 UTC	8279	IN	Data Raw: 74 3a 32 2e 32 7d 2e 6b 2d 70 61 6e 65 6c 20 2e 6b 2d 70 61 6e 65 6c 3e 2e 6b 2d 69 74 65 6d 3e 2e 6b 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 65 6d 7d 2e 6b 2d 70 61 6e 65 6c 62 61 72 20 2e 6b 2d 69 2d 73 65 65 6b 2d 65 20 2e 6b 2d 6c 69 6e 6b 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6b 2d 70 61 6e 65 6c 20 2e 6b 2d 70 61 6e 65 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6b 2d 6d 65 6e 75 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 6b 2d 6d 65 6e 75 2c 2e 6b 2d 6d 65 6e 75 20 2e 6b 2d 6d 65 6e 75 2d 67 72 6f 75 70 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7a 6f 6f 6d 3a 31 7d 2e 6b 2d 6d 65 6e 75 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 Data Ascii: t:2.2}.k-panel .k-panel>.k-item>.k-link{padding-left:2em}.k-panelbar .k-i-seek-e .k-link{border-bottom:0}.k-panel .k-panel{border-bottom:0}.k-menu{cursor:default}.k-menu,.k-menu .k-menu-group{list-style:none;margin:0;padding:0;zoom:1}.k-menu:after{content
2023-07-21 16:51:05 UTC	8295	IN	Data Raw: 72 73 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 73 61 66 61 72 69 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 66 66 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 73 61 66 61 72 69 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 34 2e 38 65 6d 3b 77 69 Data Ascii: rs,.k-ie11 .k-rtl .k-pager-numbers,.k-safari .k-rtl .k-pager-numbers,.k-webkit .k-rtl .k-grid .k-pager-numbers,.k-ff .k-rtl .k-grid .k-pager-numbers,.k-ie11 .k-rtl .k-grid .k-pager-numbers,.k-safari .k-rtl .k-grid .k-pager-numbers{left:auto;right:4.8em;wi
2023-07-21 16:51:05 UTC	8311	IN	Data Raw: 65 6e 64 61 72 20 2e 6b 2d 66 6f 6f 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 6b 2d 63 61 6c 65 6e 64 61 72 20 2e 6b 2d 66 6f 6f 74 65 72 20 2e 6b 2d 6e 61 76 2d 74 6f 64 61 79 2c 2e 6b 2d 63 61 6c 65 6e 64 61 72 20 2e 6b 2d 66 6f 6f 74 65 72 3e 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 2e 35 65 6d 20 30 7d 2e 6b 2d 63 61 6c 65 6e 64 61 72 20 2e 6b 2d 6e 61 76 2d 74 6f 64 61 79 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 64 69 76 2e 6b 2d 74 72 65 65 76 69 65 77 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 Data Ascii: endar .k-footer{clear:both}.k-calendar .k-footer .k-nav-today,.k-calendar .k-footer>.k-state-disabled{display:block;height:100%;padding:.5em 0}.k-calendar .k-nav-today:hover{text-decoration:underline}div.k-treeview{border-width:0;background:0;overflow:aut
2023-07-21 16:51:05 UTC	8327	IN	Data Raw: 4a 68 64 47 56 6b 4b 53 49 67 4c 7a 34 4b 50 43 39 7a 64 6d 63 2b 29 7d 2e 6b 2d 69 65 39 20 2e 6b 2d 66 6c 61 74 63 6f 6c 6f 72 70 69 63 6b 65 72 20 2e 6b 2d 68 73 76 2d 67 72 61 64 69 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 44 39 34 62 57 77 67 64 6d 56 79 63 32 6c 76 62 6a 30 69 4d 53 34 77 49 69 41 2f 50 67 6f 38 63 33 5a 6e 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 67 64 32 6c 6b 64 47 67 39 49 6a 45 77 4d 43 55 69 49 47 68 6c 61 57 64 6f 64 44 30 69 4d 54 41 77 4a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 45 67 4d 53 49 67 63 48 4a 6c Data Ascii: JhdGVkKSIgLz4KPC9zdmc+)}.k-ie9 .k-flatcolorpicker .k-hsv-gradient{background:url(data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiA/Pgo8c3ZnIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgd2lkdGg9IjEwMCUiIGhlaWdodD0iMTAwJSIgdmlld0JveD0iMCAwIDEgMSIgcHJl
2023-07-21 16:51:05 UTC	8343	IN	Data Raw: 72 65 73 73 62 61 72 2d 72 65 76 65 72 73 65 20 2e 6b 2d 69 74 65 6d 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 20 31 70 78 20 31 70 78 20 30 7d 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 72 65 76 65 72 73 65 20 2e 6b 2d 69 74 65 6d 2c 2e 6b 2d 72 74 6c 20 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 69 74 65 6d 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 20 30 20 31 70 78 20 31 70 78 7d 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 66 69 72 73 74 2c 2e 6b 2d 72 74 6c 20 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 6c 61 73 74 2c 2e 6b 2d 72 Data Ascii: ressbar-reverse .k-item{border-width:1px 1px 1px 0}.k-progressbar-horizontal.k-progressbar-reverse .k-item,.k-rtl .k-progressbar-horizontal .k-item{border-width:1px 0 1px 1px}.k-progressbar-horizontal .k-first,.k-rtl .k-progressbar-horizontal .k-last,.k-r
2023-07-21 16:51:05 UTC	8359	IN	Data Raw: 69 7a 65 2d 73 3a 61 66 74 65 72 7b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 6b 2d 65 76 65 6e 74 3e 2e 6b 2d 72 65 73 69 7a 65 2d 65 3a 61 66 74 65 72 2c 2e 6b 2d 65 76 65 6e 74 3e 2e 6b 2d 72 65 73 69 7a 65 2d 77 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 70 78 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 37 65 6d 3b 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 77 69 64 74 68 3a 31 70 78 7d 2e 6b 2d 65 76 65 6e 74 3e 2e 6b 2d 72 65 73 69 7a 65 2d 65 3a 61 66 74 65 72 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 31 70 78 7d 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 6d 6f 62 69 6c 65 20 2e 6b 2d 65 76 65 6e 74 3e 2e 6b 2d 72 65 73 69 7a 65 2d 6e 2c 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 6d 6f 62 69 6c 65 20 2e 6b 2d 65 Data Ascii: ize-s:after{top:auto;bottom:1px}.k-event>.k-resize-e:after,.k-event>.k-resize-w:after{left:1px;top:50%;margin-top:-.7em;height:1.4em;width:1px}.k-event>.k-resize-e:after{left:auto;right:1px}.k-scheduler-mobile .k-event>.k-resize-n,.k-scheduler-mobile .k-e
2023-07-21 16:51:05 UTC	8375	IN	Data Raw: 69 7a 65 2d 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 38 70 78 20 2d 33 30 39 70 78 7d 2e 6b 2d 73 70 6c 69 74 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 68 6f 76 65 72 3e 2e 6b 2d 72 65 73 69 7a 65 2d 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 37 30 70 78 20 2d 33 30 39 70 78 7d 2e 6b 2d 73 70 6c 69 74 62 61 72 2d 76 65 72 74 69 63 61 6c 20 2e 6b 2d 63 6f 6c 6c 61 70 73 65 2d 70 72 65 76 2c 2e 6b 2d 73 70 6c 69 74 62 61 72 2d 76 65 72 74 69 63 61 6c 20 2e 6b 2d 65 78 70 61 6e 64 2d 6e 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 32 70 78 20 2d 31 33 34 70 78 7d 2e 6b 2d 73 70 6c 69 74 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 68 6f 76 65 72 3e 2e 6b Data Ascii: ize-handle{background-position:-38px -309px}.k-splitbar-vertical-hover>.k-resize-handle{background-position:-70px -309px}.k-splitbar-vertical .k-collapse-prev,.k-splitbar-vertical .k-expand-next{background-position:2px -134px}.k-splitbar-vertical-hover>.k
2023-07-21 16:51:05 UTC	8391	IN	Data Raw: 65 37 20 2e 6b 2d 65 76 65 6e 74 3a 68 6f 76 65 72 20 2e 6b 2d 65 76 65 6e 74 2d 64 65 6c 65 74 65 2c 2e 6b 2d 69 65 37 20 74 72 3a 68 6f 76 65 72 3e 74 64 3e 2e 6b 2d 74 61 73 6b 20 2e 6b 2d 65 76 65 6e 74 2d 64 65 6c 65 74 65 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 69 74 65 6d 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 70 72 6f 67 72 65 73 73 2d 73 74 61 74 75 73 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 2d 6c 6f 63 6b 65 64 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 67 72 69 64 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 63 6b 65 64 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 2d 6c 6f 63 6b 65 64 2b 2e Data Ascii: e7 .k-event:hover .k-event-delete,.k-ie7 tr:hover>td>.k-task .k-event-delete,.k-ie7 .k-progressbar,.k-ie7 .k-progressbar-horizontal .k-item,.k-ie7 .k-progress-status,.k-ie7 .k-grid-header-locked,.k-ie7 .k-grid-content-locked,.k-ie7 .k-grid-header-locked+.
2023-07-21 16:51:05 UTC	8407	IN	Data Raw: 3a 61 63 74 69 76 65 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 32 65 6d 7d 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 33 65 6d 7d 2e 6b 2d 6c 69 6e 6b 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 77 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 77 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 6d 2d Data Ascii: :active .km-pane-wrapper .k-i-arrow-s{background-position:0 -2em}.km-pane-wrapper .k-i-arrow-w{background-position:0 -3em}.k-link:not(.k-state-disabled):hover>.km-pane-wrapper .k-i-arrow-w,.k-state-hover>.km-pane-wrapper .k-i-arrow-w,.k-state-hover>*>.km-
2023-07-21 16:51:05 UTC	8423	IN	Data Raw: 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 6d 6f 62 69 6c 65 2d 6c 69 73 74 20 2e 6b 2d 65 64 69 74 2d 66 69 65 6c 64 20 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 6d 6f 62 69 6c 65 2d 6c 69 73 74 20 2e 6b 2d 65 64 69 74 2d 66 69 65 6c 64 20 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2c 2e 6b 2d Data Ascii: xtbox:hover .km-pane-wrapper .k-check:checked,.k-textbox:hover .km-pane-wrapper .k-mobile-list .k-edit-field [type=checkbox],.k-textbox:hover .km-pane-wrapper .k-mobile-list .k-edit-field [type=radio],.k-button:active .km-pane-wrapper .k-check:checked,.k-
2023-07-21 16:51:05 UTC	8439	IN	Data Raw: 70 78 20 73 6f 6c 69 64 20 23 63 35 63 35 63 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 7d 2e 6b 2d 72 74 6c 20 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 74 6f 6f 6c 62 61 72 3e 75 6c 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 76 69 65 77 73 2e 6b 2d 73 74 61 74 65 2d 65 78 70 61 6e 64 65 64 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 7d 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 6e 65 78 74 2c 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 63 75 72 72 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 35 30 6d 73 Data Ascii: px solid #c5c5c5;background-color:#fff;background-image:none;box-shadow:0 2px 2px 0 rgba(0,0,0,.3)}.k-rtl .k-scheduler-toolbar>ul.k-scheduler-views.k-state-expanded{text-align:left}}.k-fx-end .k-fx-next,.k-fx-end .k-fx-current{-webkit-transition:all 350ms
2023-07-21 16:51:05 UTC	8455	IN	Data Raw: 38 65 6d 7d 69 6e 70 75 74 2e 6b Data Ascii: 8em}input.k
2023-07-21 16:51:05 UTC	8455	IN	Data Raw: 2d 74 65 78 74 62 6f 78 7b 68 65 69 67 68 74 3a 32 2e 31 34 33 65 6d 7d 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 65 6d 7d 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 3e 75 6c 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 7d 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 20 6c 69 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 35 37 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 33 33 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 31 36 37 65 6d 20 31 2e 38 65 6d 20 2e 31 36 37 65 6d 20 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 32 70 78 20 32 70 78 7d 2e 6b 2d 70 6f 70 75 70 2e 6b 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6b 2d 70 6f 70 75 70 2e 6b 2d 63 61 6c 65 6e 64 Data Ascii: -textbox{height:2.143em}.k-multiselect-wrap{min-height:2em}.k-multiselect-wrap>ul{padding-top:1px}.k-multiselect-wrap li{font-size:.857em;line-height:1.333em;padding:.167em 1.8em .167em .5em;margin:2px 0 2px 2px}.k-popup.k-list-container,.k-popup.k-calend
2023-07-21 16:51:05 UTC	8471	IN	Data Raw: 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 38 70 78 20 2d 31 36 70 78 7d 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 2c 2e 6b 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 65 6d 7d 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 3a 61 66 74 65 72 2c 2e 6b 2d 63 68 65 63 6b 62 6f 78 3a 63 68 65 63 6b 65 64 2b 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 3a 61 66 74 65 72 7b 77 69 64 74 68 3a 31 2e 33 35 37 65 6d 3b 68 65 69 67 68 74 3a 31 2e 33 35 37 65 6d 7d 2e 6b 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 77 69 64 74 68 3a 31 39 70 78 3b 68 65 69 67 Data Ascii: round-position:-48px -16px}.k-checkbox-label,.k-radio-label{line-height:normal;padding-left:2em}.k-checkbox-label:before,.k-checkbox-label:after,.k-checkbox:checked+.k-checkbox-label:after{width:1.357em;height:1.357em}.k-radio-label:before{width:19px;heig
2023-07-21 16:51:05 UTC	8487	IN	Data Raw: 70 2d 76 61 6c 69 64 61 74 69 6f 6e 20 2e 6b 2d 63 61 6c 6c 6f 75 74 2d 77 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 31 39 64 7d 2e 6b 2d 74 6f 6f 6c 74 69 70 2d 76 61 6c 69 64 61 74 69 6f 6e 20 2e 6b 2d 63 61 6c 6c 6f 75 74 2d 73 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 66 31 39 64 7d 2e 6b 2d 74 6f 6f 6c 74 69 70 2d 76 61 6c 69 64 61 74 69 6f 6e 20 2e 6b 2d 63 61 6c 6c 6f 75 74 2d 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 31 39 64 7d 2e 6b 2d 73 70 6c 69 74 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 34 7d 2e 6b 2d 72 65 73 74 72 69 63 74 65 64 2d 73 69 7a 65 2d 76 65 72 74 69 63 61 6c 2c 2e 6b 2d 72 65 73 74 72 69 63 74 65 64 2d 73 69 Data Ascii: p-validation .k-callout-w{border-right-color:#fff19d}.k-tooltip-validation .k-callout-s{border-top-color:#fff19d}.k-tooltip-validation .k-callout-e{border-left-color:#fff19d}.k-splitbar{background-color:#f4f4f4}.k-restricted-size-vertical,.k-restricted-si
2023-07-21 16:51:05 UTC	8503	IN	Data Raw: 68 6f 76 65 72 2c 2e 6b 2d 70 72 69 6d 61 72 79 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 20 2e 6b 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 2e 6b 2d 70 72 69 6d 61 72 79 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 37 64 37 64 37 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 35 65 35 65 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 35 65 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 2e 6b 2d 6c 69 Data Ascii: hover,.k-primary.k-state-disabled:hover,.k-state-disabled .k-primary:active,.k-primary.k-state-disabled:active{color:#7d7d7d;border-color:#e5e5e5;background-color:#e5e5e5;background-image:none;-webkit-box-shadow:none;box-shadow:none}.k-pager-numbers .k-li
2023-07-21 16:51:05 UTC	8519	IN	Data Raw: 65 6c 69 73 74 20 74 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 34 7d 2e 6b 2d 67 61 6e 74 74 20 2e 6b 2d 74 72 65 65 6c 69 73 74 20 2e 6b 2d 61 6c 74 2c 2e 6b 2d 67 61 6e 74 74 20 2e 6b 2d 68 65 61 64 65 72 2e 6b 2d 6e 6f 6e 77 6f 72 6b 2d 68 6f 75 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6b 2d 67 72 69 64 20 74 64 2e 6b 2d 73 74 61 74 65 2d 66 6f 63 75 73 65 64 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 30 30 37 32 63 36 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 30 30 37 32 63 36 7d 2e 6b 2d 67 72 69 64 20 74 64 2c 2e 6b 2d 67 72 69 64 20 2e 6b 2d 67 72 6f 75 Data Ascii: elist tr:hover{background-color:#f4f4f4}.k-gantt .k-treelist .k-alt,.k-gantt .k-header.k-nonwork-hour{background-color:#fff}.k-grid td.k-state-focused{-webkit-box-shadow:inset 0 0 0 1px #0072c6;box-shadow:inset 0 0 0 1px #0072c6}.k-grid td,.k-grid .k-grou
2023-07-21 16:51:05 UTC	8535	IN	Data Raw: 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 29 20 2e 6b 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 6b 2d 66 66 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 6c 69 3a 6e 6f 74 28 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 29 20 2e 6b 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 6c 69 3a 6e 6f 74 28 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 29 20 2e 6b 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 6b 2d 73 61 66 61 72 69 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 6c 69 3a 6e 6f 74 28 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 29 20 2e 6b 2d 6c 69 6e 6b 3a 68 Data Ascii: -current-page) .k-link:hover,.k-ff .k-pager-wrap .k-pager-numbers li:not(.k-current-page) .k-link:hover,.k-ie11 .k-pager-wrap .k-pager-numbers li:not(.k-current-page) .k-link:hover,.k-safari .k-pager-wrap .k-pager-numbers li:not(.k-current-page) .k-link:h
2023-07-21 16:51:05 UTC	8551	IN	Data Raw: 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 5b 64 69 72 3d 22 6c 74 72 22 5d 20 2e 77 69 7a 61 72 64 2d 64 69 61 6c 6f 67 5f 5f 73 74 65 70 2d 74 65 78 74 5f 5f 73 75 62 74 69 74 6c 65 5f 5f 6f 72 64 69 6e 61 6c 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 69 7a 61 72 64 2d 64 69 61 6c 6f 67 5f 5f 73 74 65 70 2d 74 65 78 74 5f 5f 73 75 62 74 69 74 6c 65 5f 5f 6f 72 64 69 6e 61 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 2e 77 69 7a 61 72 64 2d 64 69 61 6c 6f 67 5f 5f 73 74 65 70 2d 74 65 78 74 5f 5f 62 6f 64 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: lock;width:18px;height:18px;border-radius:50%;text-align:center}[dir="ltr"] .wizard-dialog__step-text__subtitle__ordinal{margin-right:5px}[dir="rtl"] .wizard-dialog__step-text__subtitle__ordinal{margin-left:5px}.wizard-dialog__step-text__body{font-weight:
2023-07-21 16:51:05 UTC	8567	IN	Data Raw: 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 b4 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 b5 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 b6 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 b7 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e Data Ascii: minScoped .glyphicon-floppy-remove:before{content:""}.adminScoped .glyphicon-floppy-save:before{content:""}.adminScoped .glyphicon-floppy-open:before{content:""}.adminScoped .glyphicon-credit-card:before{content:""}.adminScoped .glyphicon-tran
2023-07-21 16:51:05 UTC	8583	IN	Data Raw: 3a 35 30 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 34 7b 72 69 67 68 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 33 7b 72 69 67 68 74 3a 32 35 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c Data Ascii: :50%}.adminScoped .col-xs-pull-5{right:41.66666667%}.adminScoped .col-xs-pull-4{right:33.33333333%}.adminScoped .col-xs-pull-3{right:25%}.adminScoped .col-xs-pull-2{right:16.66666667%}.adminScoped .col-xs-pull-1{right:8.33333333%}.adminScoped .col-xs-pull
2023-07-21 16:51:05 UTC	8599	IN	Data Raw: 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 64 6d 69 Data Ascii: >.table-bordered>tbody>tr>th:last-child,.adminScoped .table-responsive>.table-bordered>tfoot>tr>th:last-child,.adminScoped .table-responsive>.table-bordered>thead>tr>td:last-child,.adminScoped .table-responsive>.table-bordered>tbody>tr>td:last-child,.admi
2023-07-21 16:51:05 UTC	8615	IN	Data Raw: 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 Data Ascii: imary.disabled,.adminScoped .btn-primary[disabled],.adminScoped fieldset[disabled] .btn-primary,.adminScoped .btn-primary.disabled:hover,.adminScoped .btn-primary[disabled]:hover,.adminScoped fieldset[disabled] .btn-primary:hover,.adminScoped .btn-primary
2023-07-21 16:51:05 UTC	8631	IN	Data Raw: 63 6f 70 65 64 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e Data Ascii: coped .btn-group-vertical>.btn:last-child:not(:first-child){border-top-left-radius:0;border-top-right-radius:0;border-bottom-left-radius:4px}.adminScoped .btn-group-vertical>.btn-group:not(:first-child):not(:last-child)>.btn{border-radius:0}.adminScoped .
2023-07-21 16:51:05 UTC	8647	IN	Data Raw: 2d 6e 61 76 3e 2e 61 63 74 69 76 65 3e 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 61 63 74 69 76 65 3e 61 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 61 63 74 69 76 65 3e 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 37 65 37 65 37 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 64 69 73 61 62 6c 65 64 3e 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d Data Ascii: -nav>.active>a,.adminScoped .navbar-default .navbar-nav>.active>a:hover,.adminScoped .navbar-default .navbar-nav>.active>a:focus{color:#555;background-color:#e7e7e7}.adminScoped .navbar-default .navbar-nav>.disabled>a,.adminScoped .navbar-default .navbar-
2023-07-21 16:51:05 UTC	8663	IN	Data Raw: 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 32 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 35 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 35 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 65 64 69 61 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 65 64 69 61 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 65 64 69 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 65 64 69 61 2d 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e Data Ascii: ,transparent 25%,transparent 50%,rgba(255,255,255,.15) 50%,rgba(255,255,255,.15) 75%,transparent 75%,transparent)}.adminScoped .media{margin-top:15px}.adminScoped .media:first-child{margin-top:0}.adminScoped .media,.adminScoped .media-body{overflow:hidden
2023-07-21 16:51:05 UTC	8679	IN	Data Raw: 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 68 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 Data Ascii: tr:first-child>th{border-bottom:0}.adminScoped .panel>.table-bordered>tbody>tr:last-child>td,.adminScoped .panel>.table-responsive>.table-bordered>tbody>tr:last-child>td,.adminScoped .panel>.table-bordered>tfoot>tr:last-child>td,.adminScoped .panel>.table
2023-07-21 16:51:05 UTC	8695	IN	Data Raw: 65 6c 2d 63 61 70 74 69 6f 6e 7b 72 69 67 68 74 3a 32 30 25 3b 6c 65 66 74 3a 32 30 25 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 7b 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 64 3a 62 65 66 6f 72 65 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 64 3a 61 66 74 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6e 74 61 69 6e 65 72 3a Data Ascii: el-caption{right:20%;left:20%;padding-bottom:30px}.adminScoped .carousel-indicators{bottom:20px}}.adminScoped .clearfix:before,.adminScoped .clearfix:after,.adminScoped .dl-horizontal dd:before,.adminScoped .dl-horizontal dd:after,.adminScoped .container:
2023-07-21 16:51:05 UTC	8711	IN	Data Raw: 61 3e 2e 6d 65 6e 75 54 65 78 74 4c 65 6e 67 74 Data Ascii: a>.menuTextLengt
2023-07-21 16:51:05 UTC	8711	IN	Data Raw: 68 2d 72 74 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6e 61 76 3e 6c 69 2e 61 63 74 69 76 65 3e 2e 6e 61 76 2d 69 74 65 6d 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6e 61 76 3e 6c 69 2e 61 63 74 69 76 65 3e 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6e 61 76 3e 6c 69 3e 2e 6e 61 76 2d 69 74 65 6d 3a 66 6f 63 75 73 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6e 61 76 3e 6c 69 3e 2e 6e 61 76 2d 69 74 65 6d 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 Data Ascii: h-rtl{margin-left:50px;margin-right:50px}.adminScoped .sidebar-subnav>li.active>.nav-item,.adminScoped .sidebar-subnav>li.active>a,.adminScoped .sidebar-subnav>li>.nav-item:focus,.adminScoped .sidebar-subnav>li>.nav-item:hover{color:#fff}.adminScoped .sid
2023-07-21 16:51:05 UTC	8727	IN	Data Raw: 39 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 38 36 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 38 63 38 63 38 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 33 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 6f 70 61 63 69 74 79 3a 31 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 66 6c 79 6f 75 74 2d 78 73 6d 61 6c 6c 7b 6d 61 78 2d 77 69 Data Ascii: 900;position:absolute;height:100%;top:0;bottom:0;right:0;width:860px;border-style:solid;border:1px solid #c8c8c8;background-color:#fff;box-shadow:0 0 30px 0 rgba(0,0,0,.2);opacity:1;overflow-y:auto;overflow-x:hidden}.adminScoped .panelflyout-xsmall{max-wi
2023-07-21 16:51:05 UTC	8743	IN	Data Raw: 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 44 69 61 6c 6f 67 2d 6d 61 69 6e 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 76 69 72 74 75 61 6c 2d 74 6f 75 72 2d 62 61 6e 6e 65 72 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 44 69 61 6c 6f 67 2d 69 6e 6e 65 72 7b 77 69 64 74 68 3a 31 33 36 36 70 78 3b 68 65 69 67 68 74 3a 33 37 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 76 69 72 74 75 61 6c 2d 74 6f 75 72 2d 62 61 6e 6e 65 72 20 2e 68 65 61 64 65 72 7b 68 65 69 67 68 74 3a 38 30 70 78 7d 2e 61 64 Data Ascii: .fabric0103-ms-Dialog-main{height:100%}.adminScoped .virtual-tour-banner .fabric0103-ms-Dialog-inner{width:1366px;height:370px;background-color:#0078d7;padding:0;box-shadow:0 0 5px 0 rgba(0,0,0,.4)}.adminScoped .virtual-tour-banner .header{height:80px}.ad
2023-07-21 16:51:05 UTC	8759	IN	Data Raw: 65 69 67 68 74 2d 31 30 30 70 78 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 2d 6d 61 72 67 69 6e 2d 74 6f 70 2d 31 32 30 70 78 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 23 73 65 61 72 63 68 54 65 78 74 7b 68 65 69 67 68 74 3a 33 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 67 65 54 69 74 6c 65 43 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6c 69 73 74 49 74 65 6d 4f 70 74 69 6f 6e 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 61 74 61 4c 69 73 74 46 69 65 6c 64 7b 6d 61 72 67 69 6e Data Ascii: eight-100px{min-height:100px}.adminScoped .g-margin-top-120px{margin-top:120px}.adminScoped #searchText{height:35px;margin-left:5px}.adminScoped .pageTitleContainer{height:10%}.adminScoped .listItemOptions{font-size:25px}.adminScoped .dataListField{margin
2023-07-21 16:51:05 UTC	8775	IN	Data Raw: 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 63 68 65 76 72 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 31 32 70 78 20 30 20 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 63 68 65 76 72 6f 6e 2d 75 73 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 20 30 20 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 63 68 65 76 72 6f 6e 2d 72 74 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 20 30 20 31 32 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 70 61 64 2d 62 74 6d 2d 31 30 70 78 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 21 69 6d 70 6f 72 74 Data Ascii: loat:right}.adminScoped .f-chevron{font-size:14px;padding:15px 12px 0 0}.adminScoped .f-chevron-user{font-size:14px;padding:15px 0 0 0}.adminScoped .f-chevron-rtl{font-size:14px;padding:15px 0 0 12px}.adminScoped .f-pad-btm-10px{padding-bottom:10px!import
2023-07-21 16:51:05 UTC	8791	IN	Data Raw: 72 63 6c 2d 62 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 31 32 70 78 20 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 61 6c 65 72 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 31 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 31 32 70 78 20 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 61 6c 65 72 74 2d 62 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 31 32 70 78 20 31 Data Ascii: rcl-bl{font-size:30px;padding:20px 12px 12px 12px;color:#0078d7}.adminScoped .f-alert{font-size:21px;padding:20px 12px 12px 12px;color:#0078d7;color:#000!important;padding-top:20px!important}.adminScoped .f-alert-bl{font-size:30px;padding:20px 12px 12px 1
2023-07-21 16:51:05 UTC	8807	IN	Data Raw: 23 30 30 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 65 65 66 62 33 3b 70 61 64 64 69 6e 67 3a 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 73 2d 69 63 6f 6e 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 73 2d 73 6d 61 6c 6c 2d 69 63 6f 6e 2d 73 69 7a 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 73 2d 69 63 6f 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 73 2d 6d 61 69 6c 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 Data Ascii: #00000;background-color:#feefb3;padding:5px}.adminScoped .ss-icon-size{font-size:28px;text-align:center}.adminScoped .ss-small-icon-size{width:40px;font-size:28px;text-align:center}.adminScoped .ss-icon-color{color:#0078d7}.adminScoped .ss-mail-icon{color
2023-07-21 16:51:05 UTC	8823	IN	Data Raw: 74 3a 31 36 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 66 30 3b 63 6f 6e 74 65 6e 74 3a 27 27 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 35 73 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 54 6f 67 67 6c 65 2d 69 6e 70 75 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 30 3b 74 6f 70 3a 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 54 6f 67 67 6c 65 2d 69 6e 70 75 74 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 63 68 65 63 Data Ascii: t:16px;border-radius:100%;background-color:#0f0;content:'';-webkit-transition:.25s;transition:.25s}.adminScoped .fabric0103-ms-Toggle-input{position:absolute!important;opacity:0;top:0}.adminScoped .fabric0103-ms-Toggle-input:focus:not(:disabled):not(:chec
2023-07-21 16:51:05 UTC	8839	IN	Data Raw: 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 6b 72 2d 61 63 74 2d 64 69 76 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 6b 72 2d 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 63 6f 6c 6f 72 3a 23 32 31 32 31 32 31 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 6b 72 2d 72 73 6c 74 2d 62 6c 6b 7b 77 69 64 74 68 3a 34 38 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 6b 72 2d 72 73 6c 74 2d 6c 73 74 7b 6c 69 73 74 Data Ascii: 32px;width:32px}.adminScoped .pkr-act-div:hover{cursor:pointer}.adminScoped .pkr-act{font-size:15px;color:#212121;vertical-align:middle;padding-bottom:2px}.adminScoped .pkr-rslt-blk{width:480px;display:block;overflow:hidden}.adminScoped .pkr-rslt-lst{list
2023-07-21 16:51:05 UTC	8855	IN	Data Raw: 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 68 64 20 2e 6d 65 73 73 61 67 65 2d 68 69 73 74 6f 72 79 20 2e 64 65 74 61 69 6c 73 20 2e 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 20 30 20 31 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 68 64 20 2e 6d 65 73 73 61 67 65 2d 62 6f 64 79 20 2e 64 65 74 61 69 6c 73 20 2e 63 6f 6e 74 65 6e 74 20 2e 73 68 6f 77 2d 6d 6f 72 65 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 68 64 20 2e 6d 65 73 73 61 67 65 2d 68 69 73 74 6f 72 79 20 2e 64 65 74 61 69 6c 73 20 2e 63 6f 6e 74 65 6e 74 20 2e 73 68 6f 77 2d 6d 6f 72 65 7b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 20 30 20 31 30 70 78 7d 2e Data Ascii: .adminScoped .shd .message-history .details .content{padding:0 10px 0 10px}.adminScoped .shd .message-body .details .content .show-more,.adminScoped .shd .message-history .details .content .show-more{color:#0078d7;cursor:pointer;padding:10px 10px 0 10px}.
2023-07-21 16:51:05 UTC	8871	IN	Data Raw: 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 49 6e 70 75 74 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 42 75 74 74 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 49 63 6f 6e 7b 72 69 67 68 74 3a 31 70 78 3b 74 6f 70 3a 31 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 49 63 6f 6e 2d 72 74 6c 7b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 39 39 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 49 63 6f 6e 2d 72 74 6c Data Ascii: dminScoped .searchBoxInput::-ms-clear{display:none}.adminScoped .searchBoxButton{min-width:30px!important;display:inline-block}.adminScoped .searchBoxIcon{right:1px;top:1px}.adminScoped .searchBoxIcon-rtl{top:1px;right:99px}.adminScoped .searchBoxIcon-rtl
2023-07-21 16:51:05 UTC	8887	IN	Data Raw: 67 68 74 3a 32 38 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 77 2d 6b 70 69 2d 69 63 6f 6e 73 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 38 70 78 3b 77 69 64 74 68 3a 39 39 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 77 2d 6b 70 69 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 39 39 25 3b 68 65 69 67 68 74 3a 33 35 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 77 2d 6b 70 69 2d 64 61 74 61 2d 62 61 73 65 7b 77 69 64 74 68 3a 39 39 25 3b 68 65 69 67 68 74 3a 35 33 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 77 2d 6b 70 69 2d 64 61 74 61 7b 77 69 64 74 68 3a 39 39 25 3b 68 65 69 67 68 74 3a 35 33 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 30 70 78 7d 2e 61 64 6d 69 6e Data Ascii: ght:28px}.adminScoped .rw-kpi-icons{padding-top:28px;width:99%}.adminScoped .rw-kpi-title{width:99%;height:35%;display:inline-block}.adminScoped .rw-kpi-data-base{width:99%;height:53%}.adminScoped .rw-kpi-data{width:99%;height:53%;padding-left:40px}.admin
2023-07-21 16:51:05 UTC	8903	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 65 33 66 35 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 65 70 6f 72 74 2d 6d 65 6e 75 2d 72 74 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 65 33 66 35 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 65 70 6f 72 74 2d 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 65 70 6f 72 74 2d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 65 70 6f 72 74 6c 69 73 74 41 63 74 69 6f 6e 73 7b 77 69 64 74 68 3a 32 36 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: ackground-color:#cce3f5}.adminScoped .report-menu-rtl{background-color:#cce3f5}.adminScoped .report-a{color:#fff!important;text-decoration:none}.adminScoped .report-a:hover{color:#fff!important}.adminScoped .reportlistActions{width:260px;background-color:
2023-07-21 16:51:05 UTC	8919	IN	Data Raw: 20 2e 65 6d 61 69 6c 4d 69 67 72 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 2e 68 65 61 64 65 72 20 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 65 6d 61 69 6c 4d 69 67 72 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 2e 68 65 61 64 65 72 20 68 35 42 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 65 6d 61 69 6c 4d 69 67 72 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 2e 68 65 61 64 65 72 20 68 35 49 6e 6c 69 6e 65 7b 66 6f 6e 74 2d 77 65 Data Ascii: .emailMigrationContainer .header h4{font-weight:normal;font-size:18px;padding-top:32px;padding-bottom:20px}.adminScoped .emailMigrationContainer .header h5Bold{font-weight:bold;font-size:15px}.adminScoped .emailMigrationContainer .header h5Inline{font-we
2023-07-21 16:51:05 UTC	8935	IN	Data Raw: 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 63 2d 66 62 2d 70 64 67 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 74 74 6f 6d 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 39 66 39 3b 77 69 64 74 68 3a 38 34 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 63 2d 66 62 2d 62 74 6e 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: dminScoped .mc-fb-pdg{position:fixed!important;bottom:0;background-color:#f9f9f9;width:840px;min-height:60px;cursor:pointer;padding-left:20px;padding-right:40px}.adminScoped .mc-fb-btn{min-height:32px;padding-left:20px;padding-right:12px;background-color:
2023-07-21 16:51:05 UTC	8951	IN	Data Raw: 20 2e 69 63 6f 6e 7b 77 69 64 74 68 3a 32 39 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 20 32 30 70 78 20 33 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 65 76 69 63 65 73 73 65 74 75 70 20 2e 69 74 65 6d 66 6f 6e 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 65 76 69 63 65 73 73 65 74 75 70 20 2e 72 61 64 69 6f 6c 61 79 6f 75 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 65 76 69 63 65 73 73 65 74 75 70 20 2e 72 65 73 74 6f 72 65 73 65 74 74 69 6e 67 73 62 74 6e 7b 6d 61 78 2d 68 65 69 Data Ascii: .icon{width:29px;height:30px;margin:20px 0 20px 30px}.adminScoped .devicessetup .itemfont{font-weight:400;font-size:14px;line-height:20px}.adminScoped .devicessetup .radiolayout{float:left;clear:none}.adminScoped .devicessetup .restoresettingsbtn{max-hei
2023-07-21 16:51:05 UTC	8967	IN	Data Raw: 75 73 2d 62 75 74 74 6f 6e 64 69 76 7b 62 61 63 Data Ascii: us-buttondiv{bac
2023-07-21 16:51:05 UTC	8967	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 69 6e 64 75 73 2d 66 6f 72 6d 2d 77 64 68 7b 77 69 64 74 68 3a 36 32 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 69 6e 64 75 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 65 6c 6c 2d 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 70 78 3b 70 61 Data Ascii: kground-color:#fff;display:inline-block;margin-top:40px}.adminScoped .findus-form-wdh{width:620px}.adminScoped .findus-container .row-container .cell-label-container{display:inline-block;width:180px;padding-top:16px;padding-bottom:12px;padding-left:6px;pa
2023-07-21 16:51:05 UTC	8983	IN	Data Raw: 74 65 72 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f 2d 74 61 62 2d 61 6e 63 68 6f 72 2d 74 65 78 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f 2d 74 61 62 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f 2d 74 61 62 2e 61 63 74 69 76 65 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f 2d 74 61 62 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 Data Ascii: ter}.adminScoped .tota11y-info-tab-anchor-text{line-height:30px}.adminScoped .tota11y-info-tab:hover{background-color:#555}.adminScoped .tota11y-info-tab.active,.adminScoped .tota11y-info-tab.active:hover{background-color:#f2f2f2}.adminScoped .tota11y-inf
2023-07-21 16:51:05 UTC	8999	IN	Data Raw: 61 64 6d 69 6e 53 63 6f 70 65 64 20 62 6f 64 79 3e 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2e 6f 70 65 6e 7b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 75 69 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 5b 74 68 65 6d 65 3d 22 73 65 6c 65 63 74 32 22 5d 2e 64 69 72 65 63 74 69 6f 6e 2d 75 70 20 2e 75 69 2d 73 65 6c 65 63 74 2d 6d 61 74 63 68 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 75 69 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 65 6c 65 63 74 32 2e 64 69 72 65 63 74 69 6f 6e 2d 75 70 20 2e 75 69 2d 73 65 6c 65 63 74 2d 6d 61 74 63 68 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 Data Ascii: adminScoped body>.select2-container.open{z-index:9999}.adminScoped .ui-select-container[theme="select2"].direction-up .ui-select-match,.adminScoped .ui-select-container.select2.direction-up .ui-select-match{border-radius:4px;border-top-left-radius:0;borde
2023-07-21 16:51:05 UTC	9015	IN	Data Raw: 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 44 61 72 6b 2d 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 31 32 31 32 31 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 50 72 69 6d 61 72 79 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 50 72 69 6d 61 72 79 2d 68 6f 76 65 72 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c Data Ascii: dminScoped .fabric0103-ms-borderColor-neutralDark--hover:hover{border-color:#212121}.adminScoped .fabric0103-ms-border-color-neutralPrimary,.adminScoped .fabric0103-ms-border-color-neutralPrimary-hover:hover,.adminScoped .fabric0103-ms-borderColor-neutral
2023-07-21 16:51:05 UTC	9031	IN	Data Raw: 65 6e 74 61 44 61 72 6b 2d 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 35 63 30 30 35 63 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 63 6f 6c 6f 72 2d 6d 61 67 65 6e 74 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 63 6f 6c 6f 72 2d 6d 61 67 65 6e 74 61 2d 68 6f 76 65 72 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 43 6f 6c 6f 72 2d 6d 61 67 65 6e 74 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 43 6f 6c 6f 72 2d 6d 61 67 65 6e 74 61 2d 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 62 Data Ascii: entaDark--hover:hover{color:#5c005c}.adminScoped .fabric0103-ms-font-color-magenta,.adminScoped .fabric0103-ms-font-color-magenta-hover:hover,.adminScoped .fabric0103-ms-fontColor-magenta,.adminScoped .fabric0103-ms-fontColor-magenta--hover:hover{color:#b
2023-07-21 16:51:05 UTC	9047	IN	Data Raw: 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 53 65 67 6f 65 55 49 2d 57 65 73 74 45 75 72 6f 70 65 61 6e 2f 53 65 67 6f 65 55 49 2d 53 65 6d 69 6c 69 67 68 74 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 53 65 67 6f 65 55 49 2d 57 65 73 74 45 75 72 6f 70 65 61 6e 2f 53 65 67 6f 65 55 49 2d 53 65 6d 69 6c 69 67 68 74 2e 73 76 67 23 53 65 67 6f 65 55 49 2d 53 65 6d 69 6c 69 67 68 74 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 6a 61 2d 4a 50 22 5d 20 2e Data Ascii: f') format('woff'),url('../fonts/SegoeUI-WestEuropean/SegoeUI-Semilight.ttf') format('truetype'),url('../fonts/SegoeUI-WestEuropean/SegoeUI-Semilight.svg#SegoeUI-Semilight') format('svg');font-weight:normal;font-style:normal}.adminScoped *[lang="ja-JP"] .
2023-07-21 16:51:05 UTC	9063	IN	Data Raw: 67 68 74 27 2c 27 53 65 67 6f 65 20 55 49 27 2c 27 53 65 67 6f 65 20 57 50 27 2c 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 68 72 2d 48 52 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 6c 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 68 72 2d 48 52 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 73 75 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 68 72 2d 48 52 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 73 65 6d 69 6c 69 67 68 74 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 68 72 2d 48 52 22 5d 20 2e 66 61 62 72 69 Data Ascii: ght','Segoe UI','Segoe WP',Tahoma,Arial,sans-serif}.adminScoped [lang="hr-HR"] .fabric0103-ms-font-l,.adminScoped [lang="hr-HR"] .fabric0103-ms-font-su,.adminScoped [lang="hr-HR"] .fabric0103-ms-font-weight-semilight,.adminScoped [lang="hr-HR"] .fabri
2023-07-21 16:51:05 UTC	9079	IN	Data Raw: 53 65 67 6f 65 20 57 50 27 2c 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 76 69 2d 56 4e 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 6d 69 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 76 69 2d 56 4e 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 73 65 6d 69 62 6f 6c 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 76 69 2d 56 4e 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 73 65 6d 69 62 6f 6c 64 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 20 55 49 20 53 65 6d 69 62 Data Ascii: Segoe WP',Tahoma,Arial,sans-serif}.adminScoped [lang="vi-VN"] .fabric0103-ms-font-mi,.adminScoped [lang="vi-VN"] .fabric0103-ms-font-weight-semibold,.adminScoped *[lang="vi-VN"] .fabric0103-ms-font-weight-semibold-hover:hover{font-family:'Segoe UI Semib
2023-07-21 16:51:05 UTC	9096	IN	Data Raw: 20 2e 66 61 64 65 4f 75 74 32 30 30 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 64 65 4f 75 74 34 30 30 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 64 65 4f 75 74 35 30 30 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 36 37 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 36 37 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 36 37 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f 75 74 3b 61 6e 69 6d 61 74 Data Ascii: .fadeOut200,.adminScoped .fadeOut400,.adminScoped .fadeOut500{-webkit-animation-duration:.367s;-webkit-animation-name:fadeOut;-webkit-animation-fill-mode:both;-webkit-animation-duration:.367s;animation-duration:.367s;-webkit-animation-name:fadeOut;animat
2023-07-21 16:51:05 UTC	9112	IN	Data Raw: 78 78 78 6c 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 75 2d 78 78 78 6c 50 75 6c 6c 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 75 2d 78 78 78 6c 50 75 6c 6c 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 75 2d 78 78 78 6c 50 75 6c 6c 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 34 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 75 2d 78 78 78 6c 50 75 6c 6c 39 7b Data Ascii: xxxl1{width:8.333333333333332%}.adminScoped .fabric0103-ms-u-xxxlPull12{right:100%}.adminScoped .fabric0103-ms-u-xxxlPull11{right:91.66666666666666%}.adminScoped .fabric0103-ms-u-xxxlPull10{right:83.33333333333334%}.adminScoped .fabric0103-ms-u-xxxlPull9{
2023-07-21 16:51:05 UTC	9128	IN	Data Raw: 6d 73 2d 49 63 6f 6e 2d 2d 73 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 83 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 84 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 85 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 71 75 65 73 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 86 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 87 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 Data Ascii: ms-Icon--star:before{content:''}.adminScoped .ms-Icon--plus:before{content:''}.adminScoped .ms-Icon--minus:before{content:''}.adminScoped .ms-Icon--question:before{content:''}.adminScoped .ms-Icon--exclamation:before{content:''}.adminScoped
2023-07-21 16:51:05 UTC	9144	IN	Data Raw: 65 6d 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 ba 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 61 6c 65 72 74 4f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 bb 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 64 6f 63 75 6d 65 6e 74 4c 61 6e 64 73 63 61 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 bc 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 64 6f 63 75 6d 65 6e 74 41 64 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 bd 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 74 6f 67 67 6c 65 4d 69 64 64 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 be Data Ascii: emy:before{content:''}.adminScoped .ms-Icon--alertOutline:before{content:''}.adminScoped .ms-Icon--documentLandscape:before{content:''}.adminScoped .ms-Icon--documentAdd:before{content:''}.adminScoped .ms-Icon--toggleMiddle:before{content:'
2023-07-21 16:51:05 UTC	9160	IN	Data Raw: ee 84 90 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 46 6f 72 77 61 72 64 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 91 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 42 61 63 6b 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 92 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 46 61 76 6f 72 69 74 65 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 93 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 43 61 6d 65 72 61 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: "}.adminScoped .segoe-mdl2-icon--ForwardLegacy:before{content:""}.adminScoped .segoe-mdl2-icon--BackLegacy:before{content:""}.adminScoped .segoe-mdl2-icon--FavoriteLegacy:before{content:""}.adminScoped .segoe-mdl2-icon--CameraLegacy:before{con
2023-07-21 16:51:05 UTC	9176	IN	Data Raw: 3a 22 ee 9c 86 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 4d 61 70 50 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 87 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 51 75 69 65 74 48 6f 75 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 88 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 41 69 72 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 89 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 54 61 62 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 8a 22 7d 2e 61 64 6d 69 6e Data Ascii: :""}.adminScoped .segoe-mdl2-icon--MapPin:before{content:""}.adminScoped .segoe-mdl2-icon--QuietHours:before{content:""}.adminScoped .segoe-mdl2-icon--Airplane:before{content:""}.adminScoped .segoe-mdl2-icon--Tablet:before{content:""}.admin
2023-07-21 16:51:05 UTC	9192	IN	Data Raw: 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 52 65 76 65 61 6c 50 61 73 73 77 6f 72 64 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 81 92 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 55 53 42 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a2 8e 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 56 69 65 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a2 90 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 50 72 65 76 69 6f 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a2 92 22 7d 2e 61 64 6d 69 6e 53 Data Ascii: }.adminScoped .segoe-mdl2-icon--RevealPasswordLegacy:before{content:""}.adminScoped .segoe-mdl2-icon--USB:before{content:""}.adminScoped .segoe-mdl2-icon--View:before{content:""}.adminScoped .segoe-mdl2-icon--Previous:before{content:""}.adminS
2023-07-21 16:51:05 UTC	9208	IN	Data Raw: 6e 74 3a 22 ee a1 81 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 50 69 6e 6e 65 64 46 69 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a1 82 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 42 61 74 74 65 72 79 55 6e 6b 6e 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 96 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 57 69 66 69 41 74 74 65 6e 74 69 6f 6e 4f 76 65 72 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 98 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 50 61 73 73 77 6f 72 64 4b 65 79 53 Data Ascii: nt:""}.adminScoped .segoe-mdl2-icon--PinnedFill:before{content:""}.adminScoped .segoe-mdl2-icon--BatteryUnknown:before{content:""}.adminScoped .segoe-mdl2-icon--WifiAttentionOverlay:before{content:""}.adminScoped .segoe-mdl2-icon--PasswordKeyS
2023-07-21 16:51:05 UTC	9224	IN	Data Raw: 67 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: gy:before{conten
2023-07-21 16:51:05 UTC	9224	IN	Data Raw: 74 3a 22 ee b0 8b 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 54 6f 67 67 6c 65 46 69 6c 6c 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee b0 91 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 54 6f 67 67 6c 65 42 6f 72 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee b0 92 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 53 6c 69 64 65 72 54 68 75 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee b0 93 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 54 6f 67 67 6c 65 54 68 75 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: t:""}.adminScoped .segoe-mdl2-icon--ToggleFilled:before{content:""}.adminScoped .segoe-mdl2-icon--ToggleBorder:before{content:""}.adminScoped .segoe-mdl2-icon--SliderThumb:before{content:""}.adminScoped .segoe-mdl2-icon--ToggleThumb:before{con
2023-07-21 16:51:05 UTC	9240	IN	Data Raw: 68 65 63 6b 65 64 7e 2e 63 68 65 63 6b 62 6f 78 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 68 6b 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 68 65 63 6b 62 6f 78 6d 61 72 6b 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 68 6b 2d 77 72 61 70 70 65 72 20 2e 63 68 65 63 6b 62 6f 78 6d 61 72 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 37 70 78 3b 77 69 64 74 68 3a 31 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 62 6f 72 64 65 72 3a Data Ascii: hecked~.checkboxmark{background-color:#0078d7;border:none}.adminScoped .chk-wrapper input:checked~.checkboxmark:after{display:block}.adminScoped .chk-wrapper .checkboxmark{position:absolute;top:0;left:0;height:17px;width:17px;background-color:#eee;border:
2023-07-21 16:51:05 UTC	9256	IN	Data Raw: 73 74 65 70 73 2d 34 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 34 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 35 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 35 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 36 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 36 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 37 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 37 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 38 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 38 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 39 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c Data Ascii: steps-4 li{width:calc(100%/4)}.steps-indicator.steps-5 li{width:calc(100%/5)}.steps-indicator.steps-6 li{width:calc(100%/6)}.steps-indicator.steps-7 li{width:calc(100%/7)}.steps-indicator.steps-8 li{width:calc(100%/8)}.steps-indicator.steps-9 li{width:cal
2023-07-21 16:51:05 UTC	9272	IN	Data Raw: 3a 37 70 78 7d 2e 63 6f 6c 6f 72 70 69 63 6b 65 72 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 37 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 6f 70 3a 2d 36 70 78 3b 6c 65 66 74 3a 36 70 78 7d 2e 63 6f 6c 6f 72 70 69 63 6b 65 72 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 39 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 63 6f 6c 6f 72 70 69 63 6b 65 72 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 36 70 78 20 73 6f 6c 69 64 20 Data Ascii: :7px}.colorpicker .dropdown-menu::before{border:7px solid transparent;top:-6px;left:6px}.colorpicker .dropdown-menu{position:static;top:0;left:0;min-width:129px;padding:4px;margin-top:0}.colorpicker-position-top .dropdown-menu::after{border-top:6px solid
2023-07-21 16:51:05 UTC	9288	IN	Data Raw: 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 46 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9f 81 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 53 77 69 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a2 ab 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 55 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a2 98 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 53 74 61 74 75 73 45 72 72 6f 72 46 75 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee ae 90 27 7d 2e 61 64 6d 69 6e Data Ascii: Scoped .ms-Icon-FabricMDL2--Flag:before{content:''}.adminScoped .ms-Icon-FabricMDL2--Switch:before{content:''}.adminScoped .ms-Icon-FabricMDL2--Upload:before{content:''}.adminScoped .ms-Icon-FabricMDL2--StatusErrorFull:before{content:''}.admin
2023-07-21 16:51:05 UTC	9304	IN	Data Raw: 32 2d 2d 50 65 72 6d 69 73 73 69 6f 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a3 97 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 50 72 6f 74 65 63 74 65 64 44 6f 63 75 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a2 a6 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 54 6f 44 6f 4c 6f 67 6f 4f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 9d 9b 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 4f 75 74 6c 6f 6f 6b 4c 6f 67 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 87 a9 27 7d 2e 61 64 6d 69 6e 53 63 Data Ascii: 2--Permissions:before{content:''}.adminScoped .ms-Icon-FabricMDL2--ProtectedDocument:before{content:''}.adminScoped .ms-Icon-FabricMDL2--ToDoLogoOutline:before{content:''}.adminScoped .ms-Icon-FabricMDL2--OutlookLogo:before{content:''}.adminSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
225	192.168.2.5	50087	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	8094	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/o365themedefault.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:05 UTC	8239	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 63436 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Fri, 21 Jul 2023 16:51:05 GMT Last-Modified: Wed, 19 Jul 2023 22:16:27 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1142349131310879663812488288273848372840"}],"include_subdomains ":true} Server: ECAcc (muc/3311) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 9d2cc99a-301e-0025-555f-bb63bd000000 Content-Length: 7600 Connection: close
2023-07-21 16:51:05 UTC	8240	IN	Data Raw: 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 69 6e 70 75 74 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 74 65 78 74 61 72 65 61 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 36 36 7d 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 31 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 33 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 34 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 35 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 36 7b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 6f 33 Data Ascii: .o365-theme-base,.o365-theme-base input,.o365-theme-base textarea,.o365-theme-base select{background-color:#fff;color:#333;border-color:#666}.o365-theme-base h1,.o365-theme-base h3,.o365-theme-base h4,.o365-theme-base h5,.o365-theme-base h6{color:#333}.o3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
226	192.168.2.5	50083	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9095	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:05 UTC	9310	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73249 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Fri, 21 Jul 2023 16:51:05 GMT Last-Modified: Wed, 19 Jul 2023 22:15:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=421257324503632304817283591783688590463"}],"include_subdomains ":true} Server: ECAcc (muc/3335) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0d9d6efb-201e-0064-7b48-bb3b59000000 Content-Length: 94157 Connection: close
2023-07-21 16:51:05 UTC	9311	IN	Data Raw: 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 7b 6c 69 6e 65 2d 62 72 65 61 6b 3a 73 74 72 69 63 74 7d 2e 6f 31 35 74 61 62 6c 65 2c 2e 6f 31 35 74 61 62 6c 65 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 73 65 70 61 72 61 74 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 31 70 78 7d 2e 6f 31 35 74 61 62 6c 65 20 74 68 2c 2e 6f 31 35 74 61 62 6c 65 32 20 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 32 35 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 7d 2e 6f 31 35 74 61 62 6c 65 20 74 68 2c 2e 6f 31 35 74 61 62 6c 65 20 74 64 7b 70 61 64 64 69 6e 67 3a 35 70 78 Data Ascii: .adminScoped *{line-break:strict}.o15table,.o15table2{width:100%;margin-bottom:30px;border-collapse:separate;border-spacing:1px}.o15table th,.o15table2 th{font-weight:normal;white-space:nowrap;width:25%;font-size:11px}.o15table th,.o15table td{padding:5px
2023-07-21 16:51:05 UTC	9327	IN	Data Raw: 73 Data Ascii: s
2023-07-21 16:51:05 UTC	9327	IN	Data Raw: 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 20 61 2e 48 65 61 64 65 72 2c 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 20 61 2e 48 65 61 64 65 72 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 20 73 70 61 6e 2e 41 72 72 6f 77 2c 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 20 61 2e 41 72 72 6f 77 3a 68 6f 76 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 50 72 Data Ascii: play:inline-block}.PropertySheet{display:inline-block}.PropertySheet a.Header,.PropertySheet a.Header:hover{text-decoration:none;cursor:pointer}.PropertySheet span.Arrow,.PropertySheet a.Arrow:hover{margin-left:10px;text-decoration:none;cursor:pointer}.Pr
2023-07-21 16:51:05 UTC	9343	IN	Data Raw: 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2f 73 68 65 6c 6c 2f 69 6d 61 67 65 73 2f 68 65 61 64 65 72 5f 62 61 72 5f 6f 72 61 6e 67 65 5f 31 30 5f 33 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 53 68 65 6c 6c 2d 53 69 67 6e 75 70 43 75 73 74 6f 6d 20 2e 53 68 65 6c 6c 2d 48 65 61 64 65 72 7b 68 65 69 67 68 74 3a 37 32 70 78 7d 2e 53 68 65 6c 6c 2d 53 69 67 6e 75 70 4d 4f 53 20 2e 53 68 65 6c 6c 2d 48 65 61 64 65 72 7b 68 65 Data Ascii: x;background-color:#fff;background-image:url(https://res-h3.public.cdn.office.net/admincenter/admin-content/shell/images/header_bar_orange_10_3.gif);background-repeat:repeat-x}.Shell-SignupCustom .Shell-Header{height:72px}.Shell-SignupMOS .Shell-Header{he
2023-07-21 16:51:05 UTC	9359	IN	Data Raw: 48 32 7a 77 70 57 61 52 73 62 70 74 5a 74 44 56 76 42 79 51 68 49 4c 53 43 2b 35 56 56 5a 4c 68 45 6f 79 6c 74 57 78 33 30 59 34 72 71 59 6f 49 6c 69 6a 31 6d 56 77 67 56 50 65 4c 55 4b 5a 4b 58 67 77 56 47 34 6d 4e 50 6e 41 51 2b 61 44 4b 56 4c 67 45 6d 4e 55 71 2b 72 49 75 73 63 35 6f 50 56 33 58 6b 78 44 75 50 68 58 30 69 56 6c 64 34 38 44 70 36 6d 38 49 64 45 42 52 66 41 47 56 37 52 78 67 69 48 43 78 39 47 47 46 69 42 4d 78 4a 47 47 2b 72 32 39 54 42 51 45 63 34 2b 35 4d 50 33 4f 48 70 6e 59 47 56 52 55 49 63 6b 55 6c 56 35 59 77 51 42 6c 37 33 67 61 59 41 50 57 6f 31 6c 57 31 41 62 61 34 51 75 43 2b 34 71 66 62 4c 77 66 57 59 38 49 6b 76 5a 4f 4e 42 76 75 46 4d 78 4d 4c 31 55 4d 58 73 4a 6d 52 76 55 57 7a 63 45 6b 2f 6c 2b 4f 36 44 61 5a 45 52 55 56 Data Ascii: H2zwpWaRsbptZtDVvByQhILSC+5VVZLhEoyltWx30Y4rqYoIlij1mVwgVPeLUKZKXgwVG4mNPnAQ+aDKVLgEmNUq+rIusc5oPV3XkxDuPhX0iVld48Dp6m8IdEBRfAGV7RxgiHCx9GGFiBMxJGG+r29TBQEc4+5MP3OHpnYGVRUIckUlV5YwQBl73gaYAPWo1lW1Aba4QuC+4qfbLwfWY8IkvZONBvuFMxML1UMXsJmRvUWzcEk/l+O6DaZERUV
2023-07-21 16:51:05 UTC	9375	IN	Data Raw: 65 6d 3b 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 37 65 6d 3b 62 6f 72 64 65 72 3a 2e 31 32 65 6d 20 73 6f 6c 69 64 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 65 6d 7d 2e 73 6f 6c 69 64 43 69 72 63 6c 65 49 63 6f 6e 7b 62 6f 72 64 65 72 3a 2e 31 32 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 61 63 6b 49 63 6f 6e 42 75 74 74 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 62 6f 78 45 72 72 6f 72 43 72 6f 73 73 53 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 62 6f 78 45 72 72 6f Data Ascii: em;height:1.2em;border-radius:.7em;border:.12em solid;text-align:center;box-sizing:border-box;line-height:1.1em}.solidCircleIcon{border:.12em solid transparent}.backIconButton{font-size:18px;text-decoration:none}.boxErrorCrossSmall{font-size:16px}.boxErro
2023-07-21 16:51:05 UTC	9391	IN	Data Raw: 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 70 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 20 31 33 70 78 20 30 20 31 33 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 69 76 2e 4e 61 76 44 61 74 61 3e 75 6c 3e 6c 69 2e 54 6f 70 4e 61 76 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 65 67 6f 65 55 49 2d 4c 69 67 68 74 2d 66 69 6e 61 6c 2c 22 53 65 67 6f 65 20 55 49 20 4c 69 67 68 74 22 2c 22 53 65 67 6f 65 20 55 49 22 2c 53 65 67 6f 65 2c 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 53 61 6e 73 2d 53 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 Data Ascii: ;letter-spacing:.02em;line-height:11pt;display:block;padding:0 13px 0 13px;margin-bottom:0}div.NavData>ul>li.TopNav{font-family:SegoeUI-Light-final,"Segoe UI Light","Segoe UI",Segoe,Tahoma,Helvetica,Arial,Sans-Serif;font-size:15px;line-height:normal;lette

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
227	192.168.2.5	50082	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9308	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15mvc.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:05 UTC	9403	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73836 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Fri, 21 Jul 2023 16:51:05 GMT Last-Modified: Wed, 19 Jul 2023 22:15:45 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=160202347666744719976115846704093253973"}],"include_subdomains ":true} Server: ECAcc (muc/3317) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 09d8815c-901e-003c-5647-bbe306000000 Content-Length: 15820 Connection: close
2023-07-21 16:51:05 UTC	9404	IN	Data Raw: 2e 70 6c 2d 73 68 65 6c 6c 2d 66 6f 6f 74 65 72 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 6c 2d 70 61 64 64 69 6e 67 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 76 63 2d 76 61 6c 69 64 61 74 6f 72 3e 2e 66 69 65 6c 64 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 65 64 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: .pl-shell-footer-hide{display:none}.pl-padding-hide{display:none}.mvc-validator>.field-validation-error{border:1px solid red}.adminScoped input[type=submit]{min-width:100px;display:inline-block;margin-right:10px;margin-left:0;margin-top:5px;text-transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
228	192.168.2.5	50081	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9309	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/website.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9481	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:05 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=42554438586027335554201588881021287583"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: a357bba5-001e-0011-7cf3-bb5075000000 Content-Length: 215 Connection: close
2023-07-21 16:51:06 UTC	9482	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 33 35 37 62 62 61 35 2d 30 30 31 65 2d 30 30 31 31 2d 37 63 66 33 2d 62 62 35 30 37 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 35 2e 39 30 35 37 37 38 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:a357bba5-001e-0011-7cf3-bb5075000000Time:2023-07-21T16:51:05.9057784Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
229	192.168.2.5	50084	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9309	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/home.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9480	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:05 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1801474835578337177711804285533777882731"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: a8ab4e60-a01e-006a-5af3-bb12e9000000 Content-Length: 215 Connection: close
2023-07-21 16:51:06 UTC	9481	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 38 61 62 34 65 36 30 2d 61 30 31 65 2d 30 30 36 61 2d 35 61 66 33 2d 62 62 31 32 65 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 35 2e 39 30 34 38 30 31 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:a8ab4e60-a01e-006a-5af3-bb12e9000000Time:2023-07-21T16:51:05.9048012Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.5	49796	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:33 UTC	1563	OUT	GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_pifs~paper_view_only.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.PsX3DrpPtPRgtmZz0vfnDHPUBj6lKaziWNK1ykQH5Wk.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1631	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 239 Connection: close Date: Fri, 21 Jul 2023 16:50:34 GMT Last-Modified: Fri, 21 Jul 2023 03:23:58 GMT ETag: "ee8bea59b813cb11ca3230a9b91658f7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3c2af29a416fc74eb3d104df3f808fdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: rS2SJgqRPDJFCyiazFssThW16Hsa8NgByJBRZI5t1BNMR1IQQhcUEQ==
2023-07-21 16:50:33 UTC	1632	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 3d 8e c1 4e c3 30 10 44 ef fd 0a 24 6e 95 9a 3a a1 38 69 22 fe a0 5c 90 38 5b f6 7a 9d 5a 24 5e 6b ed 40 a1 2a df 4e a0 29 a7 7d 33 da dd 99 42 79 c7 7a 44 55 ea ca f6 aa 3c 1b 0d 6f 3d d3 14 ec 06 68 20 6e 33 eb 90 a2 66 0c b9 33 c4 16 b9 0d 14 70 e6 9c 69 6c 45 17 29 f9 ec 29 b4 ce 9f d0 76 ec fb 63 9e ed af 8d 0f 16 4f 6d 29 84 b8 14 ea ba 7e 40 97 6f 51 e2 fc ff 62 98 ed 79 5c 4f f5 94 a9 cb 14 ff e0 b2 5a 6d d7 f7 77 89 26 06 7c d6 31 fa d0 bf be 1c 9e a2 8e c8 ca fc 46 f0 f7 22 e6 ce 03 2e 02 06 9a ac b2 04 69 31 a2 77 37 7c f7 f8 a1 28 0c 9f 05 82 91 3b 0d 4d 25 f6 76 6f 44 53 ed a4 75 0f b5 33 12 1e d1 c9 12 65 0d 50 37 b2 80 94 8a 51 c7 f5 f6 07 97 bf 88 dd 30 01 00 00 Data Ascii: =N0D$n:8i"\8[zZ$^k@*N)}3ByzDU<o=h n3f3pilE))vcOm)~@oQby\OZmw&\|1F".i1w7\|(;M%voDSu3eP7Q0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
230	192.168.2.5	50088	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9419	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/home15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9482	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:05 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=113079511479868017304519865191248482609"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 1142bab0-901e-0013-47f3-bbeecd000000 Content-Length: 215 Connection: close
2023-07-21 16:51:06 UTC	9483	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 31 34 32 62 61 62 30 2d 39 30 31 65 2d 30 30 31 33 2d 34 37 66 33 2d 62 62 65 65 63 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 35 2e 39 34 34 36 39 39 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:1142bab0-901e-0013-47f3-bbeecd000000Time:2023-07-21T16:51:05.9446998Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
231	192.168.2.5	50086	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9420	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:05 UTC	9478	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:05 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: d5011898-f01e-007c-5bf3-bb316a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165105Z-ervruz8hbx641b08e43at7m97s00000006w0000000019a63 X-Cache: TCP_MISS Accept-Ranges: bytes
2023-07-21 16:51:05 UTC	9479	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
232	192.168.2.5	50090	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9421	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/assistancepanel.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9485	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:05 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1787316283015671542513533577707199136685"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: e23baa4d-401e-0000-4ef3-bbcac1000000 Content-Length: 215 Connection: close
2023-07-21 16:51:06 UTC	9486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 32 33 62 61 61 34 64 2d 34 30 31 65 2d 30 30 30 30 2d 34 65 66 33 2d 62 62 63 61 63 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 36 2e 30 37 30 38 35 32 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:e23baa4d-401e-0000-4ef3-bbcac1000000Time:2023-07-21T16:51:06.0708529Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
233	192.168.2.5	50091	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9422	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/conciergehelper.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9483	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:05 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1810127570847449485115520743260698585411"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: cd3d6002-501e-0051-5cf3-bb574d000000 Content-Length: 215 Connection: close
2023-07-21 16:51:06 UTC	9484	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 63 64 33 64 36 30 30 32 2d 35 30 31 65 2d 30 30 35 31 2d 35 63 66 33 2d 62 62 35 37 34 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 36 2e 30 37 30 39 32 38 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:cd3d6002-501e-0051-5cf3-bb574d000000Time:2023-07-21T16:51:06.0709285Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
234	192.168.2.5	50089	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9422	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/content/css/signup16.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:05 UTC	9423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42103 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Fri, 21 Jul 2023 16:51:05 GMT Last-Modified: Wed, 19 Jul 2023 22:17:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1812245599980209399711158042227717827540"}],"include_subdomains ":true} Server: ECAcc (muc/3369) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 64f01296-601e-0038-4591-bb6e01000000 Content-Length: 21168 Connection: close
2023-07-21 16:51:05 UTC	9424	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 55 49 2d 53 65 6d 69 4c 69 67 68 74 2d 66 69 6e 61 6c 27 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2f 65 6e 2f 63 73 73 2f 77 65 62 66 6f 6e 74 73 2f 73 65 67 6f 65 75 69 2d 73 65 6d 69 6c 69 67 68 74 2d 66 69 6e 61 6c 2e 65 6f 74 27 29 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2f 65 6e 2f 63 73 73 2f 77 65 62 66 6f 6e 74 73 2f Data Ascii: @font-face{font-family:'SegoeUI-SemiLight-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot');src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/
2023-07-21 16:51:05 UTC	9440	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 30 30 34 35 37 38 7d 75 6c 2c 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 7d 75 6c 2e 73 69 67 6e 75 70 69 6e 66 6f 6c 69 73 74 2c 2e 73 69 67 6e 75 70 69 6e 66 6f 6c 69 73 74 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 69 73 63 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 30 7d 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 Data Ascii: {color:#004578}ul,li{list-style-type:none;padding:0;margin:0}ul.signupinfolist,.signupinfolist li{list-style-type:disc;line-height:25px;margin-left:10px}p{margin:10px 0;padding:0}p:first-child{margin-top:0}p:last-child{margin-bottom:0}strong{font-family:'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
235	192.168.2.5	50092	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:05 UTC	9445	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/adoption.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9805	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:05 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=293650120642945056512290573961099114509"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: ba7f9d8c-f01e-003a-09f3-bbd0b9000000 Content-Length: 215 Connection: close
2023-07-21 16:51:06 UTC	9807	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 61 37 66 39 64 38 63 2d 66 30 31 65 2d 30 30 33 61 2d 30 39 66 33 2d 62 62 64 30 62 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 36 2e 31 36 35 36 34 38 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:ba7f9d8c-f01e-003a-09f3-bbd0b9000000Time:2023-07-21T16:51:06.1656484Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
236	192.168.2.5	50094	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9486	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/commonhealthdashboard.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	12520	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:06 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=111492700951079569197887870461279783455"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 37407fa7-501e-0023-4ff3-bb5002000000 Content-Length: 215 Connection: close
2023-07-21 16:51:06 UTC	12521	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 33 37 34 30 37 66 61 37 2d 35 30 31 65 2d 30 30 32 33 2d 34 66 66 33 2d 62 62 35 30 30 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 36 2e 37 34 39 32 34 34 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:37407fa7-501e-0023-4ff3-bb5002000000Time:2023-07-21T16:51:06.7492446Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
237	192.168.2.5	50093	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9486	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:06 UTC	12483	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:06 GMT Content-Type: application/x-javascript content-length: 113440 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 x-ms-request-id: 22dda175-401e-0017-1cf3-bb565f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165106Z-h0px9u2brt7597d9ax5v6qvf1s0000000720000000008yb0 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:06 UTC	12485	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA);)g9{4MB(jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2023-07-21 16:51:06 UTC	12499	IN	Data Raw: b8 d8 34 94 79 95 7b 4b 43 d5 e6 f2 ed a4 9e 91 21 66 47 d0 32 60 b6 e8 54 5b ab 17 94 42 55 68 c3 01 61 39 4f da 43 ed 72 86 75 47 49 75 c5 86 4b 4a f4 05 0c 91 59 61 33 d4 79 95 fe ed 94 f3 a4 b6 62 32 a3 52 a4 6d e7 d8 5d 28 3f 1f c9 ef dd 64 78 b1 bd f4 85 3c 52 83 e6 b5 10 ea e0 d8 08 2a a7 4e 8d 55 08 39 e9 97 ca 4d 0d 4f 41 2d 48 62 fc d4 08 ad 2d e6 35 8a 29 07 e8 6b 14 1c c3 b8 46 41 9a de bc 0a d0 e3 80 92 31 48 22 30 8c 41 4e d8 bc 04 c0 29 5b 5e 12 ea 3f dc 95 59 9f 98 18 d2 69 7e c6 ab 74 c4 ab f2 36 d2 95 be 6c 65 9f e4 91 3d 62 86 ea d3 f4 af 5e fa a3 e1 69 85 da 53 9f 54 8c 51 d2 0f 46 a8 3d 2f a7 d6 2d d2 92 76 32 e3 81 f3 63 fe aa 17 c1 a1 04 64 16 c4 0a 61 a7 de b5 e6 0a 71 65 7c cb 77 28 d2 da cf 2e 00 ea e3 be 03 01 d0 f1 47 43 8a a1 Data Ascii: 4y{KC!fG2`T[BUha9OCruGIuKJYa3yb2Rm](?dx<R*NU9MOA-Hb-5)kFA1H"0AN)[^?Yi~t6le=b^iSTQF=/-v2cdaqe\|w(.GC
2023-07-21 16:51:06 UTC	12501	IN	Data Raw: 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 42 Data Ascii: 2&jI+@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<iZ!Nq>H%+# o``HY{rvne%iW3=j-`IQG9V&kD{E+,Gj4B
2023-07-21 16:51:06 UTC	12508	IN	Data Raw: ed 7d 6b 73 db c6 b2 e0 f7 fd 15 12 63 cb 80 01 8a 0f 3d 1c 91 04 19 5d db d9 75 55 ce 8d 2b c9 bd 1f 0e 49 f3 80 24 48 22 02 01 06 20 f5 b0 c0 fd ed db dd f3 06 40 49 f6 b9 a7 ee d6 d6 a6 62 11 18 cc b3 a7 a7 a7 a7 a7 1f 68 a1 a2 2e 08 b2 ed 43 44 1e 39 83 fb 6d dd 8f c2 65 dc a9 39 98 6d 3c 36 c6 78 e0 66 55 5b 07 ee da b8 53 35 7a 21 a4 fe d8 0d 14 0f b0 cb 35 6d 84 32 43 4a 19 dc 22 b4 54 05 04 2e 76 50 03 22 db 5d e1 d6 7e 6c 1d a2 ab dd 95 90 08 e1 d9 19 a1 e5 6e bc 07 09 ad de 86 20 86 67 67 18 08 20 fd 0a d9 0c 18 e0 e3 7b 43 c9 fd 3d 57 48 a6 d5 cf 96 c7 4a 2e 0f f5 ed 09 ca cd f2 60 47 fe 2b 17 c3 0a f7 3a a7 8d 77 1e 1a c4 a6 c9 fc 41 4e 3c be 28 b4 99 02 e2 38 6d 40 48 fb 05 28 b6 72 57 0a c5 e6 45 dc 52 28 3c ff d7 e1 d6 40 43 30 d4 34 3d 88 Data Ascii: }ksc=]uU+I$H" @Ibh.CD9me9m<6xfU[S5z!5m2CJ"T.vP"]~ln gg {C=WHJ.`G+:wAN<(8m@H(rWER(<@C04=
2023-07-21 16:51:06 UTC	12517	IN	Data Raw: 53 01 ad d8 84 16 00 41 3f 47 b0 f1 c7 bc 33 b1 36 fe 50 4b 6d 7e 0b 54 20 c5 e3 a6 df 32 ed e4 24 ec 57 40 a1 12 80 62 58 2f 83 63 68 17 29 2b 8c de a4 0c 62 37 3f 44 67 d4 86 2f 96 72 99 b2 88 d5 58 ba 0a 30 17 88 ce fc 98 db e9 78 f0 7c 16 c9 27 42 e5 ec 5a c8 ee 14 c6 42 33 59 be d2 f3 9a 14 b9 ba 5b 82 84 44 1c 83 06 7a 1e 3a 89 e6 8a 76 0c 31 30 7a 81 bb f5 aa 26 49 33 9f da 0e 94 38 a7 13 74 25 b1 c2 68 d4 76 b9 be 18 70 88 67 af a8 d7 dd 3a 55 ed 29 31 11 c3 b9 41 ca ce 5d e6 9c e0 c9 b9 7a a3 e6 c2 e3 30 63 d7 65 70 1e 09 3a b0 0d a1 d0 db dc ff 8c 37 bc 4a 9a f9 38 f9 c0 b7 a5 5b ab 82 e7 35 67 3c c0 c3 e2 70 5b 6f 11 93 9b 06 b7 41 4a 6c 93 be d7 d9 9d 42 93 02 7a f6 c1 ad b7 69 56 60 8e ba ea ac 84 9c 24 5b 3c a4 12 81 7c 17 23 c1 8d 06 f2 a5 Data Ascii: SA?G36PKm~T 2$W@bX/ch)+b7?Dg/rX0x\|'BZB3Y[Dz:v10z&I38t%hvpg:U)1A]z0cep:7J8[5g<p[oAJlBziV`$[<\|#

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
238	192.168.2.5	50095	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9488	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/microsoftajaxcombined.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9489	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101289 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:15:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=35316098486220598114483299535347972053"}],"include_subdomains ":true} Server: ECAcc (muc/330A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 6b2f022c-c01e-0043-1707-bb2c9d000000 Content-Length: 228581 Connection: close
2023-07-21 16:51:06 UTC	9490	IN	Data Raw: 76 61 72 20 24 67 65 74 2c 24 63 72 65 61 74 65 2c 24 61 64 64 48 61 6e 64 6c 65 72 2c 24 61 64 64 48 61 6e 64 6c 65 72 73 2c 24 63 6c 65 61 72 48 61 6e 64 6c 65 72 73 2c 24 63 6f 6d 6d 6f 6e 2c 43 6f 6d 6d 6f 6e 54 6f 6f 6c 6b 69 74 53 63 72 69 70 74 73 2c 24 41 41 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 76 74 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 75 28 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 66 21 3d 3d 68 29 74 68 72 6f 77 20 45 72 72 6f 72 2e 61 72 67 75 6d 65 6e 74 28 22 76 61 6c 75 65 22 2c 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 74 2e 52 65 73 2e 65 6e 75 6d 49 6e 76 61 6c 69 64 56 61 6c 75 65 2c 6e 2c 74 68 69 73 2e 5f 5f 74 79 70 65 4e 61 6d 65 29 29 3b 7d 76 61 Data Ascii: var $get,$create,$addHandler,$addHandlers,$clearHandlers,$common,CommonToolkitScripts,$AA;(function(n,t){function vt(){function ru(n,i){function l(n){if(typeof f!==h)throw Error.argument("value",String.format(t.Res.enumInvalidValue,n,this.__typeName));}va
2023-07-21 16:51:06 UTC	9506	IN	Data Raw: 75 Data Ascii: u
2023-07-21 16:51:06 UTC	9506	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 5f 63 61 6e 63 65 6c 3d 6e 7d 7d 2c 64 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 22 53 79 73 2e 43 61 6e 63 65 6c 45 76 65 6e 74 41 72 67 73 22 2c 74 2e 45 76 65 6e 74 41 72 67 73 29 2c 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 2c 64 3d 74 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 66 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 2c 6e 2e 63 6f 6e 73 6f 6c 65 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 29 2c 6e 2e 6f 70 65 Data Ascii: nction(n){this._cancel=n}},d.registerClass("Sys.CancelEventArgs",t.EventArgs),Type.registerNamespace("Sys.UI"),d=t._Debug=function(){},d.prototype={_appendConsole:function(t){typeof Debug!==f&&Debug.writeln,n.console&&n.console.log&&n.console.log(t),n.ope
2023-07-21 16:51:06 UTC	9555	IN	Data Raw: 6d 62 65 72 46 6f 72 6d 61 74 2c 61 3d 4e 75 6d 62 65 72 2e 5f 70 61 72 73 65 4e 75 6d 62 65 72 4e 65 67 61 74 69 76 65 50 61 74 74 65 72 6e 28 6e 2c 72 2c 72 2e 4e 75 6d 62 65 72 4e 65 67 61 74 69 76 65 50 61 74 74 65 72 6e 29 2c 68 3d 61 5b 30 5d 2c 6f 3d 61 5b 31 5d 3b 72 65 74 75 72 6e 20 68 3d 3d 3d 67 26 26 72 2e 4e 75 6d 62 65 72 4e 65 67 61 74 69 76 65 50 61 74 74 65 72 6e 21 3d 3d 31 26 26 28 61 3d 4e 75 6d 62 65 72 2e 5f 70 61 72 73 65 4e 75 6d 62 65 72 4e 65 67 61 74 69 76 65 50 61 74 74 65 72 6e 28 6e 2c 72 2c 31 29 2c 68 3d 61 5b 30 5d 2c 6f 3d 61 5b 31 5d 29 2c 68 3d 3d 3d 67 26 26 28 68 3d 77 74 29 2c 65 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 65 22 29 2c 65 3c 30 26 26 28 65 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 45 22 29 29 2c 65 3c 30 3f 28 66 Data Ascii: mberFormat,a=Number._parseNumberNegativePattern(n,r,r.NumberNegativePattern),h=a[0],o=a[1];return h===g&&r.NumberNegativePattern!==1&&(a=Number._parseNumberNegativePattern(n,r,1),h=a[0],o=a[1]),h===g&&(h=wt),e=o.indexOf("e"),e<0&&(e=o.indexOf("E")),e<0?(f
2023-07-21 16:51:06 UTC	9571	IN	Data Raw: 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 3a 30 29 29 3b 69 66 28 63 74 28 66 72 29 29 7b 74 72 79 7b 75 3d 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7c 7c 69 2c 75 26 26 28 75 3d 75 2e 66 72 61 6d 65 42 6f 72 64 65 72 2c 63 3d 75 3d 3d 3d 22 30 22 7c 7c 75 3d 3d 3d 22 6e 6f 22 3f 32 3a 30 2c 65 2b 3d 63 2c 6f 2b 3d 63 29 7d 63 61 74 63 68 28 76 29 7b 7d 69 66 28 74 2e 42 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 3d 3d 3d 37 26 26 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 61 3d 6c 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 72 3d 28 61 2e 72 69 67 68 74 Data Ascii: .body.scrollTop:0));if(ct(fr)){try{u=n.ownerDocument.parentWindow.frameElement\|\|i,u&&(u=u.frameBorder,c=u==="0"\|\|u==="no"?2:0,e+=c,o+=c)}catch(v){}if(t.Browser.version===7&&!document.documentMode){var l=document.body,a=l.getBoundingClientRect(),r=(a.right
2023-07-21 16:51:06 UTC	9587	IN	Data Raw: 29 69 3d 6e 5b 74 5d 2c 74 3d 3d 3d 22 5f 5f 73 22 3f 72 3d 69 3a 75 2e 70 75 73 68 28 74 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 69 29 29 3b 72 65 74 75 72 6e 20 75 2e 6a 6f 69 6e 28 22 26 22 29 2b 28 72 3f 22 26 26 22 2b 72 3a 67 29 7d 2c 69 74 2e 5f 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 73 3d 74 68 69 73 2c 68 2c 6c 2c 63 2c 61 3b 73 2e 5f 65 6e 61 62 6c 65 48 69 73 74 6f 72 79 26 26 28 65 3d 65 7c 7c 67 2c 65 21 3d 3d 73 2e 5f 63 75 72 72 65 6e 74 45 6e 74 72 79 26 26 28 6e 2e 74 68 65 46 6f 72 6d 26 26 28 68 3d 6e 2e 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 2c 6c 3d 68 2e 69 6e 64 65 78 4f 66 28 79 29 2c 6e 2e 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 28 6c 21 3d 3d 72 74 Data Ascii: )i=n[t],t==="__s"?r=i:u.push(t+"="+encodeURIComponent(i));return u.join("&")+(r?"&&"+r:g)},it._setState=function(e,o){var s=this,h,l,c,a;s._enableHistory&&(e=e\|\|g,e!==s._currentEntry&&(n.theForm&&(h=n.theForm.action,l=h.indexOf(y),n.theForm.action=(l!==rt
2023-07-21 16:51:06 UTC	9603	IN	Data Raw: 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 28 65 3d 70 74 28 22 64 69 76 22 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 65 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 2c 30 29 3b 72 65 74 75 72 6e 7d 65 3d 69 2c 75 28 29 7d 2c 66 28 29 29 3a 65 74 28 64 6f 63 75 6d 65 6e 74 2c 69 2c 66 74 2c 75 2c 72 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 65 74 28 64 6f 63 75 6d 65 6e 74 2c 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 69 2c 75 29 29 7d 2c 5f 67 65 74 42 79 49 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 75 2c 66 2c 65 29 7b 69 66 28 66 29 75 26 26 66 2e 69 64 3d 3d 3d 74 3f 6e 2e 70 75 Data Ascii: Element.doScroll?(e=pt("div"),f=function(){try{e.doScroll("left")}catch(t){o=n.setTimeout(f,0);return}e=i,u()},f()):et(document,i,ft,u,r):document.addEventListener&&et(document,"DOMContentLoaded",i,u))},_getById:function(n,t,i,u,f,e){if(f)u&&f.id===t?n.pu
2023-07-21 16:51:06 UTC	9619	IN	Data Raw: 6f 6e 65 6e 74 Data Ascii: onent
2023-07-21 16:51:06 UTC	9678	IN	Data Raw: 28 74 68 69 73 2e 5f 73 63 72 69 70 74 4d 61 6e 61 67 65 72 49 44 29 2b 65 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2b 22 26 22 7d 2c 5f 63 72 65 61 74 65 50 6f 73 74 42 61 63 6b 53 65 74 74 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 72 65 74 75 72 6e 7b 61 73 79 6e 63 3a 6e 2c 61 73 79 6e 63 54 61 72 67 65 74 3a 69 2c 70 61 6e 65 6c 73 54 6f 55 70 64 61 74 65 3a 74 2c 73 6f 75 72 63 65 45 6c 65 6d 65 6e 74 3a 72 7d 7d 2c 5f 63 6f 6e 76 65 72 74 54 6f 43 6c 69 65 6e 74 49 44 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 76 61 72 20 75 2c 6f 2c 65 2c 73 3b 69 66 28 6e 29 66 6f 72 28 75 3d 30 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 75 3c 6f 3b 75 2b 3d 72 3f 32 3a 31 29 65 3d 6e 5b 75 5d 2c 73 3d Data Ascii: (this._scriptManagerID)+e+encodeURIComponent(u)+"&"},_createPostBackSettings:function(n,t,i,r){return{async:n,asyncTarget:i,panelsToUpdate:t,sourceElement:r}},_convertToClientIDs:function(n,t,i,r){var u,o,e,s;if(n)for(u=0,o=n.length;u<o;u+=r?2:1)e=n[u],s=
2023-07-21 16:51:06 UTC	9694	IN	Data Raw: 6c 6f 63 6b 28 74 5b 75 5d 2e 63 6f 6e 74 65 6e 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 63 72 69 70 74 43 6f 6e 74 65 6e 74 57 69 74 68 54 61 67 73 22 3a 69 66 28 66 3d 77 69 6e 64 6f 77 2e 65 76 61 6c 28 22 28 22 2b 74 5b 75 5d 2e 63 6f 6e 74 65 6e 74 2b 22 29 22 29 2c 66 2e 73 72 63 29 7b 69 66 28 21 69 7c 7c 53 79 73 2e 5f 53 63 72 69 70 74 4c 6f 61 64 65 72 2e 69 73 53 63 72 69 70 74 4c 6f 61 64 65 64 28 66 2e 73 72 63 29 29 63 6f 6e 74 69 6e 75 65 7d 65 6c 73 65 20 69 66 28 21 72 29 63 6f 6e 74 69 6e 75 65 3b 6e 2e 71 75 65 75 65 43 75 73 74 6f 6d 53 63 72 69 70 74 54 61 67 28 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 63 72 69 70 74 50 61 74 68 22 3a 69 66 28 21 69 7c 7c 53 79 73 2e 5f 53 63 72 69 70 74 4c 6f 61 64 65 72 2e 69 73 53 63 72 69 Data Ascii: lock(t[u].content);break;case"ScriptContentWithTags":if(f=window.eval("("+t[u].content+")"),f.src){if(!i\|\|Sys._ScriptLoader.isScriptLoaded(f.src))continue}else if(!r)continue;n.queueCustomScriptTag(f);break;case"ScriptPath":if(!i\|\|Sys._ScriptLoader.isScri
2023-07-21 16:51:06 UTC	9710	IN	Data Raw: 6f 63 75 73 6f 75 74 22 2c 74 2c 6e 2c 77 69 6e 64 6f 77 2c 31 29 7d 7d 2c 61 63 74 69 76 61 74 65 3a 7b 65 76 65 6e 74 47 72 6f 75 70 3a 63 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 69 6e 69 74 55 49 45 76 65 6e 74 28 22 61 63 74 69 76 61 74 65 22 2c 74 2c 74 2c 77 69 6e 64 6f 77 2c 31 29 7d 7d 2c 66 6f 63 75 73 3a 7b 65 76 65 6e 74 47 72 6f 75 70 3a 63 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 69 6e 69 74 55 49 45 76 65 6e 74 28 22 66 6f 63 75 73 22 2c 6e 2c 6e 2c 77 69 6e 64 6f 77 2c 31 29 7d 7d 2c 62 6c 75 72 3a 7b 65 76 65 6e 74 47 72 6f 75 70 3a 63 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 69 6e 69 74 55 49 45 76 65 6e 74 28 22 62 6c 75 72 22 2c 6e 2c 6e 2c 77 69 6e 64 6f 77 2c 31 29 7d 7d 2c 63 Data Ascii: ocusout",t,n,window,1)}},activate:{eventGroup:c,init:function(n){n.initUIEvent("activate",t,t,window,1)}},focus:{eventGroup:c,init:function(t){t.initUIEvent("focus",n,n,window,1)}},blur:{eventGroup:c,init:function(t){t.initUIEvent("blur",n,n,window,1)}},c
2023-07-21 16:51:06 UTC	9726	IN	Data Raw: 42 61 63 6b 3d 53 79 73 2e 45 78 74 65 6e 64 65 64 2e 55 49 2e 43 6f 6e 74 72 6f 6c 42 61 73 65 2e 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 2c 53 79 73 2e 45 78 74 65 6e 64 65 64 2e 55 49 2e 43 6f 6e 74 72 6f 6c 42 61 73 65 2e 6f 6e 73 75 62 6d 69 74 43 6f 6c 6c 65 63 74 69 6f 6e 3d 5b 5d 29 2c 41 72 72 61 79 2e 61 64 64 28 53 79 73 2e 45 78 74 65 6e 64 65 64 2e 55 49 2e 43 6f 6e 74 72 6f 6c 42 61 73 65 2e 6f 6e 73 75 62 6d 69 74 43 6f 6c 6c 65 63 74 69 6f 6e 2c 74 2e 5f 6f 6e 73 75 62 6d 69 74 24 64 65 6c 65 67 61 74 65 29 29 3a 24 61 64 64 48 61 6e 64 6c 65 72 28 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2c 22 73 75 62 6d 69 74 22 2c 74 2e 5f 6f 6e 73 75 62 6d 69 74 24 64 65 6c 65 67 61 74 65 29 7d 2c 64 69 73 70 6f 73 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: Back=Sys.Extended.UI.ControlBase.__doPostBack,Sys.Extended.UI.ControlBase.onsubmitCollection=[]),Array.add(Sys.Extended.UI.ControlBase.onsubmitCollection,t._onsubmit$delegate)):$addHandler(document.forms[0],"submit",t._onsubmit$delegate)},dispose:function
2023-07-21 16:51:06 UTC	9742	IN	Data Raw: 6f 73 65 28 29 2c 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 2c 6e 29 2c 74 2e 72 61 69 73 65 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 64 28 63 29 29 7d 2c 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 69 3b 69 66 28 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 29 7b 66 6f 72 28 69 3d 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 5b 69 5d 2e 64 69 73 70 6f 73 65 28 29 2c 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 5b 69 5d 3d 6e 3b 41 72 72 61 79 2e 63 6c 65 61 72 28 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 29 2c 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 3d 5b 5d 2c 74 2e 72 61 69 73 65 50 72 6f 70 65 72 Data Ascii: ose(),Array.removeAt(t._animations,n),t.raisePropertyChanged(c))},clear:function(){var t=this,i;if(t._animations){for(i=t._animations.length-1;i>=0;i--)t._animations[i].dispose(),t._animations[i]=n;Array.clear(t._animations),t._animations=[],t.raiseProper
2023-07-21 16:51:06 UTC	9758	IN	Data Raw: 65 72 43 6c 61 73 73 28 22 53 79 73 2e 45 78 74 65 6e 64 65 64 2e 55 49 2e 41 6e 69 6d 61 74 69 6f 6e 2e 4d 6f 76 65 41 6e 69 6d 61 74 69 6f 6e 22 2c 24 41 41 2e 50 61 72 61 6c 6c 65 6c 41 6e 69 6d 61 74 69 6f 6e 29 2c 24 41 41 2e 72 65 67 69 73 74 65 72 41 6e 69 6d 61 74 69 6f 6e 28 22 6d 6f 76 65 22 2c 24 41 41 2e 4d 6f 76 65 41 6e 69 6d 61 74 69 6f 6e 29 2c 24 41 41 2e 52 65 73 69 7a 65 41 6e 69 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 2c 75 2c 66 2c 6f 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 24 41 41 2e 52 65 73 69 7a 65 41 6e 69 6d 61 74 69 6f 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 42 61 73 65 28 73 2c 5b 74 2c 69 2c 72 2c 6e 5d 29 2c 73 2e 5f 77 69 64 74 68 3d 75 2c 73 2e 5f 68 65 69 67 68 74 3d 66 2c 73 2e 5f 68 6f 72 69 7a 6f 6e Data Ascii: erClass("Sys.Extended.UI.Animation.MoveAnimation",$AA.ParallelAnimation),$AA.registerAnimation("move",$AA.MoveAnimation),$AA.ResizeAnimation=function(t,i,r,u,f,o){var s=this;$AA.ResizeAnimation.initializeBase(s,[t,i,r,n]),s._width=u,s._height=f,s._horizon
2023-07-21 16:51:06 UTC	9774	IN	Data Raw: 65 74 75 72 6e 7b 78 3a 6e 2e 5f 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 79 3a 6e 2e 5f 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 54 6f 70 28 29 2c 77 69 64 74 68 3a 6e 2e 5f 67 65 74 57 69 6e 64 6f 77 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 6e 2e 5f 67 65 74 57 69 6e 64 6f 77 48 65 69 67 68 74 28 29 7d 7d 2c 5f 67 65 74 57 69 6e 64 6f 77 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 30 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3f 6e 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 Data Ascii: eturn{x:n._getWindowScrollLeft(),y:n._getWindowScrollTop(),width:n._getWindowWidth(),height:n._getWindowHeight()}},_getWindowHeight:function(){var n=0;return document.documentElement&&document.documentElement.clientHeight?n=document.documentElement.client
2023-07-21 16:51:06 UTC	9790	IN	Data Raw: 2e 5f 63 6c 6f 73 65 43 65 6c 6c 49 6e 6e 65 72 44 69 76 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 65 3d 6e 2e 5f 70 6f 70 75 70 54 61 62 6c 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 61 62 6c 65 22 29 2c 72 3d 6e 2e 5f 63 61 6c 6c 6f 75 74 41 72 72 6f 77 43 65 6c 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 29 2c 6b 3d 6e 2e 5f 77 61 72 6e 69 6e 67 49 63 6f 6e 49 6d 61 67 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 2c 6e 74 3d 6e 2e 5f 63 6c 6f 73 65 49 6d 61 67 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 2c 68 3d 6e 2e 5f 65 72 72 6f 72 4d 65 73 73 Data Ascii: ._closeCellInnerDiv=document.createElement(s),e=n._popupTable=document.createElement("table"),r=n._calloutArrowCell=document.createElement(p),k=n._warningIconImage=document.createElement("img"),nt=n._closeImage=document.createElement("img"),h=n._errorMess

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
239	192.168.2.5	50096	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9488	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9522	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101291 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:15:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=60387231061961757618379515225821179364"}],"include_subdomains ":true} Server: ECAcc (muc/3351) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 30a9e452-001e-004c-4f07-bb5af1000000 Content-Length: 93146 Connection: close
2023-07-21 16:51:06 UTC	9523	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 30 2e 32 20 77 69 74 68 20 61 20 66 69 78 20 69 6e 74 65 67 72 61 74 65 64 20 66 72 6f 6d 20 76 31 2e 31 32 2e 32 2c 20 33 2e 34 2e 30 2c 20 61 6e 64 20 33 2e 35 2e 30 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 63 69 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 6c 65 6e 67 74 68 2c 72 3d 69 2e 74 79 70 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 69 73 57 69 6e 64 6f 77 28 6e 29 3f 21 31 3a 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 74 3f 21 30 3a 22 61 72 72 61 79 22 3d 3d 3d 72 7c 7c 22 66 75 Data Ascii: /! jQuery v1.10.2 with a fix integrated from v1.12.2, 3.4.0, and 3.5.0 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license /(function(n,t){function ci(n){var t=n.length,r=i.type(n);return i.isWindow(n)?!1:1===n.nodeType&&t?!0:"array"===r\|\|"fu
2023-07-21 16:51:06 UTC	9539	IN	Data Raw: 22 Data Ascii: "
2023-07-21 16:51:06 UTC	9539	IN	Data Raw: 29 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 22 29 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6e 26 26 28 63 69 28 4f 62 6a 65 63 74 28 6e 29 29 3f 69 2e 6d 65 72 67 65 28 72 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 5b 6e 5d 3a 6e 29 3a 69 69 2e 63 61 6c 6c 28 72 2c 6e 29 29 2c 72 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3b 69 66 28 74 29 7b 69 66 28 6e 66 29 72 65 74 75 72 6e 20 6e 66 2e 63 61 6c 6c 28 74 2c 6e 2c 69 29 3b 66 6f 72 28 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 69 3f 30 3e 69 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 72 2b 69 29 3a 69 3a 30 3b 72 3e 69 3b 69 2b 2b 29 69 66 Data Ascii: ).replace(ve,"")},makeArray:function(n,t){var r=t\|\|[];return null!=n&&(ci(Object(n))?i.merge(r,"string"==typeof n?[n]:n):ii.call(r,n)),r},inArray:function(n,t,i){var r;if(t){if(nf)return nf.call(t,n,i);for(r=t.length,i=i?0>i?Math.max(0,r+i):i:0;r>i;i++)if
2023-07-21 16:51:06 UTC	9619	IN	Data Raw: 6f 5d 3d 7b 7d 29 29 5b 6e 5d 3d 5b 79 2c 6c 5d 29 2c 63 3d 3d 3d 74 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 6c 2d 3d 75 2c 6c 3d 3d 3d 72 7c 7c 30 3d 3d 6c 25 72 26 26 6c 2f 72 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 66 2c 69 3d 72 2e 70 73 65 75 64 6f 73 5b 6e 5d 7c 7c 72 2e 73 65 74 46 69 6c 74 65 72 73 5b 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 75 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 6e 29 3b 72 65 74 75 72 6e 20 69 5b 6f 5d 3f 69 28 74 29 3a 69 2e 6c 65 6e 67 74 68 3e 31 3f 28 66 3d 5b 6e 2c 6e 2c 22 22 2c 74 5d 2c 72 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 2e 74 6f 4c 6f 77 65 72 Data Ascii: o]={}))[n]=[y,l]),c===t))break;return l-=u,l===r\|\|0==l%r&&l/r>=0}}},PSEUDO:function(n,t){var f,i=r.pseudos[n]\|\|r.setFilters[n.toLowerCase()]\|\|u.error("unsupported pseudo: "+n);return i[o]?i(t):i.length>1?(f=[n,n,"",t],r.setFilters.hasOwnProperty(n.toLower
2023-07-21 16:51:06 UTC	9635	IN	Data Raw: 76 61 6c 75 65 3d 72 29 2c 74 7d 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 2c 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 75 29 7b 76 61 72 20 65 2c 66 2c 73 2c 6f 3d 6e 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 6e 26 26 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 73 3d 31 21 3d 3d 6f 7c 7c 21 69 2e 69 73 58 4d 4c 44 6f 63 28 6e 29 2c 73 26 26 28 72 3d 69 2e 70 72 6f 70 46 69 78 5b 72 5d 7c 7c 72 2c 66 3d 69 2e 70 72 6f 70 48 6f 6f 6b 73 5b 72 5d 29 2c 75 21 3d 3d 74 3f 66 26 26 22 73 65 74 22 69 6e 20 66 26 26 28 65 3d 66 2e 73 65 74 28 6e 2c 75 2c 72 29 29 21 3d 3d 74 3f 65 3a 6e 5b 72 5d 3d 75 3a 66 26 26 Data Ascii: value=r),t}}}},propFix:{"for":"htmlFor","class":"className"},prop:function(n,r,u){var e,f,s,o=n.nodeType;if(n&&3!==o&&8!==o&&2!==o)return s=1!==o\|\|!i.isXMLDoc(n),s&&(r=i.propFix[r]\|\|r,f=i.propHooks[r]),u!==t?f&&"set"in f&&(e=f.set(n,u,r))!==t?e:n[r]=u:f&&
2023-07-21 16:51:06 UTC	9651	IN	Data Raw: 54 41 5c 5b 7c 2d 2d 29 7c 28 3f 3a 5c 5d 5c 5d 7c 2d 2d 29 3e 5c 73 2a 24 2f 67 2c 65 3d 7b 6f 70 74 69 6f 6e 3a 5b 31 2c 22 3c 73 65 6c 65 63 74 20 6d 75 6c 74 69 70 6c 65 3d 27 6d 75 6c 74 69 70 6c 65 27 3e 22 2c 22 3c 2f 73 65 6c 65 63 74 3e 22 5d 2c 6c 65 67 65 6e 64 3a 5b 31 2c 22 3c 66 69 65 6c 64 73 65 74 3e 22 2c 22 3c 2f 66 69 65 6c 64 73 65 74 3e 22 5d 2c 61 72 65 61 3a 5b 31 2c 22 3c 6d 61 70 3e 22 2c 22 3c 2f 6d 61 70 3e 22 5d 2c 70 61 72 61 6d 3a 5b 31 2c 22 3c 6f 62 6a 65 63 74 3e 22 2c 22 3c 2f 6f 62 6a 65 63 74 3e 22 5d 2c 74 68 65 61 64 3a 5b 31 2c 22 3c 74 61 62 6c 65 3e 22 2c 22 3c 2f 74 61 62 6c 65 3e 22 5d 2c 74 72 3a 5b 32 2c 22 3c 74 61 62 6c 65 3e 3c 74 62 6f 64 79 3e 22 2c 22 3c 2f 74 62 6f 64 79 3e 3c 2f 74 61 62 6c 65 3e 22 5d Data Ascii: TA\[\|--)\|(?:\]\]\|--)>\s*$/g,e={option:[1,"<select multiple='multiple'>","</select>"],legend:[1,"<fieldset>","</fieldset>"],area:[1,"<map>","</map>"],param:[1,"<object>","</object>"],thead:[1,"<table>","</table>"],tr:[2,"<table><tbody>","</tbody></table>"]
2023-07-21 16:51:06 UTC	9667	IN	Data Raw: 3a 65 2b 28 73 69 2e 74 65 73 74 28 65 29 3f 22 26 22 3a 22 3f 22 29 2b 22 5f 3d 22 2b 6f 69 2b 2b 29 29 2c 75 2e 69 66 4d 6f 64 69 66 69 65 64 26 26 28 69 2e 6c 61 73 74 4d 6f 64 69 66 69 65 64 5b 65 5d 26 26 66 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 22 2c 69 2e 6c 61 73 74 4d 6f 64 69 66 69 65 64 5b 65 5d 29 2c 69 2e 65 74 61 67 5b 65 5d 26 26 66 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 49 66 2d 4e 6f 6e 65 2d 4d 61 74 63 68 22 2c 69 2e 65 74 61 67 5b 65 5d 29 29 2c 28 75 2e 64 61 74 61 26 26 75 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 75 2e 63 6f 6e 74 65 6e 74 54 79 70 65 21 3d 3d 21 31 7c 7c 72 2e 63 6f 6e 74 65 6e 74 54 79 70 65 29 26 26 66 2e 73 65 74 52 65 71 75 65 Data Ascii: :e+(si.test(e)?"&":"?")+"_="+oi++)),u.ifModified&&(i.lastModified[e]&&f.setRequestHeader("If-Modified-Since",i.lastModified[e]),i.etag[e]&&f.setRequestHeader("If-None-Match",i.etag[e])),(u.data&&u.hasContent&&u.contentType!==!1\|\|r.contentType)&&f.setReque

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.5	49789	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:33 UTC	1563	OUT	GET /static/fonts/SourceCodePro-BoldIt-1058.otf.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1566	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 64584 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 02 Feb 2023 02:19:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:33 GMT Cache-Control: max-age=43200 ETag: "197f00be92b49f2ccba2e43105af9f7d" Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 179ba4c3ce59451c080c2ed7517bcb96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ws_JX5jZF9BRg_fo7EoKeX11wuYljEQ_i6mPIPSGLBE4RJ89XA_T9w== Age: 7095
2023-07-21 16:50:33 UTC	1567	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 fc 48 00 0d 00 00 00 01 b0 20 00 00 fb f5 00 01 0e d9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 84 fe 49 1a 84 06 1b a5 48 1c ad 3e 06 60 00 d9 0e 01 36 02 24 03 93 70 04 06 05 99 3a 07 20 5b 32 af 91 08 e1 46 ec 6e ce 02 41 e6 a7 fc 57 76 8e b6 7d 7a 27 45 d0 09 27 14 1d eb 20 28 de 6f 9b 01 ff db 35 a1 80 1b e3 34 6c 1c 00 6f 43 6d 66 ff ff ff ff ff ff ef 4d 16 a1 5b b3 1b d8 76 77 69 40 28 01 69 af 22 58 ff f5 3b 2f c2 aa b9 21 24 e5 12 8e ba 69 03 d1 79 2f 11 6d 9a 95 79 8e 24 0d a7 bd 93 46 e0 0b 29 c3 92 ae d6 b1 49 0d 46 8f 6d 74 74 e7 77 9c 40 38 ad b0 67 85 5f 97 0a 6d 69 17 70 64 1c 8e b4 b5 35 a7 4a 0f 64 a3 a4 9e 93 de b8 fd a8 a7 35 4e 5a 57 d1 f3 b2 5d 7e 0b 12 11 e1 f4 9e 15 61 45 58 Data Ascii: wOF2OTTOH FIH>`6$p: [2FnAWv}z'E' (o54loCmfM[vwi@(i"X;/!$iy/my$F)IFmttw@8g_mipd5Jd5NZW]~aEX
2023-07-21 16:50:33 UTC	1583	IN	Data Raw: 62 32 fa 23 20 5e 23 ab 54 90 a7 ef d2 49 ad 30 b6 be 86 c5 e9 dd f3 0b 24 e4 cd 59 56 b4 b8 0d df 87 77 e3 6d 78 86 ac 41 35 20 69 90 ed 72 46 c1 f6 85 ac 9f d9 b7 4e 3b b3 d0 9f b0 94 18 0b ad f8 29 6f 70 2f a8 ce 26 de dc 4e e7 2b e2 2e 5a cb 17 d5 89 33 91 8b 7f 08 09 37 c5 9b b5 6a 98 08 d3 c6 cd 28 bb 7b 9d 7c ef 45 ca 13 5c 31 c6 20 9d 05 2f b8 2c b0 7d 5c fe a6 91 8a 2b af 38 9d 92 4d 87 ab 15 c0 3c 4a 41 1c d7 83 3d 54 7f 23 c3 e6 79 ff 66 6c 23 5f 90 2b 36 41 46 58 02 7c 4f 3f d2 65 0b 8d 0b 6b fc fd 84 80 25 fb 0c dd 88 98 35 da e1 4f b1 06 80 94 1e 4d fb 30 69 b9 1f ac 22 17 ee f1 d0 e8 e7 fc 0e 8c 40 88 e7 08 8c 40 5a 0b 48 f6 3a 6a c0 ec 04 e2 b7 01 a8 b4 52 99 b6 04 0a d7 2d 8d 4a e8 55 96 d8 8e ac 7f 47 7d e0 4e ae 21 05 c9 9b 6a ca 57 92 Data Ascii: b2# ^#TI0$YVwmxA5 irFN;)op/&N+.Z37j({\|E\1 /,}\+8M<JA=T#yfl#_+6AFX\|O?ek%5OM0i"@@ZH:jR-JUG}N!jW
2023-07-21 16:50:33 UTC	1600	IN	Data Raw: fb 7a 49 90 12 42 c2 2d 0a 7f 86 87 75 e9 14 02 fc 31 49 a7 ef df 0a 71 8c 2b 6a 50 c8 c4 79 b9 88 84 e7 db 3d 51 a6 f3 64 14 3e 8d 90 c2 c0 f7 ca f4 89 f8 f0 16 d3 03 8d a2 56 74 dd 23 f5 5e 59 ae 18 25 d8 6e 46 b4 34 0f 37 6f eb 43 09 01 a8 47 1c c0 22 1c 59 f4 79 e8 17 e1 c4 a2 6b 4e 02 ac fd 36 6e e9 6d 86 b7 5e 90 c9 cb 6e 55 55 1d 39 72 e2 c4 91 89 c3 a6 2e 5b b6 57 c5 91 08 03 5f 50 5e 24 ae 00 86 fe 16 64 b9 04 3e 24 fb 8c 13 59 44 36 b3 7d 27 cd d5 e9 54 ed 81 33 ce 32 39 68 5c c8 b0 a9 25 e1 4c 62 03 cd 7e 27 d4 56 e0 f2 59 b1 03 96 9d 61 de fa 33 e1 6b e0 98 62 d2 d0 83 da 6b 1c 6a fe 13 7c 94 cd d0 76 81 27 fc 77 3f 85 29 70 be 43 33 49 a1 96 27 88 91 4a 1c 75 5f 5f af 60 b0 69 09 98 0c 0c 86 59 f0 4c e5 14 f7 a7 d9 41 34 30 83 af 34 4e 5e 1f Data Ascii: zIB-u1Iq+jPy=Qd>Vt#^Y%nF47oCG"YykN6nm^nUU9r.[W_P^$d>$YD6}'T329h\%Lb~'VYa3kbkj\|v'w?)pC3I'Ju__`iYLA404N^
2023-07-21 16:50:33 UTC	1616	IN	Data Raw: 21 47 b9 e3 4a 23 6f 25 08 02 1e 27 4c 20 9f a3 60 22 54 96 67 55 c0 81 4e d2 4b 76 20 a0 87 23 fe c4 48 cd 52 8e 88 a8 69 1f 08 8c 38 2d f5 e1 a0 a3 2e fe 8f c3 cb 8f 3e d2 d3 38 ea 80 43 22 ac d2 86 1f a7 84 a3 81 22 98 d1 45 1f 9f c7 c2 0b 08 5a a6 31 12 47 9a 22 6a d6 1f 5c 13 89 66 a9 20 0e 3e 8f 68 c1 0e 7b e0 16 27 63 42 ba 2a 75 32 28 86 df 09 72 5e 96 ae 5a e6 4a 0e 46 3a 8b 8a ab 9f 34 5b 36 42 62 12 d6 b1 a8 40 c4 ea f2 18 72 25 27 6b ca 92 58 8e 2f e6 8e a6 e0 61 df f8 5a ec 01 c3 1d ed f5 c4 53 1f be da 40 2a 38 1e 7b d8 d6 43 33 2b 11 43 81 0f 93 a9 3b fe dd 48 6d 2d 66 82 0a f0 1d 10 6a 42 e8 92 ee a8 3e 7a e7 07 2d 46 ed 41 aa d0 29 35 0e 4a 16 f5 0a 24 20 8d d9 5d 45 1e e8 49 50 0e 22 53 1a 4a 75 dc 85 0b af 56 c0 98 9b d2 58 07 7a 73 b0 Data Ascii: !GJ#o%'L `"TgUNKv #HRi8-.>8C""EZ1G"j\f >h{'cBu2(r^ZJF:4[6Bb@r%'kX/aZS@8{C3+C;Hm-fjB>z-FA)5J$ ]EIP"SJuVXzs

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
240	192.168.2.5	50099	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9807	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/headbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9808	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73838 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:13:18 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=81525052883817508869865235413870433383"}],"include_subdomains ":true} Server: ECAcc (muc/330D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f6b4aa00-e01e-0054-2e47-bb8596000000 Content-Length: 80211 Connection: close
2023-07-21 16:51:06 UTC	9809	IN	Data Raw: 76 61 72 20 4e 61 6d 65 73 70 61 63 65 3d 7b 52 65 67 69 73 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 21 31 2c 74 3d 22 22 2c 75 3d 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2c 69 3d 30 3b 69 3c 75 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 21 3d 22 22 26 26 28 74 2b 3d 22 2e 22 29 2c 74 2b 3d 75 5b 69 5d 2c 72 3d 74 68 69 73 2e 45 78 69 73 74 73 28 74 29 2c 72 7c 7c 74 68 69 73 2e 43 72 65 61 74 65 28 74 29 7d 2c 43 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 6e 2e 73 70 6c 69 74 28 27 2e 27 29 2c 72 3d 77 69 6e 64 6f 77 2c 74 3d 30 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 72 5b 69 5b 74 5d 5d 7c 7c 6e 75 6c 6c 3d 3d 3d Data Ascii: var Namespace={Register:function(n){for(var r=!1,t="",u=n.split("."),i=0;i<u.length;i++)t!=""&&(t+="."),t+=u[i],r=this.Exists(t),r\|\|this.Create(t)},Create:function(n){for(var i=n.split('.'),r=window,t=0;t<i.length;t++)("undefined"==typeof r[i[t]]\|\|null===
2023-07-21 16:51:06 UTC	9825	IN	Data Raw: 70 Data Ascii: p
2023-07-21 16:51:06 UTC	9825	IN	Data Raw: 28 29 29 3a 4f 33 36 35 2e 4c 6f 67 2e 57 72 69 74 65 4c 6f 67 28 35 30 37 39 31 34 2c 4f 33 36 35 2e 4c 6f 67 4c 65 76 65 6c 2e 45 72 72 6f 72 2c 22 41 70 70 20 49 63 6f 6e 20 45 72 72 6f 72 22 29 7d 2c 4f 33 36 35 53 68 65 6c 6c 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 21 3d 3d 6e 75 6c 6c 26 26 4f 33 36 35 53 68 65 6c 6c 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 4f 33 36 35 53 68 65 6c 6c 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 41 64 64 4f 72 55 70 64 61 74 65 43 75 73 74 6f 6d 48 65 61 64 65 72 42 75 74 74 6f 6e 28 6b 29 29 2c 75 26 26 28 6b 3d 7b 69 64 3a 22 43 6c 6f 75 64 53 68 65 6c 6c 22 2c 61 72 69 61 4c 61 62 65 6c 3a 22 43 6c 6f 75 64 20 53 68 65 6c 6c 22 2c 69 73 53 74 61 74 65 6c 65 73 73 3a 21 Data Ascii: ()):O365.Log.WriteLog(507914,O365.LogLevel.Error,"App Icon Error")},O365Shell.Extensibility!==null&&O365Shell.Extensibility!==undefined&&O365Shell.Extensibility.AddOrUpdateCustomHeaderButton(k)),u&&(k={id:"CloudShell",ariaLabel:"Cloud Shell",isStateless:!
2023-07-21 16:51:06 UTC	9874	IN	Data Raw: 79 53 74 61 74 65 3d 3d 3d 74 68 69 73 2e 44 4f 4e 45 26 26 28 74 68 69 73 2e 73 74 61 74 75 73 3d 3d 3d 32 30 30 3f 6e 28 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 29 3a 74 28 6e 65 77 20 45 72 72 6f 72 28 27 41 50 49 20 60 27 2b 6f 2b 27 60 20 66 61 69 6c 65 64 20 77 69 74 68 20 73 74 61 74 75 73 3a 20 5b 27 2b 74 68 69 73 2e 73 74 61 74 75 73 2b 27 5d 27 29 29 29 7d 76 61 72 20 69 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 6f 3d 27 2f 61 64 6d 69 6e 2f 61 70 69 2f 61 63 63 6f 75 6e 74 73 77 69 74 63 68 2f 63 6c 65 61 72 63 61 63 68 65 27 2c 72 2c 73 3b 69 66 28 69 2e 6f 70 65 6e 28 27 50 4f 53 54 27 2c 6f 29 2c 69 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 68 2c 69 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 27 6a 73 6f 6e Data Ascii: yState===this.DONE&&(this.status===200?n(this.response):t(new Error('API `'+o+'` failed with status: ['+this.status+']')))}var i=new XMLHttpRequest,o='/admin/api/accountswitch/clearcache',r,s;if(i.open('POST',o),i.onreadystatechange=h,i.responseType='json
2023-07-21 16:51:06 UTC	9890	IN	Data Raw: 42 4f 58 2e 41 64 6d 69 6e 2e 55 49 2c 20 56 65 72 73 69 6f 6e 3d 30 2e 30 2e 30 2e 30 2c 20 43 75 6c 74 75 72 65 3d 6e 65 75 74 72 61 6c 2c 20 50 75 62 6c 69 63 4b 65 79 54 6f 6b 65 6e 3d 6e 75 6c 6c 27 2c 27 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 53 69 67 6e 75 70 2e 55 49 2e 53 69 67 6e 75 70 53 65 72 76 65 72 43 61 6c 6c 73 27 2c 27 43 68 65 63 6b 43 6f 6e 73 75 6d 65 72 44 6f 6d 61 69 6e 27 2c 5b 6e 5d 2c 74 2c 69 29 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 53 69 67 6e 75 70 2e 55 49 2e 53 69 67 6e 75 70 53 65 72 76 65 72 43 61 6c 6c 73 2e 47 65 74 48 69 70 41 75 64 69 6f 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 41 6a 61 78 53 65 72 76 69 63 65 2e 4d 61 6b 65 52 65 Data Ascii: BOX.Admin.UI, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null','Microsoft.Online.BOX.Signup.UI.SignupServerCalls','CheckConsumerDomain',[n],t,i)},Microsoft.Online.BOX.Signup.UI.SignupServerCalls.GetHipAudioUrl=function(n,t){return AjaxService.MakeRe
2023-07-21 16:51:06 UTC	9906	IN	Data Raw: 74 53 75 62 73 63 72 69 70 74 69 6f 6e 50 72 69 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 2c 75 29 7b 72 65 74 75 72 6e 20 41 6a 61 78 53 65 72 76 69 63 65 2e 4d 61 6b 65 52 65 71 75 65 73 74 28 27 42 4f 58 2e 41 64 6d 69 6e 2e 55 49 2c 20 56 65 72 73 69 6f 6e 3d 30 2e 30 2e 30 2e 30 2c 20 43 75 6c 74 75 72 65 3d 6e 65 75 74 72 61 6c 2c 20 50 75 62 6c 69 63 4b 65 79 54 6f 6b 65 6e 3d 6e 75 6c 6c 27 2c 27 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 41 64 6d 69 6e 2e 55 49 2e 43 6f 6d 6d 65 72 63 65 2e 43 6f 6d 6d 65 72 63 65 41 6a 61 78 27 2c 27 47 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 50 72 69 63 65 27 2c 5b 6e 2c 74 2c 69 5d 2c 72 2c 75 29 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 41 64 6d Data Ascii: tSubscriptionPrice=function(n,t,i,r,u){return AjaxService.MakeRequest('BOX.Admin.UI, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null','Microsoft.Online.BOX.Admin.UI.Commerce.CommerceAjax','GetSubscriptionPrice',[n,t,i],r,u)},Microsoft.Online.BOX.Adm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
241	192.168.2.5	50100	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9807	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/controlbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9841	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101290 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:13:19 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1005956516459924557251347794964522932"}],"include_subdomains ":true} Server: ECAcc (muc/3376) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: d5d9b1f8-301e-0025-5a07-bb63bd000000 Content-Length: 89590 Connection: close
2023-07-21 16:51:06 UTC	9842	IN	Data Raw: 76 61 72 20 54 65 78 74 42 6f 78 3d 77 69 6e 64 6f 77 2e 54 65 78 74 42 6f 78 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 75 3d 74 28 69 29 2c 72 3d 6e 28 69 29 2c 66 3d 69 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 72 26 26 66 2e 6c 65 6e 67 74 68 2d 75 2e 6c 65 6e 67 74 68 3e 3d 72 3f 21 31 3a 21 30 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 69 3f 21 31 3a 21 30 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 75 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6c 69 70 62 6f 61 72 64 44 61 74 61 26 26 28 75 3d 6e 28 72 29 2c 75 29 29 7b 76 61 72 20 66 3d 72 2e 76 61 6c 75 65 2c 65 3d 74 28 72 29 2c 6f 3d 75 2d 66 2e 6c 65 6e 67 74 68 2b Data Ascii: var TextBox=window.TextBox\|\|function(){var r=function(i){var u=t(i),r=n(i),f=i.value;return r&&f.length-u.length>=r?!1:!0},u=function(t){var i=n(t);return i?!1:!0},f=function(r){var u;if(window.clipboardData&&(u=n(r),u)){var f=r.value,e=t(r),o=u-f.length+
2023-07-21 16:51:06 UTC	9858	IN	Data Raw: 63 Data Ascii: c
2023-07-21 16:51:06 UTC	9858	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 42 6f 64 79 27 29 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 43 6f 6c 6c 61 70 73 65 64 27 29 2c 66 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 41 72 72 6f 77 43 6f 6c 6c 61 70 73 65 64 27 29 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 41 72 72 6f 77 45 78 70 61 6e 64 65 64 27 29 2c 75 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 41 72 72 6f 77 49 6d 61 67 65 27 29 2c 6f 3d 21 31 2c 68 2c 63 3b 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 3d 27 6e Data Ascii: tion(t){var r=document.getElementById(t+'_Body'),s=document.getElementById(t+'_Collapsed'),f=document.getElementById(t+'_ArrowCollapsed'),e=document.getElementById(t+'_ArrowExpanded'),u=document.getElementById(t+'_ArrowImage'),o=!1,h,c;r.style.display=='n
2023-07-21 16:51:06 UTC	9920	IN	Data Raw: 65 74 5f 64 69 61 6c 6f 67 53 68 69 65 6c 64 49 44 28 29 29 29 2c 74 68 69 73 2e 5f 73 68 69 65 6c 64 45 6c 65 6d 65 6e 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 5f 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 6e 2e 4a 53 2e 44 69 61 6c 6f 67 49 6e 73 74 61 6e 63 65 2e 5f 66 69 6e 64 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 67 65 74 5f 65 6c 65 6d 65 6e 74 28 29 2c 74 68 69 73 2e 67 65 74 5f 70 61 72 65 6e 74 28 29 2e 67 65 74 5f 64 69 61 6c 6f 67 46 72 61 6d 65 49 44 28 29 29 29 2c 74 68 69 73 2e 5f 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7d 2c 74 2e 70 72 6f 74 6f Data Ascii: et_dialogShieldID())),this._shieldElement},t.prototype.get_frameElement=function(){return this._frameElement==null&&(this._frameElement=n.JS.DialogInstance._findElement(this.get_element(),this.get_parent().get_dialogFrameID())),this._frameElement},t.proto
2023-07-21 16:51:06 UTC	9936	IN	Data Raw: 72 6f Data Ascii: ro
2023-07-21 16:51:06 UTC	9936	IN	Data Raw: 74 6f 74 79 70 65 2e 5f 6f 6e 44 72 61 67 4d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 69 2c 75 2c 6e 3b 74 68 69 73 2e 5f 69 73 44 72 61 67 67 69 6e 67 26 26 28 69 3d 74 2e 63 6c 69 65 6e 74 58 2c 75 3d 74 2e 63 6c 69 65 6e 74 59 2c 74 68 69 73 2e 67 65 74 5f 65 6c 65 6d 65 6e 74 28 29 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 72 28 69 2d 74 68 69 73 2e 5f 64 72 61 67 53 74 61 72 74 58 29 2c 74 68 69 73 2e 67 65 74 5f 65 6c 65 6d 65 6e 74 28 29 2e 73 74 79 6c 65 2e 74 6f 70 3d 72 28 75 2d 74 68 69 73 2e 5f 64 72 61 67 53 74 61 72 74 59 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 3f 64 6f 63 75 6d 65 6e 74 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 2e 65 6d 70 74 79 28 Data Ascii: totype._onDragMove=function(){var t=window.event,i,u,n;this._isDragging&&(i=t.clientX,u=t.clientY,this.get_element().style.left=r(i-this._dragStartX),this.get_element().style.top=r(u-this._dragStartY),document.getSelection()?document.getSelection().empty(
2023-07-21 16:51:06 UTC	9952	IN	Data Raw: 6c 6c 2c 6e 75 6c 6c 29 2c 66 2e 72 65 70 6f 73 69 74 69 6f 6e 41 6e 64 52 65 73 69 7a 65 44 69 61 6c 6f 67 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 48 74 6d 6c 46 72 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 75 29 7b 69 66 28 21 31 3d 3d 74 68 69 73 2e 67 65 74 5f 69 73 44 69 61 6c 6f 67 53 68 6f 77 6e 28 29 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 43 61 63 68 65 5b 6e 5d 2c 65 3d 74 68 69 73 2e 5f 67 65 74 44 69 61 6c 6f 67 53 65 74 74 69 6e 67 73 28 75 29 3b 28 66 3d 3d 6e 75 6c 6c 7c 7c 65 2e 67 65 74 5f 72 65 6c 6f 61 64 45 6c 65 6d 65 6e 74 28 29 29 26 26 28 66 3d 74 68 69 73 2e 63 61 6c 63 43 61 63 68 65 64 45 6c 65 6d 65 6e 74 28 6e 29 29 2c 74 68 69 73 2e 5f 73 68 6f 77 48 Data Ascii: ll,null),f.repositionAndResizeDialog()},t.prototype.showHtmlFromElement=function(n,t,r,u){if(!1==this.get_isDialogShown()){var f=this._contentCache[n],e=this._getDialogSettings(u);(f==null\|\|e.get_reloadElement())&&(f=this.calcCachedElement(n)),this._showH
2023-07-21 16:51:06 UTC	9968	IN	Data Raw: 61 79 6f 75 74 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 50 61 6e 65 6c 73 5b 74 68 69 73 2e 41 63 74 69 76 65 50 61 6e 65 6c 49 6e 64 65 78 5d 2e 4e 65 78 74 43 6c 69 65 6e 74 43 6c 69 63 6b 28 29 3f 6e 26 26 74 68 69 73 2e 41 63 74 69 76 65 50 61 6e 65 6c 49 6e 64 65 78 3c 74 68 69 73 2e 50 61 6e 65 6c 73 2e 6c 65 6e 67 74 68 2d 31 3f 28 74 68 69 73 2e 56 61 6c 69 64 61 74 65 50 61 6e 65 6c 28 29 26 26 74 68 69 73 2e 53 68 6f 77 50 61 6e 65 6c 28 74 68 69 73 2e 41 63 74 69 76 65 50 61 6e 65 6c 49 6e 64 65 78 2b 31 29 2c 21 31 29 3a 28 74 79 70 65 6f 66 20 50 61 67 65 4d 6f 64 69 66 69 65 64 57 61 72 6e 69 6e 67 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 28 50 61 67 65 4d 6f Data Ascii: ayout.prototype.Next=function(n){return this.Panels[this.ActivePanelIndex].NextClientClick()?n&&this.ActivePanelIndex<this.Panels.length-1?(this.ValidatePanel()&&this.ShowPanel(this.ActivePanelIndex+1),!1):(typeof PageModifiedWarning!='undefined'&&(PageMo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
242	192.168.2.5	50101	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9976	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9979	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72403 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:13:28 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=138607355532677043645253896027153751706"}],"include_subdomains ":true} Server: ECAcc (muc/333A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 17882f32-601e-004a-774a-bb694e000000 Content-Length: 159373 Connection: close
2023-07-21 16:51:06 UTC	9980	IN	Data Raw: 2f 2a 21 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 33 2e 31 35 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 3b 66 75 6e 63 74 69 6f 6e 20 76 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 75 2c 74 2c 72 3d 22 5b 22 2b 28 6e 3f 6e 2b 22 3a 22 3a 22 22 29 2b 69 2b 22 5d 20 68 74 74 70 3a 2f 2f 65 72 72 6f 72 73 2e 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 2f 31 2e 33 2e 31 35 2f 22 2b 28 6e 3f 6e 2b 22 2f 22 3a 22 22 29 2b 69 2c Data Ascii: /! AngularJS v1.3.15 (c) 2010-2014 Google, Inc. http://angularjs.org License: MIT/(function(n,t,i){'use strict';;function v(n){return function(){for(var i=arguments[0],u,t,r="["+(n?n+":":"")+i+"] http://errors.angularjs.org/1.3.15/"+(n?n+"/":"")+i,
2023-07-21 16:51:06 UTC	9997	IN	Data Raw: 6e Data Ascii: n
2023-07-21 16:51:06 UTC	9997	IN	Data Raw: 7d 29 7d 7d 7d 7d 2c 75 3d 79 2e 24 69 6e 6a 65 63 74 6f 72 3d 67 28 79 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 74 2e 69 73 53 74 72 69 6e 67 28 74 29 26 26 76 2e 70 75 73 68 28 74 29 3b 74 68 72 6f 77 20 75 69 28 22 75 6e 70 72 22 2c 76 2e 6a 6f 69 6e 28 22 20 3c 2d 20 22 29 29 3b 7d 29 2c 62 3d 7b 7d 2c 66 3d 62 2e 24 69 6e 6a 65 63 74 6f 72 3d 67 28 62 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 75 2e 67 65 74 28 6e 2b 22 50 72 6f 76 69 64 65 72 22 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 69 6e 76 6f 6b 65 28 72 2e 24 67 65 74 2c 72 2c 69 2c 6e 29 7d 29 3b 72 65 74 75 72 6e 20 72 28 64 28 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 2e 69 6e 76 6f 6b 65 28 6e 7c 7c 68 29 7d 29 2c 66 7d 66 75 6e 63 74 69 6f 6e 20 68 76 28 29 Data Ascii: })}}}},u=y.$injector=g(y,function(n,t){nt.isString(t)&&v.push(t);throw ui("unpr",v.join(" <- "));}),b={},f=b.$injector=g(b,function(n,t){var r=u.get(n+"Provider",t);return f.invoke(r.$get,r,i,n)});return r(d(n),function(n){f.invoke(n\|\|h)}),f}function hv()
2023-07-21 16:51:06 UTC	10045	IN	Data Raw: 6e 74 65 78 74 3d 3d 3d 75 26 26 28 6e 2e 63 6f 6e 74 65 78 74 3d 72 29 3b 62 72 65 61 6b 7d 66 6f 72 28 73 26 26 73 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 72 2c 75 29 2c 6e 3d 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 2c 66 28 72 29 2e 64 61 74 61 28 66 28 75 29 2e 64 61 74 61 28 29 29 2c 63 74 3f 28 68 66 3d 21 30 2c 63 74 2e 63 6c 65 61 6e 44 61 74 61 28 5b 75 5d 29 29 3a 64 65 6c 65 74 65 20 66 2e 63 61 63 68 65 5b 75 5b 66 2e 65 78 70 61 6e 64 6f 5d 5d 2c 75 3d 31 2c 68 3d 69 2e 6c 65 6e 67 74 68 3b 75 3c 68 3b 75 2b 2b 29 73 3d 69 5b 75 5d 2c 66 28 73 29 2e 72 65 6d 6f 76 65 28 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 64 65 6c 65 74 65 20 69 5b Data Ascii: ntext===u&&(n.context=r);break}for(s&&s.replaceChild(r,u),n=t.createDocumentFragment(),n.appendChild(u),f(r).data(f(u).data()),ct?(hf=!0,ct.cleanData([u])):delete f.cache[u[f.expando]],u=1,h=i.length;u<h;u++)s=i[u],f(s).remove(),n.appendChild(s),delete i[
2023-07-21 16:51:06 UTC	10061	IN	Data Raw: 6f 6e 20 74 61 28 29 7b 76 61 72 20 6e 3d 21 30 2c 74 3d 74 68 69 73 3b 74 68 69 73 2e 64 65 62 75 67 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 28 74 29 3f 28 6e 3d 74 2c 74 68 69 73 29 3a 6e 7d 2c 74 68 69 73 2e 24 67 65 74 3d 5b 22 24 77 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 28 6e 2e 73 74 61 63 6b 3f 6e 3d 6e 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 3d 6e 2e 73 74 61 63 6b 2e 69 6e 64 65 78 4f 66 28 6e 2e 6d 65 73 73 61 67 65 29 3f 22 45 72 72 6f 72 3a 20 22 2b 6e 2e 6d 65 73 73 61 67 65 2b 22 5c 6e 22 2b 6e 2e 73 74 61 63 6b 3a 6e 2e 73 74 61 63 6b 3a 6e 2e 73 6f 75 72 Data Ascii: on ta(){var n=!0,t=this;this.debugEnabled=function(t){return u(t)?(n=t,this):n},this.$get=["$window",function(i){function f(n){return n instanceof Error&&(n.stack?n=n.message&&-1===n.stack.indexOf(n.message)?"Error: "+n.message+"\n"+n.stack:n.stack:n.sour
2023-07-21 16:51:06 UTC	10093	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 2e 67 65 74 54 72 75 73 74 65 64 28 6e 2c 74 29 7d 29 7d 3b 76 61 72 20 66 3d 75 2e 70 61 72 73 65 41 73 2c 65 3d 75 2e 67 65 74 54 72 75 73 74 65 64 2c 6f 3d 75 2e 74 72 75 73 74 41 73 3b 72 65 74 75 72 6e 20 72 28 65 74 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 69 3d 79 28 74 29 3b 75 5b 63 72 28 22 70 61 72 73 65 5f 61 73 5f 22 2b 69 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 28 6e 2c 74 29 7d 2c 75 5b 63 72 28 22 67 65 74 5f 74 72 75 73 74 65 64 5f 22 2b 69 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 6e 2c 74 29 7d 2c 75 5b 63 72 28 22 74 72 75 73 74 5f 61 73 5f 22 2b 69 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: tion(t){return u.getTrusted(n,t)})};var f=u.parseAs,e=u.getTrusted,o=u.trustAs;return r(et,function(n,t){var i=y(t);u[cr("parse_as_"+i)]=function(t){return f(n,t)},u[cr("get_trusted_"+i)]=function(t){return e(n,t)},u[cr("trust_as_"+i)]=function(t){return
2023-07-21 16:51:06 UTC	10141	IN	Data Raw: 75 72 6e 20 61 75 28 6e 2c 22 24 69 6e 6a 65 63 74 6f 72 22 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 68 61 73 43 6c 61 73 73 3a 68 75 2c 63 73 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 69 66 28 74 3d 63 72 28 74 29 2c 75 28 69 29 29 6e 2e 73 74 79 6c 65 5b 74 5d 3d 69 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 2e 73 74 79 6c 65 5b 74 5d 7d 2c 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 66 3d 79 28 74 29 3b 69 66 28 72 72 5b 66 5d 29 69 66 28 75 28 72 29 29 72 3f 28 6e 5b 74 5d 3d 21 30 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 66 29 29 3a 28 6e 5b 74 5d 3d 21 31 2c 6e 2e 72 65 6d 6f 76 65 41 74 Data Ascii: urn au(n,"$injector")},removeAttr:function(n,t){n.removeAttribute(t)},hasClass:hu,css:function(n,t,i){if(t=cr(t),u(i))n.style[t]=i;else return n.style[t]},attr:function(n,t,r){var f=y(t);if(rr[f])if(u(r))r?(n[t]=!0,n.setAttribute(t,f)):(n[t]=!1,n.removeAt
2023-07-21 16:51:06 UTC	10157	IN	Data Raw: 5d 2c 74 29 3a 69 7d 2c 7b 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 75 2c 66 29 7b 76 61 72 20 6f 3d 76 74 28 72 28 69 2c 66 29 2c 74 29 2c 65 3d 75 74 28 6e 28 69 2c 66 29 2c 74 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6e 2e 61 73 73 69 67 6e 28 69 2c 65 3d 7b 7d 2c 66 29 2c 65 5b 6f 5d 3d 75 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 43 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 65 3d 5b 5d 2c 66 2c 72 3b 69 66 28 22 29 22 21 3d 3d 74 68 69 73 2e 70 65 65 6b 54 6f 6b 65 6e 28 29 2e 74 65 78 74 29 64 6f 20 65 2e 70 75 73 68 28 74 68 69 73 2e 65 78 70 72 65 73 73 69 6f 6e 28 29 29 3b 77 68 69 6c 65 28 74 68 69 73 2e 65 78 70 65 63 74 28 22 2c 22 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 73 75 6d 65 28 22 29 22 29 2c Data Ascii: ],t):i},{assign:function(i,u,f){var o=vt(r(i,f),t),e=ut(n(i,f),t);return e\|\|n.assign(i,e={},f),e[o]=u}})},functionCall:function(n,t){var e=[],f,r;if(")"!==this.peekToken().text)do e.push(this.expression());while(this.expect(","));return this.consume(")"),
2023-07-21 16:51:06 UTC	10189	IN	Data Raw: 7b 7d 2f 67 2c 75 3d 2f 5e 77 68 65 6e 28 4d 69 6e 75 73 29 3f 28 2e 2b 29 24 2f 3b 72 65 74 75 72 6e 7b 72 65 73 74 72 69 63 74 3a 22 45 41 22 2c 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 65 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 77 28 6e 29 7b 65 2e 74 65 78 74 28 6e 7c 7c 22 22 29 7d 76 61 72 20 63 3d 6f 2e 63 6f 75 6e 74 2c 6c 3d 6f 2e 24 61 74 74 72 2e 77 68 65 6e 26 26 65 2e 61 74 74 72 28 6f 2e 24 61 74 74 72 2e 77 68 65 6e 29 2c 61 3d 6f 2e 6f 66 66 73 65 74 7c 7c 30 2c 73 3d 66 2e 24 65 76 61 6c 28 6c 29 7c 7c 7b 7d 2c 76 3d 7b 7d 2c 6c 3d 74 2e 73 74 61 72 74 53 79 6d 62 6f 6c 28 29 2c 62 3d 74 2e 65 6e 64 53 79 6d 62 6f 6c 28 29 2c 6b 3d 6c 2b 63 2b 22 2d 22 2b 61 2b 62 2c 70 3d 6e 74 2e 6e 6f 6f 70 2c 68 3b 72 28 6f 2c 66 75 6e 63 74 69 Data Ascii: {}/g,u=/^when(Minus)?(.+)$/;return{restrict:"EA",link:function(f,e,o){function w(n){e.text(n\|\|"")}var c=o.count,l=o.$attr.when&&e.attr(o.$attr.when),a=o.offset\|\|0,s=f.$eval(l)\|\|{},v={},l=t.startSymbol(),b=t.endSymbol(),k=l+c+"-"+a+b,p=nt.noop,h;r(o,functi
2023-07-21 16:51:06 UTC	10269	IN	Data Raw: 74 3d 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 72 65 73 6f 6c 76 65 28 29 7d 29 7d 29 2c 72 2e 70 72 6f 6d 69 73 65 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 6e 29 7b 69 66 28 79 28 6e 29 29 72 65 74 75 72 6e 20 6e 2e 74 65 6d 70 43 6c 61 73 73 65 73 26 26 76 28 6e 2e 74 65 6d 70 43 6c 61 73 73 65 73 29 26 26 28 6e 2e 74 65 6d 70 43 6c 61 73 73 65 73 3d 6e 2e 74 65 6d 70 43 6c 61 73 73 65 73 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 6e 2c 74 2c 69 29 7b 76 61 72 20 65 2c 6f 2c 72 2c 75 3b 72 65 74 75 72 6e 20 69 3d 69 7c 7c 7b 7d 2c 65 3d 7b 7d 2c 66 28 69 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 28 74 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 74 5d 3d 6e 7d 29 7d 29 Data Ascii: t=n(function(){r.resolve()})}),r.promise}function ut(n){if(y(n))return n.tempClasses&&v(n.tempClasses)&&(n.tempClasses=n.tempClasses.split(/\s+/)),n}function st(n,t,i){var e,o,r,u;return i=i\|\|{},e={},f(i,function(n,t){f(t.split(" "),function(t){e[t]=n})})
2023-07-21 16:51:06 UTC	10285	IN	Data Raw: 22 7d 2c 71 75 65 72 79 3a 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 69 73 41 72 72 61 79 3a 21 30 7d 2c 72 65 6d 6f 76 65 3a 7b 6d 65 74 68 6f 64 3a 22 44 45 4c 45 54 45 22 7d 2c 22 64 65 6c 65 74 65 22 3a 7b 6d 65 74 68 6f 64 3a 22 44 45 4c 45 54 45 22 7d 7d 7d 2c 74 68 69 73 2e 24 67 65 74 3d 5b 22 24 68 74 74 70 22 2c 22 24 71 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 69 29 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 3d 74 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 73 3d 68 28 7b 7d 2c 6e 2e 64 65 66 61 75 6c 74 73 2c 69 29 2c 74 68 69 73 2e 75 72 6c 50 61 72 61 6d 73 3d 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 70 2c 77 2c 62 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6e 2c 74 29 7b 76 61 72 20 75 3d 7b 7d 3b Data Ascii: "},query:{method:"GET",isArray:!0},remove:{method:"DELETE"},"delete":{method:"DELETE"}}},this.$get=["$http","$q",function(e,o){function l(t,i){this.template=t,this.defaults=h({},n.defaults,i),this.urlParams={}}function a(p,w,b,k){function g(n,t){var u={};

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
243	192.168.2.5	50102	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9977	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularextensions.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	9996	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72401 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:13:35 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=170731090924108451538297081263028889589"}],"include_subdomains ":true} Server: ECAcc (muc/332B) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f6c6510e-e01e-0054-274a-bb8596000000 Content-Length: 1066514 Connection: close
2023-07-21 16:51:06 UTC	10013	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 3b 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 61 6e 67 75 6c 61 72 2d 74 6f 75 72 22 2c 5b 22 61 6e 67 75 6c 61 72 2d 74 6f 75 72 2e 74 6f 75 72 22 5d 29 2c 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 61 6e 67 75 6c 61 72 2d 74 6f 75 72 2e 74 6f 75 72 22 2c 5b 5d 29 2e 63 6f 6e 73 74 61 6e 74 28 22 74 6f 75 72 43 6f 6e 66 69 67 22 2c 7b 70 6c 61 63 65 6d 65 6e 74 3a 22 74 6f 70 22 2c 61 6e 69 6d 61 74 69 6f 6e 3a 21 30 2c 6e 65 78 74 4c 61 62 65 6c 3a 22 4e 65 78 74 22 2c 73 63 72 6f 6c 6c 53 70 65 65 64 3a 35 30 30 2c 6d 61 72 67 69 6e 3a 32 38 2c 62 61 63 6b 44 72 6f 70 3a 21 31 2c 75 73 65 53 6f 75 72 63 65 53 63 6f 70 65 3a 21 31 2c 63 6f 6e 74 61 69 6e Data Ascii: !function(n,t,i){"use strict";;angular.module("angular-tour",["angular-tour.tour"]),angular.module("angular-tour.tour",[]).constant("tourConfig",{placement:"top",animation:!0,nextLabel:"Next",scrollSpeed:500,margin:28,backDrop:!1,useSourceScope:!1,contain
2023-07-21 16:51:06 UTC	10029	IN	Data Raw: 6c Data Ascii: l
2023-07-21 16:51:06 UTC	10029	IN	Data Raw: 61 74 65 2f 61 63 63 6f 72 64 69 6f 6e 2f 61 63 63 6f 72 64 69 6f 6e 2e 68 74 6d 6c 27 3b 0a 20 20 20 20 7d 0a 20 20 7d 3b 0a 7d 29 0a 0a 2f 2f 20 54 68 65 20 61 63 63 6f 72 64 69 6f 6e 2d 67 72 6f 75 70 20 64 69 72 65 63 74 69 76 65 20 69 6e 64 69 63 61 74 65 73 20 61 20 62 6c 6f 63 6b 20 6f 66 20 68 74 6d 6c 20 74 68 61 74 20 77 69 6c 6c 20 65 78 70 61 6e 64 20 61 6e 64 20 63 6f 6c 6c 61 70 73 65 20 69 6e 20 61 6e 20 61 63 63 6f 72 64 69 6f 6e 0a 2e 64 69 72 65 63 74 69 76 65 28 27 75 69 62 41 63 63 6f 72 64 69 6f 6e 47 72 6f 75 70 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 72 65 71 75 69 72 65 3a 20 27 5e 75 69 62 41 63 63 6f 72 64 69 6f 6e 27 2c 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 20 6e 65 65 64 Data Ascii: ate/accordion/accordion.html'; } };})// The accordion-group directive indicates a block of html that will expand and collapse in an accordion.directive('uibAccordionGroup', function() { return { require: '^uibAccordion', // We need
2023-07-21 16:51:06 UTC	10077	IN	Data Raw: 6e 20 66 72 6f 6d 20 6f 63 63 75 72 72 69 6e 67 20 69 66 20 74 68 65 72 65 20 69 73 20 61 6c 72 65 61 64 79 20 6f 6e 65 20 69 6e 20 70 72 6f 67 72 65 73 73 0a 20 20 20 20 69 66 20 28 6e 65 78 74 53 6c 69 64 65 20 26 26 20 6e 65 78 74 53 6c 69 64 65 20 21 3d 3d 20 73 65 6c 66 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 20 26 26 20 21 24 73 63 6f 70 65 2e 24 63 75 72 72 65 6e 74 54 72 61 6e 73 69 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 67 6f 4e 65 78 74 28 6e 65 78 74 53 6c 69 64 65 2c 20 6e 65 78 74 49 6e 64 65 78 2c 20 64 69 72 65 63 74 69 6f 6e 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 6f 4e 65 78 74 28 73 6c 69 64 65 2c 20 69 6e 64 65 78 2c 20 64 69 72 65 63 74 69 6f 6e 29 20 7b 0a 20 20 20 20 2f 2f 20 53 63 6f 70 65 Data Ascii: n from occurring if there is already one in progress if (nextSlide && nextSlide !== self.currentSlide && !$scope.$currentTransition) { goNext(nextSlide, nextIndex, direction); } }; function goNext(slide, index, direction) { // Scope
2023-07-21 16:51:06 UTC	10109	IN	Data Raw: 6f 6e Data Ascii: on
2023-07-21 16:51:06 UTC	10109	IN	Data Raw: 73 75 6d 65 64 20 70 61 72 74 20 6f 66 20 66 6f 72 6d 61 74 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 69 6e 64 65 78 20 2b 20 31 2c 20 6e 20 3d 20 69 6e 64 65 78 20 2b 20 63 6f 64 65 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 67 65 78 5b 69 5d 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 61 74 5b 69 5d 20 3d 20 27 24 27 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 61 74 20 3d 20 66 6f 72 6d 61 74 2e 6a 6f 69 6e 28 27 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 6d 61 70 2e 70 75 73 68 28 7b 20 69 6e 64 65 78 3a 20 69 6e 64 65 78 2c 20 61 70 70 6c 79 3a 20 64 61 74 61 2e 61 70 70 6c 79 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: sumed part of format for (var i = index + 1, n = index + code.length; i < n; i++) { regex[i] = ''; format[i] = '$'; } format = format.join(''); map.push({ index: index, apply: data.apply }); }
2023-07-21 16:51:06 UTC	10125	IN	Data Raw: 30 2c 20 64 61 74 65 3b 0a 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6e 29 20 7b 0a 20 20 20 20 20 20 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 63 75 72 72 65 6e 74 29 3b 0a 20 20 20 20 20 20 64 61 74 65 73 5b 69 2b 2b 5d 20 3d 20 64 61 74 65 3b 0a 20 20 20 20 20 20 63 75 72 72 65 6e 74 2e 73 65 74 44 61 74 65 28 63 75 72 72 65 6e 74 2e 67 65 74 44 61 74 65 28 29 20 2b 20 31 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 64 61 74 65 73 3b 0a 20 20 7d 3b 0a 0a 20 20 74 68 69 73 2e 5f 72 65 66 72 65 73 68 56 69 65 77 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 79 65 61 72 20 3d 20 74 68 69 73 2e 61 63 74 69 76 65 44 61 74 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 0a 20 20 20 20 20 20 6d 6f 6e 74 68 20 Data Ascii: 0, date; while (i < n) { date = new Date(current); dates[i++] = date; current.setDate(current.getDate() + 1); } return dates; }; this._refreshView = function() { var year = this.activeDate.getFullYear(), month
2023-07-21 16:51:06 UTC	10173	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 65 29 20 7b 0a 20 20 20 20 69 66 20 28 64 61 74 65 20 3d 3d 3d 20 27 74 6f 64 61 79 27 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 69 66 20 28 61 6e 67 75 6c 61 72 2e 69 73 44 61 74 65 28 73 63 6f 70 65 2e 64 61 74 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 73 63 6f 70 65 2e 64 61 74 65 29 3b 0a 20 20 20 20 20 20 20 20 64 61 74 65 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 74 6f 64 61 79 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 20 74 6f 64 61 79 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 20 74 6f 64 61 79 2e 67 65 74 44 61 74 65 28 29 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 Data Ascii: function(date) { if (date === 'today') { var today = new Date(); if (angular.isDate(scope.date)) { date = new Date(scope.date); date.setFullYear(today.getFullYear(), today.getMonth(), today.getDate()); } else {
2023-07-21 16:51:06 UTC	10205	IN	Data Raw: 70 61 72 73 65 2c 20 64 72 6f 70 64 6f 77 6e 43 6f 6e 66 69 67 2c 20 75 69 62 44 72 6f 70 64 6f 77 6e 53 65 72 76 69 63 65 2c 20 24 61 6e 69 6d 61 74 65 2c 20 24 70 6f 73 69 74 69 6f 6e 2c 20 24 64 6f 63 75 6d 65 6e 74 2c 20 24 63 6f 6d 70 69 6c 65 2c 20 24 74 65 6d 70 6c 61 74 65 52 65 71 75 65 73 74 29 20 7b 0a 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 73 63 6f 70 65 20 3d 20 24 73 63 6f 70 65 2e 24 6e 65 77 28 29 2c 20 2f 2f 20 63 72 65 61 74 65 20 61 20 63 68 69 6c 64 20 73 63 6f 70 65 20 73 6f 20 77 65 20 61 72 65 20 6e 6f 74 20 70 6f 6c 6c 75 74 69 6e 67 20 6f 72 69 67 69 6e 61 6c 20 6f 6e 65 0a 20 20 20 20 74 65 6d 70 6c 61 74 65 53 63 6f 70 65 2c 0a 20 20 20 20 6f 70 65 6e 43 6c 61 73 73 20 3d 20 64 72 6f 70 64 6f 77 6e Data Ascii: parse, dropdownConfig, uibDropdownService, $animate, $position, $document, $compile, $templateRequest) { var self = this, scope = $scope.$new(), // create a child scope so we are not polluting original one templateScope, openClass = dropdown
2023-07-21 16:51:06 UTC	10221	IN	Data Raw: 64 6f 77 6e 43 74 72 6c 2e 74 6f 67 67 6c 65 45 6c 65 6d 65 6e 74 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 0a 20 20 20 20 20 20 76 61 72 20 74 6f 67 67 6c 65 44 72 6f 70 64 6f 77 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 27 64 69 73 61 62 6c 65 64 27 29 20 26 26 20 21 61 74 74 72 73 2e 64 69 73 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 63 6f 70 65 2e 24 61 70 70 6c 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 72 6f 70 64 6f 77 6e 43 74 72 6c 2e 74 6f 67 67 6c 65 28 29 3b 0a 20 20 20 20 20 20 20 Data Ascii: downCtrl.toggleElement = element; var toggleDropdown = function(event) { event.preventDefault(); if (!element.hasClass('disabled') && !attrs.disabled) { scope.$apply(function() { dropdownCtrl.toggle();
2023-07-21 16:51:06 UTC	10237	IN	Data Raw: 27 3a 20 6f 70 65 6e 65 64 57 69 6e 64 6f 77 73 2e 6c 65 6e 67 74 68 28 29 20 2d 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 27 61 6e 69 6d 61 74 65 27 3a 20 27 61 6e 69 6d 61 74 65 27 0a 20 20 20 20 20 20 20 20 7d 29 2e 68 74 6d 6c 28 6d 6f 64 61 6c 2e 63 6f 6e 74 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 6f 64 61 6c 2e 61 6e 69 6d 61 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 67 75 6c 61 72 44 6f 6d 45 6c 2e 61 74 74 72 28 27 6d 6f 64 61 6c 2d 61 6e 69 6d 61 74 69 6f 6e 27 2c 20 27 74 72 75 65 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 6f 64 61 6c 44 6f 6d 45 6c 20 3d 20 24 63 6f 6d 70 69 6c 65 28 61 6e 67 75 6c 61 72 44 6f 6d 45 6c 29 28 6d 6f 64 61 6c 2e 73 63 6f 70 65 29 3b 0a 20 Data Ascii: ': openedWindows.length() - 1, 'animate': 'animate' }).html(modal.content); if (modal.animation) { angularDomEl.attr('modal-animation', 'true'); } var modalDomEl = $compile(angularDomEl)(modal.scope);
2023-07-21 16:51:06 UTC	10253	IN	Data Raw: 20 20 20 20 27 24 6c 6f 67 27 2c 20 27 24 6d 6f 64 61 6c 53 75 70 70 72 65 73 73 57 61 72 6e 69 6e 67 27 2c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 24 6c 6f 67 2c 20 24 6d 6f 64 61 6c 53 75 70 70 72 65 73 73 57 61 72 6e 69 6e 67 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 6c 69 6e 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 24 73 63 6f 70 65 2c 20 24 65 6c 65 6d 65 6e 74 2c 20 24 61 74 74 72 73 2c 20 63 6f 6e 74 72 6f 6c 6c 65 72 2c 20 24 74 72 61 6e 73 63 6c 75 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 24 6d 6f 64 61 6c 53 75 70 70 72 65 73 73 57 61 72 6e 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 24 6c 6f 67 2e 77 61 72 6e 28 27 6d 6f 64 61 6c 2d 74 72 61 6e 73 63 6c 75 64 65 20 69 73 20 6e 6f 77 20 64 65 70 Data Ascii: '$log', '$modalSuppressWarning', function ($log, $modalSuppressWarning) { return { link: function($scope, $element, $attrs, controller, $transclude) { if (!$modalSuppressWarning) { $log.warn('modal-transclude is now dep
2023-07-21 16:51:06 UTC	10269	IN	Data Raw: 6e 74 45 78 70 3a 20 Data Ascii: ntExp:
2023-07-21 16:51:06 UTC	10297	IN	Data Raw: 66 61 6c 73 65 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 44 65 66 61 75 6c 74 20 68 69 64 65 20 74 72 69 67 67 65 72 73 20 66 6f 72 20 65 61 63 68 20 73 68 6f 77 20 74 72 69 67 67 65 72 0a 20 20 76 61 72 20 74 72 69 67 67 65 72 4d 61 70 20 3d 20 7b 0a 20 20 20 20 27 6d 6f 75 73 65 65 6e 74 65 72 27 3a 20 27 6d 6f 75 73 65 6c 65 61 76 65 27 2c 0a 20 20 20 20 27 63 6c 69 63 6b 27 3a 20 27 63 6c 69 63 6b 27 2c 0a 20 20 20 20 27 66 6f 63 75 73 27 3a 20 27 62 6c 75 72 27 2c 0a 20 20 20 20 27 6e 6f 6e 65 27 3a 20 27 27 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 54 68 65 20 6f 70 74 69 6f 6e 73 20 73 70 65 63 69 66 69 65 64 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 67 6c 6f 62 61 6c 6c 79 2e 0a 20 20 76 61 72 20 67 6c 6f 62 61 6c 4f 70 74 69 6f 6e 73 20 3d 20 7b 7d Data Ascii: false }; // Default hide triggers for each show trigger var triggerMap = { 'mouseenter': 'mouseleave', 'click': 'click', 'focus': 'blur', 'none': '' }; // The options specified to the provider globally. var globalOptions = {}
2023-07-21 16:51:06 UTC	10313	IN	Data Raw: 64 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 6f 70 65 2e 24 6f 6e 28 27 24 6c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 65 53 75 63 63 65 73 73 27 2c 20 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 54 6f 6f 6c 74 69 70 4f 6e 4c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 65 53 75 63 63 65 73 73 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 74 53 63 6f 70 65 2e 69 73 4f 70 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 6f 6c 74 69 70 20 69 73 Data Ascii: dy) { scope.$on('$locationChangeSuccess', function closeTooltipOnLocationChangeSuccess() { if (ttScope.isOpen) { hide(); } }); } // Make sure tooltip is
2023-07-21 16:51:06 UTC	10329	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 70 72 6f 67 72 65 73 73 43 74 72 6c 2e 61 64 64 42 61 72 28 73 63 6f 70 65 2c 20 65 6c 65 6d 65 6e 74 2c 20 61 74 74 72 73 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 3b 0a 7d 29 0a 0a 2e 64 69 72 65 63 74 69 76 65 28 27 75 69 62 50 72 6f 67 72 65 73 73 62 61 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 72 65 70 6c 61 63 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 74 72 61 6e 73 63 6c 75 64 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 27 55 69 62 50 72 6f 67 72 65 73 73 43 6f 6e 74 72 6f 6c 6c 65 72 27 2c 0a 20 20 20 20 73 63 6f 70 65 3a 20 7b 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 27 3d 27 2c 0a 20 20 20 20 20 20 6d 61 78 3a 20 27 3d 3f 27 2c 0a 20 20 20 20 Data Ascii: { progressCtrl.addBar(scope, element, attrs); } };}).directive('uibProgressbar', function() { return { replace: true, transclude: true, controller: 'UibProgressController', scope: { value: '=', max: '=?',
2023-07-21 16:51:06 UTC	10345	IN	Data Raw: 44 4f 3a 20 72 65 6d 6f 76 65 20 61 66 74 65 72 20 64 65 70 72 65 63 61 74 69 6f 6e 20 72 65 6d 6f 76 61 6c 0a 20 20 20 20 20 20 6e 6f 64 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 78 2d 74 61 62 2d 68 65 61 64 69 6e 67 27 29 20 7c 7c 20 2f 2f 20 54 4f 44 4f 3a 20 72 65 6d 6f 76 65 20 61 66 74 65 72 20 64 65 70 72 65 63 61 74 69 6f 6e 20 72 65 6d 6f 76 61 6c 0a 20 20 20 20 20 20 6e 6f 64 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 75 69 62 2d 74 61 62 2d 68 65 61 64 69 6e 67 27 29 20 7c 7c 0a 20 20 20 20 20 20 6e 6f 64 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 69 62 2d 74 61 62 2d 68 65 61 64 69 6e 67 27 29 20 7c 7c 0a 20 20 20 20 20 20 6e 6f 64 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 78 2d 75 69 62 2d 74 61 62 2d Data Ascii: DO: remove after deprecation removal node.hasAttribute('x-tab-heading') \|\| // TODO: remove after deprecation removal node.hasAttribute('uib-tab-heading') \|\| node.hasAttribute('data-uib-tab-heading') \|\| node.hasAttribute('x-uib-tab-
2023-07-21 16:51:06 UTC	10361	IN	Data Raw: 5d 2c 0a 20 20 20 20 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 27 55 69 62 54 69 6d 65 70 69 63 6b 65 72 43 6f 6e 74 72 6f 6c 6c 65 72 27 2c 0a 20 20 20 20 63 6f 6e 74 72 6f 6c 6c 65 72 41 73 3a 20 27 74 69 6d 65 70 69 63 6b 65 72 27 2c 0a 20 20 20 20 72 65 70 6c 61 63 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 73 63 6f 70 65 3a 20 7b 7d 2c 0a 20 20 20 20 74 65 6d 70 6c 61 74 65 55 72 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 61 74 74 72 73 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 74 74 72 73 2e 74 65 6d 70 6c 61 74 65 55 72 6c 20 7c 7c 20 27 74 65 6d 70 6c 61 74 65 2f 74 69 6d 65 70 69 63 6b 65 72 2f 74 69 6d 65 70 69 63 6b 65 72 2e 68 74 6d 6c 27 3b 0a 20 20 20 20 7d 2c 0a 20 20 20 20 6c 69 6e 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ], controller: 'UibTimepickerController', controllerAs: 'timepicker', replace: true, scope: {}, templateUrl: function(element, attrs) { return attrs.templateUrl \|\| 'template/timepicker/timepicker.html'; }, link: function(
2023-07-21 16:51:06 UTC	10377	IN	Data Raw: 20 73 6f 6d 65 Data Ascii: some
2023-07-21 16:51:06 UTC	10377	IN	Data Raw: 74 68 69 6e 67 20 70 72 65 76 69 6f 75 73 6c 79 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 65 6c 43 74 72 6c 2e 24 73 65 74 56 61 6c 69 64 69 74 79 28 27 65 64 69 74 61 62 6c 65 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 65 6c 43 74 72 6c 2e 24 73 65 74 56 61 6c 69 64 69 74 79 28 27 65 64 69 74 61 62 6c 65 27 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 6d 6f 64 65 6c 43 74 72 6c 2e 24 66 6f 72 6d Data Ascii: thing previously. modelCtrl.$setValidity('editable', true); return null; } else { modelCtrl.$setValidity('editable', false); return undefined; } } }); modelCtrl.$form
2023-07-21 16:51:06 UTC	10393	IN	Data Raw: 6f Data Ascii: o
2023-07-21 16:51:06 UTC	10393	IN	Data Raw: 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 76 61 6c 69 64 2e 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 69 73 45 64 69 74 61 62 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 65 6c 43 74 72 6c 2e 24 73 65 74 56 61 6c 69 64 69 74 79 28 27 65 64 69 74 61 62 6c 65 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 70 75 74 46 6f 72 6d 61 74 74 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 73 2e 24 6d 6f 64 65 6c 20 3d 20 6d 6f 64 65 6c 56 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 70 75 74 46 6f 72 6d 61 74 74 65 72 28 6f 72 69 67 69 6e 61 6c 53 63 6f 70 65 2c 20 6c 6f 63 61 6c 73 29 3b 0a 20 20 20 20 20 20 20 Data Ascii: nsidered to be valid. if (!isEditable) { modelCtrl.$setValidity('editable', true); } if (inputFormatter) { locals.$model = modelValue; return inputFormatter(originalScope, locals);
2023-07-21 16:51:06 UTC	10409	IN	Data Raw: 61 62 6c 65 64 28 27 74 6f 64 61 79 27 29 5c 22 3e 7b 7b 20 67 65 74 54 65 78 74 28 27 63 75 72 72 65 6e 74 27 29 20 7d 7d 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 22 20 2b 0a 20 20 20 20 22 09 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 5c 22 62 75 74 74 6f 6e 5c 22 20 63 6c 61 73 73 3d 5c 22 62 74 6e 20 62 74 6e 2d 73 6d 20 62 74 6e 2d 64 61 6e 67 65 72 5c 22 20 6e 67 2d 63 6c 69 63 6b 3d 5c 22 73 65 6c 65 63 74 28 6e 75 6c 6c 29 5c 22 3e 7b 7b 20 67 65 74 54 65 78 74 28 27 63 6c 65 61 72 27 29 20 7d 7d 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 22 20 2b 0a 20 20 20 20 22 09 09 3c 2f 73 70 61 6e 3e 5c 6e 22 20 2b 0a 20 20 20 20 22 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 5c 22 62 75 74 74 6f 6e 5c 22 20 63 6c 61 73 73 3d 5c 22 62 74 6e 20 62 74 6e 2d 73 6d 20 62 74 Data Ascii: abled('today')\">{{ getText('current') }}</button>\n" + "<button type=\"button\" class=\"btn btn-sm btn-danger\" ng-click=\"select(null)\">{{ getText('clear') }}</button>\n" + "</span>\n" + "<button type=\"button\" class=\"btn btn-sm bt
2023-07-21 16:51:06 UTC	10425	IN	Data Raw: 72 2b 2b 29 69 66 28 75 3d 69 5b 72 5d 2c 6e 5b 75 5d 21 3d 74 5b 75 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 66 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 5b 6e 5d 3d 74 5b 6e 5d 7d 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 72 65 74 75 72 6e 20 66 28 69 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 20 69 6e 20 6e 26 26 28 74 5b 69 5d 3d 6e Data Ascii: r++)if(u=i[r],n[u]!=t[u])return!1;return!0}function d(n,t){var i={};return f(n,function(n){i[n]=t[n]}),i}function dt(n){var t={},i=Array.prototype.concat.apply(Array.prototype,Array.prototype.slice.call(arguments,1));return f(i,function(i){i in n&&(t[i]=n
2023-07-21 16:51:06 UTC	10441	IN	Data Raw: 72 6f 77 Data Ascii: row
2023-07-21 16:51:06 UTC	10441	IN	Data Raw: 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 73 75 63 68 20 72 65 6c 6f 61 64 20 73 74 61 74 65 20 27 22 2b 28 65 28 66 2e 72 65 6c 6f 61 64 29 3f 66 2e 72 65 6c 6f 61 64 3a 66 2e 72 65 6c 6f 61 64 2e 6e 61 6d 65 29 2b 22 27 22 29 3b 66 6f 72 28 3b 73 26 26 73 3d 3d 3d 65 74 5b 68 5d 26 26 73 21 3d 3d 64 74 3b 29 79 3d 63 74 5b 68 5d 3d 73 2e 6c 6f 63 61 6c 73 2c 68 2b 2b 2c 73 3d 6e 74 5b 68 5d 7d 7d 65 6c 73 65 20 66 6f 72 28 3b 73 26 26 73 3d 3d 3d 65 74 5b 68 5d 26 26 73 2e 6f 77 6e 50 61 72 61 6d 73 2e 24 24 65 71 75 61 6c 73 28 69 2c 62 29 3b 29 79 3d 63 74 5b 68 5d 3d 73 2e 6c 6f 63 61 6c 73 2c 68 2b 2b 2c 73 3d 6e 74 5b 68 5d 3b 69 66 28 61 74 28 74 2c 69 2c 70 2c 62 2c 79 2c 66 29 29 72 65 74 75 72 6e 20 68 74 26 26 28 69 5b 22 23 22 5d 3d 68 74 Data Ascii: new Error("No such reload state '"+(e(f.reload)?f.reload:f.reload.name)+"'");for(;s&&s===et[h]&&s!==dt;)y=ct[h]=s.locals,h++,s=nt[h]}}else for(;s&&s===et[h]&&s.ownParams.$$equals(i,b);)y=ct[h]=s.locals,h++,s=nt[h];if(at(t,i,p,b,y,f))return ht&&(i["#"]=ht
2023-07-21 16:51:06 UTC	10457	IN	Data Raw: 6d 65 6e 75 49 74 65 6d 73 3d 6e 2e 64 65 66 61 75 6c 74 4d 65 6e 75 49 74 65 6d 73 7d 29 3b 6e 2e 24 6f 6e 28 22 24 64 65 73 74 72 6f 79 22 2c 74 29 7d 2c 73 6f 72 74 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 67 72 69 64 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 53 6f 72 74 69 6e 67 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 2e 63 6f 6c 26 26 6e 2e 63 6f 6c 26 26 6e 2e 63 6f 6c 2e 65 6e 61 62 6c 65 53 6f 72 74 69 6e 67 3f 21 30 3a 21 31 7d 2c 69 73 41 63 74 69 76 65 53 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 2e 63 6f 6c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 2e 63 6f Data Ascii: menuItems=n.defaultMenuItems});n.$on("$destroy",t)},sortable:function(n){return n.grid.options.enableSorting&&"undefined"!=typeof n.col&&n.col&&n.col.enableSorting?!0:!1},isActiveSort:function(n,t){return"undefined"!=typeof n.col&&"undefined"!=typeof n.co
2023-07-21 16:51:06 UTC	10473	IN	Data Raw: 69 63 6f 6e 3a 22 75 69 2d 67 72 69 64 2d 69 63 6f 6e 2d 6f 6b 22 2c 61 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 72 2e 74 6f 67 67 6c 65 43 6f 6c 75 6d 6e 56 69 73 69 62 69 6c 69 74 79 28 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 67 72 69 64 43 6f 6c 29 7d 2c 73 68 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 67 72 69 64 43 6f 6c 2e 63 6f 6c 44 65 66 2e 76 69 73 69 62 6c 65 3d 3d 3d 21 30 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 67 72 69 64 43 6f 6c 2e 63 6f 6c 44 65 66 2e 76 69 73 69 62 6c 65 7d 2c 63 6f 6e 74 65 78 74 3a 7b 67 72 69 64 43 6f 6c 3a 6e 2e 67 72 69 64 2e 67 65 74 43 6f 6c 75 6d 6e Data Ascii: icon:"ui-grid-icon-ok",action:function(n){n.stopPropagation(),r.toggleColumnVisibility(this.context.gridCol)},shown:function(){return this.context.gridCol.colDef.visible===!0\|\|void 0===this.context.gridCol.colDef.visible},context:{gridCol:n.grid.getColumn
2023-07-21 16:51:06 UTC	10489	IN	Data Raw: 75 72 6e Data Ascii: urn
2023-07-21 16:51:06 UTC	10489	IN	Data Raw: 20 6e 2e 75 69 47 72 69 64 2e 63 6f 6c 75 6d 6e 44 65 66 73 7d 2c 79 29 29 2c 61 2e 70 75 73 68 28 6e 2e 24 70 61 72 65 6e 74 2e 24 77 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 75 69 47 72 69 64 2e 63 6f 6c 75 6d 6e 44 65 66 73 2e 6c 65 6e 67 74 68 7d 2c 79 29 29 29 3a 28 61 6e 67 75 6c 61 72 2e 69 73 53 74 72 69 6e 67 28 6e 2e 75 69 47 72 69 64 2e 64 61 74 61 29 3f 61 2e 70 75 73 68 28 6e 2e 24 70 61 72 65 6e 74 2e 24 77 61 74 63 68 43 6f 6c 6c 65 63 74 69 6f 6e 28 6e 2e 75 69 47 72 69 64 2e 64 61 74 61 2c 76 29 29 3a 61 2e 70 75 73 68 28 6e 2e 24 70 61 72 65 6e 74 2e 24 77 61 74 63 68 43 6f 6c 6c 65 63 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 75 69 47 72 69 64 2e 64 61 74 61 7d 2c 76 29 Data Ascii: n.uiGrid.columnDefs},y)),a.push(n.$parent.$watch(function(){return n.uiGrid.columnDefs.length},y))):(angular.isString(n.uiGrid.data)?a.push(n.$parent.$watchCollection(n.uiGrid.data,v)):a.push(n.$parent.$watchCollection(function(){return n.uiGrid.data},v)
2023-07-21 16:51:06 UTC	10505	IN	Data Raw: 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 69 3d 74 68 69 73 2e 67 65 74 56 69 65 77 70 6f 72 74 57 69 64 74 68 28 29 2c 6e 3d 30 2c 72 3d 30 3b 72 65 74 75 72 6e 20 74 2e 63 6f 6c 75 6d 6e 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 75 2c 66 29 7b 69 66 28 69 3e 72 29 72 2b 3d 75 2e 64 72 61 77 6e 57 69 64 74 68 2c 6e 2b 2b 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 65 3d 66 3b 65 3e 3d 66 2d 6e 3b 65 2d 2d 29 6f 2b 3d 74 2e 63 6f 6c 75 6d 6e 73 5b 65 5d 2e 64 72 61 77 6e 57 69 64 74 68 3b 69 3e 6f 26 26 6e 2b 2b 7d 7d 29 2c 6e 7d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 42 6f 64 79 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 56 Data Ascii: ender=function(){var t=this,i=this.getViewportWidth(),n=0,r=0;return t.columns.forEach(function(u,f){if(i>r)r+=u.drawnWidth,n++;else{for(var o=0,e=f;e>=f-n;e--)o+=t.columns[e].drawnWidth;i>o&&n++}}),n},y.prototype.getBodyHeight=function(){return this.getV
2023-07-21 16:51:06 UTC	10521	IN	Data Raw: 72 6e Data Ascii: rn
2023-07-21 16:51:06 UTC	10521	IN	Data Raw: 20 6e 3f 22 2e 22 2b 69 3a 69 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 69 6e 6e 65 64 4c 65 66 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6c 65 66 74 22 3d 3d 3d 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6e 74 61 69 6e 65 72 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 69 6e 6e 65 64 52 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 72 69 67 68 74 22 3d 3d 3d 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6e 74 61 69 6e 65 72 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6c 43 6c 61 73 73 44 65 66 69 6e 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 20 2e 67 72 69 64 22 2b 74 68 69 73 2e 67 72 69 64 2e 69 64 2b 22 20 22 2b 74 68 69 73 2e 67 65 74 43 6f 6c 43 6c 61 73 73 28 21 Data Ascii: n?"."+i:i},r.prototype.isPinnedLeft=function(){return"left"===this.renderContainer},r.prototype.isPinnedRight=function(){return"right"===this.renderContainer},r.prototype.getColClassDefinition=function(){return" .grid"+this.grid.id+" "+this.getColClass(!
2023-07-21 16:51:06 UTC	10537	IN	Data Raw: 3e 30 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 4c 65 66 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 26 26 28 30 3d 3d 3d 74 68 69 73 2e 78 2e 70 65 72 63 65 6e 74 61 67 65 7c 7c 74 68 69 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 4c 65 6e 67 74 68 3c 30 29 26 26 30 3d 3d 3d 6e 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 52 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 26 26 28 31 3d 3d 3d 74 68 69 73 2e 78 2e 70 65 72 63 65 6e 74 61 67 65 7c 7c 30 3d 3d 3d 74 68 69 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 4c 65 6e 67 74 68 29 26 26 6e 3e 30 7d 2c 74 2e 53 6f 75 72 63 65 73 3d 7b 56 69 65 77 50 6f 72 74 53 63 72 6f 6c 6c 3a 22 56 69 65 77 50 Data Ascii: >0},t.prototype.atLeft=function(n){return this.x&&(0===this.x.percentage\|\|this.horizontalScrollLength<0)&&0===n},t.prototype.atRight=function(n){return this.x&&(1===this.x.percentage\|\|0===this.horizontalScrollLength)&&n>0},t.Sources={ViewPortScroll:"ViewP
2023-07-21 16:51:06 UTC	10553	IN	Data Raw: 69 6f Data Ascii: io
2023-07-21 16:51:06 UTC	10553	IN	Data Raw: 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 66 3d 74 68 69 73 2c 72 2c 75 3b 69 66 28 21 61 6e 67 75 6c 61 72 2e 69 73 45 6c 65 6d 65 6e 74 28 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 70 61 72 65 6e 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 61 6e 20 65 6c 65 6d 65 6e 74 2e 22 29 3b 72 65 74 75 72 6e 28 6e 3d 61 6e 67 75 6c 61 72 2e 65 6c 65 6d 65 6e 74 28 6e 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 6e 5b 30 5d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 3b 72 65 74 75 72 6e 20 66 2e 62 79 45 6c 65 6d 65 6e 74 28 69 29 7d 2c 74 68 69 73 2e 5f 70 75 72 67 65 51 75 65 75 65 28 29 2c 69 29 3f 28 75 3d 79 28 72 29 2c 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 79 28 72 29 29 2c 75 29 3a 72 28 Data Ascii: n(n,t,i){var f=this,r,u;if(!angular.isElement(n))throw new Error("The parent element is not an element.");return(n=angular.element(n),r=function(){var i=n[0].querySelector(t);return f.byElement(i)},this._purgeQueue(),i)?(u=y(r),this.queue.push(y(r)),u):r(
2023-07-21 16:51:06 UTC	10569	IN	Data Raw: 86 d8 af db 8c 22 2c 61 67 67 72 65 67 61 74 65 5f 63 6f 75 6e 74 3a 22 41 67 67 3a 20 d8 aa d8 b9 d8 af d8 a7 d8 af 22 2c 61 67 67 72 65 67 61 74 65 5f 73 75 6d 3a 22 41 67 67 3a 20 d8 ac d9 85 d8 b9 22 2c 61 67 67 72 65 67 61 74 65 5f 6d 61 78 3a 22 41 67 67 3a 20 d8 a8 db 8c d8 b4 db 8c d9 86 d9 87 22 2c 61 67 67 72 65 67 61 74 65 5f 6d 69 6e 3a 22 41 67 67 3a 20 da a9 d9 85 db 8c d9 86 d9 87 22 2c 61 67 67 72 65 67 61 74 65 5f 61 76 67 3a 22 41 67 67 3a 20 d9 85 db 8c d8 a7 d9 86 da af db 8c d9 86 22 2c 61 67 67 72 65 67 61 74 65 5f 72 65 6d 6f 76 65 3a 22 41 67 67 3a 20 d8 ad d8 b0 d9 81 22 7d 7d 29 2c 6e 7d 5d 29 7d 5d 29 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 75 69 2e 67 72 69 64 22 29 2e 63 6f Data Ascii: ",aggregate_count:"Agg: ",aggregate_sum:"Agg: ",aggregate_max:"Agg: ",aggregate_min:"Agg: ",aggregate_avg:"Agg: ",aggregate_remove:"Agg: "}}),n}])}])}(),function(){angular.module("ui.grid").co
2023-07-21 16:51:06 UTC	10585	IN	Data Raw: 6d 6f 76 65 3a 22 52 65 6d 6f 76 65 72 20 4f 72 64 65 6e 61 c3 a7 c3 a3 6f 22 7d 2c 63 6f 6c 75 6d 6e 3a 7b 68 69 64 65 3a 22 45 73 63 6f 6e 64 65 72 20 63 6f 6c 75 6e 61 22 7d 2c 61 67 67 72 65 67 61 74 69 6f 6e 3a 7b 63 6f 75 6e 74 3a 22 74 6f 74 61 6c 20 64 65 20 6c 69 6e 68 61 73 3a 20 22 2c 73 75 6d 3a 22 74 6f 74 61 6c 3a 20 22 2c 61 76 67 3a 22 6d 65 64 3a 20 22 2c 6d 69 6e 3a 22 6d 69 6e 3a 20 22 2c 6d 61 78 3a 22 6d 61 78 3a 20 22 7d 2c 70 69 6e 6e 69 6e 67 3a 7b 70 69 6e 4c 65 66 74 3a 22 46 69 78 61 72 20 45 73 71 75 65 72 64 61 22 2c 70 69 6e 52 69 67 68 74 3a 22 46 69 78 61 72 20 44 69 72 65 69 74 61 22 2c 75 6e 70 69 6e 3a 22 44 65 73 70 72 65 6e 64 65 72 22 7d 2c 67 72 69 64 4d 65 6e 75 3a 7b 63 6f 6c 75 6d 6e 73 3a 22 43 6f 6c 75 6e 61 73 Data Ascii: move:"Remover Ordenao"},column:{hide:"Esconder coluna"},aggregation:{count:"total de linhas: ",sum:"total: ",avg:"med: ",min:"min: ",max:"max: "},pinning:{pinLeft:"Fixar Esquerda",pinRight:"Fixar Direita",unpin:"Desprender"},gridMenu:{columns:"Colunas
2023-07-21 16:51:06 UTC	10601	IN	Data Raw: e6 b3 95 e5 a4 84 e7 90 86 e6 96 87 e4 bb b6 ef bc 8c e7 a1 ae e5 ae 9a e6 98 af e5 90 88 e6 b3 95 e7 9a 84 43 53 56 e6 96 87 e4 bb b6 ef bc 9f 22 2c 69 6e 76 61 6c 69 64 4a 73 6f 6e 3a 22 e6 97 a0 e6 b3 95 e5 a4 84 e7 90 86 e6 96 87 e4 bb b6 ef bc 8c e7 a1 ae e5 ae 9a e6 98 af e5 90 88 e6 b3 95 e7 9a 84 4a 53 4f 4e e6 96 87 e4 bb b6 ef bc 9f 22 2c 6a 73 6f 6e 4e 6f 74 41 72 72 61 79 3a 22 e5 af bc e5 85 a5 e7 9a 84 e6 96 87 e4 bb b6 e4 b8 8d e6 98 af 4a 53 4f 4e e6 95 b0 e7 bb 84 ef bc 81 22 7d 2c 70 61 67 69 6e 61 74 69 6f 6e 3a 7b 61 72 69 61 3a 7b 70 61 67 65 54 6f 46 69 72 73 74 3a 22 e7 ac ac e4 b8 80 e9 a1 b5 22 2c 70 61 67 65 42 61 63 6b 3a 22 e4 b8 8a e4 b8 80 e9 a1 b5 22 2c 70 61 67 65 53 65 6c 65 63 74 65 64 3a 22 e5 bd 93 e5 89 8d e9 a1 b5 22 Data Ascii: CSV",invalidJson:"JSON",jsonNotArray:"JSON"},pagination:{aria:{pageToFirst:"",pageBack:"",pageSelected:""
2023-07-21 16:51:06 UTC	10617	IN	Data Raw: 64 69 74 4f 6e 46 6f 63 75 73 3d 76 6f 69 64 20 30 3d 3d 3d 74 2e 65 6e 61 62 6c 65 43 65 6c 6c 45 64 69 74 4f 6e 46 6f 63 75 73 3f 75 2e 65 6e 61 62 6c 65 43 65 6c 6c 45 64 69 74 4f 6e 46 6f 63 75 73 3a 74 2e 65 6e 61 62 6c 65 43 65 6c 6c 45 64 69 74 4f 6e 46 6f 63 75 73 2c 6e 2e 61 6c 6c 28 66 29 7d 2c 69 73 53 74 61 72 74 45 64 69 74 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6d 65 74 61 4b 65 79 7c 7c 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 74 2e 6b 65 79 6d 61 70 2e 45 53 43 7c 7c 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 74 2e 6b 65 79 6d 61 70 2e 53 48 49 46 54 7c 7c 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 74 2e 6b 65 79 6d 61 70 2e 43 54 52 4c 7c 7c 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 74 2e 6b 65 79 6d 61 70 2e 41 4c 54 7c 7c 6e Data Ascii: ditOnFocus=void 0===t.enableCellEditOnFocus?u.enableCellEditOnFocus:t.enableCellEditOnFocus,n.all(f)},isStartEditKey:function(n){return n.metaKey\|\|n.keyCode===t.keymap.ESC\|\|n.keyCode===t.keymap.SHIFT\|\|n.keyCode===t.keymap.CTRL\|\|n.keyCode===t.keymap.ALT\|\|n
2023-07-21 16:51:06 UTC	10633	IN	Data Raw: 53 49 42 4c 45 2c 74 2e 56 49 53 49 42 4c 45 29 7d 2c 73 68 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 72 69 64 2e 6f 70 74 69 6f 6e 73 2e 65 78 70 6f 72 74 65 72 4d 65 6e 75 43 73 76 7d 2c 6f 72 64 65 72 3a 32 30 31 7d 2c 7b 74 69 74 6c 65 3a 66 2e 67 65 74 53 61 66 65 54 65 78 74 28 22 67 72 69 64 4d 65 6e 75 2e 65 78 70 6f 72 74 65 72 53 65 6c 65 63 74 65 64 41 73 43 73 76 22 29 2c 61 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 72 69 64 2e 61 70 69 2e 65 78 70 6f 72 74 65 72 2e 63 73 76 45 78 70 6f 72 74 28 74 2e 53 45 4c 45 43 54 45 44 2c 74 2e 56 49 53 49 42 4c 45 29 7d 2c 73 68 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 72 69 64 2e 6f 70 74 69 Data Ascii: SIBLE,t.VISIBLE)},shown:function(){return this.grid.options.exporterMenuCsv},order:201},{title:f.getSafeText("gridMenu.exporterSelectedAsCsv"),action:function(){this.grid.api.exporter.csvExport(t.SELECTED,t.VISIBLE)},shown:function(){return this.grid.opti
2023-07-21 16:51:06 UTC	10649	IN	Data Raw: 6f 29 2c 69 2b 2b 29 7d 2c 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 75 3d 6e 5b 69 5d 2c 75 2e 76 69 73 69 62 6c 65 26 26 66 2e 66 6f 72 45 61 63 68 28 65 29 3b 72 65 74 75 72 6e 20 64 65 6c 65 74 65 20 74 2e 67 72 6f 75 70 69 6e 67 2e 6f 6c 64 47 72 6f 75 70 69 6e 67 48 65 61 64 65 72 43 61 63 68 65 2c 6e 7d 2c 69 6e 69 74 69 61 6c 69 73 65 50 72 6f 63 65 73 73 69 6e 67 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 69 3d 68 2e 67 65 74 47 72 6f 75 70 69 6e 67 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 67 72 6f 75 70 69 6e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 7b 66 69 65 6c 64 4e 61 6d 65 3a 6e 2e 66 69 65 6c 64 2c 63 6f 6c 3a 6e 2e 63 6f 6c 2c 69 6e 69 74 69 Data Ascii: o),i++)},i=0;i<n.length;i++)u=n[i],u.visible&&f.forEach(e);return delete t.grouping.oldGroupingHeaderCache,n},initialiseProcessingState:function(n){var t=[],i=h.getGrouping(n);return i.grouping.forEach(function(n){t.push({fieldName:n.field,col:n.col,initi
2023-07-21 16:51:06 UTC	10665	IN	Data Raw: 3d 3d 3d 21 30 29 26 26 28 63 2b 3d 72 5b 66 5d 2e 64 72 61 77 6e 57 69 64 74 68 7c 7c 72 5b 66 5d 2e 77 69 64 74 68 7c 7c 72 5b 66 5d 2e 63 6f 6c 44 65 66 2e 77 69 64 74 68 2c 63 3e 68 29 29 7b 69 2e 72 65 64 72 61 77 43 6f 6c 75 6d 6e 41 74 50 6f 73 69 74 69 6f 6e 28 6e 2e 67 72 69 64 2c 65 2c 66 2d 31 29 3b 62 72 65 61 6b 7d 68 3e 63 26 26 69 2e 72 65 64 72 61 77 43 6f 6c 75 6d 6e 41 74 50 6f 73 69 74 69 6f 6e 28 6e 2e 67 72 69 64 2c 65 2c 72 2e 6c 65 6e 67 74 68 2d 31 29 7d 7d 7d 2c 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 6e 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 79 29 2c 61 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 79 29 7d 2c 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 66 66 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 79 29 Data Ascii: ===!0)&&(c+=r[f].drawnWidth\|\|r[f].width\|\|r[f].colDef.width,c>h)){i.redrawColumnAtPosition(n.grid,e,f-1);break}h>c&&i.redrawColumnAtPosition(n.grid,e,r.length-1)}}},nt=function(){a.on("touchstart",y),a.on("mousedown",y)},it=function(){a.off("touchstart",y)
2023-07-21 16:51:06 UTC	10681	IN	Data Raw: 72 2c 64 65 6c 65 74 65 20 74 2e 72 6f 77 45 64 69 74 53 61 76 65 50 72 6f 6d 69 73 65 2c 74 2e 69 73 45 72 72 6f 72 3d 21 30 2c 6e 2e 72 6f 77 45 64 69 74 2e 65 72 72 6f 72 52 6f 77 73 7c 7c 28 6e 2e 72 6f 77 45 64 69 74 2e 65 72 72 6f 72 52 6f 77 73 3d 5b 5d 29 2c 66 2e 69 73 52 6f 77 50 72 65 73 65 6e 74 28 6e 2e 72 6f 77 45 64 69 74 2e 65 72 72 6f 72 52 6f 77 73 2c 74 29 7c 7c 6e 2e 72 6f 77 45 64 69 74 2e 65 72 72 6f 72 52 6f 77 73 2e 70 75 73 68 28 74 29 7d 7d 2c 72 65 6d 6f 76 65 52 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 2c 72 29 7b 69 2e 75 69 64 3d 3d 3d 74 2e 75 69 64 26 26 6e Data Ascii: r,delete t.rowEditSavePromise,t.isError=!0,n.rowEdit.errorRows\|\|(n.rowEdit.errorRows=[]),f.isRowPresent(n.rowEdit.errorRows,t)\|\|n.rowEdit.errorRows.push(t)}},removeRow:function(n,t){"undefined"!=typeof n&&null!==n&&n.forEach(function(i,r){i.uid===t.uid&&n
2023-07-21 16:51:06 UTC	10697	IN	Data Raw: 47 72 69 64 22 2c 73 63 6f 70 65 3a 21 31 2c 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 2c 72 2c 75 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 6e 2e 67 72 69 64 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 52 6f 77 53 65 6c 65 63 74 69 6f 6e 26 26 6e 2e 67 72 69 64 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 46 75 6c 6c 52 6f 77 53 65 6c 65 63 74 69 6f 6e 26 26 28 69 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 67 72 69 64 2d 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 22 29 2c 69 2e 6f 6e 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 61 29 2c 69 2e 6f 6e 28 22 74 6f 75 63 68 65 6e 64 22 2c 73 29 2c 69 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 6f 29 2c 6e 2e 72 65 67 69 73 74 65 72 65 64 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 6e 2e 72 Data Ascii: Grid",scope:!1,link:function(n,i,r,u){function c(){n.grid.options.enableRowSelection&&n.grid.options.enableFullRowSelection&&(i.addClass("ui-grid-disable-selection"),i.on("touchstart",a),i.on("touchend",s),i.on("click",o),n.registered=!0)}function y(){n.r
2023-07-21 16:51:06 UTC	10713	IN	Data Raw: 3d 3d 3d 20 5c 27 5c 27 22 20 6e 67 2d 73 68 6f 77 3d 22 63 6f 6c 46 69 6c 74 65 72 2e 74 65 72 6d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 63 6f 6c 46 69 6c 74 65 72 2e 74 65 72 6d 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 63 6f 6c 46 69 6c 74 65 72 2e 74 65 72 6d 20 21 3d 3d 20 5c 27 5c 27 22 3e 3c 69 20 63 6c 61 73 73 3d 22 75 69 2d 67 72 69 64 2d 69 63 6f 6e 2d 63 61 6e 63 65 6c 22 20 75 69 2d 67 72 69 64 2d 6f 6e 65 2d 62 69 6e 64 2d 61 72 69 61 2d 6c 61 62 65 6c 3d 22 61 72 69 61 2e 72 65 6d 6f 76 65 46 69 6c 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 69 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 6e 67 2d 69 66 3d 22 63 6f 6c 46 69 6c 74 65 72 2e 74 79 70 65 20 3d 3d 3d 20 5c 27 73 65 6c 65 63 74 5c 27 22 3e 3c 73 65 6c 65 63 74 20 Data Ascii: === \'\'" ng-show="colFilter.term !== undefined && colFilter.term !== null && colFilter.term !== \'\'"><i class="ui-grid-icon-cancel" ui-grid-one-bind-aria-label="aria.removeFilter"> </i></div></div><div ng-if="colFilter.type === \'select\'"><select
2023-07-21 16:51:06 UTC	10729	IN	Data Raw: 65 72 22 2c 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 67 72 69 64 2d 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 67 72 69 64 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 73 22 3e 3c 75 69 2d 67 72 69 64 2d 73 65 6c 65 63 74 69 6f 6e 2d 72 6f 77 2d 68 65 61 64 65 72 2d 62 75 74 74 6f 6e 73 3e 3c 2f 75 69 2d 67 72 69 64 2d 73 65 6c 65 63 74 69 6f 6e 2d 72 6f 77 2d 68 65 61 64 65 72 2d 62 75 74 74 6f 6e 73 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 29 2c 6e 2e 70 75 74 28 22 75 69 2d 67 72 69 64 2f 73 65 6c 65 63 74 69 6f 6e 52 6f 77 48 65 61 64 65 72 42 75 74 74 6f 6e 73 22 2c 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 67 72 69 64 2d 73 65 6c 65 63 74 69 6f 6e 2d 72 6f 77 2d 68 65 61 64 65 72 2d Data Ascii: er",'<div class="ui-grid-disable-selection"><div class="ui-grid-cell-contents"><ui-grid-selection-row-header-buttons></ui-grid-selection-row-header-buttons></div></div>'),n.put("ui-grid/selectionRowHeaderButtons",'<div class="ui-grid-selection-row-header-
2023-07-21 16:51:06 UTC	10745	IN	Data Raw: 72 20 74 3d 2d 31 2c 72 3d 6e 75 6c 6c 3d 3d 6e 3f 30 3a 6e 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e 65 77 20 73 72 3b 2b 2b 74 3c 72 3b 29 74 68 69 73 2e 61 64 64 28 6e 5b 74 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2e 73 65 74 28 6e 2c 6f 6e 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 62 72 28 6e 29 7b 0a 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2e 68 61 73 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 6e 29 7b 74 68 69 73 2e 73 69 7a 65 3d 28 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e 65 77 20 69 72 28 6e 29 29 2e 73 69 7a 65 7d 66 75 6e 63 74 69 6f 6e 20 6d 72 28 29 7b 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e Data Ascii: r t=-1,r=null==n?0:n.length;for(this.__data__=new sr;++t<r;)this.add(n[t])}function dr(n){return this.__data__.set(n,on),this}function br(n){return this.__data__.has(n)}function wr(n){this.size=(this.__data__=new ir(n)).size}function mr(){this.__data__=n
2023-07-21 16:51:06 UTC	10761	IN	Data Raw: 29 2c 6e 28 74 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 69 28 6e 2c 74 2c 72 2c 65 2c 75 2c 69 2c 6f 2c 66 2c 63 2c 61 29 7b 76 61 72 20 6c 3d 74 26 79 6e 2c 73 3d 6c 3f 6f 3a 58 2c 68 3d 6c 3f 58 3a 6f 2c 70 3d 6c 3f 69 3a 58 2c 5f 3d 6c 3f 58 3a 69 3b 74 7c 3d 6c 3f 62 6e 3a 77 6e 2c 74 26 3d 7e 28 6c 3f 77 6e 3a 62 6e 29 2c 74 26 67 6e 7c 7c 28 74 26 3d 7e 28 5f 6e 7c 76 6e 29 29 3b 76 61 72 20 76 3d 5b 6e 2c 74 2c 75 2c 70 2c 73 2c 5f 2c 68 2c 66 2c 63 2c 61 5d 2c 67 3d 72 2e 61 70 70 6c 79 28 58 2c 76 29 3b 72 65 74 75 72 6e 20 24 69 28 6e 29 26 26 53 73 28 67 2c 76 29 2c 67 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 65 2c 0a 59 69 28 67 2c 6e 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 6e 29 7b 76 61 72 20 74 3d 61 6c 5b 6e 5d 3b 72 65 74 75 72 Data Ascii: ),n(t,r)}}function oi(n,t,r,e,u,i,o,f,c,a){var l=t&yn,s=l?o:X,h=l?X:o,p=l?i:X,_=l?X:i;t\|=l?bn:wn,t&=~(l?wn:bn),t&gn\|\|(t&=~(_n\|vn));var v=[n,t,u,p,s,_,h,f,c,a],g=r.apply(X,v);return $i(n)&&Ss(g,v),g.placeholder=e,Yi(g,n,t)}function fi(n){var t=al[n];retur
2023-07-21 16:51:06 UTC	10777	IN	Data Raw: 6e 7d 66 75 6e 63 74 69 6f 6e 20 51 66 28 6e 29 7b 72 65 74 75 72 6e 20 63 63 28 6e 29 26 26 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 21 67 63 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 58 66 28 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 21 30 3b 69 66 28 48 66 28 6e 29 26 26 28 62 68 28 6e 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 73 70 6c 69 63 65 7c 7c 6d 68 28 6e 29 7c 7c 4f 68 28 6e 29 7c 7c 64 68 28 6e 29 29 29 72 65 74 75 72 6e 21 6e 2e 6c 65 6e 67 74 68 3b 76 61 72 20 74 3d 7a 73 28 6e 29 3b 69 66 28 74 3d 3d 47 6e 7c 7c 74 3d 3d 74 74 29 72 65 74 75 72 6e 21 6e 2e 73 69 7a 65 3b 69 66 28 4d 69 28 6e 29 29 72 65 74 75 72 6e 21 4d 65 28 6e Data Ascii: n}function Qf(n){return cc(n)&&1===n.nodeType&&!gc(n)}function Xf(n){if(null==n)return!0;if(Hf(n)&&(bh(n)\|\|"string"==typeof n\|\|"function"==typeof n.splice\|\|mh(n)\|\|Oh(n)\|\|dh(n)))return!n.length;var t=zs(n);if(t==Gn\|\|t==tt)return!n.size;if(Mi(n))return!Me(n
2023-07-21 16:51:06 UTC	10793	IN	Data Raw: 3d 69 69 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 3c 3d 74 7d 29 2c 7a 68 3d 4e 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 4d 69 28 74 29 7c 7c 48 66 28 74 29 29 72 65 74 75 72 6e 20 24 75 28 74 2c 50 63 28 74 29 2c 6e 29 2c 58 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 62 6c 2e 63 61 6c 6c 28 74 2c 72 29 26 26 53 72 28 6e 2c 72 2c 74 5b 72 5d 29 7d 29 2c 45 68 3d 4e 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 24 75 28 74 2c 71 63 28 74 29 2c 6e 29 7d 29 2c 53 68 3d 4e 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 24 75 28 74 2c 71 63 28 74 29 2c 6e 2c 65 29 7d 29 2c 57 68 3d 4e 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 24 75 28 74 2c 50 63 28 74 29 2c 6e 2c 65 29 3b 0a 7d Data Ascii: =ii(function(n,t){return n<=t}),zh=Nu(function(n,t){if(Mi(t)\|\|Hf(t))return $u(t,Pc(t),n),X;for(var r in t)bl.call(t,r)&&Sr(n,r,t[r])}),Eh=Nu(function(n,t){$u(t,qc(t),n)}),Sh=Nu(function(n,t,r,e){$u(t,qc(t),n,e)}),Wh=Nu(function(n,t,r,e){$u(t,Pc(t),n,e);}
2023-07-21 16:51:06 UTC	10809	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2023-07-21 16:51:06 UTC	10809	IN	Data Raw: 20 20 20 2f 2f 73 65 74 74 69 6e 67 20 73 65 6c 65 63 74 65 64 20 73 74 65 70 20 74 6f 20 61 72 67 75 6d 65 6e 74 20 70 61 73 73 65 64 20 69 6e 74 6f 20 67 6f 54 6f 28 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 65 70 2e 73 65 6c 65 63 74 65 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 50 72 65 76 69 6f 75 73 53 74 65 70 73 43 6f 6d 70 6c 65 74 65 64 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 65 6d 69 74 20 65 76 65 6e 74 20 75 70 77 61 72 64 73 20 77 69 74 68 20 64 61 74 61 20 6f 6e 20 67 6f 54 6f 28 29 20 69 6e 76 6f 6b 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 2e 24 65 6d 69 Data Ascii: //setting selected step to argument passed into goTo() step.selected = true; setPreviousStepsCompleted(); //emit event upwards with data on goTo() invoktion $scope.$emi
2023-07-21 16:51:06 UTC	10825	IN	Data Raw: 42 75 74 74 6f 6e 3d 27 42 72 6f 77 73 65 27 2c 6e 2e 76 65 72 69 66 79 42 75 74 74 6f 6e 3d 27 56 65 72 69 66 79 27 2c 6e 2e 70 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 3d 27 42 72 6f 77 73 65 20 74 6f 20 75 70 6c 6f 61 64 27 2c 6e 2e 73 68 6f 77 56 65 72 69 66 79 42 75 74 74 6f 6e 3d 21 30 2c 74 5b 30 5d 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 73 68 6f 77 76 65 72 69 66 79 62 75 74 74 6f 6e 22 29 26 26 74 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 68 6f 77 76 65 72 69 66 79 62 75 74 74 6f 6e 22 29 3d 3d 3d 22 66 61 6c 73 65 22 26 26 28 6e 2e 73 68 6f 77 56 65 72 69 66 79 42 75 74 74 6f 6e 3d 21 31 29 3b 61 6e 67 75 6c 61 72 2e 65 6c 65 6d 65 6e 74 28 74 5b 30 5d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 73 65 70 61 72 61 74 Data Ascii: Button='Browse',n.verifyButton='Verify',n.placeholderText='Browse to upload',n.showVerifyButton=!0,t[0].hasAttribute("showverifybutton")&&t[0].getAttribute("showverifybutton")==="false"&&(n.showVerifyButton=!1);angular.element(t[0].querySelector('.separat
2023-07-21 16:51:06 UTC	10841	IN	Data Raw: 74 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 28 6e 29 7c 7c 75 74 28 6e 29 26 26 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 76 6f 69 64 20 30 29 2c 66 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 3d 21 30 2c 66 2e 5f 75 73 65 55 54 43 3d 66 2e 5f 69 73 55 54 43 3d 75 2c 66 2e 5f 6c 3d 69 2c 66 2e 5f 69 3d 6e 2c 66 2e 5f 66 3d 74 2c 66 2e 5f 73 74 72 69 63 74 3d 72 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 65 77 20 76 69 28 68 75 28 76 65 28 6e 29 29 29 3b 72 65 74 75 72 6e 20 74 2e 5f 6e 65 78 74 44 61 79 26 26 28 74 2e 61 64 64 28 31 2c 22 64 22 29 2c 74 2e 5f 6e 65 78 74 44 61 79 3d 76 6f 69 64 20 30 29 2c 74 7d 28 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 74 2c 69 2c 72 29 7b 72 65 74 75 72 6e Data Ascii: t))return!1;return!0}(n)\|\|ut(n)&&0===n.length)&&(n=void 0),f._isAMomentObject=!0,f._useUTC=f._isUTC=u,f._l=i,f._i=n,f._f=t,f._strict=r,function(n){var t=new vi(hu(ve(n)));return t._nextDay&&(t.add(1,"d"),t._nextDay=void 0),t}(f)}function c(n,t,i,r){return
2023-07-21 16:51:06 UTC	10890	IN	Data Raw: 73 2c 72 29 2f 31 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 6f 6e 74 68 22 3a 75 3d 74 66 28 74 68 69 73 2c 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 71 75 61 72 74 65 72 22 3a 75 3d 74 66 28 74 68 69 73 2c 72 29 2f 33 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 63 6f 6e 64 22 3a 75 3d 28 74 68 69 73 2d 72 29 2f 31 65 33 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 69 6e 75 74 65 22 3a 75 3d 28 74 68 69 73 2d 72 29 2f 36 65 34 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 6f 75 72 22 3a 75 3d 28 74 68 69 73 2d 72 29 2f 33 36 65 35 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 61 79 22 3a 75 3d 28 74 68 69 73 2d 72 2d 66 29 2f 38 36 34 65 35 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 65 65 6b 22 3a 75 3d 28 74 68 69 73 2d 72 2d 66 29 2f 36 30 34 38 65 35 3b 62 72 65 61 6b 3b 64 65 Data Ascii: s,r)/12;break;case"month":u=tf(this,r);break;case"quarter":u=tf(this,r)/3;break;case"second":u=(this-r)/1e3;break;case"minute":u=(this-r)/6e4;break;case"hour":u=(this-r)/36e5;break;case"day":u=(this-r-f)/864e5;break;case"week":u=(this-r-f)/6048e5;break;de
2023-07-21 16:51:06 UTC	10906	IN	Data Raw: 6e 64 73 3d 6e 73 2c 65 2e 61 73 53 65 63 6f 6e 64 73 3d 72 73 2c 65 2e 61 73 4d 69 6e 75 74 65 73 3d 75 73 2c 65 2e 61 73 48 6f 75 72 73 3d 66 73 2c 65 2e 61 73 44 61 79 73 3d 65 73 2c 65 2e 61 73 57 65 65 6b 73 3d 6f 73 2c 65 2e 61 73 4d 6f 6e 74 68 73 3d 73 73 2c 65 2e 61 73 59 65 61 72 73 3d 76 73 2c 65 2e 76 61 6c 75 65 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 3f 74 68 69 73 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2b 38 36 34 65 35 2a 74 68 69 73 2e 5f 64 61 79 73 2b 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 25 31 32 2a 32 35 39 32 65 36 2b 33 31 35 33 36 65 36 2a 66 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 2f 31 32 29 3a 4e 61 4e 7d 2c 65 2e 5f 62 75 62 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: nds=ns,e.asSeconds=rs,e.asMinutes=us,e.asHours=fs,e.asDays=es,e.asWeeks=os,e.asMonths=ss,e.asYears=vs,e.valueOf=function(){return this.isValid()?this._milliseconds+864e5this._days+this._months%122592e6+31536e6*f(this._months/12):NaN},e._bubble=function(
2023-07-21 16:51:06 UTC	10923	IN	Data Raw: 29 29 3a 74 2e 5f 73 74 72 69 63 74 26 26 21 72 26 26 75 28 74 29 2e 75 6e 75 73 65 64 54 6f 6b 65 6e 73 2e 70 75 73 68 28 66 29 3b 75 28 74 29 2e 63 68 61 72 73 4c 65 66 74 4f 76 65 72 3d 63 2d 68 2c 69 2e 6c 65 6e 67 74 68 3e 30 26 26 75 28 74 29 2e 75 6e 75 73 65 64 49 6e 70 75 74 2e 70 75 73 68 28 69 29 2c 74 2e 5f 61 5b 76 5d 3c 3d 31 32 26 26 21 30 3d 3d 3d 75 28 74 29 2e 62 69 67 48 6f 75 72 26 26 74 2e 5f 61 5b 76 5d 3e 30 26 26 28 75 28 74 29 2e 62 69 67 48 6f 75 72 3d 76 6f 69 64 20 30 29 2c 75 28 74 29 2e 70 61 72 73 65 64 44 61 74 65 50 61 72 74 73 3d 74 2e 5f 61 2e 73 6c 69 63 65 28 30 29 2c 75 28 74 29 2e 6d 65 72 69 64 69 65 6d 3d 74 2e 5f 6d 65 72 69 64 69 65 6d 2c 74 2e 5f 61 5b 76 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 Data Ascii: )):t._strict&&!r&&u(t).unusedTokens.push(f);u(t).charsLeftOver=c-h,i.length>0&&u(t).unusedInput.push(i),t._a[v]<=12&&!0===u(t).bigHour&&t._a[v]>0&&(u(t).bigHour=void 0),u(t).parsedDateParts=t._a.slice(0),u(t).meridiem=t._meridiem,t._a[v]=function(n,t,i){v
2023-07-21 16:51:06 UTC	10939	IN	Data Raw: 79 79 22 3a 72 65 74 75 72 6e 20 72 2b 28 66 66 28 6e 29 3f 22 6c 61 74 61 22 3a 22 6c 61 74 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 72 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 22 20 22 3b 72 65 74 75 72 6e 28 6e 25 31 30 30 3e 3d 32 30 7c 7c 6e 3e 3d 31 30 30 26 26 6e 25 31 30 30 3d 3d 30 29 26 26 28 72 3d 22 20 64 65 20 22 29 2c 6e 2b 72 2b 7b 6d 6d 3a 22 6d 69 6e 75 74 65 22 2c 68 68 3a 22 6f 72 65 22 2c 64 64 3a 22 7a 69 6c 65 22 2c 4d 4d 3a 22 6c 75 6e 69 22 2c 79 79 3a 22 61 6e 69 22 7d 5b 69 5d 7d 66 75 6e 63 74 69 6f 6e 20 68 72 28 6e 2c 74 2c 69 29 7b 72 65 74 75 72 6e 22 6d 22 3d 3d 3d 69 3f 74 3f 22 5c 75 30 34 33 63 5c 75 30 34 33 38 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 34 32 5c 75 30 34 33 30 22 3a 22 5c 75 30 34 33 63 5c 75 30 Data Ascii: yy":return r+(ff(n)?"lata":"lat")}}function pr(n,t,i){var r=" ";return(n%100>=20\|\|n>=100&&n%100==0)&&(r=" de "),n+r+{mm:"minute",hh:"ore",dd:"zile",MM:"luni",yy:"ani"}[i]}function hr(n,t,i){return"m"===i?t?"\u043c\u0438\u043d\u0443\u0442\u0430":"\u043c\u0
2023-07-21 16:51:06 UTC	10955	IN	Data Raw: 75 6d 61 6e 69 7a 65 28 21 74 29 3a 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 65 28 29 7d 2c 74 2e 66 72 6f 6d 4e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 72 6f 6d 28 63 28 29 2c 6e 29 7d 2c 74 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 63 69 28 6e 29 26 26 6e 2e 69 73 56 61 6c 69 64 28 29 7c 7c 63 28 6e 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 73 74 28 7b 66 72 6f 6d 3a 74 68 69 73 2c 74 6f 3a 6e 7d 29 2e 6c 6f 63 61 6c 65 28 74 68 69 73 2e 6c 6f 63 61 6c 65 28 29 29 2e 68 75 6d 61 6e 69 7a 65 28 21 74 29 3a 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 Data Ascii: umanize(!t):this.localeData().invalidDate()},t.fromNow=function(n){return this.from(c(),n)},t.to=function(n,t){return this.isValid()&&(ci(n)&&n.isValid()\|\|c(n).isValid())?st({from:this,to:n}).locale(this.locale()).humanize(!t):this.localeData().invalidDat
2023-07-21 16:51:06 UTC	10971	IN	Data Raw: 65 63 6f 6e 64 73 3d 72 79 2c 65 2e 73 65 63 6f 6e 64 73 3d 69 79 2c 65 2e 6d 69 6e 75 74 65 73 3d 74 79 2c 65 2e 68 6f 75 72 73 3d 6e 79 2c 65 2e 64 61 79 73 3d 67 76 2c 65 2e 77 65 65 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 74 28 74 68 69 73 2e 64 61 79 73 28 29 2f 37 29 7d 2c 65 2e 6d 6f 6e 74 68 73 3d 64 76 2c 65 2e 79 65 61 72 73 3d 6b 76 2c 65 2e 68 75 6d 61 6e 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 65 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 73 Data Ascii: econds=ry,e.seconds=iy,e.minutes=ty,e.hours=ny,e.days=gv,e.weeks=function(){return nt(this.days()/7)},e.months=dv,e.years=kv,e.humanize=function(n){if(!this.isValid())return this.localeData().invalidDate();var t=this.localeData(),i=function(n,t,i){var r=s
2023-07-21 16:51:06 UTC	10987	IN	Data Raw: 75 30 36 32 31 5f 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 33 5c 75 30 36 33 31 5c 75 30 36 32 38 5c 75 30 36 33 39 5c 75 30 36 32 37 5c 75 30 36 32 31 5f 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 65 5c 75 30 36 34 35 5c 75 30 36 34 61 5c 75 30 36 33 33 5f 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 63 5c 75 30 36 34 35 5c 75 30 36 33 39 5c 75 30 36 32 39 5f 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 33 33 5c 75 30 36 32 38 5c 75 30 36 32 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3a 22 5c 75 30 36 32 33 5c 75 30 36 32 64 5c 75 30 36 32 66 5f 5c 75 30 36 32 35 5c 75 30 36 32 62 5c 75 30 36 34 36 5c 75 30 36 34 61 5c 75 30 36 34 36 5f 5c 75 30 36 32 62 5c 75 30 36 34 34 5c 75 30 36 32 37 Data Ascii: u0621_\u0627\u0644\u0623\u0631\u0628\u0639\u0627\u0621_\u0627\u0644\u062e\u0645\u064a\u0633_\u0627\u0644\u062c\u0645\u0639\u0629_\u0627\u0644\u0633\u0628\u062a".split("_"),weekdaysShort:"\u0623\u062d\u062f_\u0625\u062b\u0646\u064a\u0646_\u062b\u0644\u0627
2023-07-21 16:51:06 UTC	11003	IN	Data Raw: 34 31 5c 75 30 34 34 61 5c 75 30 34 33 31 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 4d 69 6e 3a 22 5c 75 30 34 33 64 5c 75 30 34 33 34 5f 5c 75 30 34 33 66 5c 75 30 34 33 64 5f 5c 75 30 34 33 32 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 34 30 5f 5c 75 30 34 34 37 5c 75 30 34 34 32 5f 5c 75 30 34 33 66 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 31 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 3a 7b 4c 54 3a 22 48 3a 6d 6d 22 2c 4c 54 53 3a 22 48 3a 6d 6d 3a 73 73 22 2c 4c 3a 22 44 2e 4d 4d 2e 59 59 59 59 22 2c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 20 48 3a 6d 6d 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 2c 20 44 20 4d 4d 4d 4d Data Ascii: 41\u044a\u0431".split("_"),weekdaysMin:"\u043d\u0434_\u043f\u043d_\u0432\u0442_\u0441\u0440_\u0447\u0442_\u043f\u0442_\u0441\u0431".split("_"),longDateFormat:{LT:"H:mm",LTS:"H:mm:ss",L:"D.MM.YYYY",LL:"D MMMM YYYY",LLL:"D MMMM YYYY H:mm",LLLL:"dddd, D MMMM
2023-07-21 16:51:06 UTC	11019	IN	Data Raw: 63 61 73 65 20 32 3a 72 65 74 75 72 6e 22 5b 76 5d 20 64 64 64 64 20 5b 76 5d 20 4c 54 22 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 22 5b 76 65 20 73 74 5c 75 30 31 35 39 65 64 75 20 76 5d 20 4c 54 22 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 22 5b 76 65 20 5c 75 30 31 30 64 74 76 72 74 65 6b 20 76 5d 20 4c 54 22 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 22 5b 76 20 70 5c 78 65 31 74 65 6b 20 76 5d 20 4c 54 22 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 22 5b 76 20 73 6f 62 6f 74 75 20 76 5d 20 4c 54 22 7d 7d 2c 6c 61 73 74 44 61 79 3a 22 5b 76 5c 75 30 31 30 64 65 72 61 20 76 5d 20 4c 54 22 2c 6c 61 73 74 57 65 65 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 77 69 74 63 68 28 74 68 69 73 2e 64 61 79 28 29 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 22 5b 6d Data Ascii: case 2:return"[v] dddd [v] LT";case 3:return"[ve st\u0159edu v] LT";case 4:return"[ve \u010dtvrtek v] LT";case 5:return"[v p\xe1tek v] LT";case 6:return"[v sobotu v] LT"}},lastDay:"[v\u010dera v] LT",lastWeek:function(){switch(this.day()){case 0:return"[m
2023-07-21 16:51:06 UTC	11035	IN	Data Raw: 74 3f 22 72 64 22 3a 22 74 68 22 29 7d 2c 77 65 65 6b 3a 7b 64 6f 77 3a 31 2c 64 6f 79 3a 34 7d 7d 29 2c 6e 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 6e 2d 63 61 22 2c 7b 6d 6f 6e 74 68 73 3a 22 4a 61 6e 75 61 72 79 5f 46 65 62 72 75 61 72 79 5f 4d 61 72 63 68 5f 41 70 72 69 6c 5f 4d 61 79 5f 4a 75 6e 65 5f 4a 75 6c 79 5f 41 75 67 75 73 74 5f 53 65 70 74 65 6d 62 65 72 5f 4f 63 74 6f 62 65 72 5f 4e 6f 76 65 6d 62 65 72 5f 44 65 63 65 6d 62 65 72 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 4a 61 6e 5f 46 65 62 5f 4d 61 72 5f 41 70 72 5f 4d 61 79 5f 4a 75 6e 5f 4a 75 6c 5f 41 75 67 5f 53 65 70 5f 4f 63 74 5f 4e 6f 76 5f 44 65 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 53 75 6e 64 61 79 5f Data Ascii: t?"rd":"th")},week:{dow:1,doy:4}}),n.defineLocale("en-ca",{months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),monthsShort:"Jan_Feb_Mar_Apr_May_Jun_Jul_Aug_Sep_Oct_Nov_Dec".split("_"),weekdays:"Sunday_
2023-07-21 16:51:06 UTC	11051	IN	Data Raw: 68 75 68 74 69 6b 75 75 5f 74 6f 75 6b 6f 6b 75 75 5f 6b 65 73 5c 78 65 34 6b 75 75 5f 68 65 69 6e 5c 78 65 34 6b 75 75 5f 65 6c 6f 6b 75 75 5f 73 79 79 73 6b 75 75 5f 6c 6f 6b 61 6b 75 75 5f 6d 61 72 72 61 73 6b 75 75 5f 6a 6f 75 6c 75 6b 75 75 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 74 61 6d 6d 69 5f 68 65 6c 6d 69 5f 6d 61 61 6c 69 73 5f 68 75 68 74 69 5f 74 6f 75 6b 6f 5f 6b 65 73 5c 78 65 34 5f 68 65 69 6e 5c 78 65 34 5f 65 6c 6f 5f 73 79 79 73 5f 6c 6f 6b 61 5f 6d 61 72 72 61 73 5f 6a 6f 75 6c 75 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 73 75 6e 6e 75 6e 74 61 69 5f 6d 61 61 6e 61 6e 74 61 69 5f 74 69 69 73 74 61 69 5f 6b 65 73 6b 69 76 69 69 6b 6b 6f 5f 74 6f 72 73 74 61 69 5f 70 65 Data Ascii: huhtikuu_toukokuu_kes\xe4kuu_hein\xe4kuu_elokuu_syyskuu_lokakuu_marraskuu_joulukuu".split("_"),monthsShort:"tammi_helmi_maalis_huhti_touko_kes\xe4_hein\xe4_elo_syys_loka_marras_joulu".split("_"),weekdays:"sunnuntai_maanantai_tiistai_keskiviikko_torstai_pe
2023-07-21 16:51:06 UTC	11067	IN	Data Raw: 75 30 35 64 64 22 3a 6e 2b 22 20 5c 75 30 35 64 37 5c 75 30 35 64 35 5c 75 30 35 64 33 5c 75 30 35 65 39 5c 75 30 35 64 39 5c 75 30 35 64 64 22 7d 2c 79 3a 22 5c 75 30 35 65 39 5c 75 30 35 65 30 5c 75 30 35 64 34 22 2c 79 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 32 3d 3d 3d 6e 3f 22 5c 75 30 35 65 39 5c 75 30 35 65 30 5c 75 30 35 65 61 5c 75 30 35 64 39 5c 75 30 35 64 39 5c 75 30 35 64 64 22 3a 6e 25 31 30 3d 3d 30 26 26 31 30 21 3d 3d 6e 3f 6e 2b 22 20 5c 75 30 35 65 39 5c 75 30 35 65 30 5c 75 30 35 64 34 22 3a 6e 2b 22 20 5c 75 30 35 65 39 5c 75 30 35 65 30 5c 75 30 35 64 39 5c 75 30 35 64 64 22 7d 7d 2c 6d 65 72 69 64 69 65 6d 50 61 72 73 65 3a 2f 5c 75 30 35 64 30 5c 75 30 35 64 37 5c 75 30 35 64 34 22 5c 75 30 35 65 36 7c 5c 75 Data Ascii: u05dd":n+" \u05d7\u05d5\u05d3\u05e9\u05d9\u05dd"},y:"\u05e9\u05e0\u05d4",yy:function(n){return 2===n?"\u05e9\u05e0\u05ea\u05d9\u05d9\u05dd":n%10==0&&10!==n?n+" \u05e9\u05e0\u05d4":n+" \u05e9\u05e0\u05d9\u05dd"}},meridiemParse:/\u05d0\u05d7\u05d4"\u05e6\|\u
2023-07-21 16:51:06 UTC	11083	IN	Data Raw: 69 6b 6f 20 70 75 6b 75 6c 5d 20 4c 54 22 2c 6e 65 78 74 44 61 79 3a 22 5b 4d 62 65 6e 6a 61 6e 67 20 70 75 6b 75 6c 5d 20 4c 54 22 2c 6e 65 78 74 57 65 65 6b 3a 22 64 64 64 64 20 5b 70 75 6b 75 6c 5d 20 4c 54 22 2c 6c 61 73 74 44 61 79 3a 22 5b 4b 61 6c 61 20 77 69 6e 67 69 20 70 75 6b 75 6c 5d 20 4c 54 22 2c 6c 61 73 74 57 65 65 6b 3a 22 64 64 64 64 20 5b 6b 65 70 65 6e 67 6b 65 72 20 70 75 6b 75 6c 5d 20 4c 54 22 2c 73 61 6d 65 45 6c 73 65 3a 22 4c 22 7d 2c 72 65 6c 61 74 69 76 65 54 69 6d 65 3a 7b 66 75 74 75 72 65 3a 22 77 6f 6e 74 65 6e 20 69 6e 67 20 25 73 22 2c 70 61 73 74 3a 22 25 73 20 69 6e 67 6b 61 6e 67 20 6b 65 70 65 6e 67 6b 65 72 22 2c 73 3a 22 73 61 77 65 74 61 77 69 73 20 64 65 74 69 6b 22 2c 6d 3a 22 73 65 74 75 6e 67 67 61 6c 20 6d 65 Data Ascii: iko pukul] LT",nextDay:"[Mbenjang pukul] LT",nextWeek:"dddd [pukul] LT",lastDay:"[Kala wingi pukul] LT",lastWeek:"dddd [kepengker pukul] LT",sameElse:"L"},relativeTime:{future:"wonten ing %s",past:"%s ingkang kepengker",s:"sawetawis detik",m:"setunggal me
2023-07-21 16:51:06 UTC	11099	IN	Data Raw: 34 34 65 5c 75 30 34 33 62 5c 75 30 34 34 63 5f Data Ascii: 44e\u043b\u044c_
2023-07-21 16:51:06 UTC	11099	IN	Data Raw: 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 64 5c 75 30 34 34 32 5c 75 30 34 34 66 5c 75 30 34 33 31 5c 75 30 34 34 30 5c 75 30 34 34 63 5f 5c 75 30 34 33 65 5c 75 30 34 33 61 5c 75 30 34 34 32 5c 75 30 34 34 66 5c 75 30 34 33 31 5c 75 30 34 34 30 5c 75 30 34 34 63 5f 5c 75 30 34 33 64 5c 75 30 34 33 65 5c 75 30 34 34 66 5c 75 30 34 33 31 5c 75 30 34 34 30 5c 75 30 34 34 63 5f 5c 75 30 34 33 34 5c 75 30 34 33 35 5c 75 30 34 33 61 5c 75 30 34 33 30 5c 75 30 34 33 31 5c 75 30 34 34 30 5c 75 30 34 34 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 34 66 5c 75 30 34 33 64 5c 75 30 34 33 32 5f 5c 75 Data Ascii: \u0430\u0432\u0433\u0443\u0441\u0442_\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c_\u043e\u043a\u0442\u044f\u0431\u0440\u044c_\u043d\u043e\u044f\u0431\u0440\u044c_\u0434\u0435\u043a\u0430\u0431\u0440\u044c".split("_"),monthsShort:"\u044f\u043d\u0432_\u
2023-07-21 16:51:06 UTC	11115	IN	Data Raw: 75 30 64 33 66 5f 5c 75 30 64 32 62 5c 75 30 64 34 36 5c 75 30 64 32 63 5c 75 30 64 34 64 5c 75 30 64 33 30 5c 75 30 64 34 31 5c 75 30 64 33 35 5c 75 30 64 33 30 5c 75 30 64 33 66 5f 5c 75 30 64 32 65 5c 75 30 64 33 65 5c 75 30 64 37 63 5c 75 30 64 31 61 5c 75 30 64 34 64 5c 75 30 64 31 61 5c 75 30 64 34 64 5f 5c 75 30 64 30 66 5c 75 30 64 32 61 5c 75 30 64 34 64 5c 75 30 64 33 30 5c 75 30 64 33 66 5c 75 30 64 37 64 5f 5c 75 30 64 32 65 5c 75 30 64 34 37 5c 75 30 64 32 66 5c 75 30 64 34 64 5f 5c 75 30 64 31 63 5c 75 30 64 34 32 5c 75 30 64 37 61 5f 5c 75 30 64 31 63 5c 75 30 64 34 32 5c 75 30 64 33 32 5c 75 30 64 34 38 5f 5c 75 30 64 31 33 5c 75 30 64 31 37 5c 75 30 64 33 38 5c 75 30 64 34 64 5c 75 30 64 33 31 5c 75 30 64 34 64 5c 75 30 64 33 31 5c 75 30 Data Ascii: u0d3f_\u0d2b\u0d46\u0d2c\u0d4d\u0d30\u0d41\u0d35\u0d30\u0d3f_\u0d2e\u0d3e\u0d7c\u0d1a\u0d4d\u0d1a\u0d4d_\u0d0f\u0d2a\u0d4d\u0d30\u0d3f\u0d7d_\u0d2e\u0d47\u0d2f\u0d4d_\u0d1c\u0d42\u0d7a_\u0d1c\u0d42\u0d32\u0d48_\u0d13\u0d17\u0d38\u0d4d\u0d31\u0d4d\u0d31\u0
2023-07-21 16:51:06 UTC	11131	IN	Data Raw: 22 5c 75 30 39 30 66 5c 75 30 39 31 35 20 5c 75 30 39 32 36 5c 75 30 39 33 66 5c 75 30 39 32 38 22 2c 64 64 3a 22 25 64 20 5c 75 30 39 32 36 5c 75 30 39 33 66 5c 75 30 39 32 38 22 2c 4d 3a 22 5c 75 30 39 30 66 5c 75 30 39 31 35 20 5c 75 30 39 32 65 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 32 38 5c 75 30 39 33 65 22 2c 4d 4d 3a 22 25 64 20 5c 75 30 39 32 65 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 32 38 5c 75 30 39 33 65 22 2c 79 3a 22 5c 75 30 39 30 66 5c 75 30 39 31 35 20 5c 75 30 39 32 63 5c 75 30 39 33 30 5c 75 30 39 34 64 5c 75 30 39 33 37 22 2c 79 79 3a 22 25 64 20 5c 75 30 39 32 63 5c 75 30 39 33 30 5c 75 30 39 34 64 5c 75 30 39 33 37 22 7d 2c 77 65 65 6b 3a 7b 64 6f 77 3a 30 2c 64 6f 79 3a 36 7d 7d 29 3b 76 61 72 20 79 68 3d 22 6a 61 Data Ascii: "\u090f\u0915 \u0926\u093f\u0928",dd:"%d \u0926\u093f\u0928",M:"\u090f\u0915 \u092e\u0939\u093f\u0928\u093e",MM:"%d \u092e\u0939\u093f\u0928\u093e",y:"\u090f\u0915 \u092c\u0930\u094d\u0937",yy:"%d \u092c\u0930\u094d\u0937"},week:{dow:0,doy:6}});var yh="ja
2023-07-21 16:51:06 UTC	11147	IN	Data Raw: 5d 7c 5c 75 30 34 33 38 5c 75 30 34 34 65 5c 75 30 34 33 64 5b 5c 75 30 34 34 63 5c 75 30 34 34 66 5d 7c 5c 75 30 34 33 38 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 2e 3f 7c 5c 75 30 34 33 38 5c 75 30 34 34 65 5c 75 30 34 33 62 5b 5c 75 30 34 34 63 5c 75 30 34 34 66 5d 7c 5c 75 30 34 33 38 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 2e 3f 7c 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5c 75 30 34 33 30 3f 7c 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 2e 3f 7c 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 64 5c 75 30 34 34 32 5c 75 30 34 34 66 5c 75 30 34 33 31 5c 75 30 34 34 30 5b 5c 75 30 34 34 63 5c 75 30 34 34 66 5d 7c 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 64 5c 75 Data Ascii: ]\|\u0438\u044e\u043d[\u044c\u044f]\|\u0438\u044e\u043d\.?\|\u0438\u044e\u043b[\u044c\u044f]\|\u0438\u044e\u043b\.?\|\u0430\u0432\u0433\u0443\u0441\u0442\u0430?\|\u0430\u0432\u0433\.?\|\u0441\u0435\u043d\u0442\u044f\u0431\u0440[\u044c\u044f]\|\u0441\u0435\u043d\u
2023-07-21 16:51:06 UTC	11163	IN	Data Raw: 33 5c 75 30 34 33 31 2e 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 4d 69 6e 3a 22 5c 75 30 34 33 64 5c 75 30 34 33 35 5f 5c 75 30 34 33 66 5c 75 30 34 33 65 5f 5c 75 30 34 34 33 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 34 30 5f 5c 75 30 34 34 37 5c 75 30 34 33 35 5f 5c 75 30 34 33 66 5c 75 30 34 33 35 5f 5c 75 30 34 34 31 5c 75 30 34 34 33 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 50 61 72 73 65 45 78 61 63 74 3a 21 30 2c 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 3a 7b 4c 54 3a 22 48 3a 6d 6d 22 2c 4c 54 53 3a 22 48 3a 6d 6d 3a 73 73 22 2c 4c 3a 22 44 44 2e 4d 4d 2e 59 59 59 59 22 2c 4c 4c 3a 22 44 2e 20 4d 4d 4d 4d 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 44 2e 20 4d 4d 4d 4d 20 59 59 59 59 20 48 3a 6d 6d 22 Data Ascii: 3\u0431.".split("_"),weekdaysMin:"\u043d\u0435_\u043f\u043e_\u0443\u0442_\u0441\u0440_\u0447\u0435_\u043f\u0435_\u0441\u0443".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"H:mm",LTS:"H:mm:ss",L:"DD.MM.YYYY",LL:"D. MMMM YYYY",LLL:"D. MMMM YYYY H:mm"
2023-07-21 16:51:06 UTC	11179	IN	Data Raw: 38 5c 75 30 65 33 34 5c 75 30 65 30 31 5c 75 30 65 33 32 5c 75 30 65 32 32 5c 75 30 65 31 39 5f 5c 75 30 65 31 38 5c 75 30 65 33 31 5c 75 30 65 31 39 5c 75 30 65 32 37 5c 75 30 65 33 32 5c 75 30 65 30 34 5c 75 30 65 32 31 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 65 32 31 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 30 31 2e 5c 75 30 65 31 65 2e 5f 5c 75 30 65 32 31 5c 75 30 65 33 35 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 34 30 5c 75 30 65 32 31 2e 5c 75 30 65 32 32 2e 5f 5c 75 30 65 31 65 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 32 31 5c 75 30 65 33 34 2e 5c 75 30 65 32 32 2e 5f 5c 75 30 65 30 31 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 32 61 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 30 31 2e 5c 75 30 65 32 32 2e 5f 5c 75 Data Ascii: 8\u0e34\u0e01\u0e32\u0e22\u0e19_\u0e18\u0e31\u0e19\u0e27\u0e32\u0e04\u0e21".split("_"),monthsShort:"\u0e21.\u0e04._\u0e01.\u0e1e._\u0e21\u0e35.\u0e04._\u0e40\u0e21.\u0e22._\u0e1e.\u0e04._\u0e21\u0e34.\u0e22._\u0e01.\u0e04._\u0e2a.\u0e04._\u0e01.\u0e22._\u
2023-07-21 16:51:06 UTC	11195	IN	Data Raw: 30 36 32 61 5c 75 30 36 63 31 22 5d 2c 6e 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 75 72 22 2c 7b 6d 6f 6e 74 68 73 3a 75 65 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 75 65 2c 77 65 65 6b 64 61 79 73 3a 79 66 2c 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3a 79 66 2c 77 65 65 6b 64 61 79 73 4d 69 6e 3a 79 66 2c 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 3a 7b 4c 54 3a 22 48 48 3a 6d 6d 22 2c 4c 54 53 3a 22 48 48 3a 6d 6d 3a 73 73 22 2c 4c 3a 22 44 44 2f 4d 4d 2f 59 59 59 59 22 2c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 20 48 48 3a 6d 6d 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 5c 75 30 36 30 63 20 44 20 4d 4d 4d 4d 20 59 59 59 59 20 48 48 3a 6d 6d 22 7d 2c 6d 65 72 69 64 69 65 6d 50 61 72 73 65 3a 2f 5c 75 Data Ascii: 062a\u06c1"],n.defineLocale("ur",{months:ue,monthsShort:ue,weekdays:yf,weekdaysShort:yf,weekdaysMin:yf,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"DD/MM/YYYY",LL:"D MMMM YYYY",LLL:"D MMMM YYYY HH:mm",LLLL:"dddd\u060c D MMMM YYYY HH:mm"},meridiemParse:/\u
2023-07-21 16:51:06 UTC	11211	IN	Data Raw: 72 6e 20 6e 28 74 29 2e 66 6f 72 6d 61 74 28 69 29 7d 7d 5d 29 2c 74 2e 6d 6f 64 75 6c 65 28 22 67 64 69 32 32 39 30 2e 61 6d 54 69 6d 65 41 67 6f 22 29 2e 64 69 72 65 63 74 69 76 65 28 22 61 6d 54 69 6d 65 41 67 6f 22 2c 5b 22 24 6d 6f 6d 65 6e 74 22 2c 22 24 74 69 6d 65 6f 75 74 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 6e 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 22 22 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 2c 66 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 73 26 26 28 69 2e 63 61 6e 63 65 6c 28 73 29 2c 73 3d 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 76 61 72 20 72 2c 75 3b 66 2e Data Ascii: rn n(t).format(i)}}]),t.module("gdi2290.amTimeAgo").directive("amTimeAgo",["$moment","$timeout",function(n,i){function r(n){return typeof n=="undefined"\|\|n===null\|\|n===""}return function(u,f,e){function c(){s&&(i.cancel(s),s=null)}function l(t){var r,u;f.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
244	192.168.2.5	50098	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	9977	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:06 UTC	12538	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:06 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: a26fe5b9-401e-0053-45f3-bb2946000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165106Z-6q8sav9qth1ef6rk86z4kpnq7800000004u0000000004454 X-Cache: TCP_MISS Accept-Ranges: bytes
2023-07-21 16:51:06 UTC	12539	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
245	192.168.2.5	50103	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	10285	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminbootstrap.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	10857	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42104 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:13:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1220240404916911060911053652744216535410"}],"include_subdomains ":true} Server: ECAcc (muc/334D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f4262fa5-d01e-0070-3091-bb7336000000 Content-Length: 539647 Connection: close
2023-07-21 16:51:06 UTC	10858	IN	Data Raw: 76 61 72 20 41 64 6d 69 6e 41 70 70 2c 41 64 6d 69 6e 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 3b 6e 2e 61 70 70 3d 41 64 6d 69 6e 41 70 70 3d 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 41 64 6d 69 6e 53 50 41 22 2c 5b 22 6e 67 52 6f 75 74 65 22 2c 22 6e 67 41 6e 69 6d 61 74 65 22 2c 22 6e 67 43 6f 6f 6b 69 65 73 22 2c 22 75 69 2e 62 6f 6f 74 73 74 72 61 70 22 2c 22 75 69 2e 72 6f 75 74 65 72 22 2c 22 6e 67 53 61 6e 69 74 69 7a 65 22 2c 22 6e 67 52 65 73 6f 75 72 63 65 22 2c 22 61 6e 67 75 6c 61 72 2d 74 6f 75 72 22 2c 22 6b 65 6e 64 6f 2e 64 69 72 65 63 74 69 76 65 73 22 2c 22 6e 67 4d 65 73 73 61 67 65 73 22 2c 22 6d 67 6f 2d 61 6e 67 75 6c 61 72 2d 77 69 7a 61 72 64 22 2c 22 6e 67 41 72 69 61 22 2c 22 6e 67 Data Ascii: var AdminApp,Admin;(function(n){'use strict';;n.app=AdminApp=angular.module("AdminSPA",["ngRoute","ngAnimate","ngCookies","ui.bootstrap","ui.router","ngSanitize","ngResource","angular-tour","kendo.directives","ngMessages","mgo-angular-wizard","ngAria","ng
2023-07-21 16:51:06 UTC	10874	IN	Data Raw: 27 Data Ascii: '
2023-07-21 16:51:06 UTC	10874	IN	Data Raw: 2c 27 43 6f 6e 74 61 63 74 27 2c 27 67 75 65 73 74 75 73 65 72 73 27 2c 27 52 65 73 6f 75 72 63 65 4d 61 69 6c 62 6f 78 27 2c 27 62 69 6c 6c 69 6e 67 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 27 2c 27 69 6e 74 75 6e 65 70 6f 6c 69 63 69 65 73 27 2c 27 74 65 61 6d 73 75 73 65 72 73 65 74 74 69 6e 67 73 27 2c 27 61 76 61 69 6c 61 62 69 6c 69 74 79 27 2c 27 6c 69 63 65 6e 73 65 73 27 2c 27 4c 69 63 65 6e 73 65 4d 61 6e 61 67 65 6d 65 6e 74 55 6e 69 74 73 27 2c 27 45 6d 61 69 6c 4d 69 67 72 61 74 69 6f 6e 27 2c 27 62 69 6c 6c 6f 76 65 72 76 69 65 77 27 2c 27 62 69 6c 6c 69 6e 67 70 72 6f 66 69 6c 65 27 2c 27 70 61 72 74 6e 65 72 73 27 2c 27 4d 65 73 73 61 67 65 43 65 6e 74 65 72 27 2c 27 6d 65 73 73 61 67 65 63 65 6e 74 65 72 27 2c 27 4d 69 63 72 6f 73 6f 66 74 Data Ascii: ,'Contact','guestusers','ResourceMailbox','billingNotifications','intunepolicies','teamsusersettings','availability','licenses','LicenseManagementUnits','EmailMigration','billoverview','billingprofile','partners','MessageCenter','messagecenter','Microsoft
2023-07-21 16:51:06 UTC	11212	IN	Data Raw: 6e 27 2c 72 65 61 63 74 4f 6e 6c 79 3a 21 30 7d 7d 2c 7b 6e 61 6d 65 3a 22 42 75 79 44 6f 6d 61 69 6e 57 69 7a 61 72 64 22 2c 63 6f 6e 66 69 67 3a 7b 75 72 6c 3a 22 2f 44 6f 6d 61 69 6e 73 2f 42 75 79 22 2c 74 69 74 6c 65 3a 27 42 75 79 20 64 6f 6d 61 69 6e 27 2c 72 65 61 63 74 4f 6e 6c 79 3a 21 30 7d 7d 2c 7b 6e 61 6d 65 3a 22 44 6f 6d 61 69 6e 44 65 74 61 69 6c 73 22 2c 63 6f 6e 66 69 67 3a 7b 75 72 6c 3a 22 2f 44 6f 6d 61 69 6e 73 2f 44 65 74 61 69 6c 73 22 2c 74 69 74 6c 65 3a 27 44 6f 6d 61 69 6e 20 64 65 74 61 69 6c 73 27 2c 72 65 61 63 74 4f 6e 6c 79 3a 21 30 7d 7d 2c 7b 6e 61 6d 65 3a 22 53 70 65 63 69 61 6c 4f 66 66 65 72 57 69 7a 61 72 64 22 2c 63 6f 6e 66 69 67 3a 7b 75 72 6c 3a 22 2f 44 6f 6d 61 69 6e 73 2f 53 4f 57 69 7a 61 72 64 22 2c 74 69 Data Ascii: n',reactOnly:!0}},{name:"BuyDomainWizard",config:{url:"/Domains/Buy",title:'Buy domain',reactOnly:!0}},{name:"DomainDetails",config:{url:"/Domains/Details",title:'Domain details',reactOnly:!0}},{name:"SpecialOfferWizard",config:{url:"/Domains/SOWizard",ti
2023-07-21 16:51:06 UTC	11228	IN	Data Raw: 69 72 73 74 56 69 73 69 74 22 2c 74 29 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 53 68 61 72 65 64 2e 53 65 74 48 74 6d 6c 35 53 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 28 22 49 73 46 69 72 73 74 56 69 73 69 74 22 2c 22 31 22 29 29 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 49 6e 73 69 67 68 74 73 2e 4c 6f 67 45 76 65 6e 74 41 6e 64 50 61 72 61 6d 73 28 6e 2c 74 29 7d 7d 63 61 74 63 68 28 72 29 7b 7d 7d 2c 74 68 69 73 2e 4c 6f 67 50 61 67 65 52 65 61 64 79 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 26 26 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 49 6e 73 69 67 68 74 73 2e 4c 6f 67 45 76 65 6e 74 28 6e 29 7d 2c 74 68 69 73 2e 4c 6f 67 50 61 67 65 52 Data Ascii: irstVisit",t),Microsoft.Online.BOX.JS.Shared.SetHtml5SessionStorage("IsFirstVisit","1")),Microsoft.Online.BOX.JS.Insights.LogEventAndParams(n,t)}}catch(r){}},this.LogPageReadyEvent=function(n){n&&Microsoft.Online.BOX.JS.Insights.LogEvent(n)},this.LogPageR
2023-07-21 16:51:06 UTC	11244	IN	Data Raw: 61 70 70 69 6e 67 2e 44 69 72 53 79 6e 63 4f 62 6a 65 63 74 45 72 72 6f 72 73 3d 7b 43 6c 69 63 6b 41 63 74 69 6f 6e 3a 7b 61 63 74 69 6f 6e 3a 22 64 69 72 73 79 6e 63 6f 62 6a 65 63 74 65 72 72 6f 72 73 22 2c 57 69 6e 64 6f 77 54 79 70 65 3a 22 70 61 67 65 22 7d 2c 46 65 61 74 75 72 65 49 64 3a 22 44 69 72 53 79 6e 63 4f 62 6a 65 63 74 45 72 72 6f 72 73 22 2c 53 65 61 72 63 68 52 65 73 75 6c 74 43 61 74 65 67 6f 72 79 3a 22 4e 61 76 69 67 61 74 69 6f 6e 22 2c 74 67 74 3a 22 64 69 72 73 79 6e 63 6f 62 6a 65 63 74 65 72 72 6f 72 73 22 7d 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4f 7a 44 61 74 61 4d 61 70 70 69 6e 67 2e 53 75 62 73 63 72 69 70 74 69 6f 6e 73 3d 7b 43 6c 69 63 6b 41 63 74 69 6f 6e 3a 7b 61 63 74 69 6f 6e 3a 22 73 75 62 73 63 72 69 70 74 69 6f Data Ascii: apping.DirSyncObjectErrors={ClickAction:{action:"dirsyncobjecterrors",WindowType:"page"},FeatureId:"DirSyncObjectErrors",SearchResultCategory:"Navigation",tgt:"dirsyncobjecterrors"},ModernSearchOzDataMapping.Subscriptions={ClickAction:{action:"subscriptio
2023-07-21 16:51:06 UTC	11261	IN	Data Raw: 61 4d 61 70 70 69 6e 67 2e 41 44 46 53 44 65 70 6c 6f 79 6d 65 6e 74 41 64 76 69 73 6f 72 3d 7b 43 6c 69 63 6b 41 63 74 69 6f 6e 3a 7b 61 63 74 69 6f 6e 3a 22 41 44 46 53 44 65 70 6c 6f 79 6d 65 6e 74 41 64 76 69 73 6f 72 4c 69 6e 6b 22 2c 57 69 6e 64 6f 77 54 79 70 65 3a 22 55 52 4c 22 7d 2c 46 65 61 74 75 72 65 49 64 3a 22 4d 6f 64 65 72 6e 53 65 61 72 63 68 22 2c 53 65 61 72 63 68 52 65 73 75 6c 74 43 61 74 65 67 6f 72 79 3a 22 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 7d 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4f 7a 44 61 74 61 4d 61 70 70 69 6e 67 2e 4d 69 63 72 6f 73 6f 66 74 44 65 66 65 6e 64 65 72 41 64 76 61 6e 63 65 64 54 68 72 65 61 74 50 72 6f 74 65 63 74 69 6f 6e 41 64 76 69 73 6f 72 3d 7b 43 6c 69 63 6b 41 63 74 69 6f 6e 3a 7b 61 63 74 69 6f Data Ascii: aMapping.ADFSDeploymentAdvisor={ClickAction:{action:"ADFSDeploymentAdvisorLink",WindowType:"URL"},FeatureId:"ModernSearch",SearchResultCategory:"Documentation"},ModernSearchOzDataMapping.MicrosoftDefenderAdvancedThreatProtectionAdvisor={ClickAction:{actio
2023-07-21 16:51:06 UTC	11277	IN	Data Raw: 46 6c 61 76 6f 72 24 70 24 30 3d 6e 65 77 20 41 72 72 61 79 28 74 68 69 73 2e 67 65 74 5f 65 6e 75 6d 54 79 70 65 43 6f 75 6e 74 28 29 29 2c 74 68 69 73 2e 5f 6d 5f 65 6e 75 6d 54 79 70 65 4d 65 6d 62 65 72 4e 61 6d 65 73 24 70 24 30 3d 6e 65 77 20 41 72 72 61 79 28 74 68 69 73 2e 67 65 74 5f 65 6e 75 6d 54 79 70 65 43 6f 75 6e 74 28 29 29 2c 65 3d 30 3b 65 3c 74 68 69 73 2e 67 65 74 5f 65 6e 75 6d 54 79 70 65 43 6f 75 6e 74 28 29 3b 2b 2b 65 29 66 6f 72 28 74 68 69 73 2e 5f 6d 5f 65 6e 75 6d 54 79 70 65 4e 61 6d 65 73 24 70 24 30 5b 65 5d 3d 74 2e 67 65 74 53 74 72 69 6e 67 28 6e 2e 67 65 74 5f 69 74 65 6d 28 69 29 29 2c 2b 2b 69 2c 74 68 69 73 2e 5f 6d 5f 65 6e 75 6d 54 79 70 65 46 6c 61 76 6f 72 24 70 24 30 5b 65 5d 3d 6e 2e 67 65 74 5f 69 74 65 6d 28 Data Ascii: Flavor$p$0=new Array(this.get_enumTypeCount()),this._m_enumTypeMemberNames$p$0=new Array(this.get_enumTypeCount()),e=0;e<this.get_enumTypeCount();++e)for(this._m_enumTypeNames$p$0[e]=t.getString(n.get_item(i)),++i,this._m_enumTypeFlavor$p$0[e]=n.get_item(
2023-07-21 16:51:06 UTC	11293	IN	Data Raw: 28 29 7b 72 65 74 Data Ascii: (){ret
2023-07-21 16:51:06 UTC	11293	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 54 6f 53 74 72 69 6e 67 28 29 7d 2c 5f 6d 5f 61 6e 6e 6f 74 61 74 69 6f 6e 73 24 70 24 30 3a 6e 75 6c 6c 2c 5f 6d 5f 61 74 74 72 56 61 6c 75 65 50 61 69 72 73 24 70 24 30 3a 6e 75 6c 6c 7d 2c 4e 4c 52 54 2e 5f 66 65 61 74 75 72 65 42 75 6e 64 6c 65 2e 5f 61 74 74 72 56 61 6c 75 65 50 61 69 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 68 69 73 2e 73 65 74 5f 61 74 74 72 49 64 28 6e 29 2c 74 68 69 73 2e 73 65 74 5f 76 61 6c 75 65 28 74 29 7d 2c 4e 4c 52 54 2e 5f 66 65 61 74 75 72 65 42 75 6e 64 6c 65 2e 5f 61 74 74 72 56 61 6c 75 65 50 61 69 72 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 24 24 70 66 5f 41 74 74 72 49 64 24 70 24 30 3a 30 2c 67 65 74 5f 61 74 74 72 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: urn this.valueToString()},_m_annotations$p$0:null,_m_attrValuePairs$p$0:null},NLRT._featureBundle._attrValuePair=function(n,t){this.set_attrId(n),this.set_value(t)},NLRT._featureBundle._attrValuePair.prototype={_$$pf_AttrId$p$0:0,get_attrId:function(){ret
2023-07-21 16:51:06 UTC	11309	IN	Data Raw: 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 49 6e 69 74 28 69 2c 74 29 2c 30 29 3b 63 61 73 65 20 4e 4c 52 54 2e 5f 66 69 6c 74 65 72 46 61 63 74 6f 72 79 2e 5f 63 5f 53 74 72 69 6e 67 5f 51 75 65 72 79 5f 43 6f 6e 74 61 69 6e 73 24 70 3a 72 65 74 75 72 6e 20 6e 65 77 20 4e 4c 52 54 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 28 6e 65 77 20 4e 4c 52 54 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 49 6e 69 74 28 69 2c 74 29 2c 4e 4c 52 54 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 43 6f 6d 70 61 72 69 73 6f 6e 54 79 70 65 2e 63 6f 6e 74 61 69 6e 73 29 3b 63 61 73 65 20 4e 4c 52 54 2e 5f 66 69 6c 74 65 72 46 61 63 74 6f 72 79 2e 5f 63 5f 53 74 72 69 6e 67 5f 51 75 65 72 79 5f 53 74 61 72 74 73 57 69 74 68 Data Ascii: ._queryStringFilterInit(i,t),0);case NLRT._filterFactory._c_String_Query_Contains$p:return new NLRT._queryStringFilter(new NLRT._queryStringFilterInit(i,t),NLRT._queryStringFilterComparisonType.contains);case NLRT._filterFactory._c_String_Query_StartsWith
2023-07-21 16:51:06 UTC	11325	IN	Data Raw: 62 6c 65 49 64 5f 53 74 61 72 74 49 6e 64 65 78 28 29 3f 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 72 61 77 42 79 74 65 73 28 29 2e 72 65 61 64 49 6e 74 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 74 72 69 65 49 64 32 53 74 72 69 6e 67 54 61 62 6c 65 49 64 5f 53 74 61 72 74 49 6e 64 65 78 28 29 2b 69 2e 74 72 69 65 49 64 2a 34 2c 34 29 3a 69 2e 74 72 69 65 49 64 7d 2c 5f 67 65 74 53 74 72 69 6e 67 46 72 6f 6d 54 72 69 65 24 70 24 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 74 72 69 65 49 64 32 53 74 72 69 6e 67 54 61 62 6c 65 49 64 5f 53 74 61 72 74 49 6e 64 65 78 28 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 5f 6d 5f 69 Data Ascii: bleId_StartIndex()?this._m_init$p$0.get_rawBytes().readInt(this._m_init$p$0.get_trieId2StringTableId_StartIndex()+i.trieId*4,4):i.trieId},_getStringFromTrie$p$0:function(n){if(this._m_init$p$0.get_trieId2StringTableId_StartIndex()){for(var t=0;t<this._m_i
2023-07-21 16:51:06 UTC	11341	IN	Data Raw: 24 24 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 22 5f 72 65 61 64 4f 6e 6c 79 4c 69 73 74 24 31 24 22 2b 6e 2e 67 65 74 4e 61 6d 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 27 5f 27 29 2c 74 2c 65 2c 75 2c 66 2c 72 3b 69 66 28 21 4e 4c 52 54 5b 69 5d 29 7b 74 3d 4e 4c 52 54 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 4e 4c 52 54 2e 5f 72 65 61 64 4f 6e 6c 79 4c 69 73 74 24 31 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 2c 74 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 27 4e 4c 52 54 2e 27 2b 69 2c 6e 75 6c 6c 2c 4e 4c 52 54 2e 5f 69 52 65 61 64 4f 6e 6c 79 Data Ascii: $$=function(n){var i="_readOnlyList$1$"+n.getName().replace(/\./g,'_'),t,e,u,f,r;if(!NLRT[i]){t=NLRT[i]=function(){for(var t=[],n=0;n<arguments.length;++n)t[n]=arguments[n];NLRT._readOnlyList$1.apply(this,t)},t.registerClass('NLRT.'+i,null,NLRT._iReadOnly
2023-07-21 16:51:06 UTC	11357	IN	Data Raw: 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 2e 69 6e 76 61 6c 69 64 4f 70 65 72 61 74 69 6f 6e 28 27 52 56 61 6c 75 65 20 6c 69 73 74 20 6c 65 6e 67 74 68 20 6d 69 73 6d 61 74 63 68 20 69 6e 20 46 69 65 6c 64 20 71 75 65 72 79 20 73 74 65 70 20 73 74 6f 72 65 27 29 3b 66 6f 72 28 66 3d 30 2c 62 3d 65 2e 67 65 74 5f 69 74 65 6d 73 28 29 2e 6c 65 6e 67 74 68 3b 66 3c 62 3b 2b 2b 66 29 75 3d 65 2e 67 65 74 5f 69 74 65 6d 73 28 29 5b 66 5d 2c 75 2e 67 65 74 5f 69 73 52 65 61 64 4f 6e 6c 79 28 29 26 26 28 75 3d 75 2e 63 6c 6f 6e 65 28 29 2c 65 2e 67 65 74 5f 69 74 65 6d 73 28 29 5b 66 5d 3d 75 29 2c 75 2e 73 65 74 46 69 65 6c 64 56 61 6c 75 65 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 31 2e 67 65 74 5f 66 69 65 6c 64 49 6e 64 65 78 28 29 2c 6c 2e Data Ascii: ength)throw Error.invalidOperation('RValue list length mismatch in Field query step store');for(f=0,b=e.get_items().length;f<b;++f)u=e.get_items()[f],u.get_isReadOnly()&&(u=u.clone(),e.get_items()[f]=u),u.setFieldValue(this._m_init$p$1.get_fieldIndex(),l.
2023-07-21 16:51:06 UTC	11406	IN	Data Raw: 72 2c 75 2c 66 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 53 74 61 72 74 49 6e 64 65 78 41 6e 64 4c 65 6e 67 74 68 24 70 24 31 28 6e 2c 74 2c 75 3d 7b 76 61 6c 3a 69 7d 2c 66 3d 7b 76 61 6c 3a 72 7d 29 2c 69 3d 75 2e 76 61 6c 2c 72 3d 66 2e 76 61 6c 2c 6e 2e 73 75 62 73 74 72 69 6e 67 28 69 2c 72 29 7d 2c 5f 67 65 74 53 74 61 72 74 49 6e 64 65 78 41 6e 64 4c 65 6e 67 74 68 24 70 24 31 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 69 66 28 69 2e 76 61 6c 3d 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 31 2e 67 65 74 5f 73 74 61 72 74 51 75 65 72 79 28 29 2e 6c 6f 61 64 49 6e 74 65 72 6e 61 6c 28 6e 2c 74 29 2c 69 2e 76 61 6c 3c 30 29 74 68 72 6f 77 20 45 72 72 6f 72 2e 69 6e 76 61 6c 69 64 4f 70 65 72 61 74 69 6f 6e 28 27 49 6e 76 61 6c Data Ascii: r,u,f;return this._getStartIndexAndLength$p$1(n,t,u={val:i},f={val:r}),i=u.val,r=f.val,n.substring(i,r)},_getStartIndexAndLength$p$1:function(n,t,i,r){if(i.val=this._m_init$p$1.get_startQuery().loadInternal(n,t),i.val<0)throw Error.invalidOperation('Inval
2023-07-21 16:51:06 UTC	11422	IN	Data Raw: 5f 69 74 65 6d 73 28 29 2c 65 3d 75 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 69 3c 65 3b 2b 2b 69 29 66 3d 75 5b 69 5d 2c 66 2e 72 65 6d 6f 76 65 41 6e 6e 6f 74 61 74 69 6f 6e 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 61 74 74 72 69 62 75 74 65 49 44 28 29 29 7d 2c 5f 6d 5f 69 6e 69 74 24 70 24 30 3a 6e 75 6c 6c 7d 2c 4e 4c 52 54 2e 5f 6e 65 77 41 6e 6e 6f 74 61 74 69 6f 6e 53 63 72 69 70 74 43 6f 6d 6d 61 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 4e 4c 52 54 2e 5f 76 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 2e 74 68 72 6f 77 49 66 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 28 6e 2c 27 69 6e 69 74 27 29 2c 4e 4c 52 54 2e 5f 76 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 2e 74 68 72 6f 77 49 66 4e 75 6c 6c 28 6e 2e 67 65 74 5f 61 6e 6e 6f 74 Data Ascii: _items(),e=u.length,i=0;i<e;++i)f=u[i],f.removeAnnotation(this._m_init$p$0.get_attributeID())},_m_init$p$0:null},NLRT._newAnnotationScriptCommand=function(n){NLRT._validationUtils.throwIfArgumentNull(n,'init'),NLRT._validationUtils.throwIfNull(n.get_annot
2023-07-21 16:51:06 UTC	11438	IN	Data Raw: 66 5f 53 72 65 24 70 24 30 7d 2c 73 65 74 5f 73 72 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 24 24 70 66 5f 53 72 65 24 70 24 30 3d 6e 2c 6e 7d 7d 2c 4e 4c 52 54 2e 5f 6e 6f 6e 74 65 72 6d 69 6e 61 6c 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4e 4c 52 54 2e 5f 6e 6f 6e 74 65 72 6d 69 6e 61 6c 54 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 41 4e 44 3a 30 2c 4f 52 3a 31 2c 4e 4f 54 3a 32 7d 2c 4e 4c 52 54 2e 5f 6e 6f 6e 74 65 72 6d 69 6e 61 6c 54 79 70 65 2e 72 65 67 69 73 74 65 72 45 6e 75 6d 28 27 4e 4c 52 54 2e 5f 6e 6f 6e 74 65 72 6d 69 6e 61 6c 54 79 70 65 27 2c 21 31 29 2c 4e 4c 52 54 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 43 6f 6d 70 61 72 69 73 6f 6e 54 79 70 65 3d 66 75 6e 63 74 Data Ascii: f_Sre$p$0},set_sre:function(n){return this._$$pf_Sre$p$0=n,n}},NLRT._nonterminalType=function(){},NLRT._nonterminalType.prototype={AND:0,OR:1,NOT:2},NLRT._nonterminalType.registerEnum('NLRT._nonterminalType',!1),NLRT._queryStringFilterComparisonType=funct
2023-07-21 16:51:06 UTC	11454	IN	Data Raw: 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 61 6e 6e 6f 74 61 74 69 6f 6e 73 46 69 6c 74 65 72 28 29 26 26 21 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 61 6e 6e 6f 74 61 74 69 6f 6e 73 46 69 6c 74 65 72 28 29 2e 69 73 4d 61 74 63 68 28 66 2c 74 2c 6e 75 6c 6c 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 74 65 78 74 46 69 6c 74 65 72 28 29 29 69 66 28 73 3d 66 2e 74 72 79 47 65 74 41 6e 6e 6f 74 61 74 69 6f 6e 5f 43 61 73 74 28 53 74 72 69 6e 67 2c 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 73 70 61 6e 5f 54 65 78 74 41 74 74 72 49 44 28 29 2c 6f 3d 7b 76 61 6c 3a 65 7d 29 2c 65 3d 6f 2e 76 61 6c 2c 73 29 7b 69 66 28 21 74 68 69 73 2e Data Ascii: (this._m_init$p$0.get_annotationsFilter()&&!this._m_init$p$0.get_annotationsFilter().isMatch(f,t,null))return!1;if(this._m_init$p$0.get_textFilter())if(s=f.tryGetAnnotation_Cast(String,this._m_init$p$0.get_span_TextAttrID(),o={val:e}),e=o.val,s){if(!this.
2023-07-21 16:51:06 UTC	11470	IN	Data Raw: 78 32 53 74 72 69 6e 67 43 Data Ascii: x2StringC
2023-07-21 16:51:06 UTC	11470	IN	Data Raw: 6f 75 6e 74 28 29 5b 72 5d 3d 30 2c 66 3d 30 3b 66 6f 72 28 76 61 72 20 79 3d 61 2c 62 3d 79 2e 6c 65 6e 67 74 68 2c 68 3d 30 3b 68 3c 62 3b 2b 2b 68 29 28 75 3d 79 5b 68 5d 2c 75 2e 67 65 74 5f 6d 61 78 45 78 69 73 74 69 6e 67 53 74 72 69 6e 67 73 28 29 3e 30 26 26 69 2e 76 61 6c 2e 67 65 74 5f 74 6f 6b 65 6e 49 6e 64 65 78 32 53 74 72 69 6e 67 43 6f 75 6e 74 28 29 5b 72 5d 2b 66 3e 3d 75 2e 67 65 74 5f 6d 61 78 45 78 69 73 74 69 6e 67 53 74 72 69 6e 67 73 28 29 29 7c 7c 28 21 75 2e 67 65 74 5f 74 6f 6b 65 6e 46 69 6c 74 65 72 28 29 7c 7c 75 2e 67 65 74 5f 74 6f 6b 65 6e 46 69 6c 74 65 72 28 29 2e 69 73 4d 61 74 63 68 28 6f 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 29 26 26 28 75 2e 61 70 70 6c 79 28 74 68 69 73 2c 6f 2c 72 2c 69 2e 76 61 6c 2c 65 2c 76 3d 7b 76 Data Ascii: ount()[r]=0,f=0;for(var y=a,b=y.length,h=0;h<b;++h)(u=y[h],u.get_maxExistingStrings()>0&&i.val.get_tokenIndex2StringCount()[r]+f>=u.get_maxExistingStrings())\|\|(!u.get_tokenFilter()\|\|u.get_tokenFilter().isMatch(o,null,null))&&(u.apply(this,o,r,i.val,e,v={v
2023-07-21 16:51:06 UTC	11486	IN	Data Raw: 49 64 32 49 6e 76 65 72 73 65 43 6c 61 73 73 46 72 65 71 75 65 6e 63 79 28 29 26 26 6e 2e 67 65 74 5f 69 6e 74 65 72 6e 61 6c 46 65 61 74 75 72 65 49 64 32 49 6e 76 65 72 73 65 43 6c 61 73 73 46 72 65 71 75 65 6e 63 79 28 29 2e 67 65 74 5f 63 6f 75 6e 74 28 29 21 3d 3d 6e 2e 67 65 74 5f 6e 75 6d 4f 66 49 6e 74 65 72 6e 61 6c 46 65 61 74 75 72 65 73 28 29 2c 27 69 6e 69 74 27 2c 27 49 6e 76 65 72 74 65 64 20 63 6c 61 73 73 20 66 72 65 71 75 65 6e 63 79 20 6c 69 73 74 20 6e 6f 74 20 6f 66 20 74 68 65 20 65 78 70 65 63 74 65 64 20 6c 65 6e 67 74 68 27 29 2c 4e 4c 52 54 2e 5f 76 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 2e 74 68 72 6f 77 49 66 54 72 75 65 28 21 6e 2e 67 65 74 5f 69 6e 74 65 72 6e 61 6c 46 65 61 74 75 72 65 49 64 32 46 69 72 73 74 43 6c 61 73 Data Ascii: Id2InverseClassFrequency()&&n.get_internalFeatureId2InverseClassFrequency().get_count()!==n.get_numOfInternalFeatures(),'init','Inverted class frequency list not of the expected length'),NLRT._validationUtils.throwIfTrue(!n.get_internalFeatureId2FirstClas
2023-07-21 16:51:06 UTC	11502	IN	Data Raw: 73 65 20 4e 4c 52 54 2e 5f 73 69 6e 67 6c 65 43 68 61 72 53 75 62 73 74 69 74 75 74 69 6f 6e 73 54 72 61 6e 73 6c 69 74 65 72 61 74 69 6f 6e 53 74 61 67 65 2e 5f 63 5f 66 6c 61 76 6f 72 24 69 3a 72 65 74 75 72 6e 20 6e 65 77 20 4e 4c 52 54 2e 5f 73 69 6e 67 6c 65 43 68 61 72 53 75 62 73 74 69 74 75 74 69 6f 6e 73 54 72 61 6e 73 6c 69 74 65 72 61 74 69 6f 6e 53 74 61 67 65 28 74 2c 69 29 3b 63 61 73 65 20 4e 4c 52 54 2e 5f 6c 61 74 69 6e 46 75 6c 6c 57 69 64 74 68 54 6f 48 61 6c 66 57 69 64 74 68 54 72 61 6e 73 6c 69 74 65 72 61 74 69 6f 6e 53 74 61 67 65 2e 5f 63 5f 66 6c 61 76 6f 72 24 69 3a 72 65 74 75 72 6e 20 6e 65 77 20 4e 4c 52 54 2e 5f 6c 61 74 69 6e 46 75 6c 6c 57 69 64 74 68 54 6f 48 61 6c 66 57 69 64 74 68 54 72 61 6e 73 6c 69 74 65 72 61 74 69 Data Ascii: se NLRT._singleCharSubstitutionsTransliterationStage._c_flavor$i:return new NLRT._singleCharSubstitutionsTransliterationStage(t,i);case NLRT._latinFullWidthToHalfWidthTransliterationStage._c_flavor$i:return new NLRT._latinFullWidthToHalfWidthTransliterati
2023-07-21 16:51:06 UTC	11518	IN	Data Raw: 69 74 24 70 24 31 3a 6e 75 6c 6c 7d 2c 4e 4c 52 54 2e 5f 74 6f 6b 65 6e 53 74 72 69 6e 67 4c 61 74 74 69 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 65 74 5f 74 6f 6b 65 6e 49 6e 64 65 78 32 46 69 72 73 74 53 74 72 69 6e 67 49 6e 64 65 78 28 6e 65 77 20 41 72 72 61 79 28 6e 29 29 2c 74 68 69 73 2e 73 65 74 5f 74 6f 6b 65 6e 49 6e 64 65 78 32 53 74 72 69 6e 67 43 6f 75 6e 74 28 6e 65 77 20 41 72 72 61 79 28 6e 29 29 2c 74 68 69 73 2e 73 65 74 5f 73 74 72 69 6e 67 49 44 73 28 6e 65 77 20 41 72 72 61 79 28 30 29 29 2c 74 68 69 73 2e 73 65 74 5f 73 74 72 69 6e 67 53 63 6f 72 65 73 28 6e 65 77 20 41 72 72 61 79 28 30 29 29 7d 2c 4e 4c 52 54 2e 5f 74 6f 6b 65 6e 53 74 72 69 6e 67 4c 61 74 74 69 63 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 24 Data Ascii: it$p$1:null},NLRT._tokenStringLattice=function(n){this.set_tokenIndex2FirstStringIndex(new Array(n)),this.set_tokenIndex2StringCount(new Array(n)),this.set_stringIDs(new Array(0)),this.set_stringScores(new Array(0))},NLRT._tokenStringLattice.prototype={_$
2023-07-21 16:51:06 UTC	11534	IN	Data Raw: 29 2c 4e 4c 52 54 2e 5f 68 61 73 41 6e 6e 6f 74 61 74 69 6f 6e 73 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 6c 74 65 72 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 27 4e 4c 52 54 2e 5f 68 61 73 41 6e 6e 6f 74 61 74 69 6f 6e 73 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 6c 74 65 72 27 2c 6e 75 6c 6c 2c 4e 4c 52 54 2e 5f 69 46 69 6c 74 65 72 29 2c 4e 4c 52 54 2e 5f 61 6e 6e 6f 74 61 74 65 64 57 69 74 68 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 6c 74 65 72 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 27 4e 4c 52 54 2e 5f 61 6e 6e 6f 74 61 74 65 64 57 69 74 68 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 6c 74 65 72 27 2c 6e 75 6c 6c 2c 4e 4c 52 54 2e 5f 69 46 69 6c 74 65 72 29 2c 4e 4c 52 54 2e 5f 61 6e 6e 6f 74 61 74 65 64 57 69 74 68 41 6e 64 56 61 6c 75 65 4d 61 74 63 68 65 73 41 Data Ascii: ),NLRT._hasAnnotationsAnnotationFilter.registerClass('NLRT._hasAnnotationsAnnotationFilter',null,NLRT._iFilter),NLRT._annotatedWithAnnotationFilter.registerClass('NLRT._annotatedWithAnnotationFilter',null,NLRT._iFilter),NLRT._annotatedWithAndValueMatchesA
2023-07-21 16:51:06 UTC	11550	IN	Data Raw: 68 6e 69 63 61 Data Ascii: hnica
2023-07-21 16:51:06 UTC	11550	IN	Data Raw: 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 70 70 73 20 28 70 72 65 76 69 65 77 29 20 73 65 74 74 69 6e 67 73 27 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4c 6f 63 44 69 63 74 69 6f 6e 61 72 79 2e 4f 66 66 69 63 65 46 6f 72 6d 73 53 65 74 74 69 6e 67 73 3d 27 4d 69 63 72 6f 73 6f 66 74 20 66 6f 72 6d 73 20 73 65 74 74 69 6e 67 73 27 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4c 6f 63 44 69 63 74 69 6f 6e 61 72 79 2e 4f 66 66 69 63 65 53 63 72 69 70 74 73 53 65 74 74 69 6e 67 73 3d 27 4f 66 66 69 63 65 20 53 63 72 69 70 74 73 20 73 65 74 74 69 6e 67 73 27 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4c 6f 63 44 69 63 74 69 6f 6e 61 72 79 2e 44 69 72 65 63 74 6f 72 79 53 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 3d 27 44 69 72 65 63 74 6f 72 79 Data Ascii: l support for apps (preview) settings',ModernSearchLocDictionary.OfficeFormsSettings='Microsoft forms settings',ModernSearchLocDictionary.OfficeScriptsSettings='Office Scripts settings',ModernSearchLocDictionary.DirectorySynchronizationSettings='Directory
2023-07-21 16:51:06 UTC	11566	IN	Data Raw: 61 70 69 45 6e 64 70 6f 69 6e 74 2b 74 68 69 73 2e 65 72 72 6f 72 4d 65 74 68 6f 64 4e 61 6d 65 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 69 3d 7b 74 61 67 49 64 3a 74 68 69 73 2e 74 61 67 49 64 2c 61 64 68 6f 63 30 3a 74 68 69 73 2e 61 64 68 6f 63 30 26 26 74 68 69 73 2e 61 64 68 6f 63 30 2e 6c 65 6e 67 74 68 3e 35 30 30 3f 74 68 69 73 2e 61 64 68 6f 63 30 2e 73 75 62 73 74 72 28 31 2c 35 30 30 29 3a 74 68 69 73 2e 61 64 68 6f 63 30 2c 61 64 68 6f 63 31 3a 74 68 69 73 2e 61 64 68 6f 63 31 26 26 74 68 69 73 2e 61 64 68 6f 63 31 2e 6c 65 6e 67 74 68 3e 35 30 30 3f 74 68 69 73 2e 61 64 68 6f 63 31 2e 73 75 62 73 74 72 28 31 2c 35 30 30 29 3a 74 68 69 73 2e 61 64 68 6f Data Ascii: apiEndpoint+this.errorMethodName)},n.prototype.write=function(n){var t=this,i={tagId:this.tagId,adhoc0:this.adhoc0&&this.adhoc0.length>500?this.adhoc0.substr(1,500):this.adhoc0,adhoc1:this.adhoc1&&this.adhoc1.length>500?this.adhoc1.substr(1,500):this.adho
2023-07-21 16:51:06 UTC	11582	IN	Data Raw: 73 70 6c 61 79 57 69 64 67 65 74 28 29 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 4d 6f 64 61 6c 46 65 65 64 62 61 63 6b 56 32 2e 53 68 6f 77 4d 6f 64 61 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 70 61 67 65 4e 61 6d 65 2c 20 73 75 72 76 65 79 4e 61 6d 65 2c 20 63 61 6c 6c 62 61 63 6b 4f 6e 52 65 74 75 72 6e 29 20 7b 0a 20 20 20 20 2f 2f 66 75 6e 63 74 69 6f 6e 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 70 61 72 74 79 20 74 6f 20 63 61 6c 6c 20 69 6e 20 66 6f 72 20 63 6f 6e 74 65 78 74 20 6d 6f 64 61 6c 20 66 65 65 64 62 61 63 6b 0a 20 20 20 20 69 66 20 28 63 61 6c 6c 62 61 63 6b 4f 6e 52 65 74 75 72 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 4d 6f 64 61 6c 46 65 65 64 62 61 63 6b 56 32 2e 63 61 6c 6c 62 61 63 6b 4f 6e 52 65 74 75 72 6e 20 3d 20 66 75 6e 63 74 69 6f 6e Data Ascii: splayWidget(); }}ModalFeedbackV2.ShowModal = function (pageName, surveyName, callbackOnReturn) { //function for external party to call in for context modal feedback if (callbackOnReturn) { ModalFeedbackV2.callbackOnReturn = function
2023-07-21 16:51:06 UTC	11598	IN	Data Raw: 75 2c 72 Data Ascii: u,r
2023-07-21 16:51:06 UTC	11598	IN	Data Raw: 2c 66 2c 65 2c 68 3b 69 66 28 21 6f 2e 63 61 6e 63 65 6c 28 63 29 29 7b 69 66 28 6c 28 29 2c 21 6e 2e 6c 69 76 65 50 65 72 73 6f 6e 2e 73 69 74 65 7c 7c 21 6e 2e 61 70 70 2e 69 73 43 75 72 72 65 6e 74 55 73 65 72 44 61 74 61 4c 6f 61 64 65 64 7c 7c 21 24 28 22 23 61 64 6d 69 6e 46 65 65 64 62 61 63 6b 57 69 64 67 65 74 22 29 2e 6c 65 6e 67 74 68 29 7b 6f 28 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 35 30 30 29 3b 72 65 74 75 72 6e 7d 75 3d 6e 2e 43 75 72 72 65 6e 74 55 73 65 72 49 6e 66 6f 2e 43 75 6c 74 75 72 65 49 6e 66 6f 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 72 3d 7b 73 69 74 65 3a 6e 2e 6c 69 76 65 50 65 72 73 6f 6e 2e 73 69 74 65 2c 70 72 6f 6d 70 74 3a 6e 2e 6c 69 76 65 50 65 72 73 6f 6e 2e 70 72 6f 6d 70 74 2c 6c 61 6e 67 75 61 67 65 3a 75 2c Data Ascii: ,f,e,h;if(!o.cancel(c)){if(l(),!n.livePerson.site\|\|!n.app.isCurrentUserDataLoaded\|\|!$("#adminFeedbackWidget").length){o(s.bind(this),500);return}u=n.CurrentUserInfo.CultureInfo.toUpperCase(),r={site:n.livePerson.site,prompt:n.livePerson.prompt,language:u,
2023-07-21 16:51:06 UTC	11614	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 7d 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6e 29 7b 74 2e 6f 28 65 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 74 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 65 26 26 65 2e 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 74 2e 64 28 69 2c 22 61 22 2c 69 29 2c 69 7d 2c 74 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f Data Ascii: {return e},t.d=function(e,i,n){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.e?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasO
2023-07-21 16:51:06 UTC	11631	IN	Data Raw: 76 69 63 65 49 6e 66 6f 2e 4d 61 6b 65 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 65 76 69 63 65 4d 6f 64 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 4a 26 26 74 68 69 73 2e 24 28 22 44 65 76 69 63 65 49 6e 66 6f 2e 4d 6f 64 65 6c 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 55 73 65 72 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 66 28 21 69 73 4e 61 4e 28 69 29 26 26 6e 75 6c 6c 21 3d 3d 69 26 26 69 3e 3d 30 26 26 69 3c 3d 31 32 29 74 68 69 73 2e 24 28 22 55 73 65 72 49 6e 66 6f 2e 49 64 54 79 70 65 22 2c 69 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 72 2e 41 57 54 50 69 69 4b 69 6e 64 2e Data Ascii: viceInfo.Make",e)},e.prototype.setDeviceModel=function(e){this.J&&this.$("DeviceInfo.Model",e)},e.prototype.setUserId=function(e,t,i){if(!isNaN(i)&&null!==i&&i>=0&&i<=12)this.$("UserInfo.IdType",i.toString());else{var n=void 0;switch(t){case r.AWTPiiKind.
2023-07-21 16:51:06 UTC	11720	IN	Data Raw: 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 31 32 37 26 74 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 63 2e 42 72 6f 77 73 65 72 43 68 65 63 6b 65 72 2e 5a 65 28 29 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 61 56 69 65 77 28 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 38 29 29 3b 74 2e 73 65 74 46 6c 6f 61 74 36 34 28 30 2c 65 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 38 3b 2b 2b 6e 29 69 2e 70 75 73 68 28 74 2e 67 65 74 55 69 6e 74 38 28 6e 29 29 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 20 6c 2e 46 6c 6f 61 74 55 74 69 6c 73 2e 4a 65 28 65 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 28 65 3d 5f 2e 4e 75 6d 62 65 72 2e 42 28 65 29 29 3c 3c 31 5e 65 3e 3e 33 31 7d 66 Data Ascii: eturn n.push(127&t),n}function a(e){if(c.BrowserChecker.Ze()){var t=new DataView(new ArrayBuffer(8));t.setFloat64(0,e,!0);for(var i=[],n=0;n<8;++n)i.push(t.getUint8(n));return i}return l.FloatUtils.Je(e,!0)}function u(e){return(e=_.Number.B(e))<<1^e>>31}f
2023-07-21 16:51:06 UTC	11736	IN	Data Raw: 20 22 29 2c 69 74 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 69 2c 72 29 7d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 74 75 28 6e 29 7b 72 65 74 75 72 6e 28 22 22 2b 6e 29 2e 72 65 70 6c 61 63 65 28 68 72 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 73 72 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 6f 72 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 65 72 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 61 69 2c 22 26 23 33 39 3b 22 29 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 6e 2c 74 29 7b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 22 29 26 26 28 74 3d 74 2e 73 75 62 73 74 72 69 6e 67 28 34 29 2c 74 3d 74 2e 63 68 61 72 41 74 Data Ascii: "),it(t,function(t,i){n.toggleClass(i,r)})),n}function tu(n){return(""+n).replace(hr,"&").replace(sr,"<").replace(or,">").replace(er,""").replace(ai,"'")}function dt(n,t){var u;return 0===t.indexOf("data")&&(t=t.substring(4),t=t.charAt
2023-07-21 16:51:06 UTC	11752	IN	Data Raw: 2e 72 65 70 6c Data Ascii: .repl
2023-07-21 16:51:06 UTC	11752	IN	Data Raw: 61 63 65 28 22 24 22 2c 73 29 2e 73 70 6c 69 74 28 22 6e 22 29 2c 6e 2e 69 6e 64 65 78 4f 66 28 66 5b 30 5d 29 3e 2d 31 26 26 6e 2e 69 6e 64 65 78 4f 66 28 66 5b 31 5d 29 3e 2d 31 26 26 28 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 66 5b 30 5d 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 66 5b 31 5d 2c 22 22 29 2c 65 3d 21 30 29 29 3a 6e 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 26 26 28 68 3d 21 30 2c 75 3d 63 2c 73 3d 61 29 2c 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 22 2d 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 73 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 6f 2c 22 20 22 29 2e 73 70 6c 69 74 28 75 5b 22 2c 22 5d 2e 72 65 70 6c 61 63 65 28 6f 2c 22 20 22 29 29 2e 6a 6f 69 6e 28 22 22 29 2e 72 65 70 6c 61 63 65 28 75 5b 22 2e 22 5d 2c 22 2e 22 29 2c 6e 3d 70 61 72 73 65 46 Data Ascii: ace("$",s).split("n"),n.indexOf(f[0])>-1&&n.indexOf(f[1])>-1&&(n=n.replace(f[0],"").replace(f[1],""),e=!0)):n.indexOf(a)>-1&&(h=!0,u=c,s=a),n=n.replace("-","").replace(s,"").replace(o," ").split(u[","].replace(o," ")).join("").replace(u["."],"."),n=parseF
2023-07-21 16:51:06 UTC	11768	IN	Data Raw: 2c 72 2e 6d 6f 62 69 6c 65 2e 75 69 2e 72 6f 6c 65 73 5b 75 5d 5d 3b 66 6f 72 28 75 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 3e 3d 30 26 26 28 65 3d 5b 72 2e 67 65 74 74 65 72 28 75 29 28 74 29 5d 29 2c 66 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3e 66 3b 66 2b 2b 29 69 66 28 73 3d 65 5b 66 5d 2c 73 26 26 28 68 3d 6e 2e 64 61 74 61 28 22 6b 65 6e 64 6f 22 2b 73 2e 66 6e 2e 6f 70 74 69 6f 6e 73 2e 70 72 65 66 69 78 2b 73 2e 66 6e 2e 6f 70 74 69 6f 6e 73 2e 6e 61 6d 65 29 29 29 72 65 74 75 72 6e 20 68 7d 7d 2c 72 2e 6f 6e 52 65 73 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 75 2e 6d 6f 62 69 6c 65 4f 53 2e 61 6e 64 72 6f 69 64 26 26 28 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 Data Ascii: ,r.mobile.ui.roles[u]];for(u.indexOf(".")>=0&&(e=[r.getter(u)(t)]),f=0,o=e.length;o>f;f++)if(s=e[f],s&&(h=n.data("kendo"+s.fn.options.prefix+s.fn.options.name)))return h}},r.onResize=function(i){var r=i;return u.mobileOS.android&&(r=function(){setTimeout(
2023-07-21 16:51:06 UTC	11784	IN	Data Raw: 70 70 65 72 29 5b 30 5d 2c 61 3d 6e 28 74 2e 65 6c 65 6d 65 6e 74 29 5b 30 5d 2c 79 3d 72 2e 69 6e 6a 65 63 74 6f 72 28 29 2e 67 65 74 28 22 24 63 6f 6d 70 69 6c 65 22 29 2c 74 2e 64 65 73 74 72 6f 79 28 29 2c 65 26 26 65 28 29 2c 74 3d 6e 75 6c 6c 2c 63 26 26 61 26 26 28 63 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 61 2c 63 29 2c 6e 28 72 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 75 29 29 2c 79 28 75 29 28 69 29 29 7d 2c 21 30 29 3b 68 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 29 7b 66 2e 64 69 72 65 63 74 69 76 65 28 6e 2c 5b 22 64 69 72 65 63 74 69 76 65 46 61 63 74 6f 72 79 22 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 Data Ascii: pper)[0],a=n(t.element)[0],y=r.injector().get("$compile"),t.destroy(),e&&e(),t=null,c&&a&&(c.parentNode.replaceChild(a,c),n(r).replaceWith(u)),y(u)(i))},!0);h(i)}function ut(n,i){function e(n,t){f.directive(n,["directiveFactory",function(i){return i.creat
2023-07-21 16:51:06 UTC	11800	IN	Data Raw: 68 69 73 2c 69 3d 72 2e 74 6f 75 63 68 65 73 3b 69 66 28 74 68 69 73 2e 5f 69 73 4d 75 6c 74 69 54 6f 75 63 68 28 29 29 7b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 20 68 3a 6e 3d 76 3b 62 72 65 61 6b 3b 63 61 73 65 20 73 3a 6e 3d 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 3a 6e 3d 6c 7d 66 28 74 2c 7b 74 6f 75 63 68 65 73 3a 69 7d 2c 72 74 28 69 5b 30 5d 2c 69 5b 31 5d 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 6e 2c 66 28 74 2c 7b 74 79 70 65 3a 6e 7d 29 29 7d 2c 70 72 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 74 68 69 73 2e 5f 61 70 69 43 61 6c 6c 28 22 5f 73 74 61 72 74 22 2c 6e 2c 74 2c 69 29 7d 2c 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 68 69 73 2e 5f 61 70 69 43 61 6c 6c 28 22 5f 6d 6f Data Ascii: his,i=r.touches;if(this._isMultiTouch()){switch(n){case h:n=v;break;case s:n=a;break;case o:n=l}f(t,{touches:i},rt(i[0],i[1]))}return this.trigger(n,f(t,{type:n}))},press:function(n,t,i){this._apiCall("_start",n,t,i)},move:function(n,t){this._apiCall("_mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
246	192.168.2.5	50104	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	10922	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminapp.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	11373	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42104 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:13:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=298381252291232238111020469085798906066"}],"include_subdomains ":true} Server: ECAcc (muc/330F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 48e17727-f01e-003a-2491-bbd0b9000000 Content-Length: 690285 Connection: close
2023-07-21 16:51:06 UTC	11374	IN	Data Raw: 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 27 66 69 6e 64 27 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 2c 75 2c 66 2c 74 2c 72 3b 69 66 28 74 68 69 73 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 74 68 69 73 22 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 27 29 3b 69 66 28 69 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 75 3d 69 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 74 79 70 65 6f 66 20 6e 21 3d 27 66 75 6e 63 74 69 6f 6e 27 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 70 72 65 64 69 63 61 74 65 20 6d 75 73 Data Ascii: Array.prototype.find\|\|Object.defineProperty(Array.prototype,'find',{value:function(n){var i,u,f,t,r;if(this==null)throw new TypeError('"this" is null or not defined');if(i=Object(this),u=i.length>>>0,typeof n!='function')throw new TypeError('predicate mus
2023-07-21 16:51:06 UTC	11390	IN	Data Raw: 2c Data Ascii: ,
2023-07-21 16:51:06 UTC	11390	IN	Data Raw: 72 3d 65 2e 66 69 72 73 74 44 61 79 4f 66 4d 6f 6e 74 68 28 6e 29 2c 75 3d 4d 61 74 68 2e 61 62 73 28 74 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2d 72 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 29 3b 72 65 74 75 72 6e 20 75 26 26 74 2e 73 65 74 48 6f 75 72 73 28 72 2e 67 65 74 48 6f 75 72 73 28 29 2b 75 2f 36 30 29 2c 74 7d 2c 63 6f 6d 70 61 72 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 65 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 72 3d 6e 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 75 3d 74 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 66 3d 74 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 3b 72 65 74 75 72 6e 20 65 3d 72 3e 66 3f 31 3a 66 3e 72 3f 2d 31 3a 69 3d 3d 75 3f 30 3a 69 3e 75 3f 31 3a 2d 31 7d 2c Data Ascii: r=e.firstDayOfMonth(n),u=Math.abs(t.getTimezoneOffset()-r.getTimezoneOffset());return u&&t.setHours(r.getHours()+u/60),t},compare:function(n,t){var e,i=n.getMonth(),r=n.getFullYear(),u=t.getMonth(),f=t.getFullYear();return e=r>f?1:f>r?-1:i==u?0:i>u?1:-1},
2023-07-21 16:51:06 UTC	11672	IN	Data Raw: 26 26 61 3f 28 72 2e 76 61 6c 28 69 29 2c 73 28 72 2c 63 2b 75 2e 6c 65 6e 67 74 68 29 2c 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3a 28 6e 75 6c 6c 21 3d 3d 6f 26 26 6f 3e 3d 30 26 26 22 2d 22 3d 3d 3d 69 2e 63 68 61 72 41 74 28 30 29 7c 7c 21 76 29 26 26 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 5f 6b 65 79 3d 30 29 7d 2c 5f 6e 75 6d 65 72 69 63 52 65 67 65 78 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 6e 5b 66 5d 2c 75 3d 72 2e 6f 70 74 69 6f 6e 73 2e 64 65 63 69 6d 61 6c 73 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 66 26 26 28 74 3d 22 5c 5c 22 2b 74 29 2c 75 3d 3d 3d 69 26 26 28 75 3d 6e 2e 64 65 63 69 6d 61 6c 73 29 2c 30 3d 3d 3d 75 3f 66 74 3a 28 72 2e 5f 73 65 70 61 72 61 74 6f 72 Data Ascii: &&a?(r.val(i),s(r,c+u.length),n.preventDefault()):(null!==o&&o>=0&&"-"===i.charAt(0)\|\|!v)&&n.preventDefault(),t._key=0)},_numericRegex:function(n){var r=this,t=n[f],u=r.options.decimals;return t===f&&(t="\\"+t),u===i&&(u=n.decimals),0===u?ft:(r._separator
2023-07-21 16:51:06 UTC	11688	IN	Data Raw: 65 73 3d 6e 2e 6d 61 70 28 69 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 72 28 6e 29 7d 29 2c 74 29 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 66 6f 63 75 73 28 29 3b 6e 3d 6e 3f 6e 2e 6e 65 78 74 28 29 3a 30 2c 74 68 69 73 2e 66 6f 63 75 73 28 6e 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 66 6f 63 75 73 28 29 3b 6e 3d 6e 3f 6e 2e 70 72 65 76 28 29 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 2d 31 2c 74 68 69 73 2e 66 6f 63 75 73 28 6e 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 6f 63 75 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 63 68 69 6c 64 72 65 6e Data Ascii: es=n.map(i,function(n){return r(n)}),t)},next:function(){var n=this.focus();n=n?n.next():0,this.focus(n)},prev:function(){var n=this.focus();n=n?n.prev():this.element[0].children.length-1,this.focus(n)},first:function(){this.focus(this.element[0].children
2023-07-21 16:51:06 UTC	11704	IN	Data Raw: 72 28 22 76 61 6c 75 65 2d 66 69 65 6c 64 22 29 2c 22 76 61 6c 75 65 22 29 2e 61 74 74 72 28 69 2e 61 74 74 72 28 22 76 61 6c 75 65 2d 70 72 69 6d 69 74 69 76 65 22 29 2c 21 30 29 7d 2c 5f 63 72 65 61 74 65 4f 70 65 72 61 74 6f 72 44 72 6f 70 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 75 2c 66 3d 5b 5d 3b 66 6f 72 28 72 20 69 6e 20 74 29 66 2e 70 75 73 68 28 7b 74 65 78 74 3a 74 5b 72 5d 2c 76 61 6c 75 65 3a 72 7d 29 3b 75 3d 6e 28 27 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 6b 2d 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 72 61 74 6f 72 22 20 27 2b 69 2e 61 74 74 72 28 22 62 69 6e 64 22 29 2b 27 3d 22 76 61 6c 75 65 3a 20 6f 70 65 72 61 74 6f 72 22 2f 3e 27 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 77 72 61 70 70 65 72 29 2c 74 Data Ascii: r("value-field"),"value").attr(i.attr("value-primitive"),!0)},_createOperatorDropDown:function(t){var r,u,f=[];for(r in t)f.push({text:t[r],value:r});u=n('<input class="k-dropdown-operator" '+i.attr("bind")+'="value: operator"/>').appendTo(this.wrapper),t
2023-07-21 16:51:06 UTC	11815	IN	Data Raw: 74 69 6f 6e 28 6e 2c 69 29 7b 66 6f 72 28 76 61 72 20 75 2c 72 3d 74 68 69 73 2c 66 3d 69 2c 65 3d 72 2e 6c 69 73 74 56 69 65 77 2e 64 61 74 61 28 29 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 68 3d 72 2e 6f 70 74 69 6f 6e 73 2e 69 67 6e 6f 72 65 43 61 73 65 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 75 29 7b 72 65 74 75 72 6e 20 69 2b 3d 22 22 2c 68 26 26 28 69 3d 69 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 30 3d 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 6e 29 3f 28 72 2e 5f 73 65 6c 65 63 74 28 75 29 2c 72 2e 70 6f 70 75 70 2e 76 69 73 69 62 6c 65 28 29 7c 7c 72 2e 5f 63 68 61 6e 67 65 28 29 2c 21 30 29 3a 74 7d 3b 6f 3e 69 3b 69 2b 2b 29 69 66 28 75 3d 72 2e 5f 74 65 78 74 28 65 5b 69 5d 29 2c 75 26 26 73 28 75 2c 69 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 Data Ascii: tion(n,i){for(var u,r=this,f=i,e=r.listView.data(),o=e.length,h=r.options.ignoreCase,s=function(i,u){return i+="",h&&(i=i.toLowerCase()),0===i.indexOf(n)?(r._select(u),r.popup.visible()\|\|r._change(),!0):t};o>i;i++)if(u=r._text(e[i]),u&&s(u,i))return!0;if(
2023-07-21 16:51:06 UTC	11831	IN	Data Raw: 73 74 61 6e 63 Data Ascii: stanc
2023-07-21 16:51:06 UTC	11831	IN	Data Raw: 65 6f 66 20 65 29 7b 69 66 28 74 3d 74 68 69 73 2e 70 61 72 73 65 64 56 61 6c 75 65 28 29 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 29 7b 66 6f 72 28 69 3d 30 3b 6e 2e 6c 65 6e 67 74 68 3e 69 3b 69 2b 2b 29 69 66 28 6e 5b 69 5d 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 26 26 2b 6e 5b 69 5d 3d 3d 2b 74 29 7b 72 3d 69 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 72 3d 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3b 72 3e 2d 31 3f 6e 2e 73 70 6c 69 63 65 28 72 2c 31 29 3a 6e 2e 70 75 73 68 28 74 29 7d 65 6c 73 65 20 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 5b 63 5d 2e 73 65 74 28 74 29 7d 2c 72 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 2c 74 2c 6e 3d 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 5b 63 5d 2e 67 65 74 28 29 2c 72 3d 6e 2c 6f Data Ascii: eof e){if(t=this.parsedValue(),t instanceof Date){for(i=0;n.length>i;i++)if(n[i]instanceof Date&&+n[i]==+t){r=i;break}}else r=n.indexOf(t);r>-1?n.splice(r,1):n.push(t)}else this.bindings[c].set(t)},refresh:function(){var f,t,n=this.bindings[c].get(),r=n,o
2023-07-21 16:51:06 UTC	11847	IN	Data Raw: 3f 30 3a 35 2c 67 72 6f 75 70 3a 22 64 65 66 61 75 6c 74 22 2c 63 75 72 73 6f 72 4f 66 66 73 65 74 3a 6e 75 6c 6c 2c 61 78 69 73 3a 6e 75 6c 6c 2c 63 6f 6e 74 61 69 6e 65 72 3a 6e 75 6c 6c 2c 66 69 6c 74 65 72 3a 6e 75 6c 6c 2c 69 67 6e 6f 72 65 3a 6e 75 6c 6c 2c 68 6f 6c 64 54 6f 44 72 61 67 3a 21 31 2c 64 72 6f 70 70 65 64 3a 21 31 7d 2c 63 61 6e 63 65 6c 48 6f 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 61 63 74 69 76 61 74 65 64 3d 21 31 7d 2c 5f 63 61 70 74 75 72 65 45 73 63 61 70 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 69 2e 6b 65 79 73 2e 45 53 43 26 26 28 74 2e 5f 74 72 69 67 67 65 72 28 6e 74 2c 7b 65 76 65 6e 74 3a 6e 7d 29 2c 74 2e 75 73 65 72 45 76 65 6e 74 Data Ascii: ?0:5,group:"default",cursorOffset:null,axis:null,container:null,filter:null,ignore:null,holdToDrag:!1,dropped:!1},cancelHold:function(){this._activated=!1},_captureEscape:function(n){var t=this;n.keyCode===i.keys.ESC&&(t._trigger(nt,{event:n}),t.userEvent
2023-07-21 16:51:06 UTC	11863	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 2c 69 2c 72 2c 75 2c 66 2c 65 2c 6f 2c 73 3b 69 66 28 74 68 69 73 2e 69 73 41 72 69 61 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 2c 74 68 69 73 2e 73 65 73 73 69 6f 6e 49 64 3d 22 22 2c 74 68 69 73 2e 74 65 6e 61 6e 74 49 64 3d 22 22 2c 74 68 69 73 2e 63 6c 6f 75 64 4c 6f 63 61 74 69 6f 6e 3d 22 22 2c 74 68 69 73 2e 66 6c 69 67 68 74 3d 22 22 2c 74 68 69 73 2e 63 6c 6f 75 64 45 6e 76 69 72 6f 6e 6d 65 6e 74 3d 22 22 2c 74 68 69 73 2e 70 75 69 64 3d 22 22 2c 6e 2e 6c 6f 67 67 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 20 69 6e 73 74 65 61 64 20 75 73 65 20 41 72 69 61 4c 6f 67 67 65 72 2e Data Ascii: ction(){function n(){var t,i,r,u,f,e,o,s;if(this.isAriaInitialized=!1,this.sessionId="",this.tenantId="",this.cloudLocation="",this.flight="",this.cloudEnvironment="",this.puid="",n.logger)throw new Error("Unexpected initialization instead use AriaLogger.
2023-07-21 16:51:06 UTC	11879	IN	Data Raw: 6c 6c 69 6e 67 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 55 73 65 72 73 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 68 74 74 70 28 7b 6d 65 74 68 6f 64 3a 27 50 4f 53 54 27 2c 75 72 6c 3a 72 2c 68 65 61 64 65 72 73 3a 7b 41 6a 61 78 53 65 73 73 69 6f 6e 4b 65 79 3a 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 53 68 61 72 65 64 2e 47 65 74 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 28 27 41 6a 61 78 53 65 73 73 69 6f 6e 4b 65 79 27 29 7d 2c 64 61 74 61 3a 7b 4c 69 73 74 41 63 74 69 6f 6e 3a 31 2c 4c 69 73 74 43 6f 6e 74 65 78 74 3a 69 2c 53 65 61 72 63 68 54 65 78 74 3a 6e 75 6c 6c 2c 53 65 6c 65 63 74 65 64 56 69 65 77 3a 6e 2c 53 65 6c 65 63 74 65 64 56 69 65 77 54 79 70 65 3a 74 2c 53 65 72 76 65 72 43 6f 6e 74 65 78 74 3a 6e 75 6c Data Ascii: llingNotificationsUsers";return this.$http({method:'POST',url:r,headers:{AjaxSessionKey:Microsoft.Online.BOX.JS.Shared.GetSessionCookie('AjaxSessionKey')},data:{ListAction:1,ListContext:i,SearchText:null,SelectedView:n,SelectedViewType:t,ServerContext:nul
2023-07-21 16:51:06 UTC	11895	IN	Data Raw: 63 74 69 6f 6e 28 6e 29 7b 72 2e 70 75 73 68 28 22 2f 61 64 6d 69 6e 2f 61 70 69 2f 55 73 65 72 73 2f 22 2b 6e 29 7d 29 2c 74 3d 7b 7d 2c 74 68 69 73 2e 48 74 74 70 53 65 72 76 69 63 65 2e 50 75 74 28 75 2c 6e 2c 72 29 2e 73 75 63 63 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 64 61 74 61 3d 6e 2c 69 2e 72 65 73 6f 6c 76 65 28 74 29 7d 29 2e 65 72 72 6f 72 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 64 61 74 61 3d 6e 2c 4f 33 36 35 2e 4c 6f 67 2e 57 72 69 74 65 4c 6f 67 28 34 31 38 33 32 34 2c 4f 33 36 35 2e 4c 6f 67 4c 65 76 65 6c 2e 45 72 72 6f 72 2c 4f 33 36 35 2e 4c 6f 67 41 72 65 61 2e 55 73 65 72 4d 61 6e 61 67 65 6d 65 6e 74 2c 4f 33 36 35 2e 4c 6f 67 50 61 72 61 6d 65 74 65 72 2e 45 6d 70 74 79 2c 22 45 72 72 6f 72 20 69 6e 20 62 75 6c Data Ascii: ction(n){r.push("/admin/api/Users/"+n)}),t={},this.HttpService.Put(u,n,r).success(function(n){t.data=n,i.resolve(t)}).error(function(n){t.data=n,O365.Log.WriteLog(418324,O365.LogLevel.Error,O365.LogArea.UserManagement,O365.LogParameter.Empty,"Error in bul
2023-07-21 16:51:06 UTC	11911	IN	Data Raw: 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 64 64 47 72 6f 75 70 44 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 49 6e 76 61 6c 69 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 74 68 69 73 2e 48 74 74 70 53 65 72 76 69 63 65 2e 49 6e 76 61 6c 69 64 61 74 65 28 74 68 69 73 2e 67 65 74 47 72 6f 75 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 55 72 6c 28 6e 2c 74 2c 69 29 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 49 73 4f 33 36 35 47 72 6f 75 70 73 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 2f 61 64 6d 69 6e 2f 61 70 69 2f 67 72 6f 75 70 73 2f 69 73 4f 33 36 35 47 72 6f 75 70 73 45 6e 61 62 6c 65 64 22 2c 74 3d 5b 5d 3b Data Ascii: tOptions=function(){return this._addGroupDefaultOptions},n.prototype.Invalidate=function(n,t,i){this.HttpService.Invalidate(this.getGroupInformationUrl(n,t,i))},n.prototype.IsO365GroupsEnabled=function(){var n="/admin/api/groups/isO365GroupsEnabled",t=[];
2023-07-21 16:51:06 UTC	11927	IN	Data Raw: 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 2e 50 72 69 76 61 74 65 43 61 74 61 6c 6f 67 52 65 73 75 6c 74 43 6f 64 65 2e 46 61 69 6c 65 64 41 64 64 49 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 3a 69 3d 27 46 61 69 6c 65 64 20 74 6f 20 72 65 67 69 73 74 65 72 20 74 68 65 20 41 64 64 2d 49 6e 2e 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 2e 50 72 69 76 61 74 65 43 61 74 61 6c 6f 67 52 65 73 75 6c 74 43 6f 64 65 2e 41 64 64 49 6e 4e 6f 74 46 6f 75 6e 64 3a 69 3d 27 55 6e 61 62 6c 65 20 74 6f 20 66 69 6e 64 20 74 68 65 20 41 64 64 2d 49 6e 2e 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 2e 50 72 69 76 61 74 65 43 61 74 61 6c 6f 67 52 65 73 75 6c 74 43 6f 64 65 2e 41 64 64 49 6e 45 78 69 73 74 73 3a 69 3d 27 54 68 69 73 Data Ascii: try again later.';break;case n.PrivateCatalogResultCode.FailedAddInRegistration:i='Failed to register the Add-In.';break;case n.PrivateCatalogResultCode.AddInNotFound:i='Unable to find the Add-In.';break;case n.PrivateCatalogResultCode.AddInExists:i='This
2023-07-21 16:51:06 UTC	11943	IN	Data Raw: 75 6c 6c 3a 6e 2e 64 61 74 61 2e 4d 65 74 61 44 61 74 61 2e 4c 69 73 74 43 6f 6e 74 65 78 74 2c 75 2e 4e 6f 72 6d 61 6c 69 7a 65 53 65 61 72 63 68 52 65 73 75 6c 74 73 28 74 2e 45 78 74 65 72 6e 61 6c 55 73 65 72 2c 69 2c 72 2c 66 2c 75 29 7d 29 7d 2c 74 68 69 73 2e 47 65 74 41 70 70 73 50 65 72 6d 69 73 73 69 6f 6e 55 73 65 72 4c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 41 70 70 73 53 65 72 76 69 63 65 2e 47 65 74 41 70 70 50 65 72 6d 69 73 73 69 6f 6e 28 6e 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6e 2e 64 61 74 61 3b 72 65 74 75 72 6e 20 69 2e 4e 6f 72 6d 61 6c 69 7a 65 53 65 61 72 63 68 52 65 73 75 6c 74 73 28 74 2e 55 73 65 72 2c 72 2c 6e 75 Data Ascii: ull:n.data.MetaData.ListContext,u.NormalizeSearchResults(t.ExternalUser,i,r,f,u)})},this.GetAppsPermissionUserList=function(n){var i=this;return this.AppsService.GetAppPermission(n).then(function(n){var r=n.data;return i.NormalizeSearchResults(t.User,r,nu
2023-07-21 16:51:06 UTC	11959	IN	Data Raw: 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 48 74 74 70 53 65 72 76 69 63 65 2e 47 65 74 28 72 2c 75 2c 21 31 29 2e 73 75 63 63 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 7d 29 2e 65 72 72 6f 72 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 4c 6f 67 41 70 69 43 61 6c 6c 45 72 72 6f 72 28 22 47 65 74 52 65 70 6f 72 74 4f 75 74 61 67 65 41 67 67 72 65 67 61 74 65 64 43 6f 75 6e 74 22 2c 6e 29 7d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 47 65 74 52 65 70 6f 72 74 65 64 4f 75 74 61 67 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 2f 61 64 6d 69 6e 2f 61 70 69 2f 73 65 72 76 69 63 65 68 65 61 6c 74 68 2f 72 65 70 6f 72 74 6f 75 74 61 67 65 2f 61 6c 6c 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 48 74 74 70 53 Data Ascii: ;return this.HttpService.Get(r,u,!1).success(function(n){return n}).error(function(n){this.LogApiCallError("GetReportOutageAggregatedCount",n)})},n.prototype.GetReportedOutages=function(){var n="/admin/api/servicehealth/reportoutage/all";return this.HttpS
2023-07-21 16:51:06 UTC	11975	IN	Data Raw: 63 74 69 6f 6e 20 6e 28 29 7b 7d 72 65 74 75 72 6e 20 6e 2e 49 73 53 75 70 70 6f 72 74 65 64 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 6e 2e 43 6f 6d 70 6c 69 61 6e 63 65 49 6f 73 3a 63 61 73 65 20 6e 2e 43 6f 6d 70 6c 69 61 6e 63 65 41 6e 64 72 6f 69 64 3a 63 61 73 65 20 6e 2e 43 6f 6d 70 6c 69 61 6e 63 65 57 69 6e 64 6f 77 73 31 30 3a 63 61 73 65 20 6e 2e 43 6f 6e 66 69 67 49 6f 73 3a 63 61 73 65 20 6e 2e 43 6f 6e 66 69 67 41 6e 64 72 6f 69 64 3a 63 61 73 65 20 6e 2e 43 6f 6e 66 69 67 57 69 6e 64 6f 77 73 31 30 3a 63 61 73 65 20 6e 2e 45 6d 61 69 6c 50 72 6f 66 69 6c 65 49 6f 73 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 2c 6e 2e 43 6f 6d 70 6c 69 61 6e 63 65 Data Ascii: ction n(){}return n.IsSupportedType=function(t){switch(t){case n.ComplianceIos:case n.ComplianceAndroid:case n.ComplianceWindows10:case n.ConfigIos:case n.ConfigAndroid:case n.ConfigWindows10:case n.EmailProfileIos:return!0;default:return!1}},n.Compliance
2023-07-21 16:51:06 UTC	11991	IN	Data Raw: 6e 2e 64 61 74 61 2e 76 61 6c Data Ascii: n.data.val
2023-07-21 16:51:06 UTC	11991	IN	Data Raw: 75 65 2e 6c 65 6e 67 74 68 3e 30 3f 74 2e 72 65 70 6f 72 74 65 64 4f 75 74 61 67 65 73 3d 6e 2e 64 61 74 61 2e 76 61 6c 75 65 3a 28 74 2e 75 73 65 72 4d 65 73 73 61 67 65 3d 27 54 68 65 72 65 20 69 73 20 6e 6f 20 6f 75 74 61 67 65 73 20 72 65 70 6f 72 74 65 64 2e 27 2c 74 2e 73 68 6f 77 55 73 65 72 4d 65 73 73 61 67 65 3d 21 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 69 73 52 65 70 6f 72 74 4f 75 74 61 67 65 54 72 61 63 6b 69 6e 67 50 61 67 65 4c 6f 61 64 69 6e 67 3d 21 31 2c 74 2e 75 73 65 72 4d 65 73 73 61 67 65 3d 27 53 6f 72 72 79 2c 20 66 6f 72 20 73 6f 6d 65 20 72 65 61 73 6f 6e 2c 20 77 65 20 63 61 6e 5c 75 30 30 32 37 74 20 67 65 74 20 79 6f 75 72 20 72 65 70 6f 72 74 65 64 20 6f 75 74 61 67 65 73 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c Data Ascii: ue.length>0?t.reportedOutages=n.data.value:(t.userMessage='There is no outages reported.',t.showUserMessage=!0)},function(){t.isReportOutageTrackingPageLoading=!1,t.userMessage='Sorry, for some reason, we can\u0027t get your reported outages right now. Pl
2023-07-21 16:51:06 UTC	12007	IN	Data Raw: 6e 65 77 20 72 29 7d 7d 28 29 2c 41 64 6d 69 6e 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 3b 76 61 72 20 74 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 43 72 65 61 74 65 3d 30 5d 3d 22 43 72 65 61 74 65 22 2c 6e 5b 6e 2e 45 64 69 74 50 6f 6c 69 63 79 4e 61 6d 65 3d 31 5d 3d 22 45 64 69 74 50 6f 6c 69 63 79 4e 61 6d 65 22 2c 6e 5b 6e 2e 45 64 69 74 4d 61 6d 4c 6f 73 73 70 72 6f 74 65 63 74 69 6f 6e 3d 32 5d 3d 22 45 64 69 74 4d 61 6d 4c 6f 73 73 70 72 6f 74 65 63 74 69 6f 6e 22 2c 6e 5b 6e 2e 45 64 69 74 4d 61 6d 4f 66 66 69 63 65 44 6f 63 73 3d 33 5d 3d 22 45 64 69 74 4d 61 6d 4f 66 66 69 63 65 44 6f 63 73 22 2c 6e 5b 6e 2e 45 64 69 74 4d 61 6d 50 72 6f 74 65 63 74 65 64 41 70 70 73 3d 34 5d 3d 22 45 64 69 Data Ascii: new r)}}(),Admin;(function(n){'use strict';;var t;(function(n){n[n.Create=0]="Create",n[n.EditPolicyName=1]="EditPolicyName",n[n.EditMamLossprotection=2]="EditMamLossprotection",n[n.EditMamOfficeDocs=3]="EditMamOfficeDocs",n[n.EditMamProtectedApps=4]="Edi
2023-07-21 16:51:06 UTC	12056	IN	Data Raw: 66 2c 74 68 69 73 2e 69 6e 74 75 6e 65 53 65 72 76 69 63 65 3d 65 2c 74 68 69 73 2e 69 6e 74 75 6e 65 48 65 6c 70 65 72 53 65 72 76 69 63 65 3d 6f 2c 74 2e 6f 70 65 72 61 74 69 6f 6e 4d 6f 64 65 6c 3d 6e 65 77 20 6e 2e 4f 70 65 72 61 74 69 6f 6e 4d 6f 64 65 6c 3b 76 61 72 20 68 3d 5b 5d 2c 73 3d 5b 5d 3b 74 2e 64 69 72 74 79 4f 66 66 69 63 65 41 73 73 69 67 6e 65 64 47 72 6f 75 70 73 3d 5b 5d 2c 74 2e 73 74 65 70 4e 61 6d 65 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6f 70 65 72 61 74 69 6f 6e 4d 6f 64 65 6c 2e 77 61 69 74 69 6e 67 4d 65 73 73 61 67 65 3d 27 52 65 74 72 69 65 76 69 6e 67 20 4f 66 66 69 63 65 20 67 72 6f 75 70 20 61 73 73 69 67 6e 6d 65 6e 74 73 27 2c 74 2e 6f 70 65 72 61 74 69 6f 6e 4d 6f 64 65 6c 2e 65 72 72 6f 72 4d 65 73 Data Ascii: f,this.intuneService=e,this.intuneHelperService=o,t.operationModel=new n.OperationModel;var h=[],s=[];t.dirtyOfficeAssignedGroups=[],t.stepName=null,function(){t.operationModel.waitingMessage='Retrieving Office group assignments',t.operationModel.errorMes
2023-07-21 16:51:06 UTC	12073	IN	Data Raw: 6f 75 70 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 61 28 6e 2e 64 61 74 61 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 73 65 72 76 65 72 45 72 72 6f 72 3d 21 30 2c 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 73 68 6f 77 53 70 69 6e 6e 65 72 3d 21 31 2c 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 65 72 72 6f 72 3d 6e 2e 64 61 74 61 2c 65 2e 4c 6f 67 45 72 72 6f 72 28 34 32 33 34 32 35 2c 22 49 6e 74 75 6e 65 5f 54 61 72 67 65 74 47 72 6f 75 70 73 43 6f 6e 74 72 6f 6c 6c 65 72 3a 20 4c 69 73 74 47 72 6f 75 70 73 20 65 72 72 6f 72 3a 20 7b 30 7d 22 2e 46 6f 72 6d 61 74 28 6e 2e 64 61 74 61 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 73 Data Ascii: oups().then(function(n){a(n.data)},function(n){t.IntuneModel.serverError=!0,t.IntuneModel.showSpinner=!1,t.IntuneModel.error=n.data,e.LogError(423425,"Intune_TargetGroupsController: ListGroups error: {0}".Format(n.data))})}function a(n){if(t.IntuneModel.s
2023-07-21 16:51:06 UTC	12089	IN	Data Raw: 64 65 6c 3d 69 2c 6e 2e 24 6c 61 62 65 6c 3d 72 2c 6e 2e 6d 6f 64 65 72 6e 53 65 61 72 63 68 54 65 72 6d 3d 22 22 2c 74 2e 52 65 73 75 6c 74 54 79 70 65 3d 3d 27 75 73 65 72 27 3f 28 75 3d 65 28 27 65 64 69 74 55 73 65 72 27 2c 74 29 2c 6e 2e 70 61 6e 65 6c 2e 69 6e 76 6f 6b 65 28 75 29 29 3a 74 2e 52 65 73 75 6c 74 54 79 70 65 3d 3d 27 67 72 6f 75 70 27 26 26 28 75 3d 65 28 27 65 64 69 74 47 72 6f 75 70 27 2c 74 29 2c 6e 2e 70 61 6e 65 6c 2e 69 6e 76 6f 6b 65 28 75 29 29 7d 2c 6e 2e 69 6e 69 74 43 61 6c 6c 62 61 63 6b 46 6c 79 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 66 6c 79 6f 75 74 3d 74 7d 2c 6e 2e 69 6e 69 74 43 61 6c 6c 62 61 63 6b 50 61 6e 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 70 61 6e 65 6c 3d 74 7d 2c 6e 2e 24 6f 6e 28 Data Ascii: del=i,n.$label=r,n.modernSearchTerm="",t.ResultType=='user'?(u=e('editUser',t),n.panel.invoke(u)):t.ResultType=='group'&&(u=e('editGroup',t),n.panel.invoke(u))},n.initCallbackFlyout=function(t){n.flyout=t},n.initCallbackPanel=function(t){n.panel=t},n.$on(
2023-07-21 16:51:06 UTC	12105	IN	Data Raw: 63 6b 65 72 2e 6d 61 6d 44 65 76 69 63 65 73 43 6f 75 6e 74 3d 75 2e 6c 65 6e 67 74 68 29 3a 74 2e 64 65 76 69 63 65 50 69 63 6b 65 72 2e 6d 61 6d 44 65 76 69 63 65 73 43 6f 75 6e 74 3d 30 2c 74 2e 72 65 74 72 69 65 76 65 44 65 76 69 63 65 73 4d 6f 64 65 6c 2e 45 6e 64 4f 70 65 72 61 74 69 6f 6e 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 72 65 74 72 69 65 76 65 44 65 76 69 63 65 73 4d 6f 64 65 6c 2e 53 65 74 4f 70 65 72 61 74 69 6f 6e 45 72 72 6f 72 28 6e 29 7d 29 7d 7d 2c 74 2e 55 70 64 61 74 65 53 65 6c 65 63 74 65 64 4d 64 6d 44 65 76 69 63 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 69 66 28 6e 2e 53 75 70 70 6f 72 74 73 52 65 6d 6f 76 65 43 6f 6d 70 61 6e 79 44 61 74 61 29 69 66 28 69 26 26 28 6e 2e 69 73 43 68 65 63 6b 65 64 3d 21 Data Ascii: cker.mamDevicesCount=u.length):t.devicePicker.mamDevicesCount=0,t.retrieveDevicesModel.EndOperation()},function(n){t.retrieveDevicesModel.SetOperationError(n)})}},t.UpdateSelectedMdmDevices=function(n,i){if(n.SupportsRemoveCompanyData)if(i&&(n.isChecked=!
2023-07-21 16:51:06 UTC	12121	IN	Data Raw: 65 73 5b 30 5d 3b Data Ascii: es[0];
2023-07-21 16:51:06 UTC	12121	IN	Data Raw: 6e 2e 66 69 6c 65 6e 61 6d 65 3d 72 2e 6e 61 6d 65 7d 2c 6e 2e 53 75 62 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 2e 65 76 65 6e 74 29 7b 6e 2e 49 73 43 68 61 6e 67 65 64 3d 21 31 3b 76 61 72 20 75 3d 6e 2e 65 76 65 6e 74 2e 74 61 72 67 65 74 2c 66 3d 75 2e 66 69 6c 65 73 5b 30 5d 2c 72 3d 6e 65 77 20 46 69 6c 65 52 65 61 64 65 72 3b 6e 2e 73 68 6f 77 57 61 69 74 69 6e 67 49 6e 64 69 63 61 74 6f 72 3d 21 30 2c 72 2e 6f 6e 6c 6f 61 64 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 66 3d 75 2e 74 61 72 67 65 74 3b 66 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 32 26 26 28 6e 2e 61 70 70 6c 65 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 43 65 72 74 69 66 69 63 61 74 65 2e 43 65 72 74 69 66 69 63 61 74 65 3d 72 2e 72 65 73 75 6c Data Ascii: n.filename=r.name},n.Submit=function(t){if(n.event){n.IsChanged=!1;var u=n.event.target,f=u.files[0],r=new FileReader;n.showWaitingIndicator=!0,r.onloadend=function(u){var f=u.target;f.readyState==2&&(n.applePushNotificationCertificate.Certificate=r.resul
2023-07-21 16:51:06 UTC	12137	IN	Data Raw: 2e 4d 69 6e 75 74 65 73 4f 66 49 6e 61 63 74 69 76 69 74 79 42 65 66 6f 72 65 53 63 72 65 65 6e 54 69 6d 65 6f 75 74 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 43 72 65 61 74 65 50 6f 6c 69 63 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 69 66 6f 53 65 72 76 69 63 65 2e 43 72 65 61 74 65 43 6f 6d 70 6c 69 61 6e 63 65 50 6f 6c 69 63 79 28 6e 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 55 70 64 61 74 65 50 6f 6c 69 63 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 69 66 6f 53 65 72 76 69 63 65 2e 55 70 64 61 74 65 43 6f 6d 70 6c 69 61 6e 63 65 50 6f 6c 69 63 79 28 6e 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 44 65 73 63 72 69 70 74 69 6f 6e 3d 74 Data Ascii: .MinutesOfInactivityBeforeScreenTimeout},i.prototype.CreatePolicy=function(n){return this.MifoService.CreateCompliancePolicy(n)},i.prototype.UpdatePolicy=function(n){return this.MifoService.UpdateCompliancePolicy(n).then(function(t){return n.Description=t
2023-07-21 16:51:06 UTC	12153	IN	Data Raw: 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 54 6f 67 67 6c 65 48 69 67 68 6c 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 24 28 22 2e 67 72 69 64 52 6f 77 22 29 2e 63 73 73 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 2c 22 74 72 61 6e 73 70 61 72 65 6e 74 22 29 2c 24 28 22 23 75 73 65 72 5f 6c 69 73 74 5f 22 2b 6e 29 2e 63 73 73 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 2c 22 23 44 44 45 42 46 37 22 29 7d 2c 66 3d 74 2e 24 6f 6e 28 27 68 69 67 68 6c 69 67 68 74 73 65 6c 65 63 74 65 64 72 6f 77 27 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 61 6e 67 75 6c 61 72 2e 69 73 44 65 66 69 6e 65 64 28 69 29 26 26 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 54 6f 67 67 6c 65 48 69 67 68 6c 69 67 68 74 28 69 29 7d 29 2c 74 2e 49 6e 74 Data Ascii: t.IntuneModel.ToggleHighlight=function(n){$(".gridRow").css("background-color","transparent"),$("#user_list_"+n).css("background-color","#DDEBF7")},f=t.$on('highlightselectedrow',function(n,i){angular.isDefined(i)&&t.IntuneModel.ToggleHighlight(i)}),t.Int
2023-07-21 16:51:06 UTC	12169	IN	Data Raw: 28 29 7b 74 2e 7a 74 64 4d 6f 64 65 6c 2e 61 6c 6c 47 72 6f 75 70 73 3d 5b 5d 2c 75 2e 47 65 74 41 6c 6c 47 72 6f 75 70 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 64 61 74 61 2e 6c 65 6e 67 74 68 3e 30 26 26 6e 2e 64 61 74 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 21 3d 3d 22 30 22 29 7b 76 61 72 20 69 3d 6e 65 77 20 44 61 74 65 2c 72 3d 69 2e 67 65 74 4d 6f 6e 74 68 28 29 2b 31 2c 75 3d 72 2b 22 2f 22 2b 69 2e 67 65 74 44 61 74 65 28 29 2b 22 2f 22 2b 69 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 66 3d 7b 69 73 43 68 65 63 6b 65 64 3a 21 31 2c 44 65 76 69 63 65 47 72 6f 75 70 3a 6e 2c 50 72 6f 66 69 6c 65 3a 74 2e 7a 74 64 4d 6f 64 65 6c 2e 6e 6f 6e 65 2c 44 61 74 65 41 64 64 65 64 3a 75 7d Data Ascii: (){t.ztdModel.allGroups=[],u.GetAllGroups().then(function(n){n.data.length>0&&n.data.forEach(function(n){if(n!=="0"){var i=new Date,r=i.getMonth()+1,u=r+"/"+i.getDate()+"/"+i.getFullYear(),f={isChecked:!1,DeviceGroup:n,Profile:t.ztdModel.none,DateAdded:u}
2023-07-21 16:51:06 UTC	12185	IN	Data Raw: 3d 7b 52 65 67 69 73 74 72 61 74 69 6f 6e 49 64 3a 6e 2e 52 65 67 69 73 74 72 61 74 69 6f 6e 49 64 2c 43 6f 6e 66 69 67 50 72 6f 66 69 6c 65 49 64 3a 66 7d 3b 75 2e 70 75 73 68 28 74 29 7d 29 2c 69 2e 55 70 64 61 74 65 44 65 76 69 63 65 73 50 72 6f 66 69 6c 65 28 75 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 74 61 74 75 73 4d 65 73 73 61 67 65 3d 27 43 68 61 6e 67 65 20 69 6e 20 70 72 6f 67 72 65 73 73 2c 20 69 74 20 6d 61 79 20 74 61 6b 65 20 61 20 66 65 77 20 6d 69 6e 75 74 65 73 20 66 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 73 20 74 6f 20 62 65 20 75 70 64 61 74 65 64 2e 27 2c 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 68 6f 77 53 75 6d 6d 61 72 79 3d 21 30 2c 74 2e 7a 74 64 4d 6f 64 65 6c 2e 69 73 4c 6f 61 Data Ascii: ={RegistrationId:n.RegistrationId,ConfigProfileId:f};u.push(t)}),i.UpdateDevicesProfile(u).then(function(n){t.ztdModel.statusMessage='Change in progress, it may take a few minutes for your devices to be updated.',t.ztdModel.showSummary=!0,t.ztdModel.isLoa
2023-07-21 16:51:06 UTC	12201	IN	Data Raw: 65 6c 2e 7a 74 64 50 72 6f 66 69 6c 65 3d 6e 7d 2c 74 2e 54 6f 67 67 6c 65 41 75 74 6f 50 69 6c 6f 74 44 65 74 61 69 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 68 6f 77 41 75 74 6f 50 69 6c 6f 74 44 65 74 61 69 6c 73 3d 21 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 68 6f 77 41 75 74 6f 50 69 6c 6f 74 44 65 74 61 69 6c 73 2c 61 6e 67 75 6c 61 72 2e 65 6c 65 6d 65 6e 74 28 6e 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 68 6f 77 41 75 74 6f 50 69 6c 6f 74 44 65 74 61 69 6c 73 29 7d 2c 74 2e 53 68 6f 77 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 2c 6e 2c 75 3b 69 66 28 74 2e 7a 74 64 Data Ascii: el.ztdProfile=n},t.ToggleAutoPilotDetails=function(n){t.ztdModel.showAutoPilotDetails=!t.ztdModel.showAutoPilotDetails,angular.element(n.currentTarget).attr("aria-expanded",t.ztdModel.showAutoPilotDetails)},t.ShowConfirmation=function(){var r,n,u;if(t.ztd
2023-07-21 16:51:06 UTC	12217	IN	Data Raw: 6f 6e 74 65 6e 74 Data Ascii: ontent
2023-07-21 16:51:06 UTC	12217	IN	Data Raw: 27 29 3a 6e 2c 75 3d 66 2e 69 6e 64 65 78 28 63 29 3b 69 66 28 69 2e 73 68 69 66 74 4b 65 79 26 26 75 21 3d 30 29 6f 3d 61 6e 67 75 6c 61 72 2e 65 6c 65 6d 65 6e 74 28 66 5b 75 2d 31 5d 29 2c 6f 2e 66 6f 63 75 73 28 29 2c 24 28 27 23 53 68 65 6c 6c 42 6f 64 79 41 6e 64 46 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 27 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 6f 2e 70 6f 73 69 74 69 6f 6e 28 29 2e 74 6f 70 2d 32 30 29 3b 65 6c 73 65 7b 69 66 28 75 3d 3d 3d 66 2e 6c 65 6e 67 74 68 2d 31 7c 7c 69 2e 73 68 69 66 74 4b 65 79 29 7b 69 66 28 75 3d 3d 3d 30 29 7b 24 28 27 23 53 68 65 6c 6c 42 6f 64 79 41 6e 64 46 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 27 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3b 72 65 74 75 72 6e 7d 69 66 28 75 3d 3d 3d 72 2e 6c 65 6e 67 74 68 2d Data Ascii: '):n,u=f.index(c);if(i.shiftKey&&u!=0)o=angular.element(f[u-1]),o.focus(),$('#ShellBodyAndFooterContainer').scrollTop(o.position().top-20);else{if(u===f.length-1\|\|i.shiftKey){if(u===0){$('#ShellBodyAndFooterContainer').scrollTop(0);return}if(u===r.length-
2023-07-21 16:51:06 UTC	12233	IN	Data Raw: 3b 6e 2b 2b 29 74 2e 70 75 73 68 28 7b 6f 6e 3a 21 31 2c 74 6f 6f 6c 74 69 70 3a 72 5b 6e 5d 7d 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 76 61 72 20 69 3d 7b 7d 2c 74 3b 69 2e 65 76 65 6e 74 57 6f 72 6b 6c 6f 61 64 3d 6e 2e 65 76 65 6e 74 57 6f 72 6b 6c 6f 61 64 2c 69 2e 65 76 65 6e 74 49 64 3d 6e 2e 65 76 65 6e 74 49 64 3b 66 6f 72 28 74 20 69 6e 20 6e 2e 69 6e 63 6f 72 72 65 63 74 46 69 65 6c 64 73 29 69 5b 22 65 72 72 5f 22 2b 74 5d 3d 6e 2e 69 6e 63 6f 72 72 65 63 74 46 69 65 6c 64 73 5b 74 5d 3b 66 6f 72 28 74 20 69 6e 20 6e 2e 73 6e 61 70 73 68 6f 74 29 69 5b 22 73 6e 61 70 73 68 6f 74 5f 22 2b 74 5d 3d 6e 2e 73 6e 61 70 73 68 6f 74 5b 74 5d 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 Data Ascii: ;n++)t.push({on:!1,tooltip:r[n]});return t}function e(n){var i={},t;i.eventWorkload=n.eventWorkload,i.eventId=n.eventId;for(t in n.incorrectFields)i["err_"+t]=n.incorrectFields[t];for(t in n.snapshot)i["snapshot_"+t]=n.snapshot[t];return i}function l(){va
2023-07-21 16:51:06 UTC	12249	IN	Data Raw: 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 43 61 6e 63 65 6c 20 22 2b 77 74 2b 22 27 20 6e 67 2d 63 6c 69 63 6b 3d 27 70 61 6e 65 6c 43 6c 6f 73 65 28 65 2c 20 74 72 75 65 29 27 20 61 72 69 61 2d 6c 61 62 65 6c 3d 27 7b 7b 68 65 61 64 65 72 54 69 74 6c 65 7d 7d 20 22 2b 64 2b 22 27 20 74 69 74 6c 65 3d 27 22 2b 64 2b 22 27 3e 3c 2f 62 75 74 74 6f 6e 3e 20 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 70 72 6f 66 69 6c 65 43 61 72 64 7d 20 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 6e 67 2d 69 66 3d 27 74 69 74 6c 65 27 20 63 6c 61 73 73 Data Ascii: n-FabricMDL2--Cancel "+wt+"' ng-click='panelClose(e, true)' aria-label='{{headerTitle}} "+d+"' title='"+d+"'></button> \ {profileCard} \ <div ng-if='title' class
2023-07-21 16:51:06 UTC	12265	IN	Data Raw: 66 2d 6d 72 67 6e 2d 74 6f 70 2d 36 30 70 78 27 3e 3c 2f 64 69 76 3e 20 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 20 3e 20 22 29 3a 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 53 68 65 6c 6c 42 6f 64 79 41 6e 64 46 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 22 29 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 31 39 30 30 22 2c 70 3d 22 3c 64 69 76 20 69 64 20 3d 27 66 6c 79 6f 75 74 43 6f 76 65 72 27 20 63 6c 61 73 73 3d 27 66 6c 79 6f 75 74 43 6f 76 65 72 27 3e 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 20 3d 27 66 6c 79 6f 75 74 27 20 Data Ascii: f-mrgn-top-60px'></div> \ </div > "):(document.getElementById("ShellBodyAndFooterContainer").style.zIndex="1900",p="<div id ='flyoutCover' class='flyoutCover'>\ <div id ='flyout'
2023-07-21 16:51:06 UTC	12281	IN	Data Raw: 6e 74 49 64 29 2e 66 6f 63 75 73 28 29 7d 2c 63 2e 70 69 63 6b 65 72 2e 52 65 66 72 65 73 68 4c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 43 6c 65 61 72 53 65 61 72 63 68 28 29 2c 63 2e 70 69 63 6b 65 72 2e 61 6c 6c 49 74 65 6d 73 3d 5b 5d 2c 63 2e 70 69 63 6b 65 72 2e 70 61 67 65 54 6f 6b 65 6e 3d 6e 75 6c 6c 2c 63 2e 70 69 63 6b 65 72 2e 63 75 72 72 65 6e 74 50 61 67 65 54 6f 6b 65 6e 3d 6e 75 6c 6c 2c 79 28 6e 75 6c 6c 29 7d 2c 63 2e 53 65 61 72 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 63 2e 73 65 61 72 63 68 56 61 6c 75 65 3d 6e 2c 63 2e 73 65 61 72 63 68 52 65 73 75 6c 74 73 3d 7b 61 6c 6c 49 74 65 6d 73 3a 5b 5d 2c 6c 6f 61 64 69 6e 67 4d 65 6d 62 65 72 73 3a 21 31 2c 70 61 67 65 54 6f 6b 65 6e 3a 6e 75 6c 6c 2c 63 75 72 72 65 Data Ascii: ntId).focus()},c.picker.RefreshList=function(){c.ClearSearch(),c.picker.allItems=[],c.picker.pageToken=null,c.picker.currentPageToken=null,y(null)},c.Search=function(n){if(c.searchValue=n,c.searchResults={allItems:[],loadingMembers:!1,pageToken:null,curre
2023-07-21 16:51:06 UTC	12309	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 3d 7b 7d 7d 29 3b 76 61 72 20 6f 3d 22 3c 64 69 76 20 6e 67 2d 69 66 3d 5c 22 53 68 6f 77 43 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 44 69 76 28 29 5c 22 20 63 6c 61 73 73 3d 5c 22 66 31 31 2d 6d 72 67 6e 2d 74 6f 70 2d 33 32 70 78 5c 22 3e 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 20 63 6c 61 73 73 3d 5c 22 6c 69 73 74 48 65 61 64 65 72 53 65 70 61 72 61 74 6f 72 5c 22 20 6e 67 2d 73 68 6f 77 3d 5c 22 7b 25 6e 67 73 68 6f 77 56 61 6c 25 7d 5c 22 20 2f 3e 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 Data Ascii: function(){u.contextMenu={}});var o="<div ng-if=\"ShowContextualHelpDiv()\" class=\"f11-mrgn-top-32px\">\ <hr class=\"listHeaderSeparator\" ng-show=\"{%ngshowVal%}\" />\ <div class=\"
2023-07-21 16:51:06 UTC	12325	IN	Data Raw: 28 6e 2c 74 2c 69 2c 72 2c 75 29 7b 69 66 28 74 6f 67 67 6c 65 43 6c 69 65 6e 74 49 64 3d 22 41 75 74 6f 52 65 6e 65 77 54 6f 67 67 6c 65 5f 22 2b 6e 2c 74 6f 67 67 6c 65 50 72 6f 63 65 73 73 69 6e 67 21 3d 21 30 26 26 54 6f 67 67 6c 65 53 77 69 74 63 68 2e 47 65 74 53 74 61 74 65 28 74 6f 67 67 6c 65 43 6c 69 65 6e 74 49 64 29 21 3d 54 6f 67 67 6c 65 53 77 69 74 63 68 2e 57 61 69 74 69 6e 67 53 74 61 74 65 29 7b 69 66 28 65 6e 61 62 6c 65 4f 6e 65 54 69 6d 65 52 65 6e 65 77 61 6c 3d 21 31 2c 74 6f 67 67 6c 65 4f 6c 64 53 74 61 74 65 3d 54 6f 67 67 6c 65 53 77 69 74 63 68 2e 47 65 74 53 74 61 74 65 28 74 6f 67 67 6c 65 43 6c 69 65 6e 74 49 64 29 2c 69 26 26 74 6f 67 67 6c 65 4f 6c 64 53 74 61 74 65 3d 3d 54 6f 67 67 6c 65 53 77 69 74 63 68 2e 4f 66 66 53 Data Ascii: (n,t,i,r,u){if(toggleClientId="AutoRenewToggle_"+n,toggleProcessing!=!0&&ToggleSwitch.GetState(toggleClientId)!=ToggleSwitch.WaitingState){if(enableOneTimeRenewal=!1,toggleOldState=ToggleSwitch.GetState(toggleClientId),i&&toggleOldState==ToggleSwitch.OffS
2023-07-21 16:51:06 UTC	12341	IN	Data Raw: 65 4d 61 74 63 68 53 75 62 6d 69 74 52 65 73 75 6c 74 52 6f 77 22 29 2e 73 68 6f 77 28 29 2c 24 28 22 23 73 75 62 6d 69 74 45 72 72 6f 72 4d 73 67 22 29 2e 66 6f 63 75 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 49 6e 76 6f 69 63 65 4d 61 74 63 68 43 61 6c 6c 62 61 63 6b 28 6e 29 7b 69 66 28 49 73 49 6e 74 65 67 65 72 28 6e 29 29 7b 76 61 72 20 74 3d 24 28 22 23 73 75 63 63 65 73 73 4d 73 67 54 65 6d 70 6c 61 74 65 22 29 2e 76 61 6c 28 29 3b 24 28 22 23 73 75 62 6d 69 74 53 75 63 63 65 73 73 4d 73 67 22 29 2e 74 65 78 74 28 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 74 2c 6e 29 29 2c 24 28 22 23 73 75 62 6d 69 74 45 72 72 6f 72 4d 73 67 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 73 75 62 6d 69 74 53 75 63 63 65 73 73 4d 73 67 22 29 2e 73 68 6f Data Ascii: eMatchSubmitResultRow").show(),$("#submitErrorMsg").focus()}function submitInvoiceMatchCallback(n){if(IsInteger(n)){var t=$("#successMsgTemplate").val();$("#submitSuccessMsg").text(String.format(t,n)),$("#submitErrorMsg").hide(),$("#submitSuccessMsg").sho
2023-07-21 16:51:06 UTC	12357	IN	Data Raw: 6f 6e 44 61 74 65 22 29 2e 76 61 6c 28 69 5b 34 5d 29 2c 24 28 22 23 65 72 72 6f 72 43 6f 64 65 22 29 2e 76 61 6c 28 69 5b 35 5d 29 29 29 3a 28 24 28 22 23 61 6c 6c 53 65 74 74 6c 65 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4c 61 62 22 29 2e 74 65 78 74 28 72 29 2c 24 28 22 23 61 6c 6c 53 65 74 74 6c 65 64 54 69 74 6c 65 4c 61 62 22 29 2e 74 65 78 74 28 27 53 6f 72 72 79 2c 20 74 68 65 72 65 20 69 73 20 61 20 70 72 6f 62 6c 65 6d 2e 27 29 29 29 3a 28 24 28 22 23 70 61 79 6d 65 6e 74 70 61 6e 65 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 61 6c 6c 73 65 74 74 6c 65 6d 65 6e 74 70 61 6e 65 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 70 61 72 74 69 61 6c 53 65 74 74 6c 65 6d 65 6e 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 6f 77 22 29 2e 74 65 78 74 28 72 29 2c 24 Data Ascii: onDate").val(i[4]),$("#errorCode").val(i[5]))):($("#allSettledNotificationLab").text(r),$("#allSettledTitleLab").text('Sorry, there is a problem.'))):($("#paymentpane").hide(),$("#allsettlementpane").hide(),$("#partialSettlementNotificationRow").text(r),$
2023-07-21 16:51:06 UTC	12373	IN	Data Raw: 64 65 72 6e 29 29 2c 76 28 21 31 29 2c 6e 74 28 61 29 2c 6e 2e 55 73 65 50 69 64 6c 26 26 66 28 69 29 26 26 24 28 22 23 50 61 79 6d 65 6e 74 43 6f 6c 6c 65 63 74 69 6f 6e 4c 6f 61 64 69 6e 67 22 29 2e 68 69 64 65 28 29 29 2c 69 2e 66 6f 72 6d 26 26 69 2e 66 6f 72 6d 2e 42 69 6c 6c 69 6e 67 41 64 64 72 65 73 73 53 68 65 65 74 24 49 6e 76 6f 69 63 65 43 6f 75 6e 74 72 79 43 6f 64 65 48 69 64 64 65 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 68 72 65 65 64 73 49 6e 66 6f 41 6c 65 72 74 42 61 72 22 29 26 26 28 6e 2e 49 73 47 65 6d 69 6e 69 26 26 69 2e 76 61 6c 75 65 3d 3d 27 30 27 26 26 69 2e 66 6f 72 6d 2e 42 69 6c 6c 69 6e 67 41 64 64 72 65 73 73 53 68 65 65 74 24 49 6e 76 6f 69 63 65 43 6f 75 6e 74 72 79 43 6f 64 Data Ascii: dern)),v(!1),nt(a),n.UsePidl&&f(i)&&$("#PaymentCollectionLoading").hide()),i.form&&i.form.BillingAddressSheet$InvoiceCountryCodeHidden&&document.getElementById("threedsInfoAlertBar")&&(n.IsGemini&&i.value=='0'&&i.form.BillingAddressSheet$InvoiceCountryCod
2023-07-21 16:51:06 UTC	12389	IN	Data Raw: 30 30 30 22 2b 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 34 29 7d 29 2b 27 22 27 3a 27 22 27 2b 6e 2b 27 22 27 7d 66 75 6e 63 74 69 6f 6e 20 75 28 69 2c 66 29 7b 76 61 72 20 63 2c 6c 2c 73 2c 61 2c 76 3d 6e 2c 68 2c 65 3d 66 5b 69 5d 3b 65 26 26 74 79 70 65 6f 66 20 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 65 2e 74 6f 4a 53 4f 4e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 2e 74 6f 4a 53 4f 4e 28 69 29 29 2c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 74 2e 63 61 6c 6c 28 66 2c 69 2c 65 29 29 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 65 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 6f 28 65 29 3b 63 61 73 Data Ascii: 000"+n.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+n+'"'}function u(i,f){var c,l,s,a,v=n,h,e=f[i];e&&typeof e=="object"&&typeof e.toJSON=="function"&&(e=e.toJSON(i)),typeof t=="function"&&(e=t.call(f,i,e));switch(typeof e){case"string":return o(e);cas
2023-07-21 16:51:06 UTC	12405	IN	Data Raw: 67 53 65 72 76 69 63 65 2e 4c 6f 67 54 6f 53 65 72 76 65 72 57 69 74 68 54 61 67 49 64 28 6e 2c 74 2c 69 2c 6e 75 6c 6c 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 43 6c 69 65 6e 74 4c 6f 67 53 65 72 76 69 63 65 2e 45 72 72 6f 72 43 61 6c 6c 62 61 63 6b 29 7d 2c 6e 2e 53 65 74 42 69 6c 6c 4f 76 65 72 76 69 65 77 43 6f 6f 6b 69 65 73 41 6e 64 52 65 64 69 72 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 6e 21 3d 6e 75 6c 6c 26 26 6e 21 3d 27 27 26 26 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 53 68 61 72 65 64 2e 53 65 74 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 28 22 4f 72 64 65 72 44 65 74 61 69 6c 73 22 2c 6e 2c 22 2f 22 29 2c 74 21 3d 6e 75 6c 6c 26 26 74 21 3d 27 27 26 26 4d 69 63 Data Ascii: gService.LogToServerWithTagId(n,t,i,null,Microsoft.Online.BOX.JS.ClientLogService.ErrorCallback)},n.SetBillOverviewCookiesAndRedirect=function(n,t,i){n!=null&&n!=''&&Microsoft.Online.BOX.JS.Shared.SetSessionCookie("OrderDetails",n,"/"),t!=null&&t!=''&&Mic
2023-07-21 16:51:06 UTC	12421	IN	Data Raw: 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 2c 66 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2c 6e 2e 4a 53 2e 44 69 61 6c 6f 67 4d 61 6e 61 67 65 72 2e 67 65 74 5f 69 73 42 72 6f 77 73 65 72 49 45 28 29 26 26 68 26 26 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 5f 72 65 73 69 7a 65 43 6f 6e 74 65 6e 74 46 72 61 6d 65 4f 6e 49 45 52 65 61 64 79 28 29 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 65 73 69 7a 65 43 6f 6e 74 65 6e 74 46 72 61 6d 65 4f 6e 49 45 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 74 2c 72 3b 74 72 79 7b 69 66 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 6e Data Ascii: .appendChild(r),f.appendChild(o),n.JS.DialogManager.get_isBrowserIE()&&h&&window.setTimeout(function(){l._resizeContentFrameOnIEReady()},0)},t.prototype._resizeContentFrameOnIEReady=function(){var i=this,t,r;try{if(t=document.getElementById(this.getConten
2023-07-21 16:51:06 UTC	12437	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 6e 44 72 61 67 3d 6e 2c 6e 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 68 61 73 53 68 69 65 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 61 73 53 68 69 65 6c 64 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 5f 68 61 73 53 68 69 65 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 61 73 53 68 69 65 6c 64 3d 6e 2c 6e 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 73 68 6f 77 44 65 63 6f 72 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 68 6f 77 44 65 63 6f 72 61 74 69 6f 6e 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 5f 73 68 6f Data Ascii: function(n){return this._canDrag=n,n},n.prototype.get_hasShield=function(){return this._hasShield},n.prototype.set_hasShield=function(n){return this._hasShield=n,n},n.prototype.get_showDecoration=function(){return this._showDecoration},n.prototype.set_sho
2023-07-21 16:51:06 UTC	12453	IN	Data Raw: 20 41 64 6d 69 6e 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 7d 72 65 74 75 72 6e 20 6e 2e 43 6c 69 65 6e 74 53 69 64 65 4c 6f 67 67 69 6e 67 53 74 61 74 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 72 65 74 75 72 6e 22 43 6c 69 65 6e 74 53 69 64 65 7c 22 2b 6e 2b 22 7c 22 2b 74 2b 22 7c 22 2b 69 7d 2c 6e 2e 41 64 6d 69 6e 43 65 6e 74 65 72 4c 6f 67 67 69 6e 67 53 74 61 74 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 41 64 6d 69 6e 43 65 6e 74 65 72 7c 22 2b 6e 7d 2c 6e 2e 53 68 6f 77 56 65 72 69 66 69 65 64 44 6f 6d 61 69 6e 73 3d 22 53 68 6f 77 20 56 65 72 69 66 69 65 64 20 44 6f 6d 61 69 6e 73 22 2c 6e 2e 41 64 64 Data Ascii: Admin;(function(n){var t=function(){function n(){}return n.ClientSideLoggingStatement=function(n,t,i){return"ClientSide\|"+n+"\|"+t+"\|"+i},n.AdminCenterLoggingStatement=function(n){return"AdminCenter\|"+n},n.ShowVerifiedDomains="Show Verified Domains",n.Add

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
247	192.168.2.5	50105	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	11260	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/mscorlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	11630	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42104 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:16:30 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=41846002964526763567505715616949469831"}],"include_subdomains ":true} Server: ECAcc (muc/330D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7ca86155-801e-001f-0191-bb79c5000000 Content-Length: 24942 Connection: close
2023-07-21 16:51:06 UTC	11647	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 6e 3f 6e 2e 70 75 73 68 28 74 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 69 2c 74 2c 72 3b 69 66 28 6e 29 66 6f 72 28 69 3d 6e 2c 6e 3d 6e 75 6c 6c 2c 74 3d 30 2c 72 3d 69 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 2b 29 69 5b 74 5d 28 29 7d 76 61 72 20 75 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 37 2e 32 2e 30 22 2c 69 73 55 6e 64 65 66 69 6e 65 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7d 2c 69 73 4e 75 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 6e 75 6c 6c 7d 2c 69 73 4e 75 6c 6c 4f 72 55 6e 64 65 66 69 6e 65 64 3a 66 75 6e Data Ascii: (function(){function f(t){n?n.push(t):setTimeout(t,0)}function i(){var i,t,r;if(n)for(i=n,n=null,t=0,r=i.length;t<r;t++)i[t]()}var u={version:"0.7.2.0",isUndefined:function(n){return n===undefined},isNull:function(n){return n===null},isNullOrUndefined:fun
2023-07-21 16:51:06 UTC	11663	IN	Data Raw: 69 73 4e 61 6d 65 73 70 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 5f 6e 61 6d 65 73 70 61 63 65 3d 3d 21 30 7d 2c 54 79 70 65 2e 63 61 6e 43 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 54 79 70 65 28 6e 29 7d 2c 54 79 70 65 2e 73 61 66 65 43 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 54 79 70 65 28 6e 29 3f 6e 3a 6e 75 6c 6c 7d 2c 54 79 70 65 2e 67 65 74 49 6e 73 74 61 6e 63 65 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 74 72 79 7b 74 3d 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7d 63 61 74 63 68 28 69 29 7b 7d 72 65 74 75 72 6e 20 74 26 Data Ascii: isNamespace=function(n){return n.__namespace==!0},Type.canCast=function(n,t){return t.isInstanceOfType(n)},Type.safeCast=function(n,t){return t.isInstanceOfType(n)?n:null},Type.getInstanceType=function(n){var t=null;try{t=n.constructor}catch(i){}return t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
248	192.168.2.5	50106	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	11736	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/listgrid.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	12023	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 71154 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:16:01 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=146706281466082896209045573713768105253"}],"include_subdomains ":true} Server: ECAcc (muc/336A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 198339d0-b01e-002b-744d-bb4a0d000000 Content-Length: 61371 Connection: close
2023-07-21 16:51:06 UTC	12024	IN	Data Raw: 76 61 72 20 4e 61 76 69 67 61 74 65 50 61 67 65 2c 42 4f 58 2c 4c 69 73 74 47 72 69 64 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 4e 6f 43 68 61 6e 67 65 3d 30 5d 3d 22 4e 6f 43 68 61 6e 67 65 22 2c 6e 5b 6e 2e 46 69 72 73 74 3d 31 5d 3d 22 46 69 72 73 74 22 2c 6e 5b 6e 2e 50 72 65 76 69 6f 75 73 3d 32 5d 3d 22 50 72 65 76 69 6f 75 73 22 2c 6e 5b 6e 2e 4e 65 78 74 3d 34 5d 3d 22 4e 65 78 74 22 2c 6e 5b 6e 2e 4c 61 73 74 3d 38 5d 3d 22 4c 61 73 74 22 2c 6e 5b 6e 2e 44 69 72 65 63 74 3d 31 36 5d 3d 22 44 69 72 65 63 74 22 7d 29 28 4e 61 76 69 67 61 74 65 50 61 67 65 7c 7c 28 4e 61 76 69 67 61 74 65 50 61 67 65 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: var NavigatePage,BOX,ListGrid;(function(n){n[n.NoChange=0]="NoChange",n[n.First=1]="First",n[n.Previous=2]="Previous",n[n.Next=4]="Next",n[n.Last=8]="Last",n[n.Direct=16]="Direct"})(NavigatePage\|\|(NavigatePage={})),function(n){var t;(function(n){function
2023-07-21 16:51:06 UTC	12040	IN	Data Raw: 76 Data Ascii: v
2023-07-21 16:51:06 UTC	12040	IN	Data Raw: 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 53 65 61 72 63 68 54 65 78 74 62 6f 78 42 6c 75 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6f 6e 53 68 6f 77 57 61 74 65 72 6d 61 72 6b 54 65 78 74 28 74 68 69 73 2e 5f 73 65 61 72 63 68 54 65 78 74 42 6f 78 45 6c 65 6d 65 6e 74 2c 21 30 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 53 65 61 72 63 68 54 65 78 74 62 6f 78 46 6f 63 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6f 6e 53 68 6f 77 57 61 74 65 72 6d 61 72 6b 54 65 78 74 28 74 68 69 73 2e 5f 73 65 61 72 63 68 54 65 78 74 42 6f 78 45 6c 65 6d 65 6e 74 2c 21 31 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 53 68 6f 77 57 61 74 65 72 6d 61 72 6b 54 65 78 74 3d 66 75 6e Data Ascii: entDefault()},n.prototype._onSearchTextboxBlur=function(){this._onShowWatermarkText(this._searchTextBoxElement,!0)},n.prototype._onSearchTextboxFocus=function(){this._onShowWatermarkText(this._searchTextBoxElement,!1)},n.prototype._onShowWatermarkText=fun
2023-07-21 16:51:06 UTC	12455	IN	Data Raw: 29 29 3b 21 72 2e 57 69 64 74 68 7c 7c 21 72 2e 57 69 64 74 68 2e 6c 65 6e 67 74 68 7c 7c 65 2e 77 69 64 74 68 28 72 2e 57 69 64 74 68 29 2c 65 2e 61 74 74 72 28 27 73 63 6f 70 65 27 2c 27 63 6f 6c 27 29 2c 65 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 5f 67 72 69 64 76 69 65 77 48 65 61 64 65 72 52 6f 77 29 2c 24 28 22 3c 74 68 20 63 6c 61 73 73 3d 27 4c 69 73 74 47 72 69 64 2d 47 56 44 61 74 61 53 70 61 63 65 72 43 6f 6c 75 6d 6e 48 65 61 64 65 72 27 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 27 74 72 75 65 27 3e 26 6e 62 73 70 3b 3c 2f 74 68 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 5f 67 72 69 64 76 69 65 77 48 65 61 64 65 72 52 6f 77 29 7d 66 6f 72 28 74 68 69 73 2e 67 65 74 5f 5f 69 73 51 75 69 63 6b 50 61 6e 65 6c 56 69 73 69 62 6c 65 28 Data Ascii: ));!r.Width\|\|!r.Width.length\|\|e.width(r.Width),e.attr('scope','col'),e.appendTo(this._gridviewHeaderRow),$("<th class='ListGrid-GVDataSpacerColumnHeader' aria-hidden='true'> </th>").appendTo(this._gridviewHeaderRow)}for(this.get__isQuickPanelVisible(
2023-07-21 16:51:06 UTC	12471	IN	Data Raw: 3f 27 4c 61 73 74 50 61 67 65 42 75 74 74 6f 6e 27 3a 27 4c 61 73 74 50 61 67 65 42 75 74 74 6f 6e 44 69 73 61 62 6c 65 64 27 7d 69 21 3d 6e 75 6c 6c 26 26 28 69 2e 67 65 74 28 30 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 68 69 73 2e 5f 70 61 72 65 6e 74 4c 69 73 74 47 72 69 64 2e 67 65 74 49 63 6f 6e 4d 61 72 6b 75 70 28 72 29 2c 69 2e 67 65 74 28 30 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 68 69 73 2e 5f 74 69 74 6c 65 41 74 74 72 69 62 75 74 65 2c 74 68 69 73 2e 5f 70 61 72 65 6e 74 4c 69 73 74 47 72 69 64 2e 67 65 74 49 63 6f 6e 54 69 74 6c 65 28 72 29 29 2c 74 3f 28 69 2e 67 65 74 28 30 29 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 27 70 6f 69 6e 74 65 72 27 2c 69 2e 67 65 74 28 30 29 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 27 64 69 73 Data Ascii: ?'LastPageButton':'LastPageButtonDisabled'}i!=null&&(i.get(0).innerHTML=this._parentListGrid.getIconMarkup(r),i.get(0).setAttribute(this._titleAttribute,this._parentListGrid.getIconTitle(r)),t?(i.get(0).style.cursor='pointer',i.get(0).removeAttribute('dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
249	192.168.2.5	50107	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	12072	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/peoplepicker.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	12297	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47173 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=145506862687169339526401013274155470705"}],"include_subdomains ":true} Server: ECAcc (muc/3339) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 4fd53464-701e-001b-5d85-bbf4c2000000 Content-Length: 11639 Connection: close
2023-07-21 16:51:06 UTC	12298	IN	Data Raw: 76 61 72 20 50 65 6f 70 6c 65 50 69 63 6b 65 72 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 66 74 3d 6e 75 6c 6c 2c 77 3d 6e 75 6c 6c 2c 70 3d 6e 75 6c 6c 2c 79 3d 27 54 6f 6f 20 6d 61 6e 79 20 72 65 73 75 6c 74 73 2c 20 75 73 65 20 73 65 61 72 63 68 2e 27 2c 6e 74 3d 27 54 6f 74 61 6c 3a 20 7b 30 7d 27 2c 6b 3d 32 35 30 2c 75 2c 63 3b 74 68 69 73 2e 49 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 76 61 72 20 73 3d 24 28 22 23 22 2b 74 29 3b 4d 69 73 73 69 6e 67 49 6d 67 55 72 6c 3d 75 2e 4d 69 73 73 69 6e 67 49 6d 67 55 72 6c 2c 77 3d 75 2e 52 65 6d 6f 76 65 55 73 65 72 49 6d 67 55 72 6c 2c 70 3d 75 2e 44 65 6c 65 74 65 55 73 65 72 49 6d 67 55 72 6c 2c 73 2e 64 61 74 61 28 22 47 65 74 44 61 Data Ascii: var PeoplePicker=new function(){var n=this,ft=null,w=null,p=null,y='Too many results, use search.',nt='Total: {0}',k=250,u,c;this.Initialize=function(t,u){var s=$("#"+t);MissingImgUrl=u.MissingImgUrl,w=u.RemoveUserImgUrl,p=u.DeleteUserImgUrl,s.data("GetDa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.5	49794	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:33 UTC	1599	OUT	GET /static/fonts/KaTeX_Main-Regular.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1632	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 31220 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Fri, 05 Apr 2019 00:04:42 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:34 GMT Cache-Control: max-age=60 ETag: "bd65225294e9ad1114ded0a8bde4d38b" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 f6d3d027dc70c7291c2f685efb187ab2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 8QNJo_jKpwjCYgzA8M7O1sHz3XL8qUq5Yp5TMuf98lunF_8R2PWdew==
2023-07-21 16:50:33 UTC	1633	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 79 f4 00 0f 00 00 00 01 09 98 00 00 79 93 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 06 60 00 88 4a 08 3a 09 97 17 11 08 0a 83 c1 48 82 f2 1f 01 36 02 24 03 89 14 0b 84 4c 00 04 20 05 8e 7d 07 8f 46 0c 81 0a 1b 98 de 47 d0 6d db b1 34 4c e7 6d a5 f5 b1 a0 f8 4c 66 76 20 86 8d 03 83 83 7f 4a f6 ff ff 7f 6e 52 91 31 d3 00 49 d9 36 00 3f bc 5e ff 0b 89 d8 26 b9 16 28 a3 55 53 6e 7d ab a8 7d af b5 b6 d6 1c 8e d5 e7 ad 66 fb aa e3 2a 77 61 bf 4d fa 0e 8f 78 55 d4 e4 4f 52 82 63 92 93 7a d2 33 5e 51 a1 2b 0a 5d 54 f8 31 f1 ec e3 62 25 57 25 11 b7 36 71 cd 5f 78 63 83 0f 91 27 34 f7 6b 17 36 d2 85 77 cc a8 a8 a8 47 28 58 21 5e e7 39 db 99 46 86 95 1e 68 2c 83 7b 14 7e 59 72 f3 bf 09 ff Data Ascii: wOF2yy?FFTM`J:H6$L }FGm4LmLfv JnR1I6?^&(USn}}f*waMxUORcz3^Q+]T1b%W%6q_xc'4k6wG(X!^9Fh,{~Yr
2023-07-21 16:50:33 UTC	1649	IN	Data Raw: 6f 7f 55 c7 bf 1a 95 a7 c9 f7 09 ba 99 57 36 13 c2 21 58 3b 3f 65 f4 83 ab 9d 13 fa 79 b7 e0 56 62 f6 96 db 7c 92 e6 ba 18 7a ac 92 48 66 29 65 7b 6a 38 32 57 6f c8 59 19 2b 21 3e 37 90 88 89 b0 1a f2 d2 3b fd 5d c3 62 58 04 04 eb 60 e3 a0 46 2b 15 2e 78 57 69 e2 d2 45 2e e5 7e c1 c3 54 eb 48 d9 eb 37 e6 4e fb e0 d4 bf 5f 03 b7 88 71 4a 13 34 47 85 94 c3 70 19 3b a9 28 31 6f a5 75 22 cb 9b db 32 ef 6f 99 b1 3c f9 86 ae 60 6e 8d 24 c7 53 1a 78 b3 60 b3 5a f1 b7 42 fd 6d 5e 8c cc 8f 8b d9 74 4e 8d 8a a8 cd a8 b3 26 25 1a ba f4 4c 1f 4e 09 d5 62 0f 5b 26 b0 d3 63 67 f1 28 c3 b7 c0 e0 71 12 e1 55 d4 88 a9 5a 0c ae f5 bb fa 7c 6c 1b e5 31 f8 5f 03 aa fd 87 b6 0b 8a 83 be ce 4e 0d f3 26 d7 7e 71 f4 8b da c9 3c 58 5d fe c7 fb 6a 63 a2 51 fd f8 58 fa 10 da 31 3e Data Ascii: oUW6!X;?eyVb\|zHf)e{j82WoY+!>7;]bX`F+.xWiE.~TH7N_qJ4Gp;(1ou"2o<`n$Sx`ZBm^tN&%LNb[&cg(qUZ\|l1_N&~q<X]jcQX1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
250	192.168.2.5	50108	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	12521	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/gridview.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	12522	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42104 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:16:33 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=732426666330656328113147535473962210222"}],"include_subdomains ":true} Server: ECAcc (muc/3346) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 83260b95-701e-0069-6791-bbf38d000000 Content-Length: 7808 Connection: close
2023-07-21 16:51:06 UTC	12523	IN	Data Raw: 76 61 72 20 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 3d 7b 7d 3b 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 2e 5f 67 72 69 64 56 69 65 77 49 6e 73 74 61 6e 63 65 49 64 73 3d 5b 5d 2c 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 2e 5f 67 72 69 64 56 69 65 77 49 6e 73 74 61 6e 63 65 73 3d 5b 5d 2c 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 2e 43 72 65 61 74 65 47 72 69 64 56 69 65 77 49 6e 73 74 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 6e 2e 72 65 70 6c 61 63 65 28 2f 5f 47 72 69 64 5f 4c 69 73 74 56 69 65 77 55 70 64 61 74 65 50 61 6e 65 6c 24 2f 69 2c 22 22 29 2c 75 2c 66 3b 72 65 74 75 72 6e 20 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 2e 5f 67 72 69 64 56 69 65 77 49 6e 73 74 61 6e 63 65 49 64 73 5b 72 Data Ascii: var GridViewManager={};GridViewManager._gridViewInstanceIds=[],GridViewManager._gridViewInstances=[],GridViewManager.CreateGridViewInstance=function(n,t,i){var r=n.replace(/_Grid_ListViewUpdatePanel$/i,""),u,f;return GridViewManager._gridViewInstanceIds[r

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
251	192.168.2.5	50109	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:06 UTC	12521	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:06 UTC	12531	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47173 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:06 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=85739408352485166453339094474049694000"}],"include_subdomains ":true} Server: ECAcc (muc/334F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 189bd679-601e-004a-0885-bb694e000000 Content-Length: 6211 Connection: close
2023-07-21 16:51:06 UTC	12532	IN	Data Raw: 77 69 6e 64 6f 77 2e 4f 33 36 35 3d 77 69 6e 64 6f 77 2e 4f 33 36 35 7c 7c 7b 7d 2c 4f 33 36 35 2e 50 72 6f 64 75 63 74 4b 65 79 43 6f 6e 74 72 6f 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 7b 45 6d 70 74 79 3a 7b 69 6d 67 53 72 63 3a 6e 75 6c 6c 2c 69 6d 67 41 6c 74 3a 6e 75 6c 6c 7d 2c 49 6e 63 6f 6d 70 6c 65 74 65 3a 7b 69 6d 67 53 72 63 3a 6e 75 6c 6c 2c 69 6d 67 41 6c 74 3a 6e 75 6c 6c 7d 2c 43 6f 6d 70 6c 65 74 65 3a 7b 69 6d 67 53 72 63 3a 6e 75 6c 6c 2c 69 6d 67 41 6c 74 3a 6e 75 6c 6c 7d 2c 56 61 6c 69 64 61 74 69 6e 67 3a 7b 69 6d 67 53 72 63 3a 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f Data Ascii: window.O365=window.O365\|\|{},O365.ProductKeyControl=function(n,t,i){var r={Empty:{imgSrc:null,imgAlt:null},Incomplete:{imgSrc:null,imgAlt:null},Complete:{imgSrc:null,imgAlt:null},Validating:{imgSrc:'https://res-h3.public.cdn.office.net/admincenter/admin-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
252	192.168.2.5	50111	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12539	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/netperf.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:07 UTC	12540	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42105 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:07 GMT Last-Modified: Wed, 19 Jul 2023 22:17:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=14148268213291826463568936030179967323"}],"include_subdomains ":true} Server: ECAcc (muc/3379) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 88273a99-b01e-002b-7691-bb4a0d000000 Content-Length: 4787 Connection: close
2023-07-21 16:51:07 UTC	12541	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4e 65 74 50 65 72 66 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 72 29 7b 76 61 72 20 75 2c 6c 3d 5b 5d 2c 70 3d 5b 27 22 69 22 3a 33 30 30 30 30 2c 22 76 22 3a 33 27 5d 2c 6f 2c 61 2c 79 2c 73 2c 68 2c 76 2c 63 3b 69 66 28 6c 2e 70 75 73 68 28 70 29 2c 75 3d 5b 5d 2c 72 3d 3d 27 75 27 29 65 3f 28 75 2e 70 75 73 68 28 27 30 27 29 2c 75 2e 70 75 73 68 28 27 31 27 29 29 3a 28 75 2e 70 75 73 68 28 27 31 27 29 2c 75 2e 70 75 73 68 28 27 30 27 29 29 3b 65 6c 73 65 20 69 66 28 72 3d 3d 27 6c 27 29 75 2e 70 75 73 68 28 27 30 27 29 2c 75 2e 70 75 73 68 28 27 30 27 29 2c 65 3d 21 30 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 66 6f 72 28 6f 3d 6e 75 6c 6c 2c 79 3d 66 2e 6c 65 6e 67 74 68 2c 73 3d 30 3b 73 3c 79 3b 73 2b 2b 29 68 3d 77 69 6e 64 Data Ascii: function NetPerf(){function c(r){var u,l=[],p=['"i":30000,"v":3'],o,a,y,s,h,v,c;if(l.push(p),u=[],r=='u')e?(u.push('0'),u.push('1')):(u.push('1'),u.push('0'));else if(r=='l')u.push('0'),u.push('0'),e=!0;else return;for(o=null,y=f.length,s=0;s<y;s++)h=wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
253	192.168.2.5	50110	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12546	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/searchbox.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:07 UTC	12632	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:06 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1238554692897642111618407890442066423043"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 54649ccd-101e-0022-27f3-bb0fde000000 Content-Length: 215 Connection: close
2023-07-21 16:51:07 UTC	12633	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 35 34 36 34 39 63 63 64 2d 31 30 31 65 2d 30 30 32 32 2d 32 37 66 33 2d 62 62 30 66 64 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 37 2e 37 30 33 34 33 37 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:54649ccd-101e-0022-27f3-bb0fde000000Time:2023-07-21T16:51:07.7034378Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
254	192.168.2.5	50115	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12546	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/passwordstrengthmeter.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:07 UTC	12550	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47174 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:07 GMT Last-Modified: Wed, 19 Jul 2023 22:16:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=556818749382663684912481147158399715833"}],"include_subdomains ":true} Server: ECAcc (muc/3365) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 03e7e24c-001e-0011-4b85-bb5075000000 Content-Length: 3041 Connection: close
2023-07-21 16:51:07 UTC	12551	IN	Data Raw: 76 61 72 20 50 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 4d 65 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 2c 69 29 7b 28 74 68 69 73 2e 50 61 73 73 77 6f 72 64 4d 65 74 65 72 44 69 76 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6e 2b 22 5f 70 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 4d 65 74 65 72 22 29 2c 74 68 69 73 2e 50 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 4d 65 74 65 72 49 64 3d 6e 2c 74 68 69 73 2e 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 2c 74 68 69 73 2e 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 21 3d 6e 75 6c 6c 29 26 26 28 74 68 69 73 2e 50 72 6f 70 65 72 74 79 53 68 65 Data Ascii: var PasswordStrengthMeter=function(){function n(n,t,i){(this.PasswordMeterDiv=document.getElementById(n+"_passwordStrengthMeter"),this.PasswordStrengthMeterId=n,this.PasswordTextBox=document.getElementById(t),this.PasswordTextBox!=null)&&(this.PropertyShe

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
255	192.168.2.5	50113	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12547	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/hipcontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:07 UTC	12580	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47175 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:07 GMT Last-Modified: Wed, 19 Jul 2023 22:13:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=66712200905673211757778261903587734304"}],"include_subdomains ":true} Server: ECAcc (muc/3335) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 03e7e146-001e-0011-4e85-bb5075000000 Content-Length: 38677 Connection: close
2023-07-21 16:51:07 UTC	12581	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 48 69 70 43 68 61 6c 6c 65 6e 67 65 28 29 7b 74 68 69 73 2e 4c 6f 61 64 69 6e 67 54 72 69 61 6c 73 3d 33 2c 74 68 69 73 2e 43 75 72 72 65 6e 74 4c 6f 61 64 69 6e 67 41 74 74 65 6d 70 74 3d 30 2c 74 68 69 73 2e 46 61 69 6c 4f 76 65 72 4d 65 73 73 61 67 65 3d 27 27 2c 74 68 69 73 2e 53 68 6f 75 6c 64 53 68 6f 77 4d 65 73 73 61 67 65 4f 6e 46 61 69 6c 69 6e 67 3d 21 30 2c 74 68 69 73 2e 49 73 41 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 49 73 55 49 4c 65 73 73 3d 21 31 2c 74 68 69 73 2e 49 73 43 68 61 6c 6c 65 6e 67 65 4c 6f 61 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 43 68 61 63 68 65 64 4c 6f 61 64 69 6e 67 50 61 72 61 6d 73 3d 21 31 2c 74 68 69 73 2e 43 61 63 68 65 64 4c 6f 61 64 50 61 72 61 6d 31 3d 6e 75 6c 6c 2c 74 68 69 73 2e Data Ascii: function HipChallenge(){this.LoadingTrials=3,this.CurrentLoadingAttempt=0,this.FailOverMessage='',this.ShouldShowMessageOnFailing=!0,this.IsActive=!1,this.IsUILess=!1,this.IsChallengeLoading=!1,this.ChachedLoadingParams=!1,this.CachedLoadParam1=null,this.
2023-07-21 16:51:07 UTC	12597	IN	Data Raw: 64 Data Ascii: d
2023-07-21 16:51:07 UTC	12597	IN	Data Raw: 5d 2e 47 65 74 43 68 61 6c 6c 65 6e 67 65 54 79 70 65 28 29 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 22 3a 28 63 61 70 74 63 68 61 43 68 61 6c 6c 65 6e 67 65 2e 53 68 6f 77 56 61 6c 69 64 61 74 69 6f 6e 3d 21 30 2c 56 61 6c 69 64 61 74 6f 72 56 61 6c 69 64 61 74 65 28 43 75 73 74 6f 6d 48 69 70 54 65 78 74 56 61 6c 69 64 61 74 6f 72 5f 76 61 6c 29 2c 56 61 6c 69 64 61 74 6f 72 56 61 6c 69 64 61 74 65 28 43 75 73 74 6f 6d 48 69 70 41 75 64 69 6f 56 61 6c 69 64 61 74 6f 72 5f 76 61 6c 29 29 7d 2c 63 61 70 74 63 68 61 43 68 61 6c 6c 65 6e 67 65 2e 53 68 6f 77 43 6f 6e 6e 65 63 74 69 76 69 74 79 46 61 69 6c 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 61 70 74 63 68 61 43 68 61 6c 6c 65 6e 67 65 2e 53 68 6f 77 43 6f 6e 6e 65 63 74 69 76 69 74 79 Data Ascii: ].GetChallengeType()).style.display="":(captchaChallenge.ShowValidation=!0,ValidatorValidate(CustomHipTextValidator_val),ValidatorValidate(CustomHipAudioValidator_val))},captchaChallenge.ShowConnectivityFailure=function(){captchaChallenge.ShowConnectivity
2023-07-21 16:51:07 UTC	12623	IN	Data Raw: 29 7b 69 66 28 73 6d 73 43 68 61 6c 6c 65 6e 67 65 2e 63 6c 69 63 6b 56 61 6c 69 64 61 74 6f 72 49 73 56 61 6c 69 64 3d 3d 21 30 29 72 65 74 75 72 6e 20 74 2e 49 73 56 61 6c 69 64 3d 21 30 2c 21 30 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 53 4d 53 45 6e 74 72 79 27 29 3b 69 66 28 73 6d 73 43 68 61 6c 6c 65 6e 67 65 2e 47 65 74 43 68 61 6c 6c 65 6e 67 65 54 79 70 65 28 29 3d 3d 22 56 6f 69 63 65 22 29 7b 69 66 28 6e 3d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 4d 6f 62 69 6c 65 4e 75 6d 62 65 72 54 65 78 74 42 6f 78 5f 43 6c 69 63 6b 56 61 6c 69 64 61 74 6f 72 5f 76 61 6c 27 29 29 72 65 74 75 72 6e 20 74 2e 49 73 56 61 6c 69 64 3d 21 30 2c 21 30 7d 65 6c 73 65 20 69 Data Ascii: ){if(smsChallenge.clickValidatorIsValid==!0)return t.IsValid=!0,!0;var i=document.getElementById('SMSEntry');if(smsChallenge.GetChallengeType()=="Voice"){if(n==document.getElementById('MobileNumberTextBox_ClickValidator_val'))return t.IsValid=!0,!0}else i

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
256	192.168.2.5	50112	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12548	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/geminiwizard.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:07 UTC	12613	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47174 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:07 GMT Last-Modified: Wed, 19 Jul 2023 22:16:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=23926522277193312183736296055952874066"}],"include_subdomains ":true} Server: ECAcc (muc/3356) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: c5d70a3f-a01e-006a-7685-bb12e9000000 Content-Length: 9028 Connection: close
2023-07-21 16:51:07 UTC	12614	IN	Data Raw: 76 61 72 20 47 65 6d 69 6e 69 57 69 7a 61 72 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 2c 75 2c 66 2c 65 2c 6f 2c 73 29 7b 74 68 69 73 2e 49 64 3d 6e 2c 74 68 69 73 2e 4e 61 76 69 67 61 74 69 6f 6e 50 61 6e 65 6c 49 64 3d 74 2c 74 68 69 73 2e 53 74 65 70 73 3d 5b 5d 2c 74 68 69 73 2e 46 6f 72 63 65 56 61 6c 69 64 61 74 69 6f 6e 4f 6e 4e 65 78 74 3d 72 2c 74 68 69 73 2e 45 6e 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 4f 6e 54 72 61 6e 69 73 69 74 69 6f 6e 3d 75 2c 74 68 69 73 2e 4c 61 73 74 43 6f 6d 70 6c 65 74 65 64 49 6e 64 65 78 3d 2d 31 2c 74 68 69 73 2e 53 74 61 72 74 41 74 53 74 65 70 49 6e 64 65 78 3d 74 79 70 65 6f 66 20 66 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 66 3d 3d 6e 75 6c 6c 3f 30 3a 66 2c 74 68 69 73 2e 43 75 72 72 65 6e 74 Data Ascii: var GeminiWizard=function(n,t,i,r,u,f,e,o,s){this.Id=n,this.NavigationPanelId=t,this.Steps=[],this.ForceValidationOnNext=r,this.EnableAnimationOnTranisition=u,this.LastCompletedIndex=-1,this.StartAtStepIndex=typeof f=="undefined"\|\|f==null?0:f,this.Current

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
257	192.168.2.5	50114	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12548	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webuivalidation.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:07 UTC	12549	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 66479 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:07 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=11230053513228150963366491721697960688"}],"include_subdomains ":true} Server: ECAcc (muc/3371) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: ce79fac7-201e-005b-5258-bbf3fa000000 Content-Length: 26951 Connection: close
2023-07-21 16:51:07 UTC	12554	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2023-07-21 16:51:07 UTC	12570	IN	Data Raw: 61 6c 69 64 61 74 6f 72 43 6f 6d 70 61 72 65 28 76 61 6c 75 65 2c 20 63 6f 6d 70 61 72 65 54 6f 2c 20 6f 70 65 72 61 74 6f 72 2c 20 76 61 6c 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 75 73 74 6f 6d 56 61 6c 69 64 61 74 6f 72 45 76 61 6c 75 61 74 65 49 73 56 61 6c 69 64 28 76 61 6c 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 56 61 6c 69 64 61 Data Ascii: alidatorCompare(value, compareTo, operator, val);}function CustomValidatorEvaluateIsValid(val) { var value = ""; if (typeof(val.controltovalidate) == "string") { value = ValidatorGetValue(val.controltovalidate); if ((Valida

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
258	192.168.2.5	50116	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12629	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrends.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:08 UTC	12635	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:07 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=33403324395619687459632580337406271977"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 3022929c-c01e-0043-3cf3-bb2c9d000000 Content-Length: 215 Connection: close
2023-07-21 16:51:08 UTC	12636	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 33 30 32 32 39 32 39 63 2d 63 30 31 65 2d 30 30 34 33 2d 33 63 66 33 2d 62 62 32 63 39 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 37 2e 39 37 36 35 36 34 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:3022929c-c01e-0043-3cf3-bb2c9d000000Time:2023-07-21T16:51:07.9765642Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
259	192.168.2.5	50117	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12630	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrendsstream.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:08 UTC	12636	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:07 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=104401300017854525982495361240718509130"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: a357c0cc-001e-0011-26f3-bb5075000000 Content-Length: 215 Connection: close
2023-07-21 16:51:08 UTC	12637	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 33 35 37 63 30 63 63 2d 30 30 31 65 2d 30 30 31 31 2d 32 36 66 33 2d 62 62 35 30 37 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 37 2e 39 38 34 35 37 39 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:a357c0cc-001e-0011-26f3-bb5075000000Time:2023-07-21T16:51:07.9845792Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.5	49793	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:33 UTC	1631	OUT	GET /static/webpack/production/paper_cloud_docs~paper_pifs.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.LUMAba36qYZ-DzDv4MrULp74GhS0Iy4bZkavuZvI-QA.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1663	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 375 Connection: close Date: Fri, 21 Jul 2023 16:50:34 GMT Last-Modified: Fri, 21 Jul 2023 03:24:04 GMT ETag: "8d9717a9089198e500ffb96046ce911b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b03c46754456cd1729ff37c2faafd4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: zzy-RfUGsdsubv-erxfUFo5LC_7YxeHHL7PQm1D8iQfTfXegwMqnXA==
2023-07-21 16:50:33 UTC	1664	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 90 c1 6e 9c 30 10 86 ef fb 14 48 bd 24 51 21 40 09 4b 40 91 a2 f4 d2 43 db 43 a5 9e ad c1 1e 60 14 e3 b1 6c 93 90 20 fa ec 65 77 5b b5 4a 0e c9 cd b2 bf df df 3f 93 08 c3 c2 93 c2 16 9c 08 dc f7 1a c5 94 a6 2d 89 ab 45 63 17 ea ac b4 f3 ba 4b 84 47 70 72 b8 03 f7 9d 3b 07 23 7e 66 13 80 0c 3a 31 67 da 3c 8b 62 69 41 de f7 8e 27 a3 ea 07 70 67 71 2c 59 b3 13 c2 07 30 0a 9c 12 e2 1f 71 de 58 f6 14 88 4d 0d ad 67 3d 05 6c 1c f5 c3 e6 cb 52 3b 37 81 ed d1 dc 3c 90 a7 96 34 85 a7 7a 20 a5 d0 34 8f a4 c2 50 17 e9 01 7b 8e c9 28 9c eb 2c 4d d7 db 11 15 41 c4 46 3f 45 5e 3a 44 13 6d de e8 6c 84 39 3e 65 aa 43 e6 7c 79 cf 2c a7 40 be df 02 eb ba 05 06 7e 34 7f 1e f3 74 f9 af d4 f1 a8 71 63 4e f5 fe 42 c5 f2 aa f9 c6 8c 9b e5 0b 82 Data Ascii: n0H$Q!@K@CC`l ew[J?-EcKGpr;#~f:1g<biA'pgq,Y0qXMg=lR;7<4z 4P{(,MAF?E^:Dml9>eC\|y,@~4tqcNB

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
260	192.168.2.5	50118	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12630	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/home.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:08 UTC	12638	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:07 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=104817843071515487093047287634500622090"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7a916abd-f01e-0048-55f3-bbd7f6000000 Content-Length: 215 Connection: close
2023-07-21 16:51:08 UTC	12639	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 61 39 31 36 61 62 64 2d 66 30 31 65 2d 30 30 34 38 2d 35 35 66 33 2d 62 62 64 37 66 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 37 2e 39 38 35 39 31 30 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:7a916abd-f01e-0048-55f3-bbd7f6000000Time:2023-07-21T16:51:07.9859102Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
261	192.168.2.5	50119	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12631	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/reporting.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:08 UTC	12640	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:07 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=128887618578750305513597886295064544316"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 47362e01-c01e-006c-1cf3-bb2156000000 Content-Length: 215 Connection: close
2023-07-21 16:51:08 UTC	12641	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 34 37 33 36 32 65 30 31 2d 63 30 31 65 2d 30 30 36 63 2d 31 63 66 33 2d 62 62 32 31 35 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 38 2e 30 38 38 37 35 32 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:47362e01-c01e-006c-1cf3-bb2156000000Time:2023-07-21T16:51:08.0887520Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
262	192.168.2.5	50120	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12631	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/assistancepanel.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:08 UTC	12642	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:07 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=150216614757849578791975873324875206302"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f6ebd9d9-e01e-0009-1af3-bb8f12000000 Content-Length: 215 Connection: close
2023-07-21 16:51:08 UTC	12643	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 66 36 65 62 64 39 64 39 2d 65 30 31 65 2d 30 30 30 39 2d 31 61 66 33 2d 62 62 38 66 31 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 38 2e 30 39 30 30 38 32 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:f6ebd9d9-e01e-0009-1af3-bb8f12000000Time:2023-07-21T16:51:08.0900820Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
263	192.168.2.5	50122	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12633	OUT	GET /images/webcontrols.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:08 UTC	12643	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:08 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1023119855198168445714815931142746326899"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 4a6c2c79-b01e-0066-6af3-bb85e1000000 Content-Length: 223 Connection: close
2023-07-21 16:51:08 UTC	12644	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 34 61 36 63 32 63 37 39 2d 62 30 31 65 2d 30 30 36 36 2d 36 61 66 33 2d 62 62 38 35 65 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 38 2e 34 35 38 30 35 32 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:4a6c2c79-b01e-0066-6af3-bb85e1000000Time:2023-07-21T16:51:08.4580526Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
264	192.168.2.5	50121	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:07 UTC	12634	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:08 UTC	12639	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 621 Content-Type: image/svg+xml Content-Encoding: gzip Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 X-Cache: TCP_HIT x-ms-request-id: 4bf9952a-701e-0048-70f1-b7bc73000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0n/2zZAAAAADwizsxLmaVS5THmqDRnPf8RE0yQUExMDkxMjA3MDUzADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0fLe6ZAAAAAC0vBreWk77RrOnrSYnVmxaQ0gxQUEyMDIwNjA5MDI3ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:07 GMT Connection: close
2023-07-21 16:51:08 UTC	12640	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
265	192.168.2.5	50123	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:08 UTC	12644	OUT	GET /Images/transparent.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:09 UTC	12650	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:08 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=555824331739474702110732494262260023083"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: bb6235a2-401e-002f-5ff3-bbc70a000000 Content-Length: 226 Connection: close
2023-07-21 16:51:09 UTC	12651	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 62 36 32 33 35 61 32 2d 34 30 31 65 2d 30 30 32 66 2d 35 66 66 33 2d 62 62 63 37 30 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 39 2e 33 31 32 37 33 39 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:bb6235a2-401e-002f-5ff3-bbc70a000000Time:2023-07-21T16:51:09.3127399Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
266	192.168.2.5	50124	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:08 UTC	12645	OUT	GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:09 UTC	12648	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:08 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=88107663737643631193964182799148536255"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: e7825dac-d01e-005f-60f3-bb7efd000000 Content-Length: 226 Connection: close
2023-07-21 16:51:09 UTC	12649	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 37 38 32 35 64 61 63 2d 64 30 31 65 2d 30 30 35 66 2d 36 30 66 33 2d 62 62 37 65 66 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 39 2e 33 30 37 34 37 33 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:e7825dac-d01e-005f-60f3-bb7efd000000Time:2023-07-21T16:51:09.3074736Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
267	192.168.2.5	50128	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:08 UTC	12645	OUT	GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:09 UTC	12649	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1614322802511226422817193110062203340089"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 78a506a6-001e-0001-45f3-bb951d000000 Content-Length: 226 Connection: close
2023-07-21 16:51:09 UTC	12650	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 38 61 35 30 36 61 36 2d 30 30 31 65 2d 30 30 30 31 2d 34 35 66 33 2d 62 62 39 35 31 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 39 2e 33 31 32 30 32 39 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:78a506a6-001e-0001-45f3-bb951d000000Time:2023-07-21T16:51:09.3120291Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
268	192.168.2.5	50125	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:08 UTC	12646	OUT	GET /images/servicestatus.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:09 UTC	12656	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:08 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1080925541937691470412802933080061212870"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 1a89db21-001e-004c-57f3-bb5af1000000 Content-Length: 223 Connection: close
2023-07-21 16:51:09 UTC	12657	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 61 38 39 64 62 32 31 2d 30 30 31 65 2d 30 30 34 63 2d 35 37 66 33 2d 62 62 35 61 66 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 39 2e 34 30 34 35 37 35 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:1a89db21-001e-004c-57f3-bb5af1000000Time:2023-07-21T16:51:09.4045752Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
269	192.168.2.5	50127	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:08 UTC	12647	OUT	GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:09 UTC	12654	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=172660007805347887959010526447384260187"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 9b7eea38-001e-0073-43f3-bb9252000000 Content-Length: 226 Connection: close
2023-07-21 16:51:09 UTC	12655	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 62 37 65 65 61 33 38 2d 30 30 31 65 2d 30 30 37 33 2d 34 33 66 33 2d 62 62 39 32 35 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 39 2e 34 30 33 36 38 35 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:9b7eea38-001e-0073-43f3-bb9252000000Time:2023-07-21T16:51:09.4036856Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.5	49816	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1664	OUT	GET /static/webpack/production/runtime_dc532339fcdb216ed9ee.G8ZQTZCS_VpPrXjqiUUTEAGGtIO7JBuw30s2EAFX5x8.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:34 UTC	1671	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3270 Connection: close Date: Fri, 21 Jul 2023 16:50:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Fri, 21 Jul 2023 03:24:13 GMT ETag: "e3daff1fe313d7fe9ea9e2703c6199ce" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 a1822b92cbf5d3516743d4786d5b6020.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: m8n3eyR2K_eqwFTt2jemcG8rxAHAvVPI9xPbK6-m0IArF12xVmiDjw==
2023-07-21 16:50:34 UTC	1672	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 59 fb 53 ea 3a d7 fe dd bf 82 dd 6f c6 a1 23 d6 de 29 70 3a 67 00 51 c4 0b 22 a2 a0 9f d3 49 93 14 0a a5 ad 6d 2a de d8 7f fb bb c2 45 d1 ad fb 9c 33 df 7c e7 9d 61 68 ae 6b 3d 6b 65 25 79 92 fc f0 b2 10 33 3f 0a f3 54 7c 59 a7 73 49 3e 81 5c 94 e4 1f 50 92 23 85 a8 80 ec e4 56 be 2b f8 f0 51 ee 0a 0e 7c d4 bb 42 6a cb 85 c0 be bd ab a4 7f 20 29 a0 e1 90 8d 2a e9 ce 8e f8 12 d9 e8 36 bd ab b4 dd 31 c5 4c 8a 93 88 45 ec 29 a6 d2 08 a5 ed 59 78 9e 44 31 4d d8 93 84 51 10 e4 e3 42 24 6e 6f c7 b7 d1 dd f6 76 20 c5 59 3a ca f3 0c 68 13 2b 3c 61 cb f3 2d 8e 84 e4 fc 30 e7 8b 7f 4b a6 5f 20 20 33 4f 6f c9 9d ed c3 9f 58 c1 db db 18 6c aa 70 49 95 60 0d 56 0c a4 74 e4 7b 2c 2f e6 c5 0a 5b 28 97 50 1c 07 4f 79 56 70 5e 5f 6f a1 63 Data Ascii: YS:o#)p:gQ"ImE3\|ahk=ke%y3?T\|YsI>\P#V+Q\|Bj )61LE)YxD1MQB$nov Y:h+<a-0K_ 3OoXlpI`Vt{,/[(POyVp^_oc

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
270	192.168.2.5	50126	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:08 UTC	12647	OUT	GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:09 UTC	12653	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:08 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=6199633204615659935491995165975890675"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7060e87a-d01e-0002-0af3-bb7479000000 Content-Length: 226 Connection: close
2023-07-21 16:51:09 UTC	12655	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 30 36 30 65 38 37 61 2d 64 30 31 65 2d 30 30 30 32 2d 30 61 66 33 2d 62 62 37 34 37 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 39 2e 34 30 33 36 34 36 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:7060e87a-d01e-0002-0af3-bb7479000000Time:2023-07-21T16:51:09.4036460Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
271	192.168.2.5	50133	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:09 UTC	12651	OUT	GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:09 UTC	12659	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=49100027449145382739561847138510501131"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: daf1a0a2-701e-0034-24f3-bbf909000000 Content-Length: 226 Connection: close
2023-07-21 16:51:09 UTC	12660	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 64 61 66 31 61 30 61 32 2d 37 30 31 65 2d 30 30 33 34 2d 32 34 66 33 2d 62 62 66 39 30 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 30 39 2e 35 37 31 36 33 33 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:daf1a0a2-701e-0034-24f3-bbf909000000Time:2023-07-21T16:51:09.5716337Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
272	192.168.2.5	50132	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:09 UTC	12652	OUT	GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:10 UTC	12662	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=79897497366006710382904567097011285717"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: e7826066-d01e-005f-67f3-bb7efd000000 Content-Length: 226 Connection: close
2023-07-21 16:51:10 UTC	12663	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 37 38 32 36 30 36 36 2d 64 30 31 65 2d 30 30 35 66 2d 36 37 66 33 2d 62 62 37 65 66 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 30 36 30 30 34 39 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:e7826066-d01e-005f-67f3-bb7efd000000Time:2023-07-21T16:51:10.0600499Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
273	192.168.2.5	50134	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:09 UTC	12653	OUT	GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:10 UTC	12661	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=777321520359925390218340153450706112120"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 49f3b474-801e-0020-22f3-bbb166000000 Content-Length: 226 Connection: close
2023-07-21 16:51:10 UTC	12662	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 34 39 66 33 62 34 37 34 2d 38 30 31 65 2d 30 30 32 30 2d 32 32 66 33 2d 62 62 62 31 36 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 30 36 37 33 30 39 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:49f3b474-801e-0020-22f3-bbb166000000Time:2023-07-21T16:51:10.0673090Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
274	192.168.2.5	50135	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:09 UTC	12657	OUT	GET /Images/list_bullet_5x5.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:10 UTC	12663	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=835759053052420695417992561130147129232"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: b363581e-201e-0029-24f3-bbf4b5000000 Content-Length: 226 Connection: close
2023-07-21 16:51:10 UTC	12664	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 33 36 33 35 38 31 65 2d 32 30 31 65 2d 30 30 32 39 2d 32 34 66 33 2d 62 62 66 34 62 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 31 34 34 38 32 39 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:b363581e-201e-0029-24f3-bbf4b5000000Time:2023-07-21T16:51:10.1448298Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
275	192.168.2.5	50136	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:09 UTC	12658	OUT	GET /images/spinner_16x16_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:10 UTC	12664	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=98852501219648784606553505910257035913"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: bb623837-401e-002f-40f3-bbc70a000000 Content-Length: 223 Connection: close
2023-07-21 16:51:10 UTC	12665	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 62 36 32 33 38 33 37 2d 34 30 31 65 2d 30 30 32 66 2d 34 30 66 33 2d 62 62 63 37 30 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 31 35 35 32 36 35 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:bb623837-401e-002f-40f3-bbc70a000000Time:2023-07-21T16:51:10.1552652Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
276	192.168.2.5	50137	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:09 UTC	12658	OUT	GET /images/spinner_24x24_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:10 UTC	12665	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=312154682309247636416636221148045797381"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: ab55fe80-e01e-006b-29f3-bb4d35000000 Content-Length: 223 Connection: close
2023-07-21 16:51:10 UTC	12666	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 62 35 35 66 65 38 30 2d 65 30 31 65 2d 30 30 36 62 2d 32 39 66 33 2d 62 62 34 64 33 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 31 36 31 38 36 30 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:ab55fe80-e01e-006b-29f3-bb4d35000000Time:2023-07-21T16:51:10.1618606Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
277	192.168.2.5	50138	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:09 UTC	12660	OUT	GET /shell/images/signup_ms_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:10 UTC	12669	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=138583077362244458819945153742416736938"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: e9af7cce-401e-0010-12f3-bb0fa9000000 Content-Length: 223 Connection: close
2023-07-21 16:51:10 UTC	12670	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 39 61 66 37 63 63 65 2d 34 30 31 65 2d 30 30 31 30 2d 31 32 66 33 2d 62 62 30 66 61 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 33 34 31 36 37 33 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:e9af7cce-401e-0010-12f3-bb0fa9000000Time:2023-07-21T16:51:10.3416734Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
278	192.168.2.5	50140	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:10 UTC	12667	OUT	GET /shell/images/o365_gallatin_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:10 UTC	12672	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:10 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=32310152873178738834466550720133403803"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: a1b62341-a01e-0055-77f3-bbda4a000000 Content-Length: 223 Connection: close
2023-07-21 16:51:10 UTC	12673	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 31 62 36 32 33 34 31 2d 61 30 31 65 2d 30 30 35 35 2d 37 37 66 33 2d 62 62 64 61 34 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 38 35 30 31 34 31 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:a1b62341-a01e-0055-77f3-bbda4a000000Time:2023-07-21T16:51:10.8501413Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
279	192.168.2.5	50139	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:10 UTC	12667	OUT	GET /images/backgrounds/image1.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:10 UTC	12670	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=339545827885763595315094429083810231433"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7d0f6cb5-c01e-0053-10f3-bbe9f5000000 Content-Length: 223 Connection: close
2023-07-21 16:51:10 UTC	12671	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 64 30 66 36 63 62 35 2d 63 30 31 65 2d 30 30 35 33 2d 31 30 66 33 2d 62 62 65 39 66 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 38 34 37 38 37 34 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:7d0f6cb5-c01e-0053-10f3-bbe9f5000000Time:2023-07-21T16:51:10.8478746Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.5	49823	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1665	OUT	GET /static/webpack/production/544eb0bcacbf47681dcb.UBYHq28Ln5Hi8t6eUSEEz2fCkP8WJ0HWYEUftmX8eYE.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:34 UTC	1675	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 27787 Connection: close Date: Fri, 21 Jul 2023 16:50:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:34 GMT ETag: "1f440f98e8c90c270c5cac0a7e629031" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 633b37c269943f0b3472e0abe1a07b2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: uZbmt_FUBgEgYChb-znreIZzTiDZ73kCS4DMdsx9Kcu7WS-LHBYc9Q==
2023-07-21 16:50:34 UTC	1676	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 6f db d8 b6 20 f8 5d bf 82 e6 a9 49 c8 98 92 25 3b 71 12 29 2c 1d c7 76 12 57 25 76 ca 76 92 aa 48 2a d7 16 b5 25 31 96 48 85 0f d9 8e a9 8b 7b d1 e8 c6 60 3e cd 60 7a 30 c0 00 d3 dd f3 a9 31 98 c1 74 0f 30 8f 6e 34 d0 0d dc fe 25 d3 f7 07 f4 5f 98 b5 f6 83 dc a4 28 c7 a9 4a 9d 73 6e e3 d6 39 b1 c8 cd b5 d7 5e 7b ed b5 d7 63 3f 8d 0b d7 1b f8 17 b5 b3 b3 97 47 3b 7b 3b 4f 5f ee b3 87 fd bd b3 dd 17 6f 0e bf 3f 39 3b b3 3f 0b 91 24 9d 9e 59 9b c5 e1 d8 e8 74 f4 39 05 f0 20 fc ab 19 99 d1 e0 8c 0c a6 ae a7 3e 9f f9 c3 e1 d9 dc a5 17 67 be 37 b9 12 5f fa 50 04 0d e4 4b ec 0d 26 54 bc 38 13 3f 1e 9c 0d 7c 47 22 1c 90 70 dc ff ab 86 b3 75 df 79 b0 f9 50 ef 59 d7 95 46 73 18 7b 4e e4 fa 9e 41 ad c8 0a cc 6b 3d 0e a9 16 46 Data Ascii: ko ]I%;q),vW%vvH*%1H{`>`z01t0n4%_(Jsn9^{c?G;{;O_o?9;?$Yt9 >g7_PK&T8?\|G"puyPYFs{NAk=F
2023-07-21 16:50:34 UTC	1691	IN	Data Raw: 96 5b be ca ef 52 68 6a 2a 4b 7a 2a 4e ef 28 ee 05 af f6 fb df 54 e2 3b 75 75 cb 0a 0b ff 35 0a c9 3c 80 e5 6a 05 d1 92 89 8f ca b4 4f 60 4f cb 07 92 2a 37 0c 5b 79 b9 61 2b af 6c d8 ca 5b e9 c6 53 c5 8f 17 4b af cd cf b8 f0 6a f0 f1 45 ab 80 4a 06 7a f3 cb 80 f2 3a b3 b8 3d 00 7c 43 77 00 da 93 3b c3 39 0f f8 b7 0c 70 fc aa 71 c7 6c a7 dd ad 5b f6 b3 13 a5 18 0d 35 56 b4 b0 6e eb ab db 98 50 a5 91 79 0b 65 13 08 60 4e ed 4e a6 7c f2 a3 06 95 f4 d5 b8 c1 79 c8 62 00 26 9d ad b2 90 b4 b0 2e ec 77 96 54 31 b2 ff d9 11 80 5f 2d aa 7f 26 49 fd 4c e4 f9 6b 26 24 b3 2d 90 a9 a4 a6 51 44 48 4b 95 5e b4 4a e9 45 79 c6 4c a8 59 f4 c6 f2 7d 3c a6 65 de 98 bf 4c c8 f0 b7 11 32 2b 21 24 37 be 54 4a 07 89 56 f8 b7 d2 ed 73 a3 9b dc 3e fc ba f8 f5 2e f7 a0 94 a6 78 59 Data Ascii: [RhjKzN(T;uu5<jO`O*7[ya+l[SKjEJz:=\|Cw;9pql[5VnPye`NN\|yb&.wT1_-&ILk&$-QDHK^JEyLY}<eL2+!$7TJVs>.xY
2023-07-21 16:50:34 UTC	1693	IN	Data Raw: 9b d5 81 3b 72 23 9d 9d 99 c5 6e 64 57 c1 7f d2 d9 ad 31 7a 2c 7e df 88 df 40 6f 56 b2 13 51 8e 89 37 a2 e2 58 94 5f 7e da 88 37 de 6c 04 bf 68 06 16 63 ca 93 90 42 8d 04 34 7f 55 82 a5 e1 91 f3 bf 5c fd c2 2e 43 a5 64 a0 9b bc d4 8f a2 94 1f 80 d8 f2 42 3e 6e fc 00 05 7c 8c 09 e0 b9 b1 0c 89 f2 95 40 f9 12 09 af 4d 7d 2f 1a 83 5f 24 ab 6c a5 6c b0 04 cf 2c ce 51 4b f2 b2 d7 09 c0 e1 51 59 73 21 30 be 5b 49 e4 c5 c6 3b 20 f2 82 d2 f3 db 50 38 c0 96 19 90 ab 52 b2 96 8b df d3 f9 f5 3e fa 33 41 c7 68 25 1d 7b 1b cf 36 46 40 09 20 bf 45 73 0c 96 9a 63 1f 29 c3 6a 20 75 42 de 38 97 6e 21 70 14 e8 c4 f0 e7 c9 7d 73 05 79 b4 56 a3 94 0a 4e 7d 86 46 1d 6f 9d 94 a4 74 56 b4 95 6c 43 64 da fd 1c d3 9c cf 12 e3 d4 6a 8e e3 fc 49 88 21 c8 d6 b1 1f 07 8d 4d 7b ad ae Data Ascii: ;r#ndW1z,~@oVQ7X_~7lhcB4U\.CdB>n\|@M}/_$ll,QKQYs!0[I; P8R>3Ah%{6F@ Esc)j uB8n!p}syVN}FotVlCdjI!M{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
280	192.168.2.5	50141	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:10 UTC	12668	OUT	GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:11 UTC	12673	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:10 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=53740738550608250015045799308879834798"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 0dfc82f3-301e-0025-10f3-bb63bd000000 Content-Length: 223 Connection: close
2023-07-21 16:51:11 UTC	12674	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 64 66 63 38 32 66 33 2d 33 30 31 65 2d 30 30 32 35 2d 31 30 66 33 2d 62 62 36 33 62 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 39 32 34 34 35 35 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:0dfc82f3-301e-0025-10f3-bb63bd000000Time:2023-07-21T16:51:10.9244557Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
281	192.168.2.5	50142	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:10 UTC	12669	OUT	GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:11 UTC	12674	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:10 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=13572904141431800918558817854876337885"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: c4e8cd00-301e-000a-0df3-bb6e76000000 Content-Length: 223 Connection: close
2023-07-21 16:51:11 UTC	12675	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 63 34 65 38 63 64 30 30 2d 33 30 31 65 2d 30 30 30 61 2d 30 64 66 33 2d 62 62 36 65 37 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 31 30 2e 39 37 32 36 35 30 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:c4e8cd00-301e-000a-0df3-bb6e76000000Time:2023-07-21T16:51:10.9726506Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
282	192.168.2.5	50151	52.97.201.194	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:13 UTC	12675	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.microsoft365.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:13 UTC	12676	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 5179bbcd-e2ef-8818-6e8d-a865ad226bdc Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedBETarget: ZR2P278MB1049.CHEP278.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: ClientId=9DDC34FF918C4725B9396D2D814A87B8; expires=Sun, 21-Jul-2024 16:51:13 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=9DDC34FF918C4725B9396D2D814A87B8; expires=Sun, 21-Jul-2024 16:51:13 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Sun, 21-Jan-2024 16:51:13 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OWAPF=v:15.20.6631.16&l:mouse; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-Version: 15.20.6631.16 X-OWA-DiagnosticsInfo: 1;0;0 X-IIDs: 0 X-BackEnd-Begin: 2023-07-21T16:51:13.883 X-BackEnd-End: 2023-07-21T16:51:13.883 X-DiagInfo: ZR2P278MB1049 X-BEServer: ZR2P278MB1049 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=ZRH"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: ZRH X-FEProxyInfo: ZR0P278CA0122.CHEP278.PROD.OUTLOOK.COM X-FEEFZInfo: ZRH X-FEServer: ZR0P278CA0122 Date: Fri, 21 Jul 2023 16:51:13 GMT Connection: close
2023-07-21 16:51:13 UTC	12678	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
283	192.168.2.5	50152	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:15 UTC	12680	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:16 UTC	12683	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:15 GMT Content-Type: application/x-javascript content-length: 113440 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 x-ms-request-id: 22dda175-401e-0017-1cf3-bb565f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165115Z-f8e11c4uv147v4uw0z182p742g00000004tg00000000fvx8 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:16 UTC	12684	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA);)g9{4MB(jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2023-07-21 16:51:16 UTC	12699	IN	Data Raw: d8 34 94 79 95 7b 4b 43 d5 e6 f2 ed a4 9e 91 21 66 47 d0 32 60 b6 e8 54 5b ab 17 94 42 55 68 c3 01 61 39 4f da 43 ed 72 86 75 47 49 75 c5 86 4b 4a f4 05 0c 91 59 61 33 d4 79 95 fe ed 94 f3 a4 b6 62 32 a3 52 a4 6d e7 d8 5d 28 3f 1f c9 ef dd 64 78 b1 bd f4 85 3c 52 83 e6 b5 10 ea e0 d8 08 2a a7 4e 8d 55 08 39 e9 97 ca 4d 0d 4f 41 2d 48 62 fc d4 08 ad 2d e6 35 8a 29 07 e8 6b 14 1c c3 b8 46 41 9a de bc 0a d0 e3 80 92 31 48 22 30 8c 41 4e d8 bc 04 c0 29 5b 5e 12 ea 3f dc 95 59 9f 98 18 d2 69 7e c6 ab 74 c4 ab f2 36 d2 95 be 6c 65 9f e4 91 3d 62 86 ea d3 f4 af 5e fa a3 e1 69 85 da 53 9f 54 8c 51 d2 0f 46 a8 3d 2f a7 d6 2d d2 92 76 32 e3 81 f3 63 fe aa 17 c1 a1 04 64 16 c4 0a 61 a7 de b5 e6 0a 71 65 7c cb 77 28 d2 da cf 2e 00 ea e3 be 03 01 d0 f1 47 43 8a a1 7a Data Ascii: 4y{KC!fG2`T[BUha9OCruGIuKJYa3yb2Rm](?dx<R*NU9MOA-Hb-5)kFA1H"0AN)[^?Yi~t6le=b^iSTQF=/-v2cdaqe\|w(.GCz
2023-07-21 16:51:16 UTC	12700	IN	Data Raw: 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 42 Data Ascii: 2&jI+@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<iZ!Nq>H%+# o``HY{rvne%iW3=j-`IQG9V&kD{E+,Gj4B
2023-07-21 16:51:16 UTC	12707	IN	Data Raw: ed 7d 6b 73 db c6 b2 e0 f7 fd 15 12 63 cb 80 01 8a 0f 3d 1c 91 04 19 5d db d9 75 55 ce 8d 2b c9 bd 1f 0e 49 f3 80 24 48 22 02 01 06 20 f5 b0 c0 fd ed db dd f3 06 40 49 f6 b9 a7 ee d6 d6 a6 62 11 18 cc b3 a7 a7 a7 a7 a7 1f 68 a1 a2 2e 08 b2 ed 43 44 1e 39 83 fb 6d dd 8f c2 65 dc a9 39 98 6d 3c 36 c6 78 e0 66 55 5b 07 ee da b8 53 35 7a 21 a4 fe d8 0d 14 0f b0 cb 35 6d 84 32 43 4a 19 dc 22 b4 54 05 04 2e 76 50 03 22 db 5d e1 d6 7e 6c 1d a2 ab dd 95 90 08 e1 d9 19 a1 e5 6e bc 07 09 ad de 86 20 86 67 67 18 08 20 fd 0a d9 0c 18 e0 e3 7b 43 c9 fd 3d 57 48 a6 d5 cf 96 c7 4a 2e 0f f5 ed 09 ca cd f2 60 47 fe 2b 17 c3 0a f7 3a a7 8d 77 1e 1a c4 a6 c9 fc 41 4e 3c be 28 b4 99 02 e2 38 6d 40 48 fb 05 28 b6 72 57 0a c5 e6 45 dc 52 28 3c ff d7 e1 d6 40 43 30 d4 34 3d 88 Data Ascii: }ksc=]uU+I$H" @Ibh.CD9me9m<6xfU[S5z!5m2CJ"T.vP"]~ln gg {C=WHJ.`G+:wAN<(8m@H(rWER(<@C04=
2023-07-21 16:51:16 UTC	12716	IN	Data Raw: 53 01 ad d8 84 16 00 41 3f 47 b0 f1 c7 bc 33 b1 36 fe 50 4b 6d 7e 0b 54 20 c5 e3 a6 df 32 ed e4 24 ec 57 40 a1 12 80 62 58 2f 83 63 68 17 29 2b 8c de a4 0c 62 37 3f 44 67 d4 86 2f 96 72 99 b2 88 d5 58 ba 0a 30 17 88 ce fc 98 db e9 78 f0 7c 16 c9 27 42 e5 ec 5a c8 ee 14 c6 42 33 59 be d2 f3 9a 14 b9 ba 5b 82 84 44 1c 83 06 7a 1e 3a 89 e6 8a 76 0c 31 30 7a 81 bb f5 aa 26 49 33 9f da 0e 94 38 a7 13 74 25 b1 c2 68 d4 76 b9 be 18 70 88 67 af a8 d7 dd 3a 55 ed 29 31 11 c3 b9 41 ca ce 5d e6 9c e0 c9 b9 7a a3 e6 c2 e3 30 63 d7 65 70 1e 09 3a b0 0d a1 d0 db dc ff 8c 37 bc 4a 9a f9 38 f9 c0 b7 a5 5b ab 82 e7 35 67 3c c0 c3 e2 70 5b 6f 11 93 9b 06 b7 41 4a 6c 93 be d7 d9 9d 42 93 02 7a f6 c1 ad b7 69 56 60 8e ba ea ac 84 9c 24 5b 3c a4 12 81 7c 17 23 c1 8d 06 f2 a5 Data Ascii: SA?G36PKm~T 2$W@bX/ch)+b7?Dg/rX0x\|'BZB3Y[Dz:v10z&I38t%hvpg:U)1A]z0cep:7J8[5g<p[oAJlBziV`$[<\|#

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
284	192.168.2.5	50154	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:16 UTC	12719	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1083 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundarycu8bdX7TQ7ORbbjA Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:16 UTC	12720	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 63 75 38 62 64 58 37 54 51 37 4f 52 62 62 6a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 63 75 38 62 64 58 37 54 51 37 4f 52 62 62 6a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 63 75 38 62 64 58 37 54 51 37 4f 52 62 62 6a 41 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundarycu8bdX7TQ7ORbbjAContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundarycu8bdX7TQ7ORbbjAContent-Disposition: form-data; name="t"deghsLEKJOGSu-1QvrwgkKX3------WebKitFormBoundarycu8bdX7TQ7ORbbjACont
2023-07-21 16:51:16 UTC	12721	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:51:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b8e65f9792f645cf98104bbc0bf34da0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
285	192.168.2.5	50156	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:17 UTC	12724	OUT	GET /?uiqqiefr HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrSp8TsSiU7oOFwN0MlD-pF5o-kvPmyXatUnUg_g9rWCzsfkkQgZhAMKw0mPeIuG0utmBruwnOtOr3SdqP-gjyAktresT6E8sqwMLbI8NSIL0gAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrHQzamWAd4Gp07PmFGRi4E-qcEpxgZx6gZODIgjCrg2p1ARVYirwkPciIGmppoRywPrgNTy5s-gXFUTJmLHEN6wpgGM_4PNc6IWmzUX4_bqh86WTGaY8_syN6wAl2S56-0W_WBRseKpgOoAeT8cz5euQFSFxFaM886bbc7x7OK2g5gNYb98xwfY_Jcb9_6H2br_Tnrj7q3jvNEmhK-EyhOeP_cG-TH7As7yKBgg7fZdzEqKYjkuqExPW91WWjjXHQNA_Mh8kBiKNrEKx3bFHsIcvTjLzRXeYZwE0qDmpIX4YgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAEAAAB2rkzcDgAAAA
2023-07-21 16:51:18 UTC	12725	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7ff32e6f-a736-4c62-99e7-50b7884b8e00 x-ms-ests-server: 2.1.15811.5 - SCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+chi"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; expires=Sun, 20-Aug-2023 16:51:17 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; domain=mvolenoazaqoerutien.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA; expires=Sun, 20-Aug-2023 16:51:17 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Fri, 21 Jul 2023 16:51:17 GMT Connection: close content-length: 36952 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:18 UTC	12727	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2023-07-21 16:51:18 UTC	12741	IN	Data Raw: 61 74 69 6f 6e 25 32 66 6f 61 75 74 68 32 6d 73 61 5c 75 30 30 32 36 73 74 61 74 65 3d 72 51 51 49 41 52 41 41 34 32 4b 77 30 73 6b 6f 4b 53 6b 6f 74 74 4c 58 4c 38 67 76 4b 6b 6e 4d 30 63 76 4e 54 43 37 4b 4c 38 35 50 4b 38 6e 50 79 38 6e 4d 53 39 56 4c 7a 73 5f 56 79 79 39 4b 7a 30 77 42 73 59 71 45 75 41 54 32 62 4b 72 54 6c 5a 76 5f 7a 62 6e 4a 5f 33 75 50 39 6c 54 44 33 6c 6d 4d 6e 50 45 35 6d 57 56 67 6c 61 73 59 6c 51 6b 62 70 33 2d 42 6b 66 45 46 49 2d 4d 74 4a 6b 48 5f 6f 6e 54 50 6c 50 42 69 74 39 53 55 31 4b 4c 45 6b 73 7a 38 76 41 73 73 41 71 39 59 65 41 79 59 72 54 67 34 75 41 51 59 4a 42 67 55 47 48 36 77 4d 43 35 69 42 64 71 61 72 5f 65 35 33 6d 78 35 6b 73 5f 4d 35 77 48 62 4f 37 7a 37 47 45 36 78 36 69 64 36 75 6d 53 6b 70 46 55 5a 35 31 Data Ascii: ation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT2bKrTlZv_zbnJ_3uP9lTD3lmMnPE5mWVglasYlQkbp3-BkfEFI-MtJkH_onTPlPBit9SU1KLEksz8vAssAq9YeAyYrTg4uAQYJBgUGH6wMC5iBdqar_e53mx5ks_M5wHbO7z7GE6x6id6umSkpFUZ51
2023-07-21 16:51:18 UTC	12757	IN	Data Raw: 69 73 50 72 6f 78 79 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 29 7d 6d 2e 77 68 65 6e 28 22 24 57 65 62 57 61 74 73 6f 6e 2e 66 75 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 62 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 65 3d 62 2e 73 68 69 66 74 28 29 3b 65 26 26 76 2e 24 57 65 62 57 61 74 73 6f 6e 5b 65 2e 63 6d 64 4e 61 6d 65 5d 2e 61 70 70 6c 79 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 2c 65 2e 61 72 67 73 29 7d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 76 2e 24 57 65 62 57 61 74 73 6f 6e 7c 7c 76 2e 24 57 65 62 57 61 74 73 6f 6e 2e 69 73 50 72 6f 78 79 29 7b 69 66 28 21 77 26 26 4a 53 4f 4e 29 7b 74 72 79 7b 76 61 72 20 65 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 6f 70 65 6e 28 Data Ascii: isProxy){return void t()}m.when("$WebWatson.full",function(){for(;b.length>0;){var e=b.shift();e&&v.$WebWatson[e.cmdName].apply(v.$WebWatson,e.args)}})}}function t(){if(!v.$WebWatson\|\|v.$WebWatson.isProxy){if(!w&&JSON){try{var e=new XMLHttpRequest;e.open(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
286	192.168.2.5	50157	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:18 UTC	12764	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_zrspqvfkkfzwifqf_ppbrg2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:18 UTC	12765	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:18 GMT Content-Type: application/x-javascript content-length: 49914 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Jun 2023 07:28:04 GMT ETag: 0x8DB6D720EE3C482 x-ms-request-id: 3f703eec-701e-0098-1814-b88815000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165118Z-p1sf8tenn56eb822za6ctm1uu800000004ug000000006u1d X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:18 UTC	12766	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-07-21 16:51:18 UTC	12768	IN	Data Raw: dd 7d cb 76 23 47 b2 d8 de 5f 51 83 f1 51 37 af aa 21 3c f8 44 0b 6a 83 00 d8 c4 6d 10 80 00 b0 29 1d 49 c6 29 02 09 b2 a6 81 2a dc aa 42 b3 31 54 fb cc ce 8b bb f0 d6 de 79 e1 95 97 de 78 ef 4f 99 73 ae bf c3 f1 c8 cc ca 7a 00 20 25 8d e6 5e cf 99 d3 22 f2 11 19 19 19 19 19 11 19 19 f5 87 f9 da 9b 46 ae ef bd 14 07 8f ea 6f cb 7f e9 1d 3c ba f3 97 ee 0f de 4f 07 81 88 d6 81 67 e1 df 45 f1 69 e5 07 51 f8 fa a3 13 58 51 1d 8b ea 8f b2 ac f6 f8 d9 76 67 35 cf 5e f8 ce 4c cc 6a 7f 28 7f 7e 2d bb 0a ec 3a 75 16 8b 97 91 82 60 47 76 fc b7 7f 00 3f b8 5b fd 0f a5 b8 e2 33 0e e3 d6 1f 35 20 bf b8 ac 0b db 2f 4e eb 2e fc bb aa 17 0a b6 ff b2 74 f0 f9 e5 0f f1 34 6c df 76 01 f9 97 95 03 c2 d2 ab bb 2f cb 00 1f fe 73 74 60 07 f0 9f e3 03 db a9 07 c5 51 14 b8 de 5d Data Ascii: }v#G_QQ7!<Djm)I)*B1TyxOsz %^"Fo<OgEiQXQvg5^Lj(~-:u`Gv?[35 /N.t4lv/st`Q]

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
287	192.168.2.5	50164	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:18 UTC	12766	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:18 UTC	12782	IN	HTTP/1.1 200 OK Content-Length: 689016 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:18 GMT Connection: close
2023-07-21 16:51:18 UTC	12782	IN	Data Raw: 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.protot
2023-07-21 16:51:18 UTC	12798	IN	Data Raw: 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 30 Data Ascii: cked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 110
2023-07-21 16:51:18 UTC	12814	IN	Data Raw: 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2023-07-21 16:51:18 UTC	12830	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 75 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromCu
2023-07-21 16:51:18 UTC	12846	IN	Data Raw: 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: /g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", }, r
2023-07-21 16:51:19 UTC	12862	IN	Data Raw: 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 73 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(s
2023-07-21 16:51:19 UTC	12878	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2023-07-21 16:51:19 UTC	12894	IN	Data Raw: 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2023-07-21 16:51:19 UTC	12910	IN	Data Raw: 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2023-07-21 16:51:19 UTC	12926	IN	Data Raw: 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 69 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onRegi
2023-07-21 16:51:19 UTC	12942	IN	Data Raw: 74 65 6e 73 69 6f 6e 73 3a 20 21 30 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 73 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 70 69 63 6b 65 72 5f 61 63 63 6f 75 6e 74 5f 6d 73 61 5f 34 65 33 36 31 39 61 34 39 39 66 64 37 34 63 30 63 36 36 64 35 32 31 35 35 31 34 62 35 36 36 61 2e 70 6e 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 Data Ascii: tensions: !0, }), (e.exports = s); }, function (e, n, t) { e.exports = t.p + "content/images/picker_account_msa_4e3619a499fd74c0c66d5215514b566a.png"; }, function (e, n, t) { e.exports = t.p + "content/ima
2023-07-21 16:51:19 UTC	12958	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 20 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 47 69 74 48 75 62 46 65 64 3a 20 65 2e 69 73 47 69 74 48 75 62 46 65 64 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 Data Ascii: , isWindowsSso: e.isWindowsSso \|\| !1, isMeControlSession: !0, isGitHubFed: e.isGitHubFed \|\| !1, } ); }); }, parseBssoSessions: function (e) { ret
2023-07-21 16:51:19 UTC	12974	IN	Data Raw: 6f 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 43 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 55 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 53 68 61 72 65 64 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: o.setDefaultFocus = function () { var e = M(); e && e.setDefaultFocus && e.setDefaultFocus(); }), (o.getCurrentViewId = function () { return U(); }), (o.getSharedData = function () {
2023-07-21 16:51:19 UTC	12990	IN	Data Raw: 6e 20 6e 29 20 61 2e 63 61 6c 6c 28 6e 2c 20 74 29 20 26 26 20 28 65 5b 74 5d 20 3d 20 6e 5b 74 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 6e 29 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 20 6e 2c 20 74 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 65 5b 6e 5d 2e 6d 61 74 63 68 28 68 29 20 7c 7c 20 5b 5d 3b Data Ascii: n n) a.call(n, t) && (e[t] = n[t]); return e; } function t(e, n) { return (e.__proto__ = n), e; } function i(e, n, t, i) { var a = e[n].match(h) \|\| [];
2023-07-21 16:51:19 UTC	13006	IN	Data Raw: 20 20 61 5b 64 5b 6c 5d 2e 6e 61 6d 65 5d 20 3d 20 64 5b 6c 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 53 2e 61 2e 66 28 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 28 28 75 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 61 63 74 69 6f 6e 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 6d 65 74 68 6f 64 20 Data Ascii: a[d[l].name] = d[l].value; } t = S.a.f(t); var u = c.createElement("form"); for (var p in ((u.style.display = "none"), (u.action = r), (u.method
2023-07-21 16:51:19 UTC	13022	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 28 69 20 3d 20 21 30 29 2c 20 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 72 2c 20 22 64 69 72 74 79 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 21 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f Data Ascii: (i = !0), e.notifySubscribers(r, "dirty"); } finally { i = !1; } } }; })); }, no
2023-07-21 16:51:19 UTC	13038	IN	Data Raw: 20 20 20 20 20 20 20 20 63 20 3d 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 54 20 3d 20 53 2e 61 2e 44 61 28 22 5f 73 74 61 74 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 2e 6f 20 3d 20 53 2e 24 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: c = a; } }); } }); var T = S.a.Da("_state"); S.o = S.$ = function (e, n, t) { function i() { if (0 < arguments.length) {
2023-07-21 16:51:19 UTC	13054	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 2c 20 6c 20 3d 20 30 3b 20 28 64 20 3d 20 72 5b 6c 5d 29 3b 20 2b 2b 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 64 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 34 20 3d 3d 3d 20 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3e 3d 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 75 73 68 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 73 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (var d, l = 0; (d = r[l]); ++l) { var u = d.charCodeAt(0); if (44 === u) { if (0 >= c) { t.push( n && s.length
2023-07-21 16:51:19 UTC	13070	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 20 26 26 20 69 28 62 28 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 68 61 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 69 6e 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return a[e]; }; (g.get = function (e) { return a[e] && i(b(e)); }), (g.has = function (e) { return e in a;
2023-07-21 16:51:19 UTC	13086	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 20 2b 20 65 20 2b 20 22 27 3a 20 22 20 2b 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 53 2e 6a 2e 72 65 67 69 73 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 Data Ascii: } function o(e) { return function (n) { throw Error("Component '" + e + "': " + n); }; } var r = {}; (S.j.register = function (e, n) {
2023-07-21 16:51:19 UTC	13102	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 20 3d 20 61 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 6f 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 61 2c 20 74 2c 20 22 68 61 73 66 6f 63 75 73 22 2c 20 69 2c 20 21 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 4c 61 73 74 56 61 6c 75 65 20 3d 20 69 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b Data Ascii: o = a.body; } i = o === e; } (a = n()), S.m.eb(a, t, "hasfocus", i, !0), (e.__ko_hasfocusLastValue = i), (e.__k
2023-07-21 16:51:19 UTC	13118	IN	Data Raw: 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 69 2c 20 74 2c 20 22 76 61 6c 75 65 22 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 53 2e 61 2e 57 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 61 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 20 21 3d 20 65 2e 74 79 70 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 66 66 22 20 3d 3d 20 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 66 6f 72 6d 20 26 26 20 22 6f 66 66 22 20 3d 3d 20 65 2e 66 6f 72 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: S.m.eb(i, t, "value", a); }; !S.a.W \|\| !a \|\| "text" != e.type \|\| "off" == e.autocomplete \|\| (e.form && "off" == e.form.autocomplete
2023-07-21 16:51:19 UTC	13134	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 3d 3d 20 72 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 21 53 2e 61 2e 66 28 65 2e 5f 64 65 73 74 72 6f 79 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return ( e === r \|\| null === e \|\| !S.a.f(e._destroy) ); })), d(e); }, null,
2023-07-21 16:51:19 UTC	13150	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 28 69 2c 20 74 2e 65 6c 65 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6f 2c 20 72 2c 20 73 2c 20 63 Data Ascii: })(i, t.element), i ); })), i(n); }); }, }), (n = e.bindingHandlers.component.init), (e.bindingHandlers.component.init = function (t, o, r, s, c
2023-07-21 16:51:19 UTC	13166	IN	Data Raw: 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 33 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 69 2e 53 74 72 69 6e 67 3b 0a 20 20 20 20 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 3b 0a 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 Data Ascii: n, t) { var i = t(3), a = t(1), o = i.String; n.applyExtensions = function (e) { var n; (n = e.bindingProvider.instance.preprocessNode), (e.bindingProvider.instance.preprocessNode = function (t) { if (
2023-07-21 16:51:19 UTC	13182	IN	Data Raw: 20 3a 20 66 65 20 26 26 20 6e 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 26 26 20 28 73 20 3d 20 44 2e 55 73 65 72 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 65 20 7c 7c 20 6f 20 7c 7c 20 62 65 20 7c 7c 20 67 65 29 20 26 26 20 28 72 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6e 20 26 26 20 28 72 20 3d 20 73 20 3d 20 44 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 4c 6f 63 61 74 69 6f 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 69 6e 69 74 69 61 6c 56 69 65 77 49 64 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 63 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 28 74 2c Data Ascii: : fe && n.getServerError() && (s = D.Username); (ue \|\| o \|\| be \|\| ge) && (r = s); } sn && (r = s = D.RemoteConnectLocation), (n.initialViewId = r), (n.currentViewId = s); })(t,
2023-07-21 16:51:19 UTC	13198	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6e 28 65 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 61 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 Data Ascii: , (n.fetchSessions_onUpdateUserTiles = function (e, n) { setTimeout(function () { hn(e, n); }); }), (n.fetchSessions_onIncrementAsyncTileRequestCount = function () { n.asyncTileRequestCount
2023-07-21 16:51:19 UTC	13214	IN	Data Raw: 20 20 20 28 6e 2e 76 69 65 77 5f 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 69 73 52 65 71 75 65 73 74 50 65 6e 64 69 6e 67 28 65 29 2c 20 6e 2e 73 68 6f 77 4c 69 67 68 74 62 6f 78 50 72 6f 67 72 65 73 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6e 2e 61 67 72 65 65 6d 65 6e 74 54 79 70 65 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 76 69 65 77 5f 6f 6e 53 77 69 74 Data Ascii: (n.view_onSetPendingRequest = function (e) { n.isRequestPending(e), n.showLightboxProgress(e); }), (n.footer_agreementClick = function (e) { (n.agreementType = e), n.paginationControlMethods().view_onSwit
2023-07-21 16:51:19 UTC	13230	IN	Data Raw: 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 31 5f 63 66 65 39 63 62 36 32 65 62 62 36 36 30 35 65 30 33 66 62 38 64 32 38 35 63 36 31 31 62 34 38 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 33 2d 73 6d 61 6c 6c 5f 61 31 39 65 37 62 63 61 34 34 36 36 30 35 39 65 61 64 64 33 34 34 61 62 31 31 65 36 39 30 34 66 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 Data Ascii: p + "content/images/appbackgrounds/11_cfe9cb62ebb6605e03fb8d285c611b48.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/13-small_a19e7bca4466059eadd344ab11e6904f.jpg"; }, function (e, n, t) {
2023-07-21 16:51:19 UTC	13246	IN	Data Raw: 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 2d 73 6d 61 6c 6c 5f 34 66 36 33 63 34 33 37 61 32 30 39 61 37 61 64 30 62 63 66 37 63 35 33 32 61 34 62 35 63 32 62 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 5f 37 34 39 36 32 64 39 36 65 64 34 34 39 38 61 35 33 62 32 37 33 64 37 63 37 66 39 37 63 64 39 35 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 Data Ascii: e.exports = t.p + "content/images/appbackgrounds/67-small_4f63c437a209a7ad0bcf7c532a4b5c2b.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/67_74962d96ed4498a53b273d7c7f97cd95.jpg"; },
2023-07-21 16:51:19 UTC	13262	IN	Data Raw: 20 20 20 20 20 28 6e 20 3d 20 5f 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 75 2e 45 72 72 6f 72 28 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 20 22 45 78 74 65 6e 73 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 2e 22 2c 20 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 44 61 74 61 50 6f 69 6e 74 28 22 65 78 74 65 6e 73 69 6f 6e 2e 69 64 22 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 55 73 69 6e 67 20 43 68 72 6f 6d 65 20 65 78 74 65 6e 73 69 6f 6e 20 77 69 74 68 20 69 64 20 22 20 2b 20 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: (n = _.firstChild); if (!e) throw new u.Error("NoExtension", "Extension is not installed.", null); return ( p.logDataPoint("extension.id", e), p.logMessage("Using Chrome extension with id " + e),
2023-07-21 16:51:19 UTC	13278	IN	Data Raw: 20 20 20 43 68 65 63 6b 62 6f 78 3a 20 22 63 68 65 63 6b 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 42 75 74 74 6f 6e 3a 20 22 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 44 61 74 61 3a 20 22 45 78 63 65 70 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 3a 20 22 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 45 78 63 65 70 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 55 73 65 72 41 63 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: Checkbox: "checkbox", Button: "button", ExceptionData: "ExceptionData", PageActionData: "PageActionData", ExceptionsTablesuffix: "Exceptions", PageActtionsTablesuffix: "UserActions",
2023-07-21 16:51:19 UTC	13294	IN	Data Raw: 6f 76 69 64 65 72 20 3d 20 69 2e 45 6d 70 74 79 45 76 65 6e 74 50 72 6f 76 69 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 69 2e 45 76 65 6e 74 41 70 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 69 Data Ascii: ovider = i.EmptyEventProvider); }, , , , , function (e, n, t) { var i; !(function (e) { var n = t(1), i = t(2), a = i.EventApi, o = i
2023-07-21 16:51:19 UTC	13310	IN	Data Raw: 61 6c 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 3a 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 3a 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 45 72 72 6f 72 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 5f 6f 6e 43 61 6e 63 65 6c 2c 5c 6e 20 20 20 20 20 Data Ascii: alViewId,\n currentViewId: currentViewId,\n initialSharedData: initialSharedData,\n initialError: $loginPage.getServerError() },\n event: {\n cancel: paginationControl_onCancel,\n
2023-07-21 16:51:19 UTC	13326	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 20 2b 0a 20 20 20 20 20 20 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 49 64 70 52 65 64 69 72 65 63 74 53 70 65 65 64 62 75 6d 70 20 2b 0a 20 20 20 20 20 20 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 69 Data Ascii: redirect: $loginPage.view_onRedirect } }">\n </div>\n\n <div data-viewid="' + t(0).PaginatedState.IdpRedirectSpeedbump + '" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-i
2023-07-21 16:51:19 UTC	13342	IN	Data Raw: 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 4e 65 77 55 73 65 72 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 46 6f 75 6e 64 4d 53 41 73 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 73 46 6f 75 6e 64 4d 53 41 73 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 73 70 6f 73 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 66 50 4f 53 54 5f 46 6f 72 63 65 53 69 67 6e 69 6e 20 3f 20 31 20 3a 20 30 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 Data Ascii: \n <input type="hidden" name="NewUser" value="1" />\n <input type="hidden" name="FoundMSAs" data-bind="value: svr.sFoundMSAs" />\n <input type="hidden" name="fspost" data-bind="value: svr.fPOST_ForceSignin ? 1 : 0" />\n <input
2023-07-21 16:51:19 UTC	13358	IN	Data Raw: 69 20 3d 20 7b 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 70 6e 67 22 3a 20 33 34 33 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 73 76 67 22 3a 20 33 34 34 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 70 6e 67 22 3a 20 33 34 35 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 73 76 67 22 3a 20 33 34 36 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 70 6e 67 22 3a 20 33 34 37 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 73 76 67 22 3a 20 33 34 38 2c 0a 20 20 20 20 20 20 22 2e 2f Data Ascii: i = { "./AppCentipede_Beam.png": 343, "./AppCentipede_Beam.svg": 344, "./AppCentipede_Beam_white.png": 345, "./AppCentipede_Beam_white.svg": 346, "./AppCentipede_Bing.png": 347, "./AppCentipede_Bing.svg": 348, "./
2023-07-21 16:51:19 UTC	13374	IN	Data Raw: 6e 74 61 69 6e 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 68 65 61 64 65 72 5c 27 3a 20 74 72 75 65 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 65 61 64 65 72 4c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 68 65 61 64 65 72 4c 6f 67 6f 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3a 20 73 74 72 5b 5c 27 Data Ascii: ntainer">\n <div id="header" data-bind="externalCss: { \'header\': true }">\n <img id="headerLogo" role="img" data-bind="\n attr: {\n src: headerLogo,\n alt: str[\'
2023-07-21 16:51:19 UTC	13390	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 62 75 67 44 65 74 61 69 6c 73 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 6c 64 20 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 69 6e 67 2d 74 65 78 74 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 Data Ascii: <div class="table-cell">\n \x3c!-- ko if: svr.fShowCopyDebugDetailsLink --\x3e\n <div class="debug-details-header">\n <div id="debugDetailsHeader" class="bold debug-details-heading-text" role="heading" aria-leve
2023-07-21 16:51:19 UTC	13406	IN	Data Raw: 69 64 65 49 6e 4e 65 78 74 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 6f 75 74 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 4f 75 74 42 61 63 6b 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 69 6e 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 49 6e 42 61 63 6b 28 29 20 7d 5c 22 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 66 6f 72 65 61 63 68 3a 20 76 69 65 77 73 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 56 69 65 77 49 6e 64 65 78 28 29 20 3d 3d 3d 20 24 69 6e 64 65 78 28 29 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ideInNext(),\n 'slide-out-back': animate.isSlideOutBack(),\n 'slide-in-back': animate.isSlideInBack() }\">\n\n \x3c!-- ko foreach: views --\x3e\n \x3c!-- ko if: $parent.currentViewIndex() === $index() --\x3e\n
2023-07-21 16:51:19 UTC	13422	IN	Data Raw: 76 69 63 65 43 6f 64 65 20 3d 20 74 20 3f 20 74 2e 64 65 76 69 63 65 43 6f 64 65 20 3a 20 6e 75 6c 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 3d 20 22 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 75 73 65 45 76 69 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 73 68 6f 77 43 72 65 64 56 69 65 77 42 72 61 6e 64 69 6e 67 44 65 73 63 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 69 73 53 69 67 6e 75 70 50 6f 73 74 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 65 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 20 3d Data Ascii: viceCode = t ? t.deviceCode : null), (e.proofConfirmation = ""), (e.useEvictedCredentials = !1), (e.showCredViewBrandingDesc = !1), (e.isSignupPost = !1), Ne && ((e.availableCreds =
2023-07-21 16:51:19 UTC	13438	IN	Data Raw: 20 73 74 72 5b 5c 27 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 5c 27 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3a 20 73 76 72 2e 75 72 6c 53 69 67 6e 55 70 20 7c 7c 20 5c 27 23 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 73 69 67 6e 75 70 5f 6f 6e 43 6c 69 63 6b 22 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 49 73 53 65 6c 66 53 65 72 76 69 63 65 Data Ascii: str[\'STR_SSSU_Signup_Link\'],\n href: svr.urlSignUp \|\| \'#\',\n click: signup_onClick"></a>\n </div>\n \x3c!-- /ko --\x3e\n\n \x3c!-- ko ifnot: svr.fIsSelfService
2023-07-21 16:51:19 UTC	13454	IN	Data Raw: 3d 20 64 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 22 5c 78 33 63 21 2d 2d 20 22 20 2b 0a 20 20 20 20 20 20 28 74 28 31 33 29 2c 0a 20 20 20 20 20 20 27 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 69 64 3d 22 6d 6f 72 65 49 6e 66 6f 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 2c 20 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 74 Data Ascii: = d); }, function (e, n, t) { e.exports = "\x3c!-- " + (t(13), ' --\x3e\n\n\x3c!-- ko if: moreInfoTitle --\x3e\n<div id="moreInfoHeader" class="row" role="heading" aria-level="1" data-bind="text: moreInfoTitle, externalCss: { \'t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
288	192.168.2.5	50168	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:19 UTC	13455	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:20 UTC	13460	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:20 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: ad7c162f-101e-0026-39f3-bb5c4c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165120Z-ervruz8hbx641b08e43at7m97s00000006wg00000000twqh X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:20 UTC	13461	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2023-07-21 16:51:20 UTC	13476	IN	Data Raw: 03 46 6b 07 bb 9a ad a7 e7 f4 64 80 4d 90 c7 37 53 fe c7 f3 c9 3d 57 e4 2c f8 eb fb a2 b3 86 ff fe c0 d3 16 6c d0 d4 5e be fc 89 32 3b d4 7d 82 45 6c 83 b1 dc 1c 64 62 0c 12 5e 27 6c 87 6d 33 14 8f e9 f0 f7 77 7d fa 18 17 db 40 f8 91 06 7b 70 fe 9d 87 3a c0 4d 66 38 b8 d3 59 59 d2 09 49 5e 05 da 96 62 e3 1b c9 67 53 0f d6 dc c7 20 6e 87 8d 20 6e 65 8f 27 58 fc 25 5a fd 89 07 05 cc 78 5c fd 23 df f1 26 30 aa 3f cd d2 02 43 57 53 3c b5 33 bf f9 42 55 7e 89 59 45 31 ee f6 c0 37 4a 70 3c 47 5b 52 19 e3 00 8e 79 d0 b6 e3 be 08 da 76 7c 72 e2 f7 68 5d df b2 12 08 0d 76 7b ea f7 a0 c3 15 10 b0 17 71 51 d6 c2 78 73 52 8e 41 9d 89 cc 7f a0 94 ba 19 a6 fb 7d 92 63 a0 8c 36 16 b4 29 9b 82 ac c2 b9 a9 37 98 81 d0 ac a8 8b 6b d5 3f c6 ab 3f 23 a6 47 d8 ab fd 89 f5 aa Data Ascii: FkdM7S=W,l^2;}Eldb^'lm3w}@{p:Mf8YYI^bgS n ne'X%Zx\#&0?CWS<3BU~YE17Jp<G[Ryv\|rh]v{qQxsRA}c6)7k??#G
2023-07-21 16:51:20 UTC	13477	IN	Data Raw: 47 3a 46 60 44 ea 82 43 b7 40 cf b8 46 b1 64 4e 34 c5 8e 43 9b 09 94 de 68 8a e0 06 66 3f 71 77 89 ce 72 71 60 77 6e 12 e4 ee a0 3b 27 8f bb 5a e9 96 4f c4 70 2b 9f c2 99 d9 a5 6a b4 82 74 0b 5d b1 60 38 f5 48 89 92 5b ed a7 3c 92 17 b2 63 d7 9d 90 49 1d c9 75 0d b7 24 74 de 5a ec 8b db e4 89 61 d0 fa 46 22 c8 3d 37 7f 24 2d a2 61 fc 92 95 e4 0a 6b 53 be 61 be 34 d6 b3 d9 30 a6 04 4b c1 88 e9 11 c3 49 f3 ea 73 2a 63 6c 98 ee 3f b5 11 00 47 35 75 b3 7c e9 8c 98 66 37 99 6f 7a 24 71 3f dc 3b 21 46 0b 2e 53 3c 89 7d 5c d8 bc a7 b1 ad 68 a1 46 e6 a2 e9 77 72 17 ca 8f eb db dc f3 37 63 03 8c 92 19 47 ee 0a 41 49 6c 96 51 a6 f8 ee 26 cb 6e 8a f5 8d f7 5b 78 6c e3 33 85 16 bc a2 1b 67 74 ed c0 ec 0e c5 e0 3a 84 b7 66 87 aa 51 4c ea 8e 2f 08 66 bc 09 9c 8a a9 08 Data Ascii: G:F`DC@FdN4Chf?qwrq`wn;'ZOp+jt]`8H[<cIu$tZaF"=7$-akSa40KIs*cl?G5u\|f7oz$q?;!F.S<}\hFwr7cGAIlQ&n[xl3gt:fQL/f
2023-07-21 16:51:20 UTC	13487	IN	Data Raw: 9f e6 9e fd b9 6d 1b e9 df bf bf c2 66 3d 0e 11 c1 cf 3c 9a 90 61 75 8e ab 76 da 89 e3 8c d5 5c e6 46 56 3c b4 4c d9 6c 64 31 25 29 3b 89 a5 fb db 6f 1f 00 08 90 94 e2 e4 7a 33 df 0f 36 29 10 cf c5 62 81 7d 60 97 82 96 eb 1f 05 67 82 d4 4b cc 7b 71 81 5e 3b 90 a8 d3 6f c0 f5 84 5f c6 63 7a b2 eb 76 27 0f 27 1d 4c 26 3a b5 a0 e4 e4 3a 2d e9 45 b1 61 4e 19 95 76 0c d5 3b e9 13 53 45 53 8d 3a 18 62 47 55 6c b2 c8 65 80 6b 24 56 05 45 d1 99 b5 4e d2 dc d8 27 ab 98 ed d1 ed 45 53 84 e5 a1 a7 65 f8 76 75 91 e6 f7 6b 84 b2 2e 69 62 76 1d 17 1f 5a e4 64 bb 24 ac fc aa d3 c8 15 81 3e ea eb 7d 90 0c d5 7a 0d f1 1d f3 b7 f9 cf 43 15 53 36 81 b3 96 7a 81 6d 37 9f ba bf 4c f4 93 1c f7 c2 a5 f1 4e 9e 3f fe 9b a2 22 c1 ee 4b c1 6f 9e 3e 7f f2 b5 70 9e f6 ce dc a6 05 6f Data Ascii: mf=<auv\FV<Lld1%);oz36)b}`gK{q^;o_czv''L&::-EaNv;SES:bGUlek$VEN'ESevuk.ibvZd$>}zCS6zm7LN?"Ko>po

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
289	192.168.2.5	50171	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:20 UTC	13456	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/website.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:20 UTC	13493	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=23683666380573576013393800721749992955"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: c9287f12-401e-004d-32f3-bb052d000000 Content-Length: 215 Connection: close
2023-07-21 16:51:20 UTC	13494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 63 39 32 38 37 66 31 32 2d 34 30 31 65 2d 30 30 34 64 2d 33 32 66 33 2d 62 62 30 35 32 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 30 2e 36 39 33 35 36 30 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:c9287f12-401e-004d-32f3-bb052d000000Time:2023-07-21T16:51:20.6935605Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.5	49825	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1665	OUT	GET /pithos/privacy_consent HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
2023-07-21 16:50:34 UTC	1670	IN	HTTP/1.1 307 Temporary Redirect Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/privacy_consent Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:34 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 172 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c29e75b69ca54e0cbe5876be6242f468 Connection: close
2023-07-21 16:50:34 UTC	1671	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/privacy_consent;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
290	192.168.2.5	50175	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:20 UTC	13457	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/home.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:20 UTC	13494	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=110791217963435240249411439117830616183"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7dc529f3-d01e-0012-44f3-bbb111000000 Content-Length: 215 Connection: close
2023-07-21 16:51:20 UTC	13495	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 64 63 35 32 39 66 33 2d 64 30 31 65 2d 30 30 31 32 2d 34 34 66 33 2d 62 62 62 31 31 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 30 2e 37 31 31 31 36 31 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:7dc529f3-d01e-0012-44f3-bbb111000000Time:2023-07-21T16:51:20.7111619Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
291	192.168.2.5	50173	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:20 UTC	13458	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/home15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:20 UTC	13495	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:19 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1475746631935415241716455628000721351446"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 2f30b8fc-101e-0050-3ef3-bb0891000000 Content-Length: 215 Connection: close
2023-07-21 16:51:20 UTC	13496	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 32 66 33 30 62 38 66 63 2d 31 30 31 65 2d 30 30 35 30 2d 33 65 66 33 2d 62 62 30 38 39 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 30 2e 37 32 35 35 39 31 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:2f30b8fc-101e-0050-3ef3-bb0891000000Time:2023-07-21T16:51:20.7255917Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
292	192.168.2.5	50172	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:20 UTC	13458	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/assistancepanel.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:20 UTC	13497	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=517726016879383070811737471852035066324"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: e782872e-d01e-005f-27f3-bb7efd000000 Content-Length: 215 Connection: close
2023-07-21 16:51:20 UTC	13498	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 37 38 32 38 37 32 65 2d 64 30 31 65 2d 30 30 35 66 2d 32 37 66 33 2d 62 62 37 65 66 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 30 2e 37 33 34 30 33 36 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:e782872e-d01e-005f-27f3-bb7efd000000Time:2023-07-21T16:51:20.7340367Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
293	192.168.2.5	50174	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:20 UTC	13459	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/conciergehelper.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:20 UTC	13498	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=40233754374447682901019913073496522875"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: efc31f05-901e-003c-68f3-bbe306000000 Content-Length: 215 Connection: close
2023-07-21 16:51:20 UTC	13499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 66 63 33 31 66 30 35 2d 39 30 31 65 2d 30 30 33 63 2d 36 38 66 33 2d 62 62 65 33 30 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 30 2e 37 35 37 34 37 30 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:efc31f05-901e-003c-68f3-bbe306000000Time:2023-07-21T16:51:20.7574708Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
294	192.168.2.5	50176	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:20 UTC	13459	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/adoption.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:20 UTC	13499	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=32108402010358805281505776696900455359"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: efc31f0c-901e-003c-6ff3-bbe306000000 Content-Length: 215 Connection: close
2023-07-21 16:51:20 UTC	13500	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 66 63 33 31 66 30 63 2d 39 30 31 65 2d 30 30 33 63 2d 36 66 66 33 2d 62 62 65 33 30 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 30 2e 37 36 39 34 36 34 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:efc31f0c-901e-003c-6ff3-bbe306000000Time:2023-07-21T16:51:20.7694641Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
295	192.168.2.5	50179	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13500	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/commonhealthdashboard.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:22 UTC	13560	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:22 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=639015469207404897510748681001556017226"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: b7ccc5de-b01e-003b-71f3-bb8f65000000 Content-Length: 215 Connection: close
2023-07-21 16:51:22 UTC	13561	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 37 63 63 63 35 64 65 2d 62 30 31 65 2d 30 30 33 62 2d 37 31 66 33 2d 62 62 38 66 36 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 32 2e 37 36 32 30 30 38 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:b7ccc5de-b01e-003b-71f3-bb8f65000000Time:2023-07-21T16:51:22.7620080Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
296	192.168.2.5	50178	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13501	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/embeddedfonts.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Wed, 19 Jul 2023 22:15:37 GMT
2023-07-21 16:51:22 UTC	13510	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73267 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:15:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=45861700661540097112725099932864433007"}],"include_subdomains ":true} Server: ECAcc (muc/333D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: c26a9ee2-001e-0073-0b48-bb9252000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
297	192.168.2.5	50183	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13502	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/admin/css/admin.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Wed, 19 Jul 2023 22:13:45 GMT
2023-07-21 16:51:22 UTC	13508	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72420 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:13:45 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=103567994080405344407404402265280234601"}],"include_subdomains ":true} Server: ECAcc (muc/336D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 514bbde6-701e-0079-144a-bb36e5000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
298	192.168.2.5	50182	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13502	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/o365themedefault.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Wed, 19 Jul 2023 22:16:27 GMT
2023-07-21 16:51:22 UTC	13507	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 63453 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:16:27 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=508628073096188245812523709945463849417"}],"include_subdomains ":true} Server: ECAcc (muc/3311) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 9d2cc99a-301e-0025-555f-bb63bd000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
299	192.168.2.5	50180	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13503	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Wed, 19 Jul 2023 22:15:44 GMT
2023-07-21 16:51:22 UTC	13506	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73266 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:15:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1040728409741684660916976751171510048955"}],"include_subdomains ":true} Server: ECAcc (muc/3335) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0d9d6efb-201e-0064-7b48-bb3b59000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.5	49725	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:29 UTC	406	OUT	GET /page_success/end?dws_page_name=cloud_docs_paper_content_page&path=%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FUntitled.paper&request_id=1b902fc12cf8423d9be8fc779df1ecb3&time=1689958229 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
2023-07-21 16:50:30 UTC	407	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 1 Content-Type: text/javascript Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:29 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d8195718d299400a83cd1937b703f29b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.5	49820	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1666	OUT	GET /static/webpack/production/3ee69373c43503423dee.hQ390ZRL-Hgo8uZZODlkclJcvKXLvy33mubixfvo22U.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:34 UTC	1722	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 21869 Connection: close Date: Fri, 21 Jul 2023 16:50:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:18 GMT ETag: "b0363e551626c07ee9ee81eba4b59918" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 3c2af29a416fc74eb3d104df3f808fdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: dPdlOGAXcrP_FOcwNRKeWSJzSzvYLiqj3luatMpkbpOMnDh-cwioQQ==
2023-07-21 16:50:34 UTC	1723	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 7d 7b 9f da c8 b1 e8 ff 7c 0a 46 67 cf 44 32 02 c3 3c fc 10 96 c9 ac 67 36 f1 c9 ae c7 67 ec 64 93 10 32 2b 44 03 da 11 12 91 c4 0c 04 74 3f fb ad aa 7e 4a 80 ed 3d e7 de df ae 07 a9 d5 cf ea ea 7a 74 57 57 d9 4f 51 32 49 9f 3a f7 f7 3f de 5e 5d 5f 7d ff e3 0d 3d dc 5c df bf fb e3 9f 3f fc e9 d3 fd bd ff d5 1c bb dd 70 e4 74 96 ab 7c 6e 0f 87 d6 23 83 ec 59 fe 7f 96 c1 92 65 f7 c1 64 11 25 e6 f3 7d 3a 9d de 3f 46 ec e9 3e 4d e2 8d f8 32 86 26 58 26 5f 56 c9 24 66 e2 25 8c d3 d5 e4 7e 92 86 b2 c2 49 90 cf c7 ff 87 bd ea 85 af c7 dd c0 1a b9 db 46 af 7b d1 f3 a6 ab 24 2c a2 34 b1 99 5b b8 89 b3 b5 56 39 6b e6 45 16 85 85 d5 7f 0c b2 66 e6 27 f6 f9 d9 0b c7 8d e0 e1 b2 fb d2 71 53 4a 79 e9 f4 65 d9 66 60 33 67 1b 4d ed c7 34 Data Ascii: }{\|FgD2<g6gd2+Dt?~J=ztWWOQ2I:?^]_}=\?pt\|n#Yed%}:?F>M2&X&_V$f%~IF{$,4[V9kEf'qSJyef`3gM4
2023-07-21 16:50:34 UTC	1764	IN	Data Raw: d1 ec 57 71 c9 a0 c3 b7 93 7e 84 b2 ce 20 f5 ba 8e f3 7c da 59 83 46 87 e6 47 e9 d2 ac 2f 97 f5 85 c7 eb 0b 45 7d 9f d3 a5 33 c8 45 75 1b 50 ff 62 31 b5 58 f9 13 fa 9a e0 53 09 1f 25 e1 d8 f2 73 8a 8d cb 3f 79 4f b4 0f 3b 17 1b d8 8b d6 46 ee 60 cf 5b 4f 7c 6b 76 e1 ae e1 df 06 e4 70 3d 65 6b bd 28 6c 9b 38 75 4d 40 f0 b4 15 bf 92 0a 74 4a dd 84 59 57 7c 63 30 2a 9a 89 6d 83 53 73 04 9d 27 ed f3 f0 c5 55 a6 7a 9e 61 b6 57 7a db 4a fe 65 30 63 7f bd 25 60 55 0a 60 fa df 78 ba 31 ac 2b a3 f5 27 1b 07 e9 f0 f9 c6 6e 19 6d eb 12 0f 52 58 6e 48 eb 90 18 16 9a 1b f9 6b fc 49 7d c4 ed 93 2e c8 bc d1 9a f8 a8 9f b8 62 1d e6 be d9 d3 ae d1 bb 6e 29 90 31 44 f2 d1 05 d0 43 0a 1e 7d 03 21 cf 88 70 af 69 33 cd c7 4b 18 9c 16 a1 8b 00 9b ef 1f 44 0e a2 77 ee df d8 78 Data Ascii: Wq~ \|YFG/E}3EuPb1XS%s?yO;F`[O\|kvp=ek(l8uM@tJYW\|c0*mSs'UzaWzJe0c%`U`x1+'nmRXnHkI}.bn)1DC}!pi3KDwx

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
300	192.168.2.5	50181	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13504	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15mvc.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Wed, 19 Jul 2023 22:15:45 GMT
2023-07-21 16:51:22 UTC	13509	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73853 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:15:45 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=84456372824281429413400855740731694910"}],"include_subdomains ":true} Server: ECAcc (muc/3317) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 09d8815c-901e-003c-5647-bbe306000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
301	192.168.2.5	50177	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13504	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:22 UTC	13520	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 content-length: 113440 Content-Type: application/x-javascript Content-Encoding: gzip Content-MD5: SxsaXa39nTRc5WmIHM+/cw== Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 X-Cache: TCP_MISS x-ms-request-id: e2bb04af-501e-0022-6cf3-bbf044000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0ire6ZAAAAACNkTRDhfz5QqMMVvKOgA8zRE0yQUExMDkxMjA4MDM5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0ire6ZAAAAABYYOCXUZ3IQ6IWulF7QJ2CQ0gxQUEyMDIwNjA5MDA5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:21 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:22 UTC	13521	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA);)g9{4MB(jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2023-07-21 16:51:22 UTC	13536	IN	Data Raw: f3 44 80 cc 4b cd 12 4d 75 1a d2 7d cb ec 6c b9 04 74 c9 f5 92 89 0f 16 93 d7 e5 ed f9 4f 46 62 e3 81 c6 c4 c8 a9 7e 6f cc c8 fd b0 aa e4 f3 ef 28 66 56 1c 3b f1 60 c5 b1 53 c3 ca 8a 97 c6 96 be c4 4e 2d 31 82 d4 49 0f 19 41 ea b4 f3 ce 8c 20 75 32 31 33 2b 48 1d 69 bc 15 81 6c b0 4a f0 12 32 29 08 a4 ea b2 26 e9 3e 0a ac dd 70 f5 69 a8 32 4b 77 9f 68 1a 57 9c d2 2d 0b bd 02 b5 42 d8 6d dc 72 d0 2f 7d f5 58 57 60 de 7f 6a cb 82 a5 0b 50 8a d7 8d 37 a0 fa 3a b7 7a 05 8a b6 ba 2a b7 72 2b a5 5b cd 95 6c aa 56 5c 54 7a da b8 4a 64 c4 58 72 f9 1b 79 2a a6 92 f7 24 e6 54 2f 42 75 cc ac f2 fd a4 50 66 6e b8 d8 34 94 79 95 7b 4b 43 d5 e6 f2 ed a4 9e 91 21 66 47 d0 32 60 b6 e8 54 5b ab 17 94 42 55 68 c3 01 61 39 4f da 43 ed 72 86 75 47 49 75 c5 86 4b 4a f4 05 0c Data Ascii: DKMu}ltOFb~o(fV;`SN-1IA u213+HilJ2)&>pi2KwhW-Bmr/}XW`jP7:zr+[lV\TzJdXry$T/BuPfn4y{KC!fG2`T[BUha9OCruGIuKJ
2023-07-21 16:51:22 UTC	13537	IN	Data Raw: 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 42 Data Ascii: 2&jI+@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<iZ!Nq>H%+# o``HY{rvne%iW3=j-`IQG9V&kD{E+,Gj4B
2023-07-21 16:51:22 UTC	13545	IN	Data Raw: ed 7d 6b 73 db c6 b2 e0 f7 fd 15 12 63 cb 80 01 8a 0f 3d 1c 91 04 19 5d db d9 75 55 ce 8d 2b c9 bd 1f 0e 49 f3 80 24 48 22 02 01 06 20 f5 b0 c0 fd ed db dd f3 06 40 49 f6 b9 a7 ee d6 d6 a6 62 11 18 cc b3 a7 a7 a7 a7 a7 1f 68 a1 a2 2e 08 b2 ed 43 44 1e 39 83 fb 6d dd 8f c2 65 dc a9 39 98 6d 3c 36 c6 78 e0 66 55 5b 07 ee da b8 53 35 7a 21 a4 fe d8 0d 14 0f b0 cb 35 6d 84 32 43 4a 19 dc 22 b4 54 05 04 2e 76 50 03 22 db 5d e1 d6 7e 6c 1d a2 ab dd 95 90 08 e1 d9 19 a1 e5 6e bc 07 09 ad de 86 20 86 67 67 18 08 20 fd 0a d9 0c 18 e0 e3 7b 43 c9 fd 3d 57 48 a6 d5 cf 96 c7 4a 2e 0f f5 ed 09 ca cd f2 60 47 fe 2b 17 c3 0a f7 3a a7 8d 77 1e 1a c4 a6 c9 fc 41 4e 3c be 28 b4 99 02 e2 38 6d 40 48 fb 05 28 b6 72 57 0a c5 e6 45 dc 52 28 3c ff d7 e1 d6 40 43 30 d4 34 3d 88 Data Ascii: }ksc=]uU+I$H" @Ibh.CD9me9m<6xfU[S5z!5m2CJ"T.vP"]~ln gg {C=WHJ.`G+:wAN<(8m@H(rWER(<@C04=
2023-07-21 16:51:22 UTC	13553	IN	Data Raw: 53 01 ad d8 84 16 00 41 3f 47 b0 f1 c7 bc 33 b1 36 fe 50 4b 6d 7e 0b 54 20 c5 e3 a6 df 32 ed e4 24 ec 57 40 a1 12 80 62 58 2f 83 63 68 17 29 2b 8c de a4 0c 62 37 3f 44 67 d4 86 2f 96 72 99 b2 88 d5 58 ba 0a 30 17 88 ce fc 98 db e9 78 f0 7c 16 c9 27 42 e5 ec 5a c8 ee 14 c6 42 33 59 be d2 f3 9a 14 b9 ba 5b 82 84 44 1c 83 06 7a 1e 3a 89 e6 8a 76 0c 31 30 7a 81 bb f5 aa 26 49 33 9f da 0e 94 38 a7 13 74 25 b1 c2 68 d4 76 b9 be 18 70 88 67 af a8 d7 dd 3a 55 ed 29 31 11 c3 b9 41 ca ce 5d e6 9c e0 c9 b9 7a a3 e6 c2 e3 30 63 d7 65 70 1e 09 3a b0 0d a1 d0 db dc ff 8c 37 bc 4a 9a f9 38 f9 c0 b7 a5 5b ab 82 e7 35 67 3c c0 c3 e2 70 5b 6f 11 93 9b 06 b7 41 4a 6c 93 be d7 d9 9d 42 93 02 7a f6 c1 ad b7 69 56 60 8e ba ea ac 84 9c 24 5b 3c a4 12 81 7c 17 23 c1 8d 06 f2 a5 Data Ascii: SA?G36PKm~T 2$W@bX/ch)+b7?Dg/rX0x\|'BZB3Y[Dz:v10z&I38t%hvpg:U)1A]z0cep:7J8[5g<p[oAJlBziV`$[<\|#

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
302	192.168.2.5	50184	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13511	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/content/css/signup16.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Wed, 19 Jul 2023 22:17:20 GMT
2023-07-21 16:51:22 UTC	13514	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42120 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:17:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=31435631389872262611870979440579555696"}],"include_subdomains ":true} Server: ECAcc (muc/3369) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 64f01296-601e-0038-4591-bb6e01000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
303	192.168.2.5	50185	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13512	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/microsoftajaxcombined.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:15:36 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:22 UTC	13515	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101305 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:15:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=174692852846684018753724065957584306173"}],"include_subdomains ":true} Server: ECAcc (muc/330A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 6b2f022c-c01e-0043-1707-bb2c9d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
304	192.168.2.5	50188	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13512	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:15:32 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:22 UTC	13517	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101307 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:15:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=15434176704244459369912337777173016533"}],"include_subdomains ":true} Server: ECAcc (muc/3351) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 30a9e452-001e-004c-4f07-bb5af1000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
305	192.168.2.5	50187	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13513	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/controlbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:19 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:22 UTC	13516	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101306 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:13:19 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=171749929490853833294967158932675221502"}],"include_subdomains ":true} Server: ECAcc (muc/3376) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: d5d9b1f8-301e-0025-5a07-bb63bd000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
306	192.168.2.5	50186	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13514	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/headbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:18 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:22 UTC	13519	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73854 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:13:18 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=6396632041610250315362470785655181147"}],"include_subdomains ":true} Server: ECAcc (muc/330D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f6b4aa00-e01e-0054-2e47-bb8596000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
307	192.168.2.5	50192	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13556	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:28 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:22 UTC	13557	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72419 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:13:28 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=110161155422661589948482778481040892423"}],"include_subdomains ":true} Server: ECAcc (muc/333A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 17882f32-601e-004a-774a-bb694e000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
308	192.168.2.5	50190	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13558	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularextensions.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:35 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:22 UTC	13559	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72417 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:13:35 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=74193146470069310413246121415393945705"}],"include_subdomains ":true} Server: ECAcc (muc/332B) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f6c6510e-e01e-0054-274a-bb8596000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
309	192.168.2.5	50189	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:22 UTC	13558	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminbootstrap.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:37 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:22 UTC	13561	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42120 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:22 GMT Last-Modified: Wed, 19 Jul 2023 22:13:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=139234479352613452306951383777181550129"}],"include_subdomains ":true} Server: ECAcc (muc/334D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f4262fa5-d01e-0070-3091-bb7336000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.5	49821	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1667	OUT	GET /static/webpack/production/6e501f8b9009ee898fc6.wFEyMPzjGdp0HhzwUx04Vd1h31nD7XJiB3IVsODHoBk.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:34 UTC	1785	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 116150 Connection: close Date: Fri, 21 Jul 2023 16:50:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:31:41 GMT ETag: "aec76401b3ea856665a74f68b798e8c4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: yx80oCAGid3rJyejGPDz3z-5yP6mtVvAhkHrOJVELDDaC9G4ATzOHQ==
2023-07-21 16:50:34 UTC	1786	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6d 77 db 46 d2 26 fc dd bf 02 d1 c9 c9 b1 36 02 07 dd 68 bc d9 eb 9d a3 28 76 98 8c 9c 64 6c 47 99 d1 dc d9 dc 34 45 9b 8c 29 52 21 29 da 4e c6 fb db b7 ae ab 1b 24 9a 64 83 b2 13 cd e4 d9 67 12 0b 00 81 aa 7e ef ea ea ea 7a b9 fb 7a 34 b9 98 be ee fc f8 e3 e9 37 c7 9f 1f 7f 76 fa 90 0f 0f 3f ff f1 a4 fb dd d7 7f 79 fa e3 8f 0f f6 42 fc f3 9f ff f8 e1 b0 73 75 3d 1f de fd c7 3f 0e 96 03 01 9f cd ff cf 55 ef 6a 30 fb b1 77 71 39 9a 34 9f 7f 9c be 78 f1 e3 72 34 78 fd e3 74 32 7e eb be 3c 97 2c 06 b3 fa c7 f5 e4 62 3c 70 3f fa e3 e9 f5 c5 8f 17 d3 7e 9d e0 45 6f 3e 7c fe 7f 5e a4 cf ab 72 30 30 07 3f 1c fd 7a 47 a9 ec de 8b eb 49 7f 31 9a 4e ee 0e 8e c6 47 8b c3 5f 0f ae e7 83 68 be 98 8d fa 8b 83 fb 8b ce ec ee f8 50 6e Data Ascii: mwF&6h(vdlG4E)R!)N$dg~zz47v?yBsu=?Uj0wq94xr4xt2~<,b<p?~Eo>\|^r00?zGI1NG_hPn
2023-07-21 16:50:34 UTC	1801	IN	Data Raw: 5e 5b 7a 7c 30 f8 17 74 b9 6e 76 79 be ee f2 66 3f b6 76 78 46 29 4c 56 36 ba bc ac bb dc 50 1b 49 95 5e af 87 59 ad f1 fb 56 f8 ce 7b 72 fc f0 eb a3 96 38 a3 34 b0 a9 81 23 1f d9 81 c0 96 41 66 2e 4c a9 14 85 58 8a f6 83 f4 cb ae 21 48 57 1a 32 26 cc 53 fb 6c 48 9e c0 c9 a6 29 ba 31 81 eb ef b2 48 e9 7c 2d a3 22 a9 4a fb 9d bc a0 63 dd c2 da 8d d0 29 9c a6 ab de 92 32 6a fc ea 31 3a 52 64 af b6 ad b1 b9 d2 aa 3a 83 a2 88 94 52 c8 11 ec 9a e0 46 f4 4c 58 de b8 22 41 11 c6 2c cc cc ec 91 11 c9 c6 90 52 1c 9a a1 e2 ea c9 88 36 df 46 3b de 46 81 b7 94 11 c9 bc dc 4e 3d 0a a4 fe 7e 79 b6 cc 95 c5 ed cd 95 f7 e0 3d b4 d5 18 07 eb a1 fb 54 60 8c e1 00 cf c8 38 a9 30 b0 a0 85 6a e0 93 1e 8f 88 fe 81 ca 15 9d 0c 1e 9c 41 60 14 cd 09 10 ca 07 8a 15 95 75 47 8c e4 Data Ascii: ^[z\|0tnvyf?vxF)LV6PI^YV{r84#Af.LX!HW2&SlH)1H\|-"Jc)2j1:Rd:RFLX"A,R6F;FN=~y=T`80jA`uG
2023-07-21 16:50:34 UTC	1804	IN	Data Raw: 08 9c 92 d9 49 32 38 8a d1 f5 b5 fe 58 a1 4c 19 3c 10 c2 6f 8d 15 39 cb 43 4c a9 79 c5 53 01 7b 6d 20 d0 eb 44 20 a7 88 39 95 74 3c 5c 36 7c e0 4b 11 23 5b c4 92 43 ba 5c 0d 6c 06 63 65 80 e7 74 cc b3 9e a4 54 4b 9e e3 c8 06 bf 04 6f cc 33 8b 3c d1 4e 62 9f 56 80 83 50 10 4d 2b 37 ec 46 b9 42 5b 0f 3a 99 25 fb 55 41 ba 01 e5 67 f8 28 c8 b2 e3 bc 42 08 b5 c8 dd 2c 51 c6 be 02 e7 83 45 6f d7 57 2b 5a c1 36 05 4e 71 0d c6 b6 2e c9 ba 54 f4 28 03 37 50 3c 86 b7 39 8c 5d 17 ab fa de ef 60 92 17 65 49 4f 18 8c a0 ce 27 54 02 03 a5 d4 63 Data Ascii: I28XL<o9CLyS{m D 9t<\6\|K#[C\lcetTKo3<NbVPM+7FB[:%UAg(B,QEoW+Z6Nq.T(7P<9]`eIO'Tc
2023-07-21 16:50:34 UTC	1845	IN	Data Raw: 47 02 4a 04 87 dc d5 30 e0 3b 75 b5 bb 45 6f da e9 3b fa b0 bd d3 77 8c 92 96 4e cf d6 9d be 39 2e 93 aa b2 dd 0e 62 52 e0 40 02 24 cc 3a de 49 39 a8 d1 a1 69 76 bc 63 4e c0 d3 8b 4c a9 bc cc 97 38 48 1c b6 aa 51 2e 6f 5b c0 fe 87 d4 60 fe 10 d9 22 9c 06 dd 2c fc a4 dc 18 b2 54 43 ef 28 59 79 39 b1 2e 90 21 11 39 2e e8 78 c0 5e 1d 93 23 f5 2f 9c ee f3 5a df 9e 21 89 b3 38 3d c6 a9 77 11 d9 eb 8a 42 6b 38 58 d8 7c af ed 21 ee f1 3a 0d d8 4b 15 0d 1d 7e 1b fd 18 0b 3d 25 95 55 ed 49 4f 36 7a 06 1e b1 65 7d a8 dc 75 b5 0d c7 e4 95 cd 3e 0a 6e e8 da c9 ac 06 1b 5d 95 17 a6 5c ca 62 a8 e0 ad 95 ce f2 55 b9 b2 64 88 92 33 9c 50 b8 83 60 65 10 f1 37 46 28 d8 9e a1 ec dc ac 24 e8 b6 be b2 5d ed c3 b3 18 64 09 9d 0c 5b 6d c4 1d 2c 11 99 1c be a5 84 c3 8e ec d5 49 Data Ascii: GJ0;uEo;wN9.bR@$:I9ivcNL8HQ.o[`",TC(Yy9.!9.x^#/Z!8=wBk8X\|!:K~=%UIO6ze}u>n]\bUd3P`e7F($]d[m,I
2023-07-21 16:50:34 UTC	1861	IN	Data Raw: 47 76 0f 76 21 f3 db f3 8e be fc a6 df 03 18 5f 45 01 3a 9e a0 16 e3 8a 32 c9 f8 a6 c6 a2 fd b1 e8 6f a8 d7 ed a5 c5 5e da ff b0 37 7f 2d 40 96 23 f5 0b 4b 73 a6 86 14 d6 18 d6 5b 53 01 80 70 16 4c 47 62 db f9 76 a7 4f 98 b9 60 d0 c4 f7 23 2a ff e8 5e 4f fb b3 3f 51 57 1b 13 21 c3 fb 8d 39 62 d5 04 72 49 f7 66 97 04 62 3b 65 ff b9 38 31 ea b6 fe d8 df fb bc 26 9c 60 6f 96 65 ee b6 5f 5a b1 14 86 a5 5c df 99 81 32 e9 9c f0 79 98 6c 1d e6 80 fe d4 e2 fb b3 52 0c af df 80 95 81 c9 f0 8d 37 96 3a 6e f2 d7 26 28 28 46 c2 8d d1 39 7a 28 53 be bd 12 ca bb 33 09 8f f7 7f fe d5 27 92 df 53 49 ca 4b f3 c3 1f ba 14 29 68 16 c0 d1 c3 db 49 65 7f e1 43 39 cf 10 a3 2e fd 88 2c 8c f5 01 c2 45 b5 dc be b0 f6 a7 e0 65 25 8e 1e 51 9e 42 c5 f4 03 dc 2d c5 98 e1 7b d5 9d de Data Ascii: Gvv!_E:2o^7-@#Ks[SpLGbvO`#*^O?QW!9brIfb;e81&`oe_Z\2ylR7:n&((F9z(S3'SIK)hIeC9.,Ee%QB-{
2023-07-21 16:50:34 UTC	1862	IN	Data Raw: 5c a4 06 5a cb b5 34 3a 13 65 2e 94 b4 1b df 64 da 76 36 0a 8b a8 d8 15 cb 7a de 78 92 8d d6 40 07 27 a9 74 af d6 45 8c 61 99 3f 78 d6 d0 4f 28 cb 58 d1 95 12 5d 78 bb de 08 81 7f 75 59 49 d1 89 9c 79 83 9f 7b c4 18 4d 11 59 05 09 2a 3b aa 85 b9 00 cf 8b 8f c6 23 fa 79 51 ab 52 d8 c1 cc 12 2a 0c e9 50 83 0c 83 65 0b 5c 8b 26 b4 10 a0 77 fa f4 dc 6d cf 07 b7 b8 c1 7e f1 6c 44 0f d0 9d 1a 06 be e5 13 30 66 89 2e aa 66 24 54 ab f4 10 23 5b 0f 81 c0 7c 1d b6 0d 0c 10 dd 88 20 76 30 30 60 89 ca b0 d1 89 c5 13 e2 d2 a4 eb 77 f9 54 45 c3 11 0e de 66 4c 31 81 d5 48 6d 19 e2 88 e4 13 c3 31 04 d3 5e b2 dd b5 f7 c9 30 10 8f 26 bc 2e 42 e9 ab 9a fe 18 c9 1b 0a de 57 cb 16 b8 2f 1a 92 ac 24 92 fb 29 fd a0 f1 69 46 70 90 be 64 92 9c 68 15 b6 9d a1 90 28 dc 1d 2d fe 6c Data Ascii: \Z4:e.dv6zx@'tEa?xO(X]xuYIy{MY;#yQRPe\&wm~lD0f.f$T#[\| v00`wTEfL1Hm1^0&.BW/$)iFpdh(-l
2023-07-21 16:50:34 UTC	1878	IN	Data Raw: 31 b4 35 58 04 fe ed 8f 5e f3 66 55 73 f8 9b 55 5c d5 de 34 40 2a fd 4a 31 ae ea f1 64 fb 6a d6 7a 08 db 35 72 d5 90 ae a9 3e 55 c8 a7 30 0c 26 90 1c 65 57 c9 1d 77 2d e1 0c 91 f4 f6 b4 4f dd 40 c4 bd 38 a4 e4 55 4d 4f 4d f3 52 ec c9 0e 90 2d 64 71 57 ad 50 10 86 d5 96 ff a3 a4 69 6b da 4d c3 a4 4c be 42 72 73 b3 8f 1c e1 7c 35 e2 05 1d 5c ad 0a 8a 97 19 9d b5 dd c0 db 67 59 12 e9 23 60 2b ed 4a 5d 60 99 10 34 37 a1 1a d8 b5 49 e6 05 c1 e8 a0 00 a5 25 34 02 79 5a 2c ca a3 60 fa b5 ee 5d 10 be 8e 20 6a 31 f1 91 6d 3f 4a 75 4b b7 7e 39 2b fe 8d 53 83 7e 89 f2 c6 7b b3 48 7c 7b d2 17 c8 c5 9b 66 c7 58 3b 8c cf a6 08 c4 29 ac 81 39 ea ea 42 72 db da 1b be 41 27 b3 1a cf e8 bb 0b 19 18 e3 b5 ee ca 62 48 9a f8 fa e6 37 98 bb 20 37 41 d8 ce 88 0f a7 f7 93 cd 91 Data Ascii: 15X^fUsU\4@*J1djz5r>U0&eWw-O@8UMOMR-dqWPikMLBrs\|5\gY#`+J]`47I%4yZ,`] j1m?JuK~9+S~{H\|{fX;)9BrA'bH7 7A
2023-07-21 16:50:35 UTC	1906	IN	Data Raw: 80 94 40 16 08 72 13 5c 7e fd b1 f9 2d 73 f7 c8 4b 44 77 55 77 f4 29 8e 18 dd e5 e1 e9 57 73 73 73 b3 65 6b cd 35 a7 ab c0 b4 51 10 71 b5 1c 15 47 0d b7 a2 50 2d 47 82 aa 24 c0 4b 47 8e 69 80 89 52 eb c3 6b 64 b6 29 62 19 2d 9d 2b da fa 6d b1 a8 1b 46 e8 ec 8c 42 2e c1 ac 03 d3 35 12 cd c2 08 9b 2f 92 0d 10 47 91 53 a7 1e 15 1e 3c 6b f0 09 a0 4e b0 4b 27 15 34 65 71 ef c6 f0 08 ea 29 3d e3 d9 c9 64 f6 2f 94 d7 53 5e 7d 38 9a 20 06 e8 8b 1a 6a 94 33 e9 6b 5e 69 f9 f3 e0 3c 4f b8 2a 51 a6 56 b3 09 63 35 68 f6 77 14 b0 cf 6e 13 01 b4 27 bc e6 8d 2f 16 70 13 59 25 46 f0 93 01 27 0d d6 d4 64 a4 70 9a 4c b7 3e 23 c3 1c 30 4e 26 41 fa 6f 02 69 16 1a 52 6a 3c c2 c7 7b a1 b1 fe f9 f5 c3 b2 72 55 c9 e2 c9 36 6b 94 a1 e6 4e 7e 1f 59 91 31 61 f4 b5 a4 4d 13 7b 21 ac Data Ascii: @r\~-sKDwUw)Wsssek5QqGP-G$KGiRkd)b-+mFB.5/GS<kNK'4eq)=d/S^}8 j3k^i<O*QVc5hwn'/pY%F'dpL>#0N&AoiRj<{rU6kN~Y1aM{!
2023-07-21 16:50:35 UTC	1922	IN	Data Raw: 0f f1 10 fe 93 90 ed b6 75 8d 7d 5c b0 9c 7e 7b e5 61 a9 8f b8 a9 4f f8 fb 28 ea a2 50 18 73 65 04 be 4a c6 f7 df 5d 71 08 1a 32 17 28 2d f5 81 f1 a3 93 07 58 e1 11 5b 02 aa 94 13 ec 78 31 0a a7 c9 c3 f9 f0 d4 bd e8 c7 c7 b9 fa 7b de 8e 18 c1 ab 73 b6 c5 3f 5e fd 25 92 c6 42 96 2a a4 d0 8e e9 77 8a b6 e2 48 6e e9 0b b1 2c 19 8c d7 a1 12 c6 d4 72 1c 60 30 5e f2 60 64 06 ea 30 bb 18 3b d6 43 59 c8 17 64 59 ba 65 a8 0f b8 f5 5e fb f5 44 8d e2 32 17 fc 84 b2 81 d2 8a 3e aa bf 9e 9a 25 01 6b 20 d5 7b 51 c0 f7 20 b8 08 ac 86 ea 9e 70 54 26 ab 70 43 a9 30 c5 b5 9d fa d7 df f0 41 de 6e 22 e4 eb d1 fa 15 b5 ca 25 f9 80 6b bf 88 2b 02 40 40 11 56 b3 20 3d b6 9f bf 6d 32 76 fd 08 8e cb 7c 3c 6b e3 c2 13 7f e9 e9 7f 0e eb fd 17 78 7a 7b e4 b4 99 f3 67 69 c7 af fd a6 Data Ascii: u}\~{aO(PseJ]q2(-X[x1{s?^%B*wHn,r`0^`d0;CYdYe^D2>%k {Q pT&pC0An"%k+@@V =m2v\|<kxz{gi
2023-07-21 16:50:35 UTC	1938	IN	Data Raw: 06 17 e0 0a 2e 64 c2 e1 9f ed 73 e5 f1 cd 21 7e c4 9a 17 72 79 41 81 a9 14 fc 2f d9 d3 29 a4 22 da 28 9f 3f d2 cc 7d 1d 59 7f 58 45 49 8e d7 c1 c2 00 3d 54 6e 61 90 2b 63 bb fb 89 eb 32 94 ba f8 51 f7 98 70 39 33 dc f4 8e 79 70 36 3c 49 30 73 d1 f4 85 78 1c 75 11 34 23 71 21 fd 4c 57 0e 63 e3 34 44 42 a5 d4 ca e4 cc c8 9f 48 dd 77 f8 f0 f7 ba c9 7b b3 df a2 f2 8f ad 6c e4 0d 5d 44 e9 ac 59 97 56 ac 68 6a 6e f2 9e b8 39 eb bf 55 65 36 b4 fe 5a 04 b9 27 0e e6 7d f1 3b 24 72 f3 e0 1a ea ed 33 4a 91 0d a1 08 fe 91 bc a3 5e 59 dd 93 26 5d 1a 74 d4 b4 d0 43 33 46 f1 18 c6 09 7a bd 77 48 79 cb 37 2e 9e 0b 67 0e 72 a9 c4 96 f5 6b 51 ea 50 60 ff e3 cb 5d 6e 68 20 f6 e5 db a7 95 c1 95 fe 7c d7 e9 66 57 02 fc ff e1 d6 4d 5d 7e dd 45 00 98 fe 6c 5e 42 5a 8b 14 f8 42 Data Ascii: .ds!~ryA/)"(?}YXEI=Tna+c2Qp93yp6<I0sxu4#q!LWc4DBHw{l]DYVhjn9Ue6Z'};$r3J^Y&]tC3FzwHy7.grkQP`]nh \|fWM]~El^BZB
2023-07-21 16:50:35 UTC	1954	IN	Data Raw: 7c b7 a1 14 bd 94 b4 97 fc 6f ca 06 cd 51 ca 86 b3 00 60 4e 04 5e dd 3a 09 d2 4e a2 e5 0a 38 21 ec 85 08 38 51 33 51 bc 57 11 ee 66 3c 4d 81 57 98 06 df 86 28 5f 92 b5 49 b1 07 19 1d d0 a6 01 a8 29 eb b2 ef f5 f7 d4 6d 52 91 9a 79 70 55 dd 00 24 06 0d df 06 d5 53 34 b3 2d 27 a7 f6 0e 84 65 21 cb 3f 63 f6 fa da 8f 9a 4e ec 59 8e 56 9d e5 d0 59 d4 48 96 8d 5a 0b 26 1d 66 92 5e 02 1a d6 71 2c 01 8d 77 b3 3e d7 a9 4a 8b 7c 2b 2e 5e 93 8a fa f7 b7 26 9b 69 72 14 a3 00 84 a1 b8 34 4d b3 65 4e c8 9a d8 be 30 23 f1 77 d9 6a 56 1a 76 84 2f 8d d1 3f fd 3c 6a 7c dd 30 0e b2 b3 90 7d 7b 79 41 e8 6d 9c 98 4b 0f ba ad e0 09 a7 bc 9c 95 4e 65 11 3c d1 c0 08 74 29 bd 05 4d 7d 32 f1 25 da 2f 71 58 8c 35 db 33 8f a3 ae 32 f8 fc 9f ef c6 72 11 46 18 c8 cc 22 a0 2e 8e 28 91 Data Ascii: \|oQ`N^:N8!8Q3QWf<MW(_I)mRypU$S4-'e!?cNYVYHZ&f^q,w>J\|+.^&ir4MeN0#wjVv/?<j\|0}{yAmKNe<t)M}2%/qX532rF".(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
310	192.168.2.5	50191	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13562	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminapp.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:43 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13564	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42121 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:13:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=85071480920543693017463972059664499154"}],"include_subdomains ":true} Server: ECAcc (muc/330F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 48e17727-f01e-003a-2491-bbd0b9000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
311	192.168.2.5	50193	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13563	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/mscorlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:30 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13567	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42121 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:16:30 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=96388555361389156359000881616546002546"}],"include_subdomains ":true} Server: ECAcc (muc/330D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7ca86155-801e-001f-0191-bb79c5000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
312	192.168.2.5	50194	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13564	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/listgrid.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:01 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13565	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 71171 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:16:01 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=441523533558495029316847916903492190720"}],"include_subdomains ":true} Server: ECAcc (muc/336A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 198339d0-b01e-002b-744d-bb4a0d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
313	192.168.2.5	50199	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13568	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/peoplepicker.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13572	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47190 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1111868921132329954714009497107137349177"}],"include_subdomains ":true} Server: ECAcc (muc/3339) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 4fd53464-701e-001b-5d85-bbf4c2000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
314	192.168.2.5	50196	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13568	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13574	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47190 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=184399049418938036752162508487855773261"}],"include_subdomains ":true} Server: ECAcc (muc/334F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 189bd679-601e-004a-0885-bb694e000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
315	192.168.2.5	50198	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13569	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/searchbox.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:24 UTC	13585	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:23 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=599062251856520517312355372040444480999"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0f10c4c4-c01e-0031-03f3-bb2bd2000000 Content-Length: 215 Connection: close
2023-07-21 16:51:24 UTC	13586	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 66 31 30 63 34 63 34 2d 63 30 31 65 2d 30 30 33 31 2d 30 33 66 33 2d 62 62 32 62 64 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 33 2e 39 35 33 33 30 33 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:0f10c4c4-c01e-0031-03f3-bb2bd2000000Time:2023-07-21T16:51:23.9533038Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
316	192.168.2.5	50197	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13569	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/gridview.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:33 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13575	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42121 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:16:33 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=141227192040471789915295767674932379064"}],"include_subdomains ":true} Server: ECAcc (muc/3346) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 83260b95-701e-0069-6791-bbf38d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
317	192.168.2.5	50195	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13570	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/netperf.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:17:25 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13571	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42121 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:17:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=489540888410634467316338448621718233096"}],"include_subdomains ":true} Server: ECAcc (muc/3379) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 88273a99-b01e-002b-7691-bb4a0d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
318	192.168.2.5	50200	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13571	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/passwordstrengthmeter.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:32 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13576	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47190 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:16:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=130843994216397104618027555596359848532"}],"include_subdomains ":true} Server: ECAcc (muc/3365) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 03e7e24c-001e-0011-4b85-bb5075000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
319	192.168.2.5	50201	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13577	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrends.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:24 UTC	13588	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:23 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=140465503924287200004618893064831440501"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f6359335-201e-005b-5ef3-bbf3fa000000 Content-Length: 215 Connection: close
2023-07-21 16:51:24 UTC	13589	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 66 36 33 35 39 33 33 35 2d 32 30 31 65 2d 30 30 35 62 2d 35 65 66 33 2d 62 62 66 33 66 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 34 2e 31 32 36 30 35 34 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:f6359335-201e-005b-5ef3-bbf3fa000000Time:2023-07-21T16:51:24.1260547Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.5	49822	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1667	OUT	GET /static/webpack/production/ce3721cd78168aca8dff.TOBxGySy4L8Jev4cz1MMkll3TM-ZkPmz6kB0Q7cRP8c.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:34 UTC	1732	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 65210 Connection: close Date: Fri, 21 Jul 2023 16:50:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:06 GMT ETag: "c30a969fcf7b3398f8a4d7eaa4063148" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2aefdd231d9806ea2eced3399f411f80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: DSZWA8BAAtwodr3fJHeZ_mZOzODtRdrpBvub3ddDZOlpx3h61o0EcQ==
2023-07-21 16:50:34 UTC	1732	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd fd 77 e3 36 92 28 fa bb fe 0a 5b 77 ae 57 9a a6 15 51 fc 96 86 f1 76 bb 9d 9d be 93 4e e7 b5 3b 93 dd e7 f1 71 68 89 b6 b9 91 49 2d 49 d9 ed 91 b5 7f fb ab 2a 7c 15 29 ca dd 99 99 bd 7b df 39 37 7d 62 40 20 80 42 a1 0a 85 42 a1 00 0c 1e b3 7c 51 3c 8e ae ae be ff f0 fa ed eb 37 df 9f 51 e4 ec ed d5 e9 1f 7f fa e1 4f e7 57 57 f1 17 73 3c 3f 5f 5c 0e 47 ab 75 75 37 b8 b8 e8 3f a4 90 bd ac fe 73 95 ac d2 f2 2a 59 dc 67 39 8f 5f 15 37 37 57 0f 59 fa 78 55 e4 cb 27 f9 e5 1a 40 a4 a5 fa b1 ce 17 cb 54 fe 98 2f 8b f5 e2 6a 51 cc 55 85 8b a4 ba bb fe 4f 77 ee 27 be 7f 7d d3 bf b4 36 3d 7b ec 04 d3 9b 75 3e af b3 22 1f a4 56 6d e5 c3 4d 3a 4a 3f af 8a b2 ae 8e 8e 06 3a 1e eb 5c c3 cd 43 52 1e a4 b1 63 d5 b1 6b e5 b1 3d b1 ca d8 Data Ascii: w6([wWQvN;qhI-I\|){97}b@ BB\|Q<7QOWWs<?_\Guu7?sYg9_77WYxU'@T/jQUOw'}6={u>"VmM:J?:\CRck=
2023-07-21 16:50:34 UTC	1741	IN	Data Raw: 1d 36 dd 88 41 bc 3a e9 83 f2 fb 3f fb d3 a7 c1 c3 70 db 03 25 aa 4d a4 f5 e8 fb e4 09 f0 c6 72 9f eb 11 0c 8b 87 0c 3a cc 92 57 9c 9b aa 77 8b f6 ab 55 02 b8 6c 80 c2 3f 02 37 ee 7c bf b3 72 18 14 16 e8 55 87 87 b7 47 47 ed cf cb d1 3b 68 ad 90 3a 08 0e 18 00 1a de af cb 24 87 8a 91 d1 fb 56 6f de d5 93 d4 23 c7 d7 35 00 6f 08 cb 5b ab c1 54 54 84 4a 30 f9 06 7d 9f 0b 5e 79 b7 db e2 c5 e8 a7 77 d8 28 6b 53 95 f3 e9 cd 88 ca 7d 9f e5 f8 f0 01 fc 87 b3 f2 e3 e8 54 74 71 7c 07 71 a1 84 c4 f7 10 c5 f9 39 be 85 88 98 da e2 07 88 d2 5c 12 5f f7 20 da 98 63 84 68 81 d4 2a ad 5f af 56 12 7c 0c 03 a6 99 02 3a af 1d b9 5f a5 f4 0e da 17 eb e7 fc fe 78 d4 dc 3b ae a3 7f 9f ac d4 1b 03 10 35 ea 7f 2a 5f 61 a0 6a 8e ed de 2c 1d 55 c5 7d ca 9f f6 00 b2 62 ad e9 c5 f8 Data Ascii: 6A:?p%Mr:WwUl?7\|rUGG;h:$Vo#5o[TTJ0}^yw(kS}Ttq\|q9\_ ch_V\|:_x;5_aj,U}b
2023-07-21 16:50:34 UTC	1811	IN	Data Raw: a8 51 c4 7b db 41 31 d2 b3 04 9a 36 11 16 ea 0c 15 3a 06 d0 c5 95 6b 8d d9 75 51 2c 81 59 3e aa 93 32 62 47 cf 7c af ee 92 55 3a d8 a8 0b 22 cd 07 a1 f1 a9 2b 29 77 3e c0 aa b5 35 82 79 a5 b0 58 cc 6f bb 6e c8 dc c9 b3 7b 37 e6 4e 96 79 c7 27 c0 fd c3 0d e2 3c b8 d8 c9 bf 83 dc 75 52 ed 56 cb 3b a5 97 e8 2b 3f 5f ca c6 86 c7 4b f9 b6 c3 cb e1 ee 55 9e ff 3f 6a 7b a2 79 93 65 55 0b 18 50 7b 6e 54 e2 b0 71 5b aa c9 8b ac dc be 59 b5 f5 b5 d7 ba bf d4 7c 06 75 f3 3a 2d e9 e6 d7 3f 66 8b 14 06 4a 8b 9d f7 5d e6 da 99 ab eb 3a d8 ce 8c 1f 69 78 99 4a db ad a6 ac bd e6 dc d9 46 8a 6e ab dd 19 42 e8 1e ba 9b 4a 3e 7f bb bc ce 2f ba dd f9 da 40 e9 ac 9a b7 9b 27 99 0e 7d 4b 76 ba db 5c 99 db fc b4 c5 bd 11 f1 9b cc 92 5a 86 80 b2 df 1e e1 0f d6 ee 88 be 96 de 8b Data Ascii: Q{A16:kuQ,Y>2bG\|U:"+)w>5yXon{7Ny'<uRV;+?_KU?j{yeUP{nTq[Y\|u:-?fJ]:ixJFnBJ>/@'}Kv\Z
2023-07-21 16:50:34 UTC	1827	IN	Data Raw: 47 53 30 19 d8 a0 a5 17 14 eb a1 5c 2d c2 92 52 68 cb 9d 8c a4 1a f1 9c 2e ac 74 5d 9f 86 dd 5b b6 8f 57 5f d5 94 36 8c d3 1e a0 e9 7b 2e 42 fc da ee b6 58 6a 5b 80 fc 20 36 f3 10 4a da 20 11 4c 15 0a 1c b4 d5 52 d0 46 68 a6 52 24 6a 71 00 c8 de 3a a5 04 46 c3 33 4b 2b 01 10 dc a9 38 43 90 c2 74 71 4c 09 f3 d2 ea f0 10 a2 64 da 50 1b 56 39 a0 99 92 11 65 b0 d7 5e 91 24 03 bb 18 90 ff ca fb bb 1a 79 78 71 f1 de de e6 57 e2 58 d3 40 59 20 c4 a8 8b 6b 66 0f 10 02 43 68 6e 48 84 5e 9a 31 f7 e6 28 68 c2 86 c0 c3 31 88 3b e5 14 20 53 4e 4a fe ba a6 cd 00 72 61 0e f9 74 53 38 7c 41 1a f2 5c dc 5d a6 df 04 11 2d 55 6d da 4d 9d 3a 48 1e a3 30 03 80 f7 eb a6 d2 17 96 ef 08 c2 67 c9 f4 1c 35 0f ca f9 a3 91 c6 6c a5 d7 d9 85 ef 43 e1 60 69 73 67 ef e8 d0 b0 71 83 87 Data Ascii: GS0\-Rh.t][W_6{.BXj[ 6J LRFhR$jq:F3K+8CtqLdPV9e^$yxqWX@Y kfChnH^1(h1; SNJratS8\|A\]-UmM:H0g5lC`isgq
2023-07-21 16:50:34 UTC	1843	IN	Data Raw: 53 dd 2d 54 46 1a 6d 8c 1a 97 de 6d 7b c7 fc ce 3c 64 2d cb b2 15 d6 3a f7 75 3e fb 7c 34 28 7c 7c 99 7e 24 06 5c 7e 9e 9d e5 df 5f a2 d2 45 2e 9d e5 b6 02 b8 b1 fd 49 5f 3d 1b 63 c1 f2 ac b1 43 76 c3 0e d8 2e bb 64 db 6c 8f ed b3 1d b6 c9 3e b1 0d b6 bc 44 14 a7 be e5 68 33 62 9a 1e 50 a3 8b d9 59 e3 d0 3d cd 7a e8 35 06 11 3a 2b 4b d6 b8 44 6f a2 3a 19 3e 40 86 9d a0 dd 37 67 9a 96 7d 31 1a 5d cd ce 5e a1 b0 0a b3 77 c5 2e 60 f6 8e ca 6a cf 4a ce ce f6 91 22 d4 b0 00 e4 5e 29 c9 3d 73 0d 1b 12 d4 09 39 3a ec 1a 32 7d ce 67 42 96 19 37 d6 19 e0 65 67 56 30 eb dd 39 6c 03 a6 85 87 38 89 79 e7 0e 93 90 d0 99 a8 29 9e 9b 41 5d 01 73 99 c7 56 d8 39 4b 52 7f a1 c0 3e 03 19 bf 45 af a2 b1 5d d2 88 99 61 df 7a 3a 11 9f 55 24 d9 e2 04 ed 68 60 1f e5 c8 d9 18 07 Data Ascii: S-TFmm{<d-:u>\|4(\|\|~$\~_E.I_=cCv.dl>Dh3bPY=z5:+KDo:>@7g}1]^w.`jJ"^)=s9:2}gB7egV09l8y)A]sV9KR>E]az:U$h`
2023-07-21 16:50:35 UTC	1890	IN	Data Raw: 42 6b 26 3f be d1 08 79 34 4a 56 80 86 66 8c ed 2b f8 63 fb a6 7e 48 9b d6 a4 6c 6c 24 8f a7 3b c6 98 13 3d c0 3f 76 c5 c4 44 e6 20 a0 b4 95 6d 9a 7f 85 25 53 9b 76 cd 5c eb 6b 66 b5 7a cd 8c 53 ca b8 9c 13 68 26 8a 2c 5b ba c8 52 aa 20 07 e2 b7 01 e4 2a b1 ee 36 e1 e7 d3 ec ec 3b d8 f1 6a 4b f0 30 b3 89 2f 9f ac a5 4f a3 d1 e6 68 f4 ce 44 65 b2 d8 cc d2 ad ec 57 07 17 c1 91 b0 36 9e 9d 3d c2 78 50 bf 94 61 de 07 c4 ba b7 02 e5 3e b0 b7 80 72 bf 95 e5 e3 f5 26 8e 87 ab 46 3d 0e 5a ba a4 e3 a7 25 58 4e 49 a6 ba cf f4 f9 4a 62 92 d3 e7 5b e2 cc ca f3 a6 6f 11 01 87 4d 36 e5 50 03 34 30 31 f5 75 be ac db 22 2c 67 38 69 2f a7 f6 04 4b c1 ec ec 2f 66 c0 51 7a 99 fd 02 1d 49 0a 1d a1 c9 10 a7 68 20 d6 8b 36 3d e7 e1 ed 2d 79 d8 1c 87 33 6f 2d f0 72 a6 81 db aa Data Ascii: Bk&?y4JVf+c~Hll$;=?vD m%Sv\kfzSh&,[R *6;jK0/OhDeW6=xPa>r&F=Z%XNIJb[oM6P401u",g8i/K/fQzIh 6=-y3o-r

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
320	192.168.2.5	50202	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13577	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/hipcontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:24 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13579	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47191 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:13:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=291275964316946008417117059223037866216"}],"include_subdomains ":true} Server: ECAcc (muc/3335) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 03e7e146-001e-0011-4e85-bb5075000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
321	192.168.2.5	50203	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13578	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/geminiwizard.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:32 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13580	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47190 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:16:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=69317050879514914639166890098249926732"}],"include_subdomains ":true} Server: ECAcc (muc/3356) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: c5d70a3f-a01e-006a-7685-bb12e9000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
322	192.168.2.5	50205	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13581	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webuivalidation.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:23 UTC	13582	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 66495 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:23 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1093025553295972531611932353666080859331"}],"include_subdomains ":true} Server: ECAcc (muc/3371) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: ce79fac7-201e-005b-5258-bbf3fa000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
323	192.168.2.5	50204	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13581	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrendsstream.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:24 UTC	13590	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:23 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=126426091059207413463590366416780790143"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: aceaf1de-a01e-0037-2af3-bb186d000000 Content-Length: 215 Connection: close
2023-07-21 16:51:24 UTC	13591	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 63 65 61 66 31 64 65 2d 61 30 31 65 2d 30 30 33 37 2d 32 61 66 33 2d 62 62 31 38 36 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 34 2e 32 38 39 35 35 35 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:aceaf1de-a01e-0037-2af3-bb186d000000Time:2023-07-21T16:51:24.2895558Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
324	192.168.2.5	50206	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13583	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/home.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:24 UTC	13592	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:23 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1799770140397014670913685435012298016637"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: cb61b7b7-701e-0079-52f3-bb36e5000000 Content-Length: 215 Connection: close
2023-07-21 16:51:24 UTC	13593	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 63 62 36 31 62 37 62 37 2d 37 30 31 65 2d 30 30 37 39 2d 35 32 66 33 2d 62 62 33 36 65 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 34 2e 34 35 36 39 31 31 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:cb61b7b7-701e-0079-52f3-bb36e5000000Time:2023-07-21T16:51:24.4569117Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
325	192.168.2.5	50207	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13584	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/reporting.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:24 UTC	13596	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:23 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1259166416496263928218358411924053089210"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7f922818-901e-005e-63f3-bb2121000000 Content-Length: 215 Connection: close
2023-07-21 16:51:24 UTC	13597	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 66 39 32 32 38 31 38 2d 39 30 31 65 2d 30 30 35 65 2d 36 33 66 33 2d 62 62 32 31 32 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 34 2e 34 37 31 34 33 37 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:7f922818-901e-005e-63f3-bb2121000000Time:2023-07-21T16:51:24.4714377Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
326	192.168.2.5	50208	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:23 UTC	13584	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/assistancepanel.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:24 UTC	13597	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:23 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=234701856675774329413614481691117348674"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0520f6a8-f01e-0067-69f3-bbda3d000000 Content-Length: 215 Connection: close
2023-07-21 16:51:24 UTC	13598	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 35 32 30 66 36 61 38 2d 66 30 31 65 2d 30 30 36 37 2d 36 39 66 33 2d 62 62 64 61 33 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 34 2e 34 38 30 39 39 34 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:0520f6a8-f01e-0067-69f3-bbda3d000000Time:2023-07-21T16:51:24.4809941Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
327	192.168.2.5	50209	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:24 UTC	13586	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_2e62c59c862fb482c11d.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:24 UTC	13593	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:24 GMT Content-Type: application/x-javascript content-length: 4730 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE85F09C x-ms-request-id: 09255893-001e-003f-71f3-bb9f7d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165124Z-8esm33d6hp6v13nevpem49fy5s00000006v0000000010kcq X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:24 UTC	13594	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-07-21 16:51:24 UTC	13594	IN	Data Raw: e5 57 ed 53 db 36 18 ff de bf 42 78 1f 48 8a ed bc 10 92 90 36 bb 6b 81 0e ba 52 72 24 eb 6e 07 5c 4e 96 95 44 60 4b 3e 49 4e c8 80 ff 7d 8f 14 3b c4 21 74 b4 bd dd 6d 37 ee 88 13 e9 79 f9 3d 2f bf 47 72 e5 f5 d6 2b f4 1a 79 2f ff 43 fd c1 bb f3 01 3a fb 80 06 c7 27 e7 87 a8 07 bf fe 40 9f cf 06 27 07 47 2f b7 63 9c 9a ff c1 84 29 34 62 11 45 f0 0c b0 a2 21 12 1c 09 89 18 27 42 26 42 62 4d 15 8a e1 53 32 1c a1 91 14 31 d2 13 8a 12 29 ae 29 d1 0a 45 4c 69 50 0a 68 24 66 a8 04 e6 64 88 7a 58 ea 39 3a e9 95 7d b0 4f c1 1a 1b 33 0e da 44 24 73 f8 3e d1 88 0b cd 08 45 98 87 d6 5a 04 3f b8 a2 28 e5 21 95 68 36 61 64 82 4e 19 91 42 89 91 46 92 12 ca a6 e0 44 a5 b0 5e 74 e1 22 2c 29 52 54 a3 91 90 7a b2 c0 e1 a3 be 91 cc ac 2a eb 66 e1 51 59 71 00 3f 65 21 18 1c Data Ascii: WS6BxH6kRr$n\ND`K>IN};!tm7y=/Gr+y/C:'@'G/c)4bE!'B&BbMS21))ELiPh$fdzX9:}O3D$s>EZ?(!h6adNBFD^t",)RTz*fQYq?e!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
328	192.168.2.5	50210	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:24 UTC	13588	OUT	GET /images/webcontrols.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:24 UTC	13600	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=426231146919694372615267346740345150047"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 9091a7cc-501e-0033-14f3-bb956a000000 Content-Length: 223 Connection: close
2023-07-21 16:51:24 UTC	13601	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 30 39 31 61 37 63 63 2d 35 30 31 65 2d 30 30 33 33 2d 31 34 66 33 2d 62 62 39 35 36 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 34 2e 36 39 38 37 38 36 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:9091a7cc-501e-0033-14f3-bb956a000000Time:2023-07-21T16:51:24.6987867Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
329	192.168.2.5	50211	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:24 UTC	13589	OUT	GET /Images/transparent.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:24 UTC	13602	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=45072975988678835739082594687498011753"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 1d36c056-e01e-0044-25f3-bb40fe000000 Content-Length: 226 Connection: close
2023-07-21 16:51:24 UTC	13603	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 64 33 36 63 30 35 36 2d 65 30 31 65 2d 30 30 34 34 2d 32 35 66 33 2d 62 62 34 30 66 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 34 2e 38 36 36 36 36 31 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:1d36c056-e01e-0044-25f3-bb40fe000000Time:2023-07-21T16:51:24.8666611Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.5	49817	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1668	OUT	GET /static/webpack/production/b7447ec7a5639b81bb9e.5B1z69DJcJdOytocwBFk4mleBWMQRi8eATiNFmXWFrY.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:34 UTC	1777	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 7410 Connection: close Date: Fri, 21 Jul 2023 16:50:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:31:52 GMT ETag: "73812c68911f25d2b749dbf6bbe666c2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 d75d7156b5e1833582c3070298720664.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: PzIR6ZS6OZfUWtncuUw3v9spBT5eQ2EDMamgccsT0VWUMaysTRj80Q==
2023-07-21 16:50:34 UTC	1778	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 3c 69 77 db 38 92 df f5 2b 68 ee 46 21 4d 52 26 29 59 96 45 51 1a 3b c7 76 7a 72 4d 8e 99 e9 f1 68 fc 68 19 b4 98 c8 84 86 47 1c b7 a5 fe ed 5b 05 80 24 28 51 b6 d3 d3 bb 2f 2f 16 0f a0 50 28 d4 8d 02 b5 9b 28 be a4 37 9d f3 f3 d7 ef 4e 9e 9f 9c be 7e c1 2e 5e 3c 3f 7f f6 d3 e7 b7 7f fe 78 7e ee 3f d8 62 b5 3a 9b ea 9d 65 9e ce b5 b3 33 f5 1b 81 e6 49 fa db 65 42 97 17 f4 fb 79 14 67 24 89 83 c5 79 7a f9 95 3d 8c e2 94 5d 2f 83 25 49 ce 2f 00 3a 49 8a 9b 3c be 5c 10 71 33 5b d0 fc f2 fc 92 ce 52 f1 20 8a c3 45 4e e2 19 34 3f 26 bd e3 c1 2c 74 d5 a9 79 d7 72 ec 9e 3b 0c f3 78 96 45 34 d6 32 33 31 89 7e a7 e6 29 51 d2 2c 89 66 99 ea 69 d5 5b fd ae 75 b0 bf d7 52 f6 95 4f 73 a2 5c e4 61 48 12 e5 9a 5e e6 0b a2 84 09 bd 56 62 Data Ascii: <iw8+hF!MR&)YEQ;vzrMhhG[$(Q//P((7N~.^<?x~?b:e3IeByg$yz=]/%I/:I<\q3[R EN4?&,tyr;xE4231~)Q,fi[uROs\aH^Vb

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
330	192.168.2.5	50212	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:24 UTC	13591	OUT	GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:25 UTC	13604	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1188577805402151037313883684521710179411"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: a00a5817-301e-0057-4df3-bb64f2000000 Content-Length: 226 Connection: close
2023-07-21 16:51:25 UTC	13605	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 30 30 61 35 38 31 37 2d 33 30 31 65 2d 30 30 35 37 2d 34 64 66 33 2d 62 62 36 34 66 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 35 2e 30 32 33 30 37 32 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:a00a5817-301e-0057-4df3-bb64f2000000Time:2023-07-21T16:51:25.0230722Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
331	192.168.2.5	50213	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:24 UTC	13599	OUT	GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:25 UTC	13606	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1084925830079047156512020064989658162398"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: f6ec0b41-e01e-0009-29f3-bb8f12000000 Content-Length: 226 Connection: close
2023-07-21 16:51:25 UTC	13608	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 66 36 65 63 30 62 34 31 2d 65 30 31 65 2d 30 30 30 39 2d 32 39 66 33 2d 62 62 38 66 31 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 35 2e 32 36 31 33 33 32 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:f6ec0b41-e01e-0009-29f3-bb8f12000000Time:2023-07-21T16:51:25.2613328Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
332	192.168.2.5	50214	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:24 UTC	13599	OUT	GET /images/servicestatus.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:25 UTC	13608	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=273551444264399195111592535393671707621"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 70611bf3-d01e-0002-5ef3-bb7479000000 Content-Length: 223 Connection: close
2023-07-21 16:51:25 UTC	13609	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 30 36 31 31 62 66 33 2d 64 30 31 65 2d 30 30 30 32 2d 35 65 66 33 2d 62 62 37 34 37 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 35 2e 32 36 32 36 31 39 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:70611bf3-d01e-0002-5ef3-bb7479000000Time:2023-07-21T16:51:25.2626194Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
333	192.168.2.5	50215	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:24 UTC	13600	OUT	GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:25 UTC	13607	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=111665613000563242684743159681288648715"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 0f10ca7a-c01e-0031-52f3-bb2bd2000000 Content-Length: 226 Connection: close
2023-07-21 16:51:25 UTC	13608	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 66 31 30 63 61 37 61 2d 63 30 31 65 2d 30 30 33 31 2d 35 32 66 33 2d 62 62 32 62 64 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 35 2e 32 36 31 35 37 30 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:0f10ca7a-c01e-0031-52f3-bb2bd2000000Time:2023-07-21T16:51:25.2615705Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
334	192.168.2.5	50217	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:24 UTC	13602	OUT	GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:25 UTC	13619	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=4354549975071394353867730108719348296"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 9ed7011e-501e-006e-09f3-bb9fee000000 Content-Length: 226 Connection: close
2023-07-21 16:51:25 UTC	13620	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 65 64 37 30 31 31 65 2d 35 30 31 65 2d 30 30 36 65 2d 30 39 66 33 2d 62 62 39 66 65 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 35 2e 35 32 36 39 32 32 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:9ed7011e-501e-006e-09f3-bb9fee000000Time:2023-07-21T16:51:25.5269229Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
335	192.168.2.5	50218	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13604	OUT	GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:25 UTC	13621	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=13574937396544015719761862213431340736"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 78a5322b-001e-0001-67f3-bb951d000000 Content-Length: 226 Connection: close
2023-07-21 16:51:25 UTC	13622	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 38 61 35 33 32 32 62 2d 30 30 31 65 2d 30 30 30 31 2d 36 37 66 33 2d 62 62 39 35 31 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 35 2e 36 32 34 36 32 32 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:78a5322b-001e-0001-67f3-bb951d000000Time:2023-07-21T16:51:25.6246226Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
336	192.168.2.5	50221	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13605	OUT	GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:25 UTC	13624	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=173468347955946374179834990293511124063"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: a22a6b55-001e-003e-18f3-bb5dbe000000 Content-Length: 226 Connection: close
2023-07-21 16:51:25 UTC	13625	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 32 32 61 36 62 35 35 2d 30 30 31 65 2d 30 30 33 65 2d 31 38 66 33 2d 62 62 35 64 62 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 35 2e 37 36 33 39 32 34 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:a22a6b55-001e-003e-18f3-bb5dbe000000Time:2023-07-21T16:51:25.7639244Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
337	192.168.2.5	50219	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13610	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:25 UTC	13623	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:25 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 31 Oct 2020 02:21:09 GMT ETag: 0x8D87D43A145A2CC x-ms-request-id: 69d20c11-801e-008f-7cf3-bbe939000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165125Z-7kzh0aau3t5nvbwd0zngcd9q8n00000006u0000000021x36 X-Cache: TCP_MISS Accept-Ranges: bytes
2023-07-21 16:51:25 UTC	13624	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
338	192.168.2.5	50220	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13611	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:25 UTC	13625	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 254 Content-Type: image/svg+xml Content-Encoding: gzip Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Last-Modified: Fri, 17 Jan 2020 19:28:39 GMT ETag: 0x8D79B8374511AB4 X-Cache: TCP_MISS x-ms-request-id: fcece7f1-401e-0017-58f3-bb565f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0jbe6ZAAAAABbqxngxNE7Qp9VJmS7m/FgRE0yQUExMDkxMjA3MDUxADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0jbe6ZAAAAACxmOULF701SYDC870SGeI8Q0gxQUEyMDIwNjA4MDQ5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:25 GMT Connection: close
2023-07-21 16:51:25 UTC	13626	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
339	192.168.2.5	50225	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13613	OUT	GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13627	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=15716055538351092787655400392304425036"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 9230ba8d-001e-002e-49f3-bb98d6000000 Content-Length: 226 Connection: close
2023-07-21 16:51:26 UTC	13628	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 32 33 30 62 61 38 64 2d 30 30 31 65 2d 30 30 32 65 2d 34 39 66 33 2d 62 62 39 38 64 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 36 2e 30 31 39 32 37 33 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:9230ba8d-001e-002e-49f3-bb98d6000000Time:2023-07-21T16:51:26.0192734Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.5	49824	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1669	OUT	GET /paper/ep/redirect/image?url=https%3A%2F%2Fpaper-attachments.dropboxusercontent.com%2Fs_F80C94DC8897DE8BC2D47A16ABC6AC551833D8F3B9C020EE6655C97B689CEA19_1689873541689_micro.png&hmac=CXRdUHwDyoF0cpBzOzaE49fIOaM8hPXT%2F4a0HfywNMM%3D HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
2023-07-21 16:50:34 UTC	1720	IN	HTTP/1.1 302 Found Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Date: Fri, 21 Jul 2023 16:50:34 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:34 GMT Location: https://uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.com/p/thumb/AB-xkKhbJ-5eZjqJkfR4QswIuG92izqYLGt1vO9MVU9zXMyuB-IIhiBQzvHqqU_6fMC5FGtA83r1PzfBmbax1X3rUdvnGLadcwGZ4667XLS4HptYyv2zdDSG0a9qm9HlNb6LmfjzHVHqZbrbbOpCw9wfvG237D5GG-6XWekcNRlTQMzI34XPyXpnD0aewH1IpR8nz-iYeDEtmdJMD1E0U3zXYeKvqClh7qPODStlXeXuAGdgSc1AbcrkwxeKjc0g9Y1tsAfOxaEVgLW8OtsV6Nf71wA8pCp5KWoRoS9iITHPCc2gnvCm9nXf9PpSgQHKneIWMpjTDrZYdRmLqJlm_Z_4mTsywrvF2e6cuv7ZGMityP5VoCtBPg-_GC-Z392qNyDnukyEdr_az-qUCcD25HSM/p.png Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Force-Header-Redirect: true X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/redirect/image X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 5da5a888-bf01-4cfb-8de0-57e57f3f621a X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 0 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: d7733dc7883d4c22b1fbdc49b6efe2a4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
340	192.168.2.5	50224	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13613	OUT	GET /Images/list_bullet_5x5.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13629	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=844720520132368488113583772473407976365"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 1f88ff22-e01e-0036-7bf3-bb47b1000000 Content-Length: 226 Connection: close
2023-07-21 16:51:26 UTC	13629	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 66 38 38 66 66 32 32 2d 65 30 31 65 2d 30 30 33 36 2d 37 62 66 33 2d 62 62 34 37 62 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 36 2e 30 33 36 37 33 30 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:1f88ff22-e01e-0036-7bf3-bb47b1000000Time:2023-07-21T16:51:26.0367303Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
341	192.168.2.5	50223	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13614	OUT	GET /images/spinner_16x16_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13630	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=610880996682758678314353521610077749860"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 91327c75-101e-0040-18f3-bbcdf9000000 Content-Length: 223 Connection: close
2023-07-21 16:51:26 UTC	13631	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 31 33 32 37 63 37 35 2d 31 30 31 65 2d 30 30 34 30 2d 31 38 66 33 2d 62 62 63 64 66 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 32 36 2e 30 35 32 37 30 33 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:91327c75-101e-0040-18f3-bbcdf9000000Time:2023-07-21T16:51:26.0527030Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
342	192.168.2.5	50226	52.97.201.194	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13615	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.microsoft365.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=9DDC34FF918C4725B9396D2D814A87B8; OIDC=1
2023-07-21 16:51:25 UTC	13615	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 864da321-5132-ee82-1515-c052dee97cfc Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedBETarget: ZRAP278MB0787.CHEP278.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: OWAPF=v:15.20.6631.16&l:mouse; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-Version: 15.20.6631.16 X-OWA-DiagnosticsInfo: 0;0;0 X-IIDs: 0 X-BackEnd-Begin: 2023-07-21T16:51:25.530 X-BackEnd-End: 2023-07-21T16:51:25.530 X-DiagInfo: ZRAP278MB0787 X-BEServer: ZRAP278MB0787 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=ZRH"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: ZRH X-FEProxyInfo: ZR0P278CA0110.CHEP278.PROD.OUTLOOK.COM X-FEEFZInfo: ZRH X-FEServer: ZR0P278CA0110 Date: Fri, 21 Jul 2023 16:51:25 GMT Connection: close
2023-07-21 16:51:25 UTC	13617	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
343	192.168.2.5	50228	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13620	OUT	GET /images/spinner_24x24_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
344	192.168.2.5	50229	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13622	OUT	GET /shell/images/signup_ms_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
345	192.168.2.5	50233	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:25 UTC	13627	OUT	GET /shell/images/o365_gallatin_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
346	192.168.2.5	50234	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13631	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_aad_f83ebff69a4a1685e4dc9650cdab8886.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:26 UTC	13733	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 628 Content-Type: image/svg+xml Content-Encoding: gzip Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Last-Modified: Sat, 31 Oct 2020 02:21:09 GMT ETag: 0x8D87D43A145A2CC X-Cache: TCP_MISS x-ms-request-id: bd362a98-001e-0097-75f3-bb010a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0jre6ZAAAAAAmLPTGCKieQovU8OMf+l9CRE0yQUExMDkxMjA4MDA5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0jre6ZAAAAAAME3/gmc+7SKPRwLJvW/jpQ0gxQUEyMDIwNjA4MDExADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Fri, 21 Jul 2023 16:51:25 GMT Connection: close
2023-07-21 16:51:26 UTC	13734	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
347	192.168.2.5	50237	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13632	OUT	GET /images/backgrounds/image1.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
348	192.168.2.5	50236	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13633	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/picker_account_msa_2d8f86059be176833897099ee6ddedeb.svg HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:26 UTC	13768	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:39 GMT ETag: 0x8D79B8374511AB4 x-ms-request-id: 5f12ec6b-601e-0015-4bf3-bb005b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-f8e11c4uv147v4uw0z182p742g00000004xg000000001gmt X-Cache: TCP_MISS Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13768	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
349	192.168.2.5	50238	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13634	OUT	GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.5	49826	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1671	OUT	GET /static/api/2/dropins.js HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
2023-07-21 16:50:34 UTC	1704	IN	HTTP/1.1 200 OK Server: envoy Date: Fri, 21 Jul 2023 16:50:34 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 39314 Vary: Accept-Encoding Last-Modified: Tue, 18 Jul 2023 20:22:33 GMT X-Content-Type-Options: nosniff X-Cached: HIT Expires: Fri, 21 Jul 2023 17:50:34 GMT Access-Control-Allow-Origin: * Timing-Allow-Origin: https://www.dropbox.com Accept-Ranges: bytes Cache-Control: no-cache, no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 1f232a55975c4635903f2f1547a7ec71 Connection: close
2023-07-21 16:50:34 UTC	1705	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 72 6f 70 69 6e 73 5f 73 64 6b 5f 76 32 2e 6a 73 2e 4c 49 43 45 4e 53 45 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6f 29 65 5b 74 5d 3d 6f 5b 74 5d 7d 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 69 66 28 6f 5b 6e 5d 29 72 65 74 75 72 6e 20 6f 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6f 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 2c 69 Data Ascii: /! For license information please see dropins_sdk_v2.js.LICENSE /!function(e,o){for(var t in o)e[t]=o[t]}(window,function(e){var o={};function t(n){if(o[n])return o[n].exports;var i=o[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i
2023-07-21 16:50:34 UTC	1720	IN	Data Raw: 65 4c 69 73 74 65 6e 65 72 28 77 69 6e 64 6f 77 2c 22 6d 65 73 73 61 67 65 22 2c 63 29 7d 2c 4f 62 6a 65 63 74 28 6e 2e 66 29 28 65 2c 72 2e 6f 6e 43 6c 6f 73 65 2c 72 2e 6f 70 74 69 6f 6e 73 29 29 7d 3b 44 72 6f 70 62 6f 78 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 77 69 6e 64 6f 77 2c 22 6d 65 73 73 61 67 65 22 2c 63 29 7d 65 Data Ascii: eListener(window,"message",c)},Object(n.f)(e,r.onClose,r.options))};Dropbox.addListener(window,"message",c)}e
2023-07-21 16:50:34 UTC	1748	IN	Data Raw: 6c 73 65 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 28 6e 2e 6a 29 28 37 33 35 2c 37 30 30 29 3b 72 2e 6f 6e 43 6c 6f 73 65 3d 74 28 4f 62 6a 65 63 74 28 6e 2e 62 29 28 72 2e 6f 70 74 69 6f 6e 73 2c 72 2e 6f 70 74 69 6f 6e 73 2e 69 66 72 61 6d 65 29 2c 6c 2c 72 2e 6f 70 74 69 6f 6e 73 29 2e 6f 6e 43 6c 6f 73 65 7d 7d 65 6c 73 65 20 61 6c 65 72 74 28 22 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 44 72 6f 70 62 6f 78 20 43 68 6f 6f 73 65 72 22 29 7d 3b 44 72 6f 70 62 6f 78 2e 63 68 6f 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 75 6c 6c 3d 3d 65 26 26 28 65 3d 7b 7d 29 2c 65 3d 63 28 65 29 2c 70 28 65 29 7d 2c 44 72 6f 70 62 6f 78 2e 63 61 6e 63 65 6c 43 68 6f 6f 73 65 72 3d 66 75 6e 63 74 69 6f Data Ascii: lse{var l=Object(n.j)(735,700);r.onClose=t(Object(n.b)(r.options,r.options.iframe),l,r.options).onClose}}else alert("Your browser does not support the Dropbox Chooser")};Dropbox.choose=function(e){null==e&&(e={}),e=c(e),p(e)},Dropbox.cancelChooser=functio
2023-07-21 16:50:34 UTC	1804	IN	Data Raw: 73 73 28 6f 2e 70 61 72 61 6d 73 2c 74 68 69 73 2e 6c 61 73 74 4e 61 76 69 67 61 74 69 6f 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 75 72 73 6f 72 5f 63 68 61 6e 67 65 64 22 3a 74 68 69 73 2e 6c 61 73 74 4e 61 76 69 67 61 74 69 6f 6e 3d 7b 63 75 72 73 6f 72 3a 6f 2e 70 61 72 61 6d 73 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6c 6f 73 65 5f 64 69 61 6c 6f 67 22 3a 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 61 6e 63 65 6c 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 61 6e 63 65 6c 28 74 68 69 73 2e 6c 61 73 74 4e 61 76 69 67 61 74 69 6f 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 73 69 7a 65 22 3a 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 52 65 73 69 7a 65 26 26 74 68 69 73 2e 6f Data Ascii: ss(o.params,this.lastNavigation);break;case"cursor_changed":this.lastNavigation={cursor:o.params};break;case"close_dialog":void 0!==this.options.onCancel&&this.options.onCancel(this.lastNavigation);break;case"resize":void 0!==this.options.onResize&&this.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
350	192.168.2.5	50239	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13635	OUT	GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
351	192.168.2.5	50240	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13635	OUT	GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13648	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: text/css Content-Length: 17755 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 20 Jul 2023 07:26:05 GMT ETag: 0x8DB88F29451E7F0 x-ms-request-id: 9bb3c7af-c01e-000f-80ea-babe6c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-st0huf75tt5rm2cbw8r2xbgsws000000009000000002pnxu X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13649	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 69 73 db 46 d2 f0 77 ff 0a ac 5c ae 58 59 12 e1 2d 4a aa a4 d6 87 12 eb 59 1f 2a 4b d9 ec 56 de 94 0b 22 21 11 6b 10 60 01 a0 65 85 0f ff fb db 73 5f 3d 00 28 c9 89 9f aa 44 b1 44 ce f4 f4 5c 3d 3d 3d 33 7d 7c f7 ed df 82 17 f9 ea b6 48 ae 17 55 f0 f4 c5 7e f0 26 99 15 79 99 5f 55 90 5e ac f2 22 aa 92 3c 0b 83 67 69 1a 50 a0 32 28 e2 32 2e 3e c5 f3 30 f8 f6 bb ef be fd db a3 6e fb ff 82 f3 8b 67 ef 2f 82 77 3f 06 17 af 4e df bf 0c ce e0 db 7f 82 b7 ef 2e 4e 5f 9c 04 ad b1 3c 7a 74 b1 48 ca e0 2a 49 e3 00 fe 5e 46 65 3c 0f f2 2c c8 8b 20 c9 66 bc d5 71 19 2c e1 77 91 44 69 70 55 e4 cb a0 5a c4 c1 aa c8 ff 1b cf a0 0f 69 52 56 50 e8 32 4e f3 9b e0 29 a0 2b e6 c1 59 54 54 b7 c1 e9 d9 7e 18 5c 00 6c 0e dd 4d 32 28 3d 93 e3 Data Ascii: }isFw\XY-JYKV"!k`es_=(DD\===3}\|HU~&y_U^"<giP2(2.>0ng/w?N.N_<ztHI^Fe<, fq,wDipUZiRVP2N)+YTT~\lM2(=
2023-07-21 16:51:26 UTC	13664	IN	Data Raw: 77 df c1 7f a2 57 71 c2 10 a8 c4 ff 59 c4 d9 b5 4a 8f d2 eb 75 16 fc 94 57 8b 64 46 7a 55 92 a9 ba 8e d3 3c 38 81 cd a4 8c 8c b2 af 12 d2 d3 5b 33 f1 6d 7c 13 5c 44 49 f0 7a 6d d6 7e b6 88 ae cb 33 13 96 c2 59 8d 4c 82 e7 11 f0 26 92 98 67 d7 c0 58 a3 4c a5 fc 2b 78 0e 29 e4 d3 6d 94 c1 3c 06 24 26 22 7c 7d 11 2d 61 fc a3 e0 0d 8c c0 9e 4e 35 4c f0 fb 7d d1 9d 65 fb 1d 2c bd ba d9 df 7c 25 b3 ff d7 8c df 7d c6 c9 cb 22 dd 12 dd b3 b3 be fe f5 ef 62 fd 87 03 e7 71 93 27 69 0f a0 23 4c a9 45 67 39 43 60 39 86 fe 58 78 40 71 d8 86 d9 e1 70 32 d4 6f 6a 69 ab 44 e2 5f 2c ee 2f 82 6f 45 f0 75 77 3d 3d 8d 70 c2 c3 21 23 43 93 34 29 79 6f 95 3a 11 3b 5f 68 c5 a6 0c 20 82 b3 47 b5 b1 d1 eb 75 73 18 a6 81 c6 4c c4 d0 d7 34 0a 44 7f d7 2a 1b 31 68 a6 df 15 95 31 d2 Data Ascii: wWqYJuWdFzU<8[3m\|\DIzm~3YL&gXL+x)m<$&"\|}-aN5L}e,\|%}"bq'i#LEg9C`9Xx@qp2ojiD_,/oEuw==p!#C4)yo:;_h GusL4D*1h1

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
352	192.168.2.5	50242	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13636	OUT	GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13641	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: application/javascript Content-Length: 5564 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Fri, 21 Jul 2023 04:51:37 GMT ETag: 0x8DB89A62ADFF9BB x-ms-request-id: eff7b535-901e-0012-57ed-bbd155000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-e9crx5uf7p3xr77gwqbstc1fr8000000082g00000002rr2g X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13641	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cd 3c 6b 8f db 38 92 df fd 2b da c2 c2 90 10 c5 70 67 80 fb 60 b5 62 64 33 b3 97 e0 66 a6 f7 36 99 bd 3b 18 46 a0 b6 e9 b6 26 32 e9 a5 e8 ee 34 da fa ef 57 c5 87 44 52 92 fb e5 bb 64 06 88 5b 14 45 56 15 eb cd 22 d7 7b ba 14 39 a3 67 5f b2 d5 ea 97 1b 42 c5 af 79 29 08 25 3c 24 b1 88 69 74 4f 46 23 32 f6 5f ce da 4d 21 f6 9e 62 ef b3 9c 96 22 a3 4b c2 d6 67 1f 3e ff f6 eb 2f 05 d9 42 47 39 8e 10 d9 72 23 bf f3 1e c3 80 d1 e0 15 8e 51 ad 6b 98 ae 89 b8 e4 9f 88 f8 3b 67 bb f2 92 ea 81 4a 05 5a cc a3 fb 7c 0d df 5d fd 49 96 22 48 53 71 b7 c3 29 45 74 ff 65 cd f8 2f 30 f2 7f 90 3b 00 cb 8c 17 02 36 f0 22 bc c9 f8 59 99 4e e2 3c 25 63 02 43 96 49 79 91 8f 0b 42 af c5 26 29 5f bd 8a ee b1 07 4b f3 79 b9 48 f8 8c cd f9 62 4e 17 a9 Data Ascii: <k8+pg`bd3f6;F&24WDRd[EV"{9g_By)%<$itOF#2_M!b"Kg>/BG9r#Qk;gJZ\|]I"HSq)Ete/0;6"YN<%cCIyB&)_KyHbN

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
353	192.168.2.5	50241	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13637	OUT	GET /bootstrapshim_IX6xrWCoGcREOsbbsQ1Yvg2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13639	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: application/javascript Content-Length: 983 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Sun, 16 Jul 2023 04:56:23 GMT ETag: 0x8DB85B9011FE937 x-ms-request-id: 3540c3ea-601e-0041-10ba-b7cf60000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-8b65616bvh59h6qfhf11rb9w9g000000083g00000002h854 X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13640	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 56 cb 8e db 36 14 dd e7 2b 6c 22 b0 49 84 a3 4e ba 29 60 47 31 d2 26 41 17 2d d0 62 a6 ab c1 2c 68 e9 ca 62 46 26 05 91 9e 89 61 eb df cb ab 87 4d ca f2 b4 01 0c c8 7c dd d7 39 f7 90 d3 6c a7 12 2b b5 a2 ec f0 2c aa 09 c4 a7 09 68 67 ec b2 02 bb ab 14 e9 17 48 1c db 7d 09 3a 9b 7c 79 06 65 57 36 56 f0 d2 fe 77 67 16 d4 c6 a9 4e 76 5b 37 8c 92 0a 84 85 76 89 34 1f c2 b8 8d a4 92 b6 db cf a7 b7 ee c7 dc 6c cd ad e7 9b 5b 76 b0 b9 34 91 2e 71 c2 c4 96 37 c3 b7 50 00 9a 8e df fe 25 36 f0 3b 14 25 54 d1 06 d0 73 b7 61 2d 92 a7 b4 d2 65 dc 0c a5 b9 cb f5 8b 8a d5 ae 28 b8 6f 30 aa 60 ab 2d cc 66 81 d9 28 93 2a a5 24 da ea 54 14 37 89 56 b6 89 39 2a b4 48 e9 c8 71 ee 87 51 56 fa fb 9e 7a 05 0d 4d db 4a 6e 36 50 51 82 c6 20 8d d6 Data Ascii: V6+l"IN)`G1&A-b,hbF&aM\|9l+,hgH}:\|yeW6VwgNv[7v4l[v4.q7P%6;%Tsa-e(o0`-f($T7V9HqQVzMJn6PQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
354	192.168.2.5	50244	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13637	OUT	GET /bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13647	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: application/javascript Content-Length: 1054 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 20 Jul 2023 05:11:10 GMT ETag: 0x8DB88DFBB428E0D x-ms-request-id: ec5553de-101e-004e-0ed0-ba467f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-yx47nwe9gx0gh7z5gr6hxc585000000006a0000000021fmh X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13647	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 56 db 6e db 38 10 7d f7 57 d8 c4 42 21 51 9a 71 93 02 2d e2 b2 41 37 2d d0 87 c5 22 c0 ee 5b 50 2c 68 69 6c 13 91 49 97 a4 9d 18 96 f6 db 77 28 c9 b2 7c 49 b7 7b 09 02 4b bc 0c 67 e6 cc 99 43 0d a6 2b 93 06 6d 0d 65 db dd 6b 1f 28 b0 ed 5a b9 7e 18 3b 08 2b 67 c8 6e 89 48 19 36 4b b0 d3 fe e7 35 98 70 1b a4 81 a7 fa 1d 6d 6e 68 90 99 4d 57 0b 1c 8a d4 81 0a 50 2f 91 ea 41 18 0f 42 1b 1d 9a fd 7c 30 c2 7f 86 b3 65 eb 3a 1e b3 ad 9d f6 41 3c c2 e6 ce 66 50 14 20 9e e6 3a 9d ef f7 19 6a d8 d6 24 c9 b5 c4 88 f0 bd 28 e8 4f f7 6a 06 5f 20 5f 82 13 93 cd 5d ae bc ff 55 2d 80 3a 26 1c 2c ec 1a 28 e3 dd 3d df 56 e0 36 1f f3 9c 5a 26 40 a5 73 da 42 11 b8 aa f3 77 b2 6b 30 83 40 15 e3 56 3a b1 54 2e a6 c0 c6 56 cc 95 af 7c 51 62 97 Data Ascii: Vn8}WB!Qq-A7-"[P,hilIw(\|I{KgC+mek(Z~;+gnH6K5pmnhMWP/AB\|0e:A<fP :j$(Oj_ _]U-:&,(=V6Z&@sBwk0@V:T.V\|Qb

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
355	192.168.2.5	50245	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13638	OUT	GET /wlivepackagefull_stPwvW3-5mShoxrbkAw2qw2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13667	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: application/javascript Content-Length: 19633 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Wed, 19 Jul 2023 04:56:59 GMT ETag: 0x8DB881495D33FA3 x-ms-request-id: 2483be55-901e-0046-5f01-ba1e6e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-fe92gdvnu15r31y88v11ympegw000000081g00000003nm5b X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13667	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cd 7d f9 7f db c6 f1 e8 ef fa 2b a8 ad 9e 02 94 2b 9a b4 e3 a4 25 0d f1 c9 b2 5d db f5 55 5b 69 d2 a8 aa 3e 20 b0 24 11 83 00 8b 43 47 24 fe ef 6f 66 f6 c0 e2 a0 64 27 f9 be f7 d2 5a 04 f6 c2 1e b3 73 ed cc ec ee bc 4c 82 22 4a 13 c7 bd b9 f0 b3 9e f0 2e a3 24 4c 2f 79 e1 89 c1 de 33 31 2b 17 93 62 e0 e7 b9 c8 0a 07 52 8e d3 64 1e 2d 38 93 bf 4f cb 2c 11 59 2f 5f a6 65 1c f6 d2 b2 58 97 c5 b8 a7 0a 31 77 82 2d 26 9e a9 36 89 e6 4e 32 58 fa 49 18 8b ec a9 9f 8b 1f b2 d8 6b 26 dc de 32 c6 77 93 41 1e ca 1e 45 5e 98 06 e5 4a 24 c5 20 4c 57 7e 94 f0 cc 8b 06 f9 3a 8e 0a 87 0d e0 23 58 d4 1b 79 9e 97 0d 62 91 2c 8a e5 94 b1 31 e4 f4 b3 53 9d 72 f0 f0 ac cf 06 41 ba 62 1b 33 98 64 b0 fa 5c dc 33 10 dd 71 2c ca 5c 4e 55 3c fa 0b bd Data Ascii: }++%]U[i> $CG$ofd'ZsL"J.$L/y31+bRd-8O,Y/_eX1w-&6N2XIk&2wAE^J$ LW~:#Xyb,1SrAb3d\3q,\NU<
2023-07-21 16:51:26 UTC	13683	IN	Data Raw: 0a 79 7b db ba 15 03 a3 ce 28 a3 12 d2 85 b8 93 3b a1 ab c3 f2 93 df 07 12 c9 06 8f c5 5a ba f9 c2 6d d2 e1 36 d4 24 80 73 0b 20 1a bb 23 60 5b ad 49 7d 5a 7d 01 88 6f 51 9d e6 54 53 73 84 ec d3 76 70 af 9b dd d6 78 6d c6 3f db a6 b1 ef ef 6d a8 66 86 d4 6a aa 6a e9 19 82 46 23 f6 42 32 93 27 0d 72 ce 61 b6 5e 99 38 0c ed 2c 3b 26 c3 73 6a cc d8 3b 35 0b f3 57 56 d9 57 50 f6 5f 78 53 2a 1a db c0 bf 67 35 de e1 69 a5 12 a2 cb 91 eb 2e 6f b7 b7 d6 05 4d ef 24 07 61 c3 f7 fb b2 c8 81 b5 a3 b5 d0 68 f5 29 1d 84 76 5c 6a 6f 1f fd 08 34 0c 78 7e 01 b0 89 11 56 05 30 1d d3 76 92 b1 ac fd 84 78 78 0c db 18 60 15 04 4e 2a e4 30 03 2c 9f 5c be db d1 79 bc bf 05 6d 07 fd 35 0c 4f 90 78 75 1e d0 0b 08 5c d4 e5 1c 4d 4d e2 66 ab 88 eb 64 39 e0 25 7e 71 f9 5b 3c af e5 Data Ascii: y{(;Zm6$s #`[I}Z}oQTSsvpxm?mfjjF#B2'ra^8,;&sj;5WVWP_xSg5i.oM$ah)v\jo4x~V0vxx`N0,\ym5Oxu\MMfd9%~q[<

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
356	192.168.2.5	50243	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13638	OUT	GET /knockout_old_GJ62c6D9R5HuKFdkoO8XYw2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13686	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: application/javascript Content-Length: 27856 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Sun, 16 Jul 2023 04:56:54 GMT ETag: 0x8DB85B913B85AC5 x-ms-request-id: 0a3623d6-f01e-0038-47b2-b74e73000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-1vzh445ukh4rm1qhfbcc69puvw000000082000000000v2g1 X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13687	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 6b 57 dc 48 96 36 fa dd 6b f9 3f 28 f5 d6 c2 52 11 08 a8 ea 99 e9 56 5a ce 83 01 db 54 61 e3 06 5c d5 d5 98 f6 d2 2d 2f ce 2b a9 4c 30 86 fc ef 67 3f 3b 22 a4 08 a5 d2 ae 9e 79 e7 ac 53 d3 63 94 a1 50 5c 77 ec d8 f7 bd fb 63 6b e7 cf ff e7 5c 5c 1e 9c 5f 3a 67 af 9c cb 37 27 e7 47 ce 7b fa f5 87 f3 ee ec f2 e4 f0 d8 f9 d3 ad 3c 7d f2 f4 c9 65 7f 50 38 dd c1 28 77 e8 6f 12 17 79 e6 4c 27 ce 74 ee 0c 26 e9 74 3e 9b ce e3 45 5e 38 63 fa 77 3e 88 47 4e 77 3e 1d 3b 8b 7e ee cc e6 d3 cf 79 ba 28 9c d1 a0 58 d0 47 49 3e 9a de 39 1e 35 37 cf 9c f7 f1 7c 71 ef 9c bc f7 03 e7 92 ea 4e e7 83 de 60 42 5f a7 d3 d9 3d 3d f7 17 ce 64 ba 18 a4 b9 13 4f 32 6e 6d 44 3f 26 45 ee 2c 27 59 3e 77 ee fa 83 b4 ef bc 1d a4 f3 69 31 ed 2e 9c 79 Data Ascii: kWH6k?(RVZTa\-/+L0g?;"yScP\wck\\_:g7'G{<}eP8(woyL't&t>E^8cw>GNw>;~y(XGI>957\|qN`B_==dO2nmD?&E,'Y>wi1.y
2023-07-21 16:51:26 UTC	13702	IN	Data Raw: 0d 05 3b c8 8e be 5d b2 6f dc 69 aa cf 5e bd 68 30 81 4a c1 2c 4e 46 cb b9 2b fa f5 8a d3 e5 02 a5 8d 1b 5f c6 35 6d 59 64 4a e3 e8 81 c4 37 cc 38 02 bb ee a5 74 0d f0 0b c6 3e 18 0d 1b fd 80 ea 62 fb 9a 58 de c7 d0 82 74 ca 39 84 d5 20 af 7d bf bc a4 4b 50 a9 40 e7 15 ff 36 e1 a8 aa fb ca aa 4b e4 78 1d c4 4a 93 f6 ef 70 01 cd 8b 24 13 be e1 59 c6 38 3e f1 dc 41 97 58 1c fe 3b 99 d2 fa b6 f6 19 26 a8 00 32 40 fa bd 87 22 43 52 67 9e d3 06 26 26 d3 49 59 7e 95 22 f0 32 80 c8 da 59 91 fa 20 15 00 a4 25 dd 56 95 7e c4 62 d1 d4 f7 a5 2c 04 37 ca 20 2f 64 b6 b6 c5 d4 b9 38 3e 3d 3e bc 34 6d 12 d9 14 7b ef b9 0e 0d db f6 f5 ad ee ed fd 59 26 aa 19 b9 d4 e8 77 43 c4 b5 88 ab 88 23 96 62 ac 12 aa a9 30 22 2b bf 41 ef a1 22 5c 2b 95 87 4e e9 66 f0 fb 44 99 40 5f Data Ascii: ;]oi^h0J,NF+_5mYdJ78t>bXt9 }KP@6KxJp$Y8>AX;&2@"CRg&&IY~"2Y %V~b,7 /d8>=>4m{Y&wC#b0"+A"\+NfD@_

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
357	192.168.2.5	50246	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13714	OUT	GET /accountcorepackage_Vb1PddtJLvvTQ36LqurOdQ2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13716	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: application/javascript Content-Length: 16931 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Mon, 03 Jul 2023 05:41:29 GMT ETag: 0x8DB7B8826400A8A x-ms-request-id: 4a113f0b-901e-006a-51d0-b67b44000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-41qce981np24mezbe1ezm0nfvc000000083g00000001utdk X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13717	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 d5 7d 79 7f 9b c8 b2 e8 ff fe 14 12 c7 57 03 cf 6d 46 4a 26 b3 48 43 74 bd c6 ce 66 4f 9c 65 ce f8 f8 e6 87 04 92 88 11 28 80 bc c4 d2 fb ec af aa 7a a1 11 20 3b 99 dc 7b ee 9b df c4 82 a6 d7 ea ea da ba ba ba 39 9a 47 c3 2c 88 23 d3 ba 93 8f 0d 1f 5e 96 ea 2d 33 33 eb ee ca 4d 1a 91 e3 d9 3b 51 30 75 31 39 ed 25 7e 36 4f a2 66 b4 58 f8 f6 e6 28 4e 86 fe a7 3f e6 7e 72 bb 58 64 fd 66 a7 1b d9 07 91 3b 08 7d 6f b1 68 76 f2 da 22 d3 67 19 8b ac bb 60 64 6e ee da c7 07 d6 5d 96 dc de f9 e7 ed 0b 3b cd 6e 43 df 4e fc 69 7c e5 ef 64 59 12 0c e6 99 6f 1a a3 20 cc fc c4 b0 96 43 37 1b 4e cc 00 3a b7 8c 45 35 79 c5 32 e5 ce 6f b5 cc ac 6f fa 76 3a 89 af 4d 8b f9 f6 30 4d 4d 23 9e b9 c3 20 bb 35 98 d1 31 2c ab 6b 96 92 db 06 e6 9d 04 Data Ascii: }yWmFJ&HCtfOe(z ;{9G,#^-33M;Q0u19%~6OfX(N?~rXdf;}ohv"g`dn];nCNi\|dYo C7N:E5y2oov:M0MM# 51,k
2023-07-21 16:51:26 UTC	13732	IN	Data Raw: 9a 03 e7 cb e4 58 b1 52 51 1c f9 f7 f6 a6 54 4f a7 5c 0f 86 93 79 4d f2 c7 fd 95 51 98 10 a0 36 1a 7f 5c 2c c4 42 52 1e 73 ff 59 71 53 95 af ad 20 e9 2a fb a8 99 fb 40 61 98 f0 c8 8c 91 1e f3 5e 6a 1d 7b 00 7f fa c6 7e 65 c5 7e 6d 68 1d cb b4 8e 51 0c ef 2c 09 a6 ca dd ff 29 a9 4f e8 9d 90 d3 bc f5 ac 8a a9 0d de 0c 55 6c 24 97 74 b9 e1 4c e0 82 04 4a cc a9 54 ee 1b e6 11 ed 56 ad e0 4d aa 64 ab 45 72 af 51 3c ba d5 dd 46 11 a5 8f b2 59 81 5e b1 00 11 48 e8 7c b3 24 8e 47 74 6c f0 34 4e b0 6f 84 da 07 fc ee f7 f5 53 ef cb bb 17 49 86 e3 81 04 44 25 22 30 45 a2 46 97 a7 87 da 28 29 5c 1e ac 80 f8 fa 2f 3f 89 e5 98 53 60 a4 6d bc 87 46 ba ef 59 fd 66 bb 5b 9c b9 a7 4e bb ef a2 78 0c 22 18 36 85 9b 84 3e 0b 69 60 2e bd 6c 25 fc 35 5f c7 b5 a3 3d 9d a0 27 e8 Data Ascii: XRQTO\yMQ6\,BRsYqS *@a^j{~e~mhQ,)OUl$tLJTVMdErQ<FY^H\|$Gtl4NoSID%"0EF()\/?S`mFYf[Nx"6>i`.l%5_='

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
358	192.168.2.5	50247	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13715	OUT	GET /resetpasswordpackage_7Avr9AiKpLBw7ARSByHeZQ2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13737	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: application/javascript Content-Length: 30294 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Wed, 19 Jul 2023 21:06:42 GMT ETag: 0x8DB889C0D5817BB x-ms-request-id: b5c8582e-601e-006d-4265-bbaa4a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-kyttu3xzut1pp6e0zy6tmm7n2s000000084g00000000serr X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13738	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 7b 57 db c8 b2 38 fa 3f 9f 02 74 72 1c 69 d3 78 6c c8 6b ec 28 fc 78 26 24 bc 82 79 64 c2 b0 59 c2 96 41 c1 96 1c 49 06 3c d8 77 dd 4f 70 3f e4 fd 24 b7 aa ba 5b ea d6 c3 86 cc 9c b3 ce ba eb cc de c1 52 ab df 5d 5d af ae aa ee 0e fd 76 ec 05 fe fc 96 df 0e 47 83 d8 74 99 cf 62 16 58 8f 77 4e 38 1f da e7 17 cd e8 de 8b db 37 66 5c 8d 83 dd e0 de 0d 37 9c c8 35 2d eb b1 0d bf 46 fb e6 3a fa 19 39 46 c3 eb 9a fe b0 d7 b3 6d 77 3c e6 0f be f5 18 ba f1 30 f4 e7 f1 7d 12 da 87 4e fb d6 b9 76 5b 6b 9b 4e ec 60 43 56 f3 2a 74 9d db a6 ac 69 70 df 29 aa 28 28 a9 68 df bd 5f f3 3b 07 bd ce e1 7d 07 aa 0b b4 ea 32 75 95 54 01 25 0f fc de c8 74 f5 b2 9e ff 94 b2 9e 5f 54 36 0c 82 ae 5a ba 52 99 3e 1d bb c1 b5 e7 ef f8 31 4d 0a 7e Data Ascii: {W8?trixlk(x&$ydYAI<wOp?$[R]]vGtbXwN87f\75-F:9Fmw<0}Nv[kN`CV*tip)((h_;}2uT%t_T6ZR>1M~
2023-07-21 16:51:26 UTC	13753	IN	Data Raw: 20 b0 42 c1 1e fa 78 90 3d 6c 94 3e e3 a8 52 27 0b f1 35 93 c2 d0 76 24 e8 c5 de 00 be 89 a7 24 00 84 13 7a 0e f7 5b 89 d2 67 91 9e dc 84 bb 3e 12 5f 95 14 9a a0 28 5c 53 cb ab ef 72 be 0f b8 27 52 62 69 1d 15 26 b3 fc 26 91 39 95 24 16 4a b0 c6 37 b5 e9 a2 e4 64 8c 85 98 c2 5e 87 99 70 1d df 8c 4a 30 09 2b c3 19 49 c9 ec 5e c7 22 a1 28 ae d4 68 c7 04 21 71 70 7d dd 73 0f 95 c1 6b a1 fe 32 38 6b 21 87 c4 d4 7d 23 c2 ef f8 09 fb f0 72 5e f9 ef 3d e9 e6 e7 b9 6e fe 86 ee 69 37 e6 d1 ba 0f a8 5b d4 4a 44 7f 7e f3 e1 3c 39 db e3 16 b7 0d da b3 8d 79 ad 61 63 fe b7 0f f3 5a ed 0b 4b 4b f3 b7 c1 bc d7 6d cc 27 70 38 bf b4 94 c9 45 9f a4 9f 1c 2a 78 96 d0 a4 c0 98 07 8c 67 1b ca ec f0 20 f7 6a 2f 30 b3 52 b5 f1 e1 fd 6f f4 52 d0 8d df a0 1f b9 96 95 fe 15 ae 6c Data Ascii: Bx=l>R'5v$$z[g>_(\Sr'Rbi&&9$J7d^pJ0+I^"(h!qp}sk28k!}#r^=ni7[JD~<9yacZKKm'p8E*xg j/0RoRl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
359	192.168.2.5	50248	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13716	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13735	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Wed, 19 Jul 2023 14:42:08 GMT ETag: 0x8DB886654868CEE x-ms-request-id: 7a4dc379-b01e-0044-7164-ba486a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-4p0ehdvmm53uhdffutuq95xzy000000008b000000001eqz8 X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13736	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.5	49833	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1703	OUT	GET /pithos/host%3Awww.dropbox.com/privacy_consent HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:35 UTC	1879	IN	HTTP/1.1 200 OK Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 12 X-Xss-Protection: 1; mode=block Content-Type: text/javascript; charset=UTF-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:34 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 9296 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d3e52bf1c5aa45168ec3834d01c449c5 Connection: close
2023-07-21 16:50:35 UTC	1881	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
360	192.168.2.5	50249	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:26 UTC	13768	OUT	GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:26 UTC	13769	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:26 GMT Content-Type: image/svg+xml Content-Length: 179 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Fri, 21 Jul 2023 04:51:22 GMT ETag: 0x8DB89A621A1A7A9 x-ms-request-id: 45b03ad2-b01e-0000-7ab4-bb3773000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165126Z-ufhbc6yut54zx5g116b4kwvasg00000006b000000000q3qt X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:26 UTC	13770	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8e 3b 0e 83 30 10 44 af 62 6d 8d 3f 7c 02 26 b2 29 52 27 17 48 87 82 83 2d 39 80 f0 0a 73 fc e0 50 47 5a 8d 76 f4 5e 31 2a 6c 23 d9 3f 7e 0a 1a 2c e2 72 e5 3c c6 c8 62 c9 e6 75 e4 85 10 82 1f 06 90 e8 06 b4 1a ca 1a 88 35 6e b4 78 fe 9b 33 f1 36 ef 1a 04 11 a4 ac 8f 83 4e a1 43 6f ba 3e 04 83 41 f1 b3 a9 a5 47 4b 06 0d 8f 5c 66 45 c1 2a 59 79 2a a9 cc 58 5b b7 f4 08 79 4f 40 b0 4b d5 f8 86 89 32 a7 bf 4c 38 d1 c3 94 4f e0 9d 5a cd 0b ff ad 79 3b ef 35 4c f3 64 92 99 86 77 5f c6 19 f7 fb e0 00 00 00 Data Ascii: u;0Dbm?\|&)R'H-9sPGZv^1l#?~,r<bu5nx36NCo>AGK\fEYy*X[yO@K2L8OZy;5Ldw_

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
361	192.168.2.5	50251	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:27 UTC	13770	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:27 UTC	13770	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:27 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Wed, 19 Jul 2023 14:42:08 GMT ETag: 0x8DB886654868CEE x-ms-request-id: 7a4dc379-b01e-0044-7164-ba486a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165127Z-3xvtnawtct3adf1r1t0c14mcg4000000084g00000000fxyu X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:27 UTC	13771	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
362	192.168.2.5	50253	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:27 UTC	13773	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:27 UTC	13773	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:27 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Sat, 15 Jul 2023 04:56:38 GMT ETag: 0x8DB84EFDFC1C588 x-ms-request-id: 65ed4d8f-601e-006d-58f0-b6aa4a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165127Z-gahbr6zu4t5cb0p3kd3dhs5vg000000006a000000001wfmq X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:27 UTC	13774	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-07-21 16:51:27 UTC	13789	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
363	192.168.2.5	50252	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:27 UTC	13791	OUT	GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:27 UTC	13791	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:27 GMT Content-Type: image/svg+xml Content-Length: 179 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Fri, 21 Jul 2023 04:51:22 GMT ETag: 0x8DB89A621A1A7A9 x-ms-request-id: 45b03ad2-b01e-0000-7ab4-bb3773000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165127Z-1anrc02x0h4k1csepc5fqp8k000000000820000000014yeb X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:27 UTC	13792	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8e 3b 0e 83 30 10 44 af 62 6d 8d 3f 7c 02 26 b2 29 52 27 17 48 87 82 83 2d 39 80 f0 0a 73 fc e0 50 47 5a 8d 76 f4 5e 31 2a 6c 23 d9 3f 7e 0a 1a 2c e2 72 e5 3c c6 c8 62 c9 e6 75 e4 85 10 82 1f 06 90 e8 06 b4 1a ca 1a 88 35 6e b4 78 fe 9b 33 f1 36 ef 1a 04 11 a4 ac 8f 83 4e a1 43 6f ba 3e 04 83 41 f1 b3 a9 a5 47 4b 06 0d 8f 5c 66 45 c1 2a 59 79 2a a9 cc 58 5b b7 f4 08 79 4f 40 b0 4b d5 f8 86 89 32 a7 bf 4c 38 d1 c3 94 4f e0 9d 5a cd 0b ff ad 79 3b ef 35 4c f3 64 92 99 86 77 5f c6 19 f7 fb e0 00 00 00 Data Ascii: u;0Dbm?\|&)R'H-9sPGZv^1l#?~,r<bu5nx36NCo>AGK\fEYy*X[yO@K2L8OZy;5Ldw_

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
364	192.168.2.5	50259	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:27 UTC	13792	OUT	GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:27 UTC	13792	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:27 GMT Content-Type: application/javascript Content-Length: 3505 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 20 Jul 2023 07:26:05 GMT ETag: 0x8DB88F2945E69FD x-ms-request-id: 60d109e3-301e-0060-3af0-ba7551000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165127Z-f9ckwd3w953rzacrnxnwbze2f400000006ag00000001mqab X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:27 UTC	13793	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 59 5b 73 db 36 16 7e cf af a0 51 8f 4c 8e 60 46 49 db dd ae 18 44 e3 da 71 e2 dc 63 2b cd 83 e3 e9 d0 24 24 31 a6 49 96 04 2d 2b 92 fe fb 7e 07 e0 4d 96 d2 d9 9d dd 4e 1d 13 07 07 07 e7 7e 81 f7 26 65 12 a8 28 4d 6c 67 59 7f 5a d2 96 9d 95 a2 55 2e 55 99 63 a7 d7 93 6e a1 7c 25 85 88 7b 3d 5b ba 59 2e ef 9a 0f 37 91 f7 4a 48 fd cb e1 e6 b7 de a4 0f 8d 21 0c a2 c3 4f 84 00 31 fb a4 c1 de 37 80 fd 06 a3 be a8 e4 b2 3e aa c9 27 65 1c f3 c5 e1 21 30 d6 0d 93 3e 31 19 4d ec 2e 83 a5 b3 bc f3 73 2b 17 fb 5e 3e b2 f3 8a b9 9a 5a ee 0c 71 39 ae 95 cd 4d 20 db ef af 5b a2 13 28 65 ef af 5e 6f ef ba d7 5b f4 7a f7 cf e7 60 f0 5a cc a3 24 4c e7 6e 21 d5 38 ba 95 69 a9 ec 29 2f 1c a7 3d 77 47 cc 98 ab ed 44 ce ad 13 10 77 dc a9 c1 b7 Data Ascii: Y[s6~QL`FIDqc+$$1I-+~MN~&e(MlgYZU.Ucn\|%{=[Y.7JH!O17>'e!0>1M.s+^>Zq9M [(e^o[z`Z$Ln!8i)/=wGDw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
365	192.168.2.5	50260	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:27 UTC	13797	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:27 UTC	13798	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:27 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Sat, 15 Jul 2023 04:56:38 GMT ETag: 0x8DB84EFDFC1C588 x-ms-request-id: 65ed4d8f-601e-006d-58f0-b6aa4a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165127Z-sspxsvt4gt1zf0h52mmettkr4c000000083000000002xxxt X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:27 UTC	13798	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-07-21 16:51:27 UTC	13814	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
366	192.168.2.5	50261	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:27 UTC	13797	OUT	GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:27 UTC	13815	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:27 GMT Content-Type: application/javascript Content-Length: 105716 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Sat, 15 Jul 2023 04:57:01 GMT ETag: 0x8DB84EFED03EBD1 x-ms-request-id: f7c9ff41-101e-001a-6ce0-b68944000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165127Z-gahbr6zu4t5cb0p3kd3dhs5vg000000006ag00000001kqtg X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:27 UTC	13816	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bc bd 69 73 db 48 b2 2e fc 7d 22 e6 3f 90 b8 0e 1d a0 59 a2 49 6d dd 06 5d c3 90 b5 d8 b2 ad c5 5a 6c 77 73 74 14 10 59 92 60 51 00 8d 45 8b 2d 9e df 7e f3 c9 2a 00 05 92 9e 99 7b ef 1b ef 4c 5b 44 ed 5b 56 56 66 56 66 d6 cb df 9a 7f ff 5b e3 b7 46 77 fb a4 f1 fe a4 71 b2 fd a1 b1 15 27 4a 34 56 db 2b ed 0d 4e da 8a 27 4f 49 78 7d 93 35 dc a1 d7 d8 0f 87 49 9c c6 57 59 23 88 46 8d 61 1c 65 49 78 99 67 71 92 b6 1b 9b e3 71 83 73 a6 8d 44 a5 2a b9 57 a3 36 57 e1 56 a5 f6 a2 4c 25 51 30 6e 1c 46 e3 27 0f a9 2f ff fe b7 fb 20 69 44 32 bb 09 53 a1 e4 55 1e 0d b3 30 8e dc c8 fb e9 e4 a9 6a a4 d4 c4 30 73 7a c8 75 24 9d 22 dd 11 b9 74 e2 cb 6f 8a d2 a8 98 93 47 23 75 15 46 6a e4 88 54 3a 93 24 ce e2 ec 69 a2 1c b1 23 9d 9b 20 3d 7c Data Ascii: isH.}"?YIm]ZlwstY`QE-~{L[D[VVfVf[Fwq'J4V+N'OIx}5IWY#FaeIxgqqsDW6WVL%Q0nF'/ iD2SU0j0szu$"toG#uFjT:$i# =\|
2023-07-21 16:51:27 UTC	13831	IN	Data Raw: a3 7d 3a 3d 93 27 a7 3e d5 dd 0e e3 20 9c fb b4 9f 95 19 27 e2 69 61 60 21 a0 a9 07 46 65 99 df 11 47 61 78 b1 4d 6c 01 35 9a 87 e9 8d 1a 31 cb da e5 f8 b7 e0 15 c2 21 8e 07 e2 d4 11 b3 77 f4 79 8d 7a 98 d0 12 fa ab 26 e6 7e a3 88 59 e3 98 7d 1a c7 49 ce 7b d7 5f e7 18 f6 ae 75 90 df 5d aa c4 df e0 18 3a 94 08 b1 ea 97 cb 7f e7 98 93 70 52 54 f3 87 8e b8 cb ca 98 57 ba 29 56 ea c8 9e fc ae ee f6 59 12 fa 5d dd d3 dd ef a3 c8 ef ce f5 f1 23 ed ee 21 e5 5f 15 7a 42 55 62 16 a4 18 9a 09 fa f0 0c 00 aa 4c 4f 0d d1 15 63 9a 82 ad 38 cd b6 81 60 e8 54 a3 f1 13 3d 34 06 97 40 03 df bb bb 53 a3 10 ca 15 6b a0 24 73 f3 3a 6e 5a ec 0a 9a 57 33 38 bc 8a 9b ad ae 50 f1 33 fd b1 8a 88 8d 35 9a ab 33 fd b1 2e b6 e3 1c 4e 55 37 c4 9b 38 1e d3 74 bc 85 6f 9a 3f 04 8e 3d Data Ascii: }:='> 'ia`!FeGaxMl51!wyz&~Y}I{_u]:pRTW)VY]#!_zBUbLOc8`T=4@Sk$s:nZW38P353.NU78to?=
2023-07-21 16:51:27 UTC	13848	IN	Data Raw: f8 98 f2 23 7a 39 bc 4b 06 7e a1 4c 98 0a 3f 53 b0 a3 85 79 a9 9f f2 a3 04 bc f3 e3 d9 4c 9d 83 bd 41 49 0b a3 d1 50 4a 48 1c 3a ae 63 b8 26 6b 9a 5e 5b 38 6e 58 e3 e1 97 9e 56 0e a3 4c f8 1b 99 5f fb 82 53 93 86 94 6e e4 83 b1 c6 fb 5c b0 ea 2f 9a d6 6c 11 ae 74 d1 2c 47 6e 04 fd ac da d3 03 8c ba 28 03 72 a8 30 98 74 1f 3d 8c 36 fd cd 27 8f 1f 3c 7c fc 98 a0 a0 4e d8 88 1e 01 d0 a9 11 03 bb 12 a9 96 01 9e 05 b0 ce 10 4b 39 ec ea bb 2d da a8 3f ab d1 52 e7 04 b2 e6 9e f6 bd c6 66 1b c1 39 47 ac 41 b7 d0 4f aa 8c 26 08 d0 0d 75 f3 5b c1 40 3e 70 1d 0c 2d 60 1c 6e 99 e3 d5 b8 fe fb cf b0 32 05 01 dd 3f 13 98 de 35 e8 2e d8 68 6d 35 1a b0 25 8d 9a f9 e4 94 0e 34 a2 4f 41 ba db 92 c0 e7 8a c8 04 3e fc ee b0 1b fb a9 de d2 67 56 80 f5 1c e5 f3 f5 f5 19 41 fb Data Ascii: #z9K~L?SyLAIPJH:c&k^[8nXVL_Sn\/lt,Gn(r0t=6'<\|NK9-?Rf9GAO&u[@>p-`n2?5.hm5%4OA>gVA
2023-07-21 16:51:27 UTC	13864	IN	Data Raw: fe 78 b0 d6 7e a8 1f 1f 57 8f ed 0d eb f9 51 f5 bc d1 b2 9e ad aa 1b 5c b7 63 2e d4 c7 0d 77 73 8d bf 32 6d 95 8c 98 a4 b7 67 66 5b 1e 9f a8 07 34 8d 0f 1c fd da de 54 9b 5e 23 33 6f 8f f0 a6 9f 9f 60 4d 18 8e 65 21 d1 9b ff f0 9f a3 c2 25 a5 2c 09 58 1a ce 1d 4d 4d cb 89 0c 22 12 d7 9c d0 dd 00 04 bd ff 57 ef cf 61 b8 7e d6 27 c4 cf d6 28 09 2d a4 91 1b dc dc 50 99 2d 39 9f 2c 94 a0 31 85 a1 8c 23 0f 19 4b 1d 8b df 2a 4b b0 3d b2 6b e5 a1 46 a2 e0 79 08 0c 10 88 41 ed dd 76 16 ba 75 6c 46 e9 d8 3d e2 8d 9d 30 c6 e7 44 08 76 42 8d db a4 41 d8 bb 83 68 12 1a e6 ae 16 4f de 44 e0 22 bd 84 12 bd 16 54 52 0a c4 62 2e d2 5e 11 39 89 bf b0 01 ce 02 ea 5d ea 79 48 84 fa 24 4b e3 e8 63 f0 1e 1f f2 97 bc d9 72 60 4b 1d b9 c4 67 a3 de 71 df 65 b1 11 3c 7f 7b 80 e1 Data Ascii: x~WQ\c.ws2mgf[4T^#3o`Me!%,XMM"Wa~'(-P-9,1#K*K=kFyAvulF=0DvBAhOD"TRb.^9]yH$Kcr`Kgqe<{
2023-07-21 16:51:27 UTC	13880	IN	Data Raw: 7d f8 c4 2b f6 13 d0 26 0e 2b 20 21 13 24 8a 32 ac db 1b ea e4 b1 a5 5c 63 85 25 62 25 3f a2 a6 cc 6c 63 c8 d3 ff 7b 41 b1 a5 1a 46 df 60 98 a2 d7 46 62 93 f2 3d 09 28 f1 7f f3 b6 96 b1 e4 3f ce 10 f8 56 0e eb 39 d2 68 97 1d 8d a3 25 87 d7 bd d1 62 a9 45 c0 1c 35 64 85 35 4c f1 45 61 3d 28 96 28 c5 83 0a 01 16 79 67 ed 33 06 9c 6a d6 f5 50 05 48 53 0d d8 d8 0b 53 ee 02 12 db b3 ba fe 67 52 3f a5 78 34 c1 de 27 5f 13 3e d3 b1 d4 f5 51 f5 d8 23 33 b0 89 4f db 78 91 55 65 b3 d8 01 a2 f3 fa 9b 38 35 d6 ea d3 cd b2 48 99 22 72 08 30 8e f7 35 e8 79 15 8d e8 33 8f f5 e4 69 67 02 dd ea f8 3f 53 d9 9d c1 0e 7b 96 4a 5b 07 81 79 04 c0 ca da 23 bc df 22 d6 21 7a ca fa a5 8d 30 26 15 f3 c1 4d d9 b5 e2 88 12 1b f7 2d 73 df 61 63 b2 97 7f d9 08 0e 0b 80 3e fb de ed 18 Data Ascii: }+&+ !$2\c%b%?lc{AF`Fb=(?V9h%bE5d5LEa=((yg3jPHSSgR?x4'_>Q#3OxUe85H"r05y3ig?S{J[y#"!z0&M-sac>
2023-07-21 16:51:27 UTC	13896	IN	Data Raw: c0 d0 e3 b7 dc 2d ba 07 8c 35 87 69 33 88 83 3b 1e 75 d7 e4 51 d7 2e 6d f1 a3 ee a9 b8 5d af a8 e9 b2 7b aa 7c 2b ab d8 64 f5 8c a2 30 51 fe 81 a9 b4 af 96 99 59 08 9b 5d cf 70 6b 33 09 45 e2 56 9b e7 aa 79 94 85 5c ae 63 7c d6 b2 c1 78 4a d0 4f 9c 31 bb ce b1 6c c3 0e 6b 7c 15 11 4e 63 09 ba e5 b9 9c f5 4e 96 41 9a cd 81 50 d2 07 66 2b 19 a0 c9 b9 88 3d 6a 98 bb 60 c5 be 79 e1 9c c4 b2 de 6a 3d 68 3a 2b 62 c8 3e a6 96 30 2d 96 35 56 ab 54 83 c6 f9 06 1d 64 4d 85 87 c7 d1 c3 01 3b 49 b0 6c b1 56 1e 53 65 34 6f 87 ca 56 a7 79 ab 8b e4 e2 4c a7 e8 2e 5c b9 94 9f e1 39 63 9d c4 b2 e6 77 bb c3 3d 76 e6 71 68 19 16 fc 40 ab 33 cb 8c 53 63 4a fc b6 90 30 84 f4 6d b2 cc 92 a2 e6 88 26 90 ff b2 8e ac 55 19 a6 41 22 98 4d 61 b7 49 fc fc 7f 0b 89 5a 48 db 82 66 b1 Data Ascii: -5i3;uQ.m]{\|+d0QY]pk3EVy\c\|xJO1lk\|NcNAPf+=j`yj=h:+b>0-5VTdM;IlVSe4oVyL.\9cw=vqh@3ScJ0m&UA"MaIZHf
2023-07-21 16:51:27 UTC	13912	IN	Data Raw: 48 fc 0d a4 a6 3d 3d 28 c8 1c c0 6c cb 59 44 00 a1 3a 30 a1 26 f8 98 a3 9f a5 1a c7 a1 6e 37 47 bb d6 d5 e8 93 7d 09 7c c0 92 6b 10 7c cf 72 96 c4 04 4b 69 51 d6 f4 6f ba 84 15 ec 77 11 be 5c 3d 65 42 f6 1d ae 67 a7 41 b6 3b c1 05 24 a5 08 84 11 08 31 40 70 31 4c 6d 4d 9a 1c 22 ea 01 3b b9 33 c2 3b c0 de 6c 5d 10 fe b4 e4 6d 33 e4 07 94 b0 53 9f 7f 76 33 1c 8b 9a 40 dc 3b 06 37 0a 97 fd d2 89 0d 58 55 67 48 2e c4 78 53 17 3a d3 04 dc f5 45 89 00 8f f6 5d df a6 4b d7 f5 51 1c 7e cb a7 2e 1c 20 cf 8a 4b 34 f5 23 94 46 c5 c2 a3 bc bb 26 4c 9d 0b 8c 77 f7 ab 62 09 62 36 39 6e 22 85 b1 4a 13 4a 6a b4 d8 41 7a 92 79 36 ea ca f9 82 b8 a4 7e 7f 5c 55 dc 35 98 c7 a8 fa 43 90 53 64 3f 19 8f 31 3e 12 b5 6b 9a 38 ba 16 dd aa 7e fe ad 7d 0d 71 50 7b 30 c5 f6 51 5a 80 Data Ascii: H==(lYD:0&n7G}\|k\|rKiQow\=eBgA;$1@p1LmM";3;l]m3Sv3@;7XUgH.xS:E]KQ~. K4#F&Lwbb69n"JJjAzy6~\U5CSd?1>k8~}qP{0QZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
367	192.168.2.5	50263	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:27 UTC	13847	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:27 UTC	13920	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:27 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Mon, 17 Jul 2023 04:56:26 GMT ETag: 0x8DB86822D160143 x-ms-request-id: 58d4cf46-a01e-0009-417a-b84460000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165127Z-sspxsvt4gt1zf0h52mmettkr4c000000082000000003k2ag X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:27 UTC	13920	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
368	192.168.2.5	50267	13.107.246.60	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:27 UTC	13921	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:27 UTC	13921	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:27 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Mon, 17 Jul 2023 04:56:26 GMT ETag: 0x8DB86822D160143 x-ms-request-id: 58d4cf46-a01e-0009-417a-b84460000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165127Z-qcwakg0z6h22r3xsxycqpk51q800000006fg000000001ef9 X-Cache: TCP_HIT Accept-Ranges: bytes
2023-07-21 16:51:27 UTC	13922	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
369	192.168.2.5	50280	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:35 UTC	13923	OUT	GET /?uiqqiefr HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7Wevr3rID2EwXicU43yZq2C4DVwehNhCg_3273klHZOlyfXQlXAyY7cmO65hj7v8FeBqkAi-GJaeQsSWzNfK2p8v4opSCx1jizf0rhjKnPnK2gRsgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrSjbwDXwZ6ZW1_nY5TEVxkkGqw35RAk2mxaBfWAThMCLodjOu1ruQ6HfPsmNuyOYUmI-mPDKRt1AidKciGLaIOI2dyqqcnCjF-4BCZbYK86pkKSn1N_ujjsoycNxulZyLAyPuBQaxifJYGqUBvMC0ATBONCVVRREgQkfGHSSFTYmCqptOUlm9v9ThQifotFa8QCQmMB8YPO3JcYV2-x1LD_DmfPnXs_1UmdX5y5o9gtqQpzPxyl6wxqBUcKPslpnxaurwH-uLTGjLpLgLWj1zgY1eC1bWrlxPL-BMxDLDWHkH4g9PAPd_91DfhKLZbxq3FZutdHTsOWCDHPNBl-Uxwv26cPnx3p1X3knbifjNsOEgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAIAAAB2rkzcDgAAAA
2023-07-21 16:51:36 UTC	13924	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: d0685c87-8148-4efe-8e02-94a5c6f7cc00 x-ms-ests-server: 2.1.15811.5 - WUS2 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; expires=Sun, 20-Aug-2023 16:51:35 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; domain=mvolenoazaqoerutien.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA; expires=Sun, 20-Aug-2023 16:51:35 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Fri, 21 Jul 2023 16:51:35 GMT Connection: close content-length: 37089 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:36 UTC	13927	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2023-07-21 16:51:36 UTC	13940	IN	Data Raw: 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 76 6f 6c 65 6e 6f 61 7a 61 71 6f 65 72 75 74 69 65 6e 2e 63 6f 6d 25 32 66 63 6f 6d 6d 6f 6e 25 32 66 66 65 64 65 72 61 74 69 6f 6e 25 32 66 6f 61 75 74 68 32 6d 73 61 5c 75 30 30 32 36 73 74 61 74 65 3d 72 51 51 49 41 52 41 41 34 32 4b 77 30 73 6b 6f 4b 53 6b 6f 74 74 4c 58 4c 38 67 76 4b 6b 6e 4d 30 63 76 4e 54 43 37 4b 4c 38 35 50 4b 38 6e 50 79 38 6e 4d 53 39 56 4c 7a 73 5f 56 79 79 39 4b 7a 30 77 42 73 59 71 45 75 41 53 4f 72 56 4e 36 75 38 37 6b 6b 63 64 79 35 5f 5f 5a 6c 51 34 76 58 38 35 69 35 49 7a 50 79 53 77 44 71 31 7a 46 71 45 7a 59 4f 50 30 4c 6a 49 77 76 47 42 6c 76 4d 51 6e 36 46 36 56 37 70 6f 51 58 75 36 57 6d 70 42 59 6c 6c 6d 54 6d 35 31 31 67 45 58 6a 46 77 6d Data Ascii: irect_uri=https%3a%2f%2fmvolenoazaqoerutien.com%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuASOrVN6u87kkcdy5__ZlQ4vX85i5IzPySwDq1zFqEzYOP0LjIwvGBlvMQn6F6V7poQXu6WmpBYllmTm511gEXjFwm
2023-07-21 16:51:36 UTC	13956	IN	Data Raw: 73 62 75 6e 64 6c 65 2c 65 2e 41 64 64 49 66 28 21 76 2e 24 41 70 69 2c 79 2e 66 62 75 6e 64 6c 65 2c 22 57 65 62 57 61 74 73 6f 6e 5f 44 65 6d 61 6e 64 46 72 61 6d 65 77 6f 72 6b 22 29 2c 0a 79 2e 66 62 75 6e 64 6c 65 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 79 2e 66 62 75 6e 64 6c 65 2c 65 2e 41 64 64 28 79 2e 62 75 6e 64 6c 65 2c 22 57 65 62 57 61 74 73 6f 6e 5f 44 65 6d 61 6e 64 4c 6f 61 64 65 64 22 29 2c 65 2e 4c 6f 61 64 28 72 2c 74 29 2c 24 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 69 66 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 29 7b 69 66 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 2e 69 73 50 72 6f 78 79 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 29 7d 6d 2e 77 68 65 6e 28 22 24 57 65 62 57 61 74 73 6f 6e 2e 66 75 6c 6c 22 2c 66 75 6e 63 Data Ascii: sbundle,e.AddIf(!v.$Api,y.fbundle,"WebWatson_DemandFramework"),y.fbundle=null,delete y.fbundle,e.Add(y.bundle,"WebWatson_DemandLoaded"),e.Load(r,t),$=!0}}function r(){if(v.$WebWatson){if(v.$WebWatson.isProxy){return void t()}m.when("$WebWatson.full",func

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.5	49834	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:34 UTC	1731	OUT	GET /static/webpack/production/7b7bc1b94b6fa4bb7540.4kCVYgsQ9PUJwvE49OImq-373sTZn8Mp1CKG3UUt75o.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:35 UTC	1968	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 38695 Connection: close Date: Fri, 21 Jul 2023 16:50:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:19 GMT ETag: "de36b85c95518605ae874a634fd6c0f2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 01c82f5226ffef5f7e654ffdbab24db6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: rgdiI47C1-SLCCdCq5Q2GPlRyc80X8B4fyA0TUOxvJWAPpnEhFHLww==
2023-07-21 16:50:35 UTC	1968	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 7b 7f db 46 ae 30 fc bf 3e 85 ad 5f 8f 96 4c c6 aa e4 24 dd 2e 55 56 8f e3 38 ad db 38 76 6d 27 69 eb d7 8f 4b 49 23 99 b1 44 2a bc f8 12 49 cf 67 7f 01 cc 95 17 39 ce b6 db 9e b3 67 bb 1b 8b 1c ce 15 83 c1 00 18 00 e3 dc 84 d1 28 be 69 5f 5c bc 3a dc 79 b1 f3 fc d5 1e 3d ec bd b8 d8 fd fe cd eb 1f 4f 2e 2e fc 4f e6 58 2e cf ce dd f6 3c 4f 2f 9d b3 b3 e6 35 87 ec 49 fa ff e6 c1 9c 27 17 c1 68 16 46 17 f1 78 7c 71 1d f2 9b 8b 38 9a de c9 2f 03 a8 96 27 ea 25 8f 46 53 2e 5f 86 d3 38 1f 5d 8c e2 a1 aa 24 8c c6 d3 9c 47 43 9d fd ff 0d 9f 3e 79 f6 f5 70 b8 dd 3c 67 8b 46 b7 f3 d4 1b e7 d1 30 0b e3 c8 e1 2c 63 91 bb 68 e6 29 df 48 b3 24 1c 66 cd 5e d4 1e 39 19 6b 06 4d e6 e8 7c ee 22 e1 59 9e 44 1b f3 95 eb aa 1c 83 da 1c 63 Data Ascii: {F0>_L$.UV88vm'iKI#D*Ig9g(i_\:y=O..OX.<O/5I'hFx\|q8/'%FS._8]$GC>yp<gF0,ch)H$f^9kM\|"YDc
2023-07-21 16:50:35 UTC	1984	IN	Data Raw: 44 e6 57 4f 28 fa fa 09 15 f8 7c a5 8e 93 b0 07 27 55 7d 5b a3 30 4a 5b d6 a8 56 8d 6a 78 fd 42 81 b8 cd ab 6f 14 27 55 48 70 fb ec c3 80 7a 8f af 35 bd a3 63 9f b2 f5 dd 62 25 f9 0f e0 04 00 69 e2 29 9e f5 01 23 00 2f 51 98 85 c0 42 7c e4 ef c2 ec d2 f6 73 aa 89 7f 9c b4 2f 29 aa 9d cc 46 0c 55 25 0e f2 0c b2 a5 90 81 cb b8 1b a2 32 2b c6 f1 ac d5 9a 11 f3 4f ae 0a 03 3a df c3 3f 63 3c 9e c7 4e 5e 17 30 05 e4 4a 9e 0d 2f a1 9a 1a 35 c0 11 00 82 ec 9d 32 3e 43 24 43 bb 6f 6a bc 90 5d a3 e4 15 47 a3 28 d4 76 52 a8 29 55 0e c0 68 2c b3 8c b9 a8 50 80 94 1a 56 96 ad b2 45 c2 ac 42 16 c0 ae 1b 07 fb 85 de f1 2b 26 7a 4f 62 a0 57 d9 b4 ae 8d 0e 49 8e 11 d0 e7 c6 0a 44 45 57 df 68 04 15 3b 2c 35 59 aa 90 1a 95 e7 24 bc 1f 79 b8 ff ad f0 76 ea b7 0e de 48 6d 6f Data Ascii: DWO(\|'U}[0J[VjxBo'UHpz5cb%i)#/QB\|s/)FU%2+O:?c<N^0J/52>C$Coj]G(vR)Uh,PVEB+&zObWIDEWh;,5Y$yvHmo
2023-07-21 16:50:35 UTC	1984	IN	Data Raw: fb fb a1 e2 35 31 76 c6 15 87 07 14 42 44 7f 00 f7 77 40 38 10 22 52 26 e3 1c ed 99 c5 6e f5 9e 90 c3 c9 da c0 ff d1 42 c0 38 5b 9a 11 90 75 35 f1 82 8a 07 b3 14 a6 90 a4 c6 e3 fb 07 b2 99 2b 0d dd 01 2d 15 75 c9 c0 66 84 81 dd a5 c6 aa 77 40 cb 81 90 76 a5 f4 9b 98 59 9c 38 6e c2 7a d1 b2 79 2f a2 ac b8 6a 64 40 ea c2 78 09 c4 42 5e 37 91 84 0a 7b 0d a1 29 1e 4f 4a 61 15 c3 57 d3 48 72 96 9d 5b 67 24 9f 14 1e 94 ee 91 25 da f3 49 9d 99 66 ec c4 28 4a f0 40 ba 8a 50 b1 6b a3 87 ea 39 24 37 7a 07 c6 80 58 1d 3e 26 be 39 86 d4 80 5c 73 0c 89 1f 35 3a 14 32 d1 a8 ab 41 60 61 f9 e2 4a af f6 a6 d5 22 e8 28 95 e6 b9 fb 00 81 8a d0 96 45 0d 03 13 5d ad a6 68 b8 4b 55 87 2e f6 8e 9a c1 47 7a f0 59 fd e0 33 35 f8 ec 9e c1 d3 25 1f b5 83 6f ac 1f 3d f5 69 a5 8d 3b Data Ascii: 51vBDw@8"R&nB8[u5+-ufw@vY8nzy/jd@xB^7{)OJaWHr[g$%If(J@Pk9$7zX>&9\s5:2A`aJ"(E]hKU.GzY35%o=i;
2023-07-21 16:50:35 UTC	1986	IN	Data Raw: a3 5e ab bf d6 00 a3 d2 ab a1 c5 9e 20 63 09 42 d3 3d d8 04 68 ff d9 f8 a4 0c a3 7d dd 94 db 96 4d 58 3e 89 0d cd 63 2d 60 e5 ce c2 94 7b 7a fc 6c 1a a4 d9 0e fa fc 1a db 2a b1 2d 9f d6 d1 99 d3 ff d9 74 86 bd 2e ab 3b 50 d1 a0 b6 6b 7e 83 86 46 40 88 8f 04 94 5c 7b 9a 63 f4 8a d3 64 2a 27 5d 0b ec 3d e8 ae 45 5e 52 68 2c 67 36 9a 90 6c 5f cd c1 bb 9d 9d 02 cc d3 2d 05 eb b2 53 20 08 4e 5e 57 fd d8 91 ae 1e ae 47 57 81 89 4b 59 0a 3e 2a 11 9a 90 00 07 55 5a ee 9c a2 7f bb 52 83 99 b3 40 1c a2 64 ab d4 a1 9b 0d 35 82 2c 97 80 1b ae 72 f6 c2 73 91 15 7b 51 e6 59 a4 3c 82 77 ed 01 4d 5d d0 25 f0 5e 07 24 f6 a8 80 f3 c0 da 74 5b 68 7b a6 ae b7 33 f6 67 f4 0c 2b 3d b9 4b 3d 8c ff 30 c7 9f 95 76 02 f0 17 d8 01 2f c0 c0 16 54 16 1e bb 40 c6 e9 33 3c 6f a3 ce e1 Data Ascii: ^ cB=h}MX>c-`{zl-t.;Pk~F@\{cd']=E^Rh,g6l_-S N^WGWKY>*UZR@d5,rs{QY<wM]%^$t[h{3g+=K=0v/T@3<o
2023-07-21 16:50:35 UTC	2002	IN	Data Raw: f2 eb 3e ba 4d c7 bb e6 1e c0 d7 66 6c 82 93 49 47 f1 cc 71 b7 41 f2 f2 ad f3 a9 fe 8a 4f 19 3b 36 fa 3e fa 00 fe 21 b6 b6 fa b6 57 59 67 b2 e3 ff 81 01 07 50 7f f7 e7 18 90 1b e4 b7 1b 3a 9a 4f 40 ba 2b f0 d7 ed 64 d1 d1 df 8d 9c c8 f5 4a 08 83 c9 b6 5f ee f4 1c 2d 6f 84 0b 1a fa 08 a7 f2 87 f3 47 6e 2c 14 bf 18 db 7f 01 3c f2 f1 11 5e 4a d6 04 93 94 43 44 95 6e aa cd bc dd 4e 60 fd 4e ac df a1 f5 3b 35 bf 17 08 ae 87 a8 4f ed dc 90 c7 49 bc ec 43 00 5f a0 31 24 56 c5 14 51 19 b0 25 15 29 6e 23 33 12 2e 62 49 96 3c cc 05 7b 9a 60 b2 57 90 61 1e e6 19 9d 0f 5a 66 e0 09 3b 4b cc 31 58 98 c6 03 f4 9a 49 76 25 10 51 17 55 13 64 b1 dc 72 ac 94 ed 69 79 6d c1 88 33 f4 8b 53 80 1a f4 4a 87 21 a8 57 c4 c3 8d 19 00 33 9e 75 f9 cf 2e 65 31 4b 33 ed 32 41 28 26 6d Data Ascii: >MflIGqAO;6>!WYgP:O@+dJ_-oGn,<^JCDnN`N;5OIC_1$VQ%)n#3.bI<{`WaZf;K1XIv%QUdriym3SJ!W3u.e1K32A(&m
2023-07-21 16:50:35 UTC	2005	IN	Data Raw: 00 3e 99 04 0f 01 cc 7a c2 d4 a2 d4 44 b9 64 82 d9 e1 26 d3 e1 90 20 51 af d4 10 ea a0 66 4f 91 66 ed 95 1a 65 68 da d3 fb 0f 90 11 69 cf 64 34 1d 03 11 00 94 e0 8d 37 89 67 03 c9 10 60 3f 34 eb 95 16 d5 92 48 05 18 5b 47 da 52 f6 80 43 08 58 0e f9 a2 dc 2c d7 1a c0 0f 5a f8 62 40 b8 0e 8b 86 04 b7 00 ab f8 c0 12 53 15 f8 48 1d c1 dd f2 92 f8 21 e0 4d 87 68 50 03 16 03 d0 4d 41 9b 18 09 29 5d 55 81 7d 37 4a 80 11 9e 26 0e a5 4a b3 52 01 fc 84 92 68 20 db 84 8d 0c 9b b9 8a cb a5 11 bc b9 57 02 92 80 10 81 a2 f4 06 76 31 ed 61 98 20 0a 40 52 24 03 9a 09 1d 97 40 4e 80 92 d1 1d 12 64 e8 73 8f e7 90 a7 2f c0 f0 31 10 83 e1 f5 50 08 53 db 03 28 18 82 53 06 74 24 a9 ab e5 19 5a 63 17 46 92 94 34 aa 7b 08 97 fc c6 82 3d 57 c3 89 69 5a 54 46 39 08 e8 0c d4 cc 90 Data Ascii: >zDd& QfOfehid47g`?4H[GRCX,Zb@SH!MhPMA)]U}7J&JRh Wv1a @R$@Nds/1PS(St$ZcF4{=WiZTF9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
370	192.168.2.5	50279	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:36 UTC	13963	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Yr2W_ca6qSA3cxe3HgqLFw2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
2023-07-21 16:51:36 UTC	13964	IN	HTTP/1.1 200 OK Content-Length: 689016 Content-Type: application/x-javascript Date: Fri, 21 Jul 2023 16:51:36 GMT Connection: close
2023-07-21 16:51:36 UTC	13965	IN	Data Raw: 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.protot
2023-07-21 16:51:36 UTC	13980	IN	Data Raw: 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 30 Data Ascii: cked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 110
2023-07-21 16:51:36 UTC	13998	IN	Data Raw: 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2023-07-21 16:51:36 UTC	14014	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 75 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromCu
2023-07-21 16:51:36 UTC	14030	IN	Data Raw: 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: /g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", }, r
2023-07-21 16:51:36 UTC	14046	IN	Data Raw: 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 73 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(s
2023-07-21 16:51:36 UTC	14062	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2023-07-21 16:51:36 UTC	14078	IN	Data Raw: 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2023-07-21 16:51:36 UTC	14094	IN	Data Raw: 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2023-07-21 16:51:36 UTC	14110	IN	Data Raw: 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 69 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onRegi
2023-07-21 16:51:36 UTC	14126	IN	Data Raw: 74 65 6e 73 69 6f 6e 73 3a 20 21 30 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 73 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 70 69 63 6b 65 72 5f 61 63 63 6f 75 6e 74 5f 6d 73 61 5f 34 65 33 36 31 39 61 34 39 39 66 64 37 34 63 30 63 36 36 64 35 32 31 35 35 31 34 62 35 36 36 61 2e 70 6e 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 Data Ascii: tensions: !0, }), (e.exports = s); }, function (e, n, t) { e.exports = t.p + "content/images/picker_account_msa_4e3619a499fd74c0c66d5215514b566a.png"; }, function (e, n, t) { e.exports = t.p + "content/ima
2023-07-21 16:51:36 UTC	14143	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 20 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 47 69 74 48 75 62 46 65 64 3a 20 65 2e 69 73 47 69 74 48 75 62 46 65 64 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 Data Ascii: , isWindowsSso: e.isWindowsSso \|\| !1, isMeControlSession: !0, isGitHubFed: e.isGitHubFed \|\| !1, } ); }); }, parseBssoSessions: function (e) { ret
2023-07-21 16:51:36 UTC	14159	IN	Data Raw: 6f 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 43 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 55 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 53 68 61 72 65 64 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: o.setDefaultFocus = function () { var e = M(); e && e.setDefaultFocus && e.setDefaultFocus(); }), (o.getCurrentViewId = function () { return U(); }), (o.getSharedData = function () {
2023-07-21 16:51:36 UTC	14175	IN	Data Raw: 6e 20 6e 29 20 61 2e 63 61 6c 6c 28 6e 2c 20 74 29 20 26 26 20 28 65 5b 74 5d 20 3d 20 6e 5b 74 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 6e 29 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 20 6e 2c 20 74 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 65 5b 6e 5d 2e 6d 61 74 63 68 28 68 29 20 7c 7c 20 5b 5d 3b Data Ascii: n n) a.call(n, t) && (e[t] = n[t]); return e; } function t(e, n) { return (e.__proto__ = n), e; } function i(e, n, t, i) { var a = e[n].match(h) \|\| [];
2023-07-21 16:51:36 UTC	14191	IN	Data Raw: 20 20 61 5b 64 5b 6c 5d 2e 6e 61 6d 65 5d 20 3d 20 64 5b 6c 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 53 2e 61 2e 66 28 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 28 28 75 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 61 63 74 69 6f 6e 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 6d 65 74 68 6f 64 20 Data Ascii: a[d[l].name] = d[l].value; } t = S.a.f(t); var u = c.createElement("form"); for (var p in ((u.style.display = "none"), (u.action = r), (u.method
2023-07-21 16:51:36 UTC	14207	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 28 69 20 3d 20 21 30 29 2c 20 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 72 2c 20 22 64 69 72 74 79 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 21 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f Data Ascii: (i = !0), e.notifySubscribers(r, "dirty"); } finally { i = !1; } } }; })); }, no
2023-07-21 16:51:36 UTC	14223	IN	Data Raw: 20 20 20 20 20 20 20 20 63 20 3d 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 54 20 3d 20 53 2e 61 2e 44 61 28 22 5f 73 74 61 74 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 2e 6f 20 3d 20 53 2e 24 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: c = a; } }); } }); var T = S.a.Da("_state"); S.o = S.$ = function (e, n, t) { function i() { if (0 < arguments.length) {
2023-07-21 16:51:36 UTC	14239	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 2c 20 6c 20 3d 20 30 3b 20 28 64 20 3d 20 72 5b 6c 5d 29 3b 20 2b 2b 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 64 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 34 20 3d 3d 3d 20 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3e 3d 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 75 73 68 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 73 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (var d, l = 0; (d = r[l]); ++l) { var u = d.charCodeAt(0); if (44 === u) { if (0 >= c) { t.push( n && s.length
2023-07-21 16:51:36 UTC	14255	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 20 26 26 20 69 28 62 28 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 68 61 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 69 6e 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return a[e]; }; (g.get = function (e) { return a[e] && i(b(e)); }), (g.has = function (e) { return e in a;
2023-07-21 16:51:36 UTC	14271	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 20 2b 20 65 20 2b 20 22 27 3a 20 22 20 2b 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 53 2e 6a 2e 72 65 67 69 73 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 Data Ascii: } function o(e) { return function (n) { throw Error("Component '" + e + "': " + n); }; } var r = {}; (S.j.register = function (e, n) {
2023-07-21 16:51:36 UTC	14287	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 20 3d 20 61 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 6f 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 61 2c 20 74 2c 20 22 68 61 73 66 6f 63 75 73 22 2c 20 69 2c 20 21 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 4c 61 73 74 56 61 6c 75 65 20 3d 20 69 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b Data Ascii: o = a.body; } i = o === e; } (a = n()), S.m.eb(a, t, "hasfocus", i, !0), (e.__ko_hasfocusLastValue = i), (e.__k
2023-07-21 16:51:36 UTC	14303	IN	Data Raw: 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 69 2c 20 74 2c 20 22 76 61 6c 75 65 22 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 53 2e 61 2e 57 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 61 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 20 21 3d 20 65 2e 74 79 70 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 66 66 22 20 3d 3d 20 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 66 6f 72 6d 20 26 26 20 22 6f 66 66 22 20 3d 3d 20 65 2e 66 6f 72 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: S.m.eb(i, t, "value", a); }; !S.a.W \|\| !a \|\| "text" != e.type \|\| "off" == e.autocomplete \|\| (e.form && "off" == e.form.autocomplete
2023-07-21 16:51:36 UTC	14319	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 3d 3d 20 72 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 21 53 2e 61 2e 66 28 65 2e 5f 64 65 73 74 72 6f 79 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return ( e === r \|\| null === e \|\| !S.a.f(e._destroy) ); })), d(e); }, null,
2023-07-21 16:51:37 UTC	14349	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 28 69 2c 20 74 2e 65 6c 65 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6f 2c 20 72 2c 20 73 2c 20 63 Data Ascii: })(i, t.element), i ); })), i(n); }); }, }), (n = e.bindingHandlers.component.init), (e.bindingHandlers.component.init = function (t, o, r, s, c
2023-07-21 16:51:37 UTC	14365	IN	Data Raw: 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 33 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 69 2e 53 74 72 69 6e 67 3b 0a 20 20 20 20 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 3b 0a 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 Data Ascii: n, t) { var i = t(3), a = t(1), o = i.String; n.applyExtensions = function (e) { var n; (n = e.bindingProvider.instance.preprocessNode), (e.bindingProvider.instance.preprocessNode = function (t) { if (
2023-07-21 16:51:37 UTC	14381	IN	Data Raw: 20 3a 20 66 65 20 26 26 20 6e 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 26 26 20 28 73 20 3d 20 44 2e 55 73 65 72 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 65 20 7c 7c 20 6f 20 7c 7c 20 62 65 20 7c 7c 20 67 65 29 20 26 26 20 28 72 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6e 20 26 26 20 28 72 20 3d 20 73 20 3d 20 44 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 4c 6f 63 61 74 69 6f 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 69 6e 69 74 69 61 6c 56 69 65 77 49 64 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 63 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 28 74 2c Data Ascii: : fe && n.getServerError() && (s = D.Username); (ue \|\| o \|\| be \|\| ge) && (r = s); } sn && (r = s = D.RemoteConnectLocation), (n.initialViewId = r), (n.currentViewId = s); })(t,
2023-07-21 16:51:37 UTC	14397	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6e 28 65 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 61 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 Data Ascii: , (n.fetchSessions_onUpdateUserTiles = function (e, n) { setTimeout(function () { hn(e, n); }); }), (n.fetchSessions_onIncrementAsyncTileRequestCount = function () { n.asyncTileRequestCount
2023-07-21 16:51:37 UTC	14413	IN	Data Raw: 20 20 20 28 6e 2e 76 69 65 77 5f 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 69 73 52 65 71 75 65 73 74 50 65 6e 64 69 6e 67 28 65 29 2c 20 6e 2e 73 68 6f 77 4c 69 67 68 74 62 6f 78 50 72 6f 67 72 65 73 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6e 2e 61 67 72 65 65 6d 65 6e 74 54 79 70 65 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 76 69 65 77 5f 6f 6e 53 77 69 74 Data Ascii: (n.view_onSetPendingRequest = function (e) { n.isRequestPending(e), n.showLightboxProgress(e); }), (n.footer_agreementClick = function (e) { (n.agreementType = e), n.paginationControlMethods().view_onSwit
2023-07-21 16:51:37 UTC	14429	IN	Data Raw: 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 31 5f 63 66 65 39 63 62 36 32 65 62 62 36 36 30 35 65 30 33 66 62 38 64 32 38 35 63 36 31 31 62 34 38 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 33 2d 73 6d 61 6c 6c 5f 61 31 39 65 37 62 63 61 34 34 36 36 30 35 39 65 61 64 64 33 34 34 61 62 31 31 65 36 39 30 34 66 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 Data Ascii: p + "content/images/appbackgrounds/11_cfe9cb62ebb6605e03fb8d285c611b48.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/13-small_a19e7bca4466059eadd344ab11e6904f.jpg"; }, function (e, n, t) {
2023-07-21 16:51:37 UTC	14445	IN	Data Raw: 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 2d 73 6d 61 6c 6c 5f 34 66 36 33 63 34 33 37 61 32 30 39 61 37 61 64 30 62 63 66 37 63 35 33 32 61 34 62 35 63 32 62 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 5f 37 34 39 36 32 64 39 36 65 64 34 34 39 38 61 35 33 62 32 37 33 64 37 63 37 66 39 37 63 64 39 35 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 Data Ascii: e.exports = t.p + "content/images/appbackgrounds/67-small_4f63c437a209a7ad0bcf7c532a4b5c2b.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/67_74962d96ed4498a53b273d7c7f97cd95.jpg"; },
2023-07-21 16:51:37 UTC	14461	IN	Data Raw: 20 20 20 20 20 28 6e 20 3d 20 5f 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 75 2e 45 72 72 6f 72 28 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 20 22 45 78 74 65 6e 73 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 2e 22 2c 20 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 44 61 74 61 50 6f 69 6e 74 28 22 65 78 74 65 6e 73 69 6f 6e 2e 69 64 22 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 55 73 69 6e 67 20 43 68 72 6f 6d 65 20 65 78 74 65 6e 73 69 6f 6e 20 77 69 74 68 20 69 64 20 22 20 2b 20 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: (n = _.firstChild); if (!e) throw new u.Error("NoExtension", "Extension is not installed.", null); return ( p.logDataPoint("extension.id", e), p.logMessage("Using Chrome extension with id " + e),
2023-07-21 16:51:37 UTC	14477	IN	Data Raw: 20 20 20 43 68 65 63 6b 62 6f 78 3a 20 22 63 68 65 63 6b 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 42 75 74 74 6f 6e 3a 20 22 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 44 61 74 61 3a 20 22 45 78 63 65 70 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 3a 20 22 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 45 78 63 65 70 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 55 73 65 72 41 63 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: Checkbox: "checkbox", Button: "button", ExceptionData: "ExceptionData", PageActionData: "PageActionData", ExceptionsTablesuffix: "Exceptions", PageActtionsTablesuffix: "UserActions",
2023-07-21 16:51:37 UTC	14493	IN	Data Raw: 6f 76 69 64 65 72 20 3d 20 69 2e 45 6d 70 74 79 45 76 65 6e 74 50 72 6f 76 69 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 69 2e 45 76 65 6e 74 41 70 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 69 Data Ascii: ovider = i.EmptyEventProvider); }, , , , , function (e, n, t) { var i; !(function (e) { var n = t(1), i = t(2), a = i.EventApi, o = i
2023-07-21 16:51:37 UTC	14509	IN	Data Raw: 61 6c 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 3a 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 3a 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 45 72 72 6f 72 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 5f 6f 6e 43 61 6e 63 65 6c 2c 5c 6e 20 20 20 20 20 Data Ascii: alViewId,\n currentViewId: currentViewId,\n initialSharedData: initialSharedData,\n initialError: $loginPage.getServerError() },\n event: {\n cancel: paginationControl_onCancel,\n
2023-07-21 16:51:37 UTC	14525	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 20 2b 0a 20 20 20 20 20 20 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 49 64 70 52 65 64 69 72 65 63 74 53 70 65 65 64 62 75 6d 70 20 2b 0a 20 20 20 20 20 20 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 69 Data Ascii: redirect: $loginPage.view_onRedirect } }">\n </div>\n\n <div data-viewid="' + t(0).PaginatedState.IdpRedirectSpeedbump + '" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-i
2023-07-21 16:51:37 UTC	14541	IN	Data Raw: 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 4e 65 77 55 73 65 72 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 46 6f 75 6e 64 4d 53 41 73 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 73 46 6f 75 6e 64 4d 53 41 73 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 73 70 6f 73 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 66 50 4f 53 54 5f 46 6f 72 63 65 53 69 67 6e 69 6e 20 3f 20 31 20 3a 20 30 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 Data Ascii: \n <input type="hidden" name="NewUser" value="1" />\n <input type="hidden" name="FoundMSAs" data-bind="value: svr.sFoundMSAs" />\n <input type="hidden" name="fspost" data-bind="value: svr.fPOST_ForceSignin ? 1 : 0" />\n <input
2023-07-21 16:51:37 UTC	14557	IN	Data Raw: 69 20 3d 20 7b 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 70 6e 67 22 3a 20 33 34 33 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 73 76 67 22 3a 20 33 34 34 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 70 6e 67 22 3a 20 33 34 35 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 73 76 67 22 3a 20 33 34 36 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 70 6e 67 22 3a 20 33 34 37 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 73 76 67 22 3a 20 33 34 38 2c 0a 20 20 20 20 20 20 22 2e 2f Data Ascii: i = { "./AppCentipede_Beam.png": 343, "./AppCentipede_Beam.svg": 344, "./AppCentipede_Beam_white.png": 345, "./AppCentipede_Beam_white.svg": 346, "./AppCentipede_Bing.png": 347, "./AppCentipede_Bing.svg": 348, "./
2023-07-21 16:51:37 UTC	14573	IN	Data Raw: 6e 74 61 69 6e 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 68 65 61 64 65 72 5c 27 3a 20 74 72 75 65 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 65 61 64 65 72 4c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 68 65 61 64 65 72 4c 6f 67 6f 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3a 20 73 74 72 5b 5c 27 Data Ascii: ntainer">\n <div id="header" data-bind="externalCss: { \'header\': true }">\n <img id="headerLogo" role="img" data-bind="\n attr: {\n src: headerLogo,\n alt: str[\'
2023-07-21 16:51:37 UTC	14589	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 62 75 67 44 65 74 61 69 6c 73 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 6c 64 20 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 69 6e 67 2d 74 65 78 74 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 Data Ascii: <div class="table-cell">\n \x3c!-- ko if: svr.fShowCopyDebugDetailsLink --\x3e\n <div class="debug-details-header">\n <div id="debugDetailsHeader" class="bold debug-details-heading-text" role="heading" aria-leve
2023-07-21 16:51:37 UTC	14605	IN	Data Raw: 69 64 65 49 6e 4e 65 78 74 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 6f 75 74 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 4f 75 74 42 61 63 6b 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 69 6e 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 49 6e 42 61 63 6b 28 29 20 7d 5c 22 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 66 6f 72 65 61 63 68 3a 20 76 69 65 77 73 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 56 69 65 77 49 6e 64 65 78 28 29 20 3d 3d 3d 20 24 69 6e 64 65 78 28 29 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ideInNext(),\n 'slide-out-back': animate.isSlideOutBack(),\n 'slide-in-back': animate.isSlideInBack() }\">\n\n \x3c!-- ko foreach: views --\x3e\n \x3c!-- ko if: $parent.currentViewIndex() === $index() --\x3e\n
2023-07-21 16:51:37 UTC	14621	IN	Data Raw: 76 69 63 65 43 6f 64 65 20 3d 20 74 20 3f 20 74 2e 64 65 76 69 63 65 43 6f 64 65 20 3a 20 6e 75 6c 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 3d 20 22 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 75 73 65 45 76 69 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 73 68 6f 77 43 72 65 64 56 69 65 77 42 72 61 6e 64 69 6e 67 44 65 73 63 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 69 73 53 69 67 6e 75 70 50 6f 73 74 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 65 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 20 3d Data Ascii: viceCode = t ? t.deviceCode : null), (e.proofConfirmation = ""), (e.useEvictedCredentials = !1), (e.showCredViewBrandingDesc = !1), (e.isSignupPost = !1), Ne && ((e.availableCreds =
2023-07-21 16:51:37 UTC	14637	IN	Data Raw: 20 73 74 72 5b 5c 27 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 5c 27 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3a 20 73 76 72 2e 75 72 6c 53 69 67 6e 55 70 20 7c 7c 20 5c 27 23 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 73 69 67 6e 75 70 5f 6f 6e 43 6c 69 63 6b 22 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 49 73 53 65 6c 66 53 65 72 76 69 63 65 Data Ascii: str[\'STR_SSSU_Signup_Link\'],\n href: svr.urlSignUp \|\| \'#\',\n click: signup_onClick"></a>\n </div>\n \x3c!-- /ko --\x3e\n\n \x3c!-- ko ifnot: svr.fIsSelfService
2023-07-21 16:51:37 UTC	14653	IN	Data Raw: 3d 20 64 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 22 5c 78 33 63 21 2d 2d 20 22 20 2b 0a 20 20 20 20 20 20 28 74 28 31 33 29 2c 0a 20 20 20 20 20 20 27 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 69 64 3d 22 6d 6f 72 65 49 6e 66 6f 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 2c 20 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 74 Data Ascii: = d); }, function (e, n, t) { e.exports = "\x3c!-- " + (t(13), ' --\x3e\n\n\x3c!-- ko if: moreInfoTitle --\x3e\n<div id="moreInfoHeader" class="row" role="heading" aria-level="1" data-bind="text: moreInfoTitle, externalCss: { \'t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
371	192.168.2.5	50283	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:36 UTC	13996	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_zrspqvfkkfzwifqf_ppbrg2.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
2023-07-21 16:51:36 UTC	14142	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:36 GMT Content-Type: application/x-javascript content-length: 49914 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Jun 2023 07:28:04 GMT ETag: 0x8DB6D720EE3C482 x-ms-request-id: 3f703eec-701e-0098-1814-b88815000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165136Z-6v3rwgaswd71hb09puwagdu4zs000000043g00000000vc3g X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:36 UTC	14143	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-07-21 16:51:37 UTC	14335	IN	Data Raw: dd 7d cb 76 23 47 b2 d8 de 5f 51 83 f1 51 37 af aa 21 3c f8 44 0b 6a 83 00 d8 c4 6d 10 80 00 b0 29 1d 49 c6 29 02 09 b2 a6 81 2a dc aa 42 b3 31 54 fb cc ce 8b bb f0 d6 de 79 e1 95 97 de 78 ef 4f 99 73 ae bf c3 f1 c8 cc ca 7a 00 20 25 8d e6 5e cf 99 d3 22 f2 11 19 19 19 19 19 11 19 19 f5 87 f9 da 9b 46 ae ef bd 14 07 8f ea 6f cb 7f e9 1d 3c ba f3 97 ee 0f de 4f 07 81 88 d6 81 67 e1 df 45 f1 69 e5 07 51 f8 fa a3 13 58 51 1d 8b ea 8f b2 ac f6 f8 d9 76 67 35 cf 5e f8 ce 4c cc 6a 7f 28 7f 7e 2d bb 0a ec 3a 75 16 8b 97 91 82 60 47 76 fc b7 7f 00 3f b8 5b fd 0f a5 b8 e2 33 0e e3 d6 1f 35 20 bf b8 ac 0b db 2f 4e eb 2e fc bb aa 17 0a b6 ff b2 74 f0 f9 e5 0f f1 34 6c df 76 01 f9 97 95 03 c2 d2 ab bb 2f cb 00 1f fe 73 74 60 07 f0 9f e3 03 db a9 07 c5 51 14 b8 de 5d Data Ascii: }v#G_QQ7!<Djm)I)*B1TyxOsz %^"Fo<OgEiQXQvg5^Lj(~-:u`Gv?[35 /N.t4lv/st`Q]

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
372	192.168.2.5	50284	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:37 UTC	14654	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
2023-07-21 16:51:37 UTC	14656	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:37 GMT Content-Type: application/x-javascript content-length: 190151 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 27 Oct 2022 14:24:13 GMT ETag: 0x8DAB826EBE74413 x-ms-request-id: f1f3b3c3-a01e-0035-35f3-bb9168000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165137Z-3necrehvwh551174b2d0nnynw8000000034000000000qswb X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:37 UTC	14657	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2023-07-21 16:51:37 UTC	14672	IN	Data Raw: bd 79 61 b5 15 fd 9b 44 b7 7f eb f6 e5 f6 0e f1 49 f8 cc a8 e9 63 a1 4e e0 6e 1f 8b 70 b8 ba 3a b4 fa 58 95 37 51 ca 7d ae 6a 4c 82 2a ca 33 a3 14 93 89 6d 53 35 e5 2f d0 a1 62 11 99 d6 ad 0d b7 66 84 ff 4e f2 a3 4f b8 0f 2c 5d cb a9 00 b0 ea ca 42 99 8c 64 f0 d1 2f 59 14 e3 cd 17 ac 76 fc 7e cd 7d 7b 59 c7 cc 76 48 00 45 b0 e5 9e 35 c8 67 46 e0 5a 6a b2 6b 8b 86 5c 3f 91 80 19 96 74 d1 ca 5f ec 60 a8 8e 6a fb 44 2a 8c d3 18 93 1c ca d4 80 a8 4b cd 60 56 4d b0 52 77 d2 c0 86 a3 d2 29 7f d7 0c 9f a5 89 f0 b1 e1 48 d1 84 a4 4d f7 0b 7d 44 d0 cb 75 a1 24 f3 2b 8b fb 4e aa f6 9d 2c 8c 9b c4 fb 89 23 60 24 32 cf b2 31 ea 1c 95 6d 69 82 e6 f1 c1 36 d9 59 2b 07 1d b0 82 94 af 27 d1 b6 ff f1 d6 22 e1 2e ac b0 1c 86 a0 f9 a1 4a b5 fd 86 60 3a 9c 93 ee 54 71 9d 94 Data Ascii: yaDIcNnp:X7Q}jL3mS5/bfNO,]Bd/Yv~}{YvHE5gFZjk\?t_`jDK`VMRw)HM}Du$+N,#`$21mi6Y+'".J`:Tq
2023-07-21 16:51:37 UTC	14673	IN	Data Raw: 6b a7 6c 65 28 14 c8 04 77 82 2b 8d 38 5f 27 cc 30 79 b0 2d 27 fb b8 04 c8 a4 d1 b8 cf d6 40 fb e3 19 f0 f7 3e 5e 37 aa 6b 46 13 c0 46 7c f4 82 92 df 84 29 25 37 a5 3f 09 54 4b f3 d1 71 4f a1 76 78 aa 18 e3 c5 91 6a 75 11 de 41 3d c4 01 2d de b5 a5 84 7e 73 38 d0 94 20 80 a0 44 ab ab 51 53 7e f0 29 f0 0b 99 80 01 b4 89 9e 5c 59 24 5d 64 0c b6 a8 d4 05 38 ab 60 15 81 99 eb c9 9c 70 3c bd 53 00 50 5d 0c 45 17 86 1a 31 86 6c 4d 85 c2 f5 87 ac b1 0c 67 55 28 3e b9 f5 71 5d 9f 2a 45 55 48 cd 7b 3f 8e 2e f3 fa 5e d2 67 d3 d1 12 74 b9 af f4 59 0c a5 c9 0d 03 8a 07 30 69 16 cf 52 6d dc 30 57 a1 70 ef 0a 7b b4 64 d3 45 18 6d e5 e0 db 3b 9b 25 5f 93 f4 26 39 f3 84 c7 26 65 c9 4e 16 3d e6 75 0d ad 2e a3 fc 4a 78 55 16 56 af 34 bf 7f f8 ae 2c 20 98 e7 22 1e 2f 90 4e Data Ascii: kle(w+8_'0y-'@>^7kFF\|)%7?TKqOvxjuA=-~s8 DQS~)\Y$]d8`p<SP]E1lMgU(>q]*EUH{?.^gtY0iRm0Wp{dEm;%_&9&eN=u.JxUV4, "/N
2023-07-21 16:51:38 UTC	14689	IN	Data Raw: 9e 7c da de 1b 0e 33 da db ed 2d 99 72 b7 ab 52 b6 39 e5 03 c1 a5 d3 a9 f0 3c b0 c3 29 27 d7 69 12 49 77 02 bb 9c f2 2b 23 62 42 0b e3 47 4e 39 8d 27 aa 9a e7 22 e1 b6 d0 29 2f 44 53 8c 9b 16 8f ed 96 e8 36 e2 50 b7 44 4f df fe 35 4c da ad 85 3e be 8f ae c2 01 95 df f2 f7 a7 79 91 de 46 2a 00 b9 1a 9a 7c 6d 6f 6d 9a f0 4f 4d 11 91 ea 63 9a 8a fd 34 87 bb 7f 84 c1 1e d2 3c 10 41 cb 91 ee 68 02 0e 6f 6f a3 61 0c b7 05 db 26 38 14 df 9f 27 f9 24 1a c0 aa 6d 48 f3 2c 07 db c2 9d b9 b5 49 d5 9c 8b 87 2d 24 ec 6e d3 dc 9d 8b 87 1d ff 4d 3a 85 32 c3 ae 0f ea 83 a6 87 dd 15 3c f7 a1 0e c0 ed be 30 21 64 b5 af 59 5c c4 04 45 da 9b 26 d4 93 85 8e 8f 0e a8 27 07 1f 3f 1e 7f a4 a2 9f f7 3e 1e 1d 1e fd 44 5d 39 3c 7a 7b fc f1 c3 de d9 e1 f1 51 7b cb 04 73 84 72 db 42 Data Ascii: \|3-rR9<)'iIw+#bBGN9'")/DS6PDO5L>yF*\|momOMc4<Ahooa&8'$mH,I-$nM:2<0!dY\E&'?>D]9<z{Q{srB
2023-07-21 16:51:38 UTC	14705	IN	Data Raw: 31 43 fb fe 73 3c 81 bb 1e 65 55 74 81 f6 db 0d 98 04 d5 c5 78 b3 be ee 43 df d2 c4 94 b6 56 2b 08 8f 22 7f f8 e2 dc 93 16 2a fa c6 dc 33 a4 40 ea de 34 89 20 da 55 7b a5 54 44 5d 97 7b 8a 5f ea db 57 64 bb 7a 67 42 44 52 ca 2f ff ed 29 01 be 58 9d 14 66 70 ea dc ea 29 61 ad f8 8f 70 b0 64 5c ff ec 2f d3 78 0f 2a b9 7b 16 6b d3 12 49 d9 02 2a 2e 5a be 7a 3e 94 1b 38 fc b2 02 20 e6 16 36 35 5e 66 b3 1b 77 4f c0 7c 66 fd f1 9b f7 04 1d 6e 21 2e 8b e8 18 d1 e3 f5 68 58 3b b6 68 f1 b9 d1 33 c4 1b 2e 35 d8 38 f4 4c a9 cf 56 52 82 0c 1c ca 1c c1 ba 34 b0 73 7a 2e 15 da 50 8b a1 de 56 a9 a5 cc 41 2d 9b 66 2d 25 5d 91 69 6a a4 e8 12 a5 24 85 9b 1c 95 b3 34 4a 8c ca e8 4a d1 a2 2c bf b3 18 82 48 a9 58 70 08 22 64 43 23 bc 8c ee bc c0 77 80 33 c6 17 be a3 38 d8 da Data Ascii: 1Cs<eUtxCV+"3@4 U{TD]{_WdzgBDR/)Xfp)apd\/x{kI*.Zz>8 65^fwO\|fn!.hX;h3.58LVR4sz.PVA-f-%]ij$4JJ,HXp"dC#w38

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
373	192.168.2.5	50285	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:38 UTC	14717	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
2023-07-21 16:51:39 UTC	14728	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:39 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: ad7c162f-101e-0026-39f3-bb5c4c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165139Z-dhghddyytx3t76qmmn1wgnc6cs000000032000000000524r X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:39 UTC	14729	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2023-07-21 16:51:39 UTC	14744	IN	Data Raw: 03 46 6b 07 bb 9a ad a7 e7 f4 64 80 4d 90 c7 37 53 fe c7 f3 c9 3d 57 e4 2c f8 eb fb a2 b3 86 ff fe c0 d3 16 6c d0 d4 5e be fc 89 32 3b d4 7d 82 45 6c 83 b1 dc 1c 64 62 0c 12 5e 27 6c 87 6d 33 14 8f e9 f0 f7 77 7d fa 18 17 db 40 f8 91 06 7b 70 fe 9d 87 3a c0 4d 66 38 b8 d3 59 59 d2 09 49 5e 05 da 96 62 e3 1b c9 67 53 0f d6 dc c7 20 6e 87 8d 20 6e 65 8f 27 58 fc 25 5a fd 89 07 05 cc 78 5c fd 23 df f1 26 30 aa 3f cd d2 02 43 57 53 3c b5 33 bf f9 42 55 7e 89 59 45 31 ee f6 c0 37 4a 70 3c 47 5b 52 19 e3 00 8e 79 d0 b6 e3 be 08 da 76 7c 72 e2 f7 68 5d df b2 12 08 0d 76 7b ea f7 a0 c3 15 10 b0 17 71 51 d6 c2 78 73 52 8e 41 9d 89 cc 7f a0 94 ba 19 a6 fb 7d 92 63 a0 8c 36 16 b4 29 9b 82 ac c2 b9 a9 37 98 81 d0 ac a8 8b 6b d5 3f c6 ab 3f 23 a6 47 d8 ab fd 89 f5 aa Data Ascii: FkdM7S=W,l^2;}Eldb^'lm3w}@{p:Mf8YYI^bgS n ne'X%Zx\#&0?CWS<3BU~YE17Jp<G[Ryv\|rh]v{qQxsRA}c6)7k??#G
2023-07-21 16:51:39 UTC	14745	IN	Data Raw: 47 3a 46 60 44 ea 82 43 b7 40 cf b8 46 b1 64 4e 34 c5 8e 43 9b 09 94 de 68 8a e0 06 66 3f 71 77 89 ce 72 71 60 77 6e 12 e4 ee a0 3b 27 8f bb 5a e9 96 4f c4 70 2b 9f c2 99 d9 a5 6a b4 82 74 0b 5d b1 60 38 f5 48 89 92 5b ed a7 3c 92 17 b2 63 d7 9d 90 49 1d c9 75 0d b7 24 74 de 5a ec 8b db e4 89 61 d0 fa 46 22 c8 3d 37 7f 24 2d a2 61 fc 92 95 e4 0a 6b 53 be 61 be 34 d6 b3 d9 30 a6 04 4b c1 88 e9 11 c3 49 f3 ea 73 2a 63 6c 98 ee 3f b5 11 00 47 35 75 b3 7c e9 8c 98 66 37 99 6f 7a 24 71 3f dc 3b 21 46 0b 2e 53 3c 89 7d 5c d8 bc a7 b1 ad 68 a1 46 e6 a2 e9 77 72 17 ca 8f eb db dc f3 37 63 03 8c 92 19 47 ee 0a 41 49 6c 96 51 a6 f8 ee 26 cb 6e 8a f5 8d f7 5b 78 6c e3 33 85 16 bc a2 1b 67 74 ed c0 ec 0e c5 e0 3a 84 b7 66 87 aa 51 4c ea 8e 2f 08 66 bc 09 9c 8a a9 08 Data Ascii: G:F`DC@FdN4Chf?qwrq`wn;'ZOp+jt]`8H[<cIu$tZaF"=7$-akSa40KIs*cl?G5u\|f7oz$q?;!F.S<}\hFwr7cGAIlQ&n[xl3gt:fQL/f
2023-07-21 16:51:39 UTC	14754	IN	Data Raw: 9f e6 9e fd b9 6d 1b e9 df bf bf c2 66 3d 0e 11 c1 cf 3c 9a 90 61 75 8e ab 76 da 89 e3 8c d5 5c e6 46 56 3c b4 4c d9 6c 64 31 25 29 3b 89 a5 fb db 6f 1f 00 08 90 94 e2 e4 7a 33 df 0f 36 29 10 cf c5 62 81 7d 60 97 82 96 eb 1f 05 67 82 d4 4b cc 7b 71 81 5e 3b 90 a8 d3 6f c0 f5 84 5f c6 63 7a b2 eb 76 27 0f 27 1d 4c 26 3a b5 a0 e4 e4 3a 2d e9 45 b1 61 4e 19 95 76 0c d5 3b e9 13 53 45 53 8d 3a 18 62 47 55 6c b2 c8 65 80 6b 24 56 05 45 d1 99 b5 4e d2 dc d8 27 ab 98 ed d1 ed 45 53 84 e5 a1 a7 65 f8 76 75 91 e6 f7 6b 84 b2 2e 69 62 76 1d 17 1f 5a e4 64 bb 24 ac fc aa d3 c8 15 81 3e ea eb 7d 90 0c d5 7a 0d f1 1d f3 b7 f9 cf 43 15 53 36 81 b3 96 7a 81 6d 37 9f ba bf 4c f4 93 1c f7 c2 a5 f1 4e 9e 3f fe 9b a2 22 c1 ee 4b c1 6f 9e 3e 7f f2 b5 70 9e f6 ce dc a6 05 6f Data Ascii: mf=<auv\FV<Lld1%);oz36)b}`gK{q^;o_czv''L&::-EaNv;SES:bGUlek$VEN'ESevuk.ibvZd$>}zCS6zm7LN?"Ko>po

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
374	192.168.2.5	50288	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:39 UTC	14718	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/embeddedfonts.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:15:37 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:39 UTC	14722	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73284 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:39 GMT Last-Modified: Wed, 19 Jul 2023 22:15:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=223286888876296135111861818159711359423"}],"include_subdomains ":true} Server: ECAcc (muc/333D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: c26a9ee2-001e-0073-0b48-bb9252000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
375	192.168.2.5	50291	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:39 UTC	14719	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/admin/css/admin.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:45 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:39 UTC	14723	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72437 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:39 GMT Last-Modified: Wed, 19 Jul 2023 22:13:45 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1351327008013785042414938535633501766935"}],"include_subdomains ":true} Server: ECAcc (muc/336D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 514bbde6-701e-0079-144a-bb36e5000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
376	192.168.2.5	50287	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:39 UTC	14720	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:15:44 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:39 UTC	14724	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73283 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:39 GMT Last-Modified: Wed, 19 Jul 2023 22:15:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1183445246652957953513580244865414631541"}],"include_subdomains ":true} Server: ECAcc (muc/3335) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0d9d6efb-201e-0064-7b48-bb3b59000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
377	192.168.2.5	50292	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:39 UTC	14720	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/o365themedefault.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:27 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:39 UTC	14727	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 63470 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:39 GMT Last-Modified: Wed, 19 Jul 2023 22:16:27 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1530867185776667454215643037087405983871"}],"include_subdomains ":true} Server: ECAcc (muc/3311) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 9d2cc99a-301e-0025-555f-bb63bd000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
378	192.168.2.5	50289	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:39 UTC	14721	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/website.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:39 UTC	14762	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:39 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1786616260516488361813509394692871122600"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: bebd0964-901e-0061-69f3-bbe982000000 Content-Length: 215 Connection: close
2023-07-21 16:51:39 UTC	14763	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 65 62 64 30 39 36 34 2d 39 30 31 65 2d 30 30 36 31 2d 36 39 66 33 2d 62 62 65 39 38 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 33 39 2e 38 32 35 39 31 39 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:bebd0964-901e-0061-69f3-bbe982000000Time:2023-07-21T16:51:39.8259197Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
379	192.168.2.5	50290	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:39 UTC	14722	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/masterstyles15mvc.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:15:45 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:39 UTC	14725	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73870 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:39 GMT Last-Modified: Wed, 19 Jul 2023 22:15:45 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=93704105329531695512250045110353040768"}],"include_subdomains ":true} Server: ECAcc (muc/3317) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 09d8815c-901e-003c-5647-bbe306000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.5	49838	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	1905	OUT	GET /static/webpack/production/58cc5c6db7c1186fa9f3.zY6o-XeH44T0_vpOvZUDLeJeznVBNUebzrAuflJz95U.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:35 UTC	2009	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 4524 Connection: close Date: Fri, 21 Jul 2023 16:50:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 08 Jul 2023 03:20:22 GMT ETag: "078bf31ea544e63eeb616600b04136eb" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 099d4ba9ace3ae96fa2a16ccfeeac6ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: QjSDBK9Wei4CovQn0BPamgFpLLIFxdZeqbgJiqNPD4-WGEK4oZH8JA==
2023-07-21 16:50:35 UTC	2009	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 5a 7b 73 db 46 92 ff 9f 9f 82 c2 a6 54 40 65 04 91 8e ed ac c1 43 54 b6 a4 bd 78 d7 8e 5d 7e 64 ef 4e a7 92 87 c0 90 44 0c 0e 70 83 01 25 06 c4 7e f6 ed 9e 07 1e 24 28 27 75 2e 97 88 19 cc a3 a7 9f bf ee 81 7b 9f f0 38 bb f7 ef ee de bc 7b 79 f5 f2 d5 9b 6b f5 70 7d 75 77 f9 f3 e7 5f fe f1 f1 ee 2e fc e6 88 dd ee e6 d6 f3 f3 b2 58 b9 37 37 ce 86 c1 70 51 fc 2b a7 39 13 77 73 98 cc 84 6d 94 3c 4e 99 69 44 69 56 c6 77 71 16 d9 a1 09 5f a4 25 e3 51 33 9c 53 99 6c d8 5d cc 8a af 32 cb bb 9d ff 7a 31 7d fa 94 c5 4f 9e 39 b7 a4 1a 3d 79 f6 34 58 94 3c 92 49 c6 5d 46 24 e1 5e e5 94 05 1b 17 52 24 91 74 66 dc 17 ae f4 e0 27 76 25 71 2e 57 2c fa 3a cf 1e 1c e2 36 b3 bc 4a 30 59 0a 3e a6 b5 d7 0c fc 40 e3 24 7b 55 4a 99 f1 c1 b1 69 Data Ascii: Z{sFT@eCTx]~dNDp%~$('u.{8{ykp}uw_.X77pQ+9wsm<NiDiVwq_%Q3Sl]2z1}O9=y4X<I]F$^R$tf'v%q.W,:6J0Y>@${UJi

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
380	192.168.2.5	50294	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:39 UTC	14760	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/home15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:40 UTC	14763	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:39 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=151414675422364175597211507584381670553"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 66464dd4-201e-0006-32f3-bbf97e000000 Content-Length: 215 Connection: close
2023-07-21 16:51:40 UTC	14764	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 36 36 34 36 34 64 64 34 2d 32 30 31 65 2d 30 30 30 36 2d 33 32 66 33 2d 62 62 66 39 37 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 30 2e 33 35 39 33 32 37 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:66464dd4-201e-0006-32f3-bbf97e000000Time:2023-07-21T16:51:40.3593271Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
381	192.168.2.5	50293	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:39 UTC	14761	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/home.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:40 UTC	14764	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:40 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=220954912074655489917107658997363688274"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 308650b6-801e-006d-41f3-bb7e8a000000 Content-Length: 215 Connection: close
2023-07-21 16:51:40 UTC	14765	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 33 30 38 36 35 30 62 36 2d 38 30 31 65 2d 30 30 36 64 2d 34 31 66 33 2d 62 62 37 65 38 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 30 2e 33 35 38 37 31 32 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:308650b6-801e-006d-41f3-bb7e8a000000Time:2023-07-21T16:51:40.3587120Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
382	192.168.2.5	50297	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:40 UTC	14765	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/assistancepanel.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14809	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:40 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=139339252307954110128646095551651137998"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 8a34e44d-b01e-002b-09f3-bb4a0d000000 Content-Length: 215 Connection: close
2023-07-21 16:51:41 UTC	14810	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 38 61 33 34 65 34 34 64 2d 62 30 31 65 2d 30 30 32 62 2d 30 39 66 33 2d 62 62 34 61 30 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 31 2e 30 36 31 32 31 35 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:8a34e44d-b01e-002b-09f3-bb4a0d000000Time:2023-07-21T16:51:41.0612154Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
383	192.168.2.5	50296	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:40 UTC	14766	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
2023-07-21 16:51:40 UTC	14771	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:40 GMT Content-Type: application/x-javascript content-length: 113440 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 x-ms-request-id: 22dda175-401e-0017-1cf3-bb565f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165140Z-7vb0kwyyxh4v3aev9tb3188qbg00000000hg000000017dex X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:40 UTC	14772	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA);)g9{4MB(jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2023-07-21 16:51:40 UTC	14787	IN	Data Raw: d8 34 94 79 95 7b 4b 43 d5 e6 f2 ed a4 9e 91 21 66 47 d0 32 60 b6 e8 54 5b ab 17 94 42 55 68 c3 01 61 39 4f da 43 ed 72 86 75 47 49 75 c5 86 4b 4a f4 05 0c 91 59 61 33 d4 79 95 fe ed 94 f3 a4 b6 62 32 a3 52 a4 6d e7 d8 5d 28 3f 1f c9 ef dd 64 78 b1 bd f4 85 3c 52 83 e6 b5 10 ea e0 d8 08 2a a7 4e 8d 55 08 39 e9 97 ca 4d 0d 4f 41 2d 48 62 fc d4 08 ad 2d e6 35 8a 29 07 e8 6b 14 1c c3 b8 46 41 9a de bc 0a d0 e3 80 92 31 48 22 30 8c 41 4e d8 bc 04 c0 29 5b 5e 12 ea 3f dc 95 59 9f 98 18 d2 69 7e c6 ab 74 c4 ab f2 36 d2 95 be 6c 65 9f e4 91 3d 62 86 ea d3 f4 af 5e fa a3 e1 69 85 da 53 9f 54 8c 51 d2 0f 46 a8 3d 2f a7 d6 2d d2 92 76 32 e3 81 f3 63 fe aa 17 c1 a1 04 64 16 c4 0a 61 a7 de b5 e6 0a 71 65 7c cb 77 28 d2 da cf 2e 00 ea e3 be 03 01 d0 f1 47 43 8a a1 7a Data Ascii: 4y{KC!fG2`T[BUha9OCruGIuKJYa3yb2Rm](?dx<R*NU9MOA-Hb-5)kFA1H"0AN)[^?Yi~t6le=b^iSTQF=/-v2cdaqe\|w(.GCz
2023-07-21 16:51:40 UTC	14788	IN	Data Raw: 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 42 Data Ascii: 2&jI+@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<iZ!Nq>H%+# o``HY{rvne%iW3=j-`IQG9V&kD{E+,Gj4B
2023-07-21 16:51:40 UTC	14796	IN	Data Raw: ed 7d 6b 73 db c6 b2 e0 f7 fd 15 12 63 cb 80 01 8a 0f 3d 1c 91 04 19 5d db d9 75 55 ce 8d 2b c9 bd 1f 0e 49 f3 80 24 48 22 02 01 06 20 f5 b0 c0 fd ed db dd f3 06 40 49 f6 b9 a7 ee d6 d6 a6 62 11 18 cc b3 a7 a7 a7 a7 a7 1f 68 a1 a2 2e 08 b2 ed 43 44 1e 39 83 fb 6d dd 8f c2 65 dc a9 39 98 6d 3c 36 c6 78 e0 66 55 5b 07 ee da b8 53 35 7a 21 a4 fe d8 0d 14 0f b0 cb 35 6d 84 32 43 4a 19 dc 22 b4 54 05 04 2e 76 50 03 22 db 5d e1 d6 7e 6c 1d a2 ab dd 95 90 08 e1 d9 19 a1 e5 6e bc 07 09 ad de 86 20 86 67 67 18 08 20 fd 0a d9 0c 18 e0 e3 7b 43 c9 fd 3d 57 48 a6 d5 cf 96 c7 4a 2e 0f f5 ed 09 ca cd f2 60 47 fe 2b 17 c3 0a f7 3a a7 8d 77 1e 1a c4 a6 c9 fc 41 4e 3c be 28 b4 99 02 e2 38 6d 40 48 fb 05 28 b6 72 57 0a c5 e6 45 dc 52 28 3c ff d7 e1 d6 40 43 30 d4 34 3d 88 Data Ascii: }ksc=]uU+I$H" @Ibh.CD9me9m<6xfU[S5z!5m2CJ"T.vP"]~ln gg {C=WHJ.`G+:wAN<(8m@H(rWER(<@C04=
2023-07-21 16:51:40 UTC	14804	IN	Data Raw: 53 01 ad d8 84 16 00 41 3f 47 b0 f1 c7 bc 33 b1 36 fe 50 4b 6d 7e 0b 54 20 c5 e3 a6 df 32 ed e4 24 ec 57 40 a1 12 80 62 58 2f 83 63 68 17 29 2b 8c de a4 0c 62 37 3f 44 67 d4 86 2f 96 72 99 b2 88 d5 58 ba 0a 30 17 88 ce fc 98 db e9 78 f0 7c 16 c9 27 42 e5 ec 5a c8 ee 14 c6 42 33 59 be d2 f3 9a 14 b9 ba 5b 82 84 44 1c 83 06 7a 1e 3a 89 e6 8a 76 0c 31 30 7a 81 bb f5 aa 26 49 33 9f da 0e 94 38 a7 13 74 25 b1 c2 68 d4 76 b9 be 18 70 88 67 af a8 d7 dd 3a 55 ed 29 31 11 c3 b9 41 ca ce 5d e6 9c e0 c9 b9 7a a3 e6 c2 e3 30 63 d7 65 70 1e 09 3a b0 0d a1 d0 db dc ff 8c 37 bc 4a 9a f9 38 f9 c0 b7 a5 5b ab 82 e7 35 67 3c c0 c3 e2 70 5b 6f 11 93 9b 06 b7 41 4a 6c 93 be d7 d9 9d 42 93 02 7a f6 c1 ad b7 69 56 60 8e ba ea ac 84 9c 24 5b 3c a4 12 81 7c 17 23 c1 8d 06 f2 a5 Data Ascii: SA?G36PKm~T 2$W@bX/ch)+b7?Dg/rX0x\|'BZB3Y[Dz:v10z&I38t%hvpg:U)1A]z0cep:7J8[5g<p[oAJlBziV`$[<\|#

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
384	192.168.2.5	50299	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:40 UTC	14767	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/conciergehelper.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14812	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:40 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=112698949627456514464674798494676096260"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 1f8934bb-e01e-0036-20f3-bb47b1000000 Content-Length: 215 Connection: close
2023-07-21 16:51:41 UTC	14813	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 66 38 39 33 34 62 62 2d 65 30 31 65 2d 30 30 33 36 2d 32 30 66 33 2d 62 62 34 37 62 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 31 2e 31 38 34 39 39 39 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:1f8934bb-e01e-0036-20f3-bb47b1000000Time:2023-07-21T16:51:41.1849998Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
385	192.168.2.5	50300	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:40 UTC	14768	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/content/css/signup16.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:17:20 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:40 UTC	14770	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42138 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:40 GMT Last-Modified: Wed, 19 Jul 2023 22:17:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1236478563471148159811288617396311217592"}],"include_subdomains ":true} Server: ECAcc (muc/3369) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 64f01296-601e-0038-4591-bb6e01000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
386	192.168.2.5	50298	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:40 UTC	14769	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/adoption.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14813	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:40 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1558186433698146452716070019870068835360"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 73e80b8e-001e-0063-4bf3-bb573a000000 Content-Length: 215 Connection: close
2023-07-21 16:51:41 UTC	14814	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 33 65 38 30 62 38 65 2d 30 30 31 65 2d 30 30 36 33 2d 34 62 66 33 2d 62 62 35 37 33 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 31 2e 31 38 34 39 30 30 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:73e80b8e-001e-0063-4bf3-bb573a000000Time:2023-07-21T16:51:41.1849006Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
387	192.168.2.5	50301	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:40 UTC	14769	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/css/commonhealthdashboard.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14814	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:40 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=121029731948033499887977327598336623296"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 24a727ec-601e-0065-75f3-bb6485000000 Content-Length: 215 Connection: close
2023-07-21 16:51:41 UTC	14816	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 32 34 61 37 32 37 65 63 2d 36 30 31 65 2d 30 30 36 35 2d 37 35 66 33 2d 62 62 36 34 38 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 31 2e 31 38 39 30 36 37 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:24a727ec-601e-0065-75f3-bb6485000000Time:2023-07-21T16:51:41.1890671Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
388	192.168.2.5	50303	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14807	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/microsoftajaxcombined.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:15:36 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14811	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101324 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:15:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1153600487181092174818270757797894661568"}],"include_subdomains ":true} Server: ECAcc (muc/330A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 6b2f022c-c01e-0043-1707-bb2c9d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
389	192.168.2.5	50302	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14808	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:15:32 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14810	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101326 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:15:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=178301996138109954315628892281257595714"}],"include_subdomains ":true} Server: ECAcc (muc/3351) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 30a9e452-001e-004c-4f07-bb5af1000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.5	49845	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	1905	OUT	GET /static/webpack/production/d5234f674cac144b79bf.cDu6D0nBAZvocplrTbBtBSOvdUuoODvKDRycRtZhb4I.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:35 UTC	2014	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 10945 Connection: close Date: Fri, 21 Jul 2023 16:50:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:31:35 GMT ETag: "2a94e693fb118faa6fd42f801249da80" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 49039a44484a184312d8f608c205b640.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: FKJmAKy51HCO_JNagkXNlX9C5wlyk-Oj3rlmTocQsBnWGwzTe6ruqg==
2023-07-21 16:50:35 UTC	2014	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 7d 7d 77 d3 c6 b6 f7 ff fe 14 8e 6e af 91 4e 84 48 80 b6 b7 32 c2 27 90 40 53 20 a1 01 5a 5a 5f af 5c c5 1e c7 22 8e e4 4a a3 04 63 eb 7c f6 67 ef 3d af 92 e5 40 ef 3d eb 59 ab c5 b6 34 af 7b f6 fe ed 97 d9 33 71 6f 93 74 92 dd 06 e7 e7 af 4f 0f 0e 0f 9e bd 3e a2 2f 47 87 e7 cf 7f fe 70 f2 ea dd f9 79 f4 d5 12 eb f5 70 e4 05 8b b2 98 b9 c3 a1 73 c3 a0 78 5e fc 6b 11 2f 58 7e 7e 01 95 59 ae 7e 94 e9 64 ce e4 8f f1 3c 2b 27 e7 93 6c ac 8a a6 31 4f 6e d8 f9 84 15 57 3c 5b c8 87 8b 64 aa de df 24 ec f6 3c 4b e7 cb 7f 15 ff da ff fe e1 f7 fb 3f 5c 30 67 e4 af 3a fb 7b 8f f7 c2 69 99 8e 79 92 a5 2e f3 b9 9f 7b 2b a7 2c 58 b7 e0 79 32 e6 4e 3f 0f 26 2e f7 9d d8 f1 5d 5d ce 5b e5 8c 97 79 da 4d 2b cf eb ab c7 5d 68 c0 5b dd c4 79 Data Ascii: }}wnNH2'@S ZZ_\"Jc\|g=@=Y4{3qotO>/Gpypsx^k/X~~Y~d<+'l1OnW<[d$<K?\0g:{iy.{+,Xy2N?&.]][yM+]h[y

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
390	192.168.2.5	50305	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14816	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/headbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:18 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14818	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 73873 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:13:18 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=285211089443773915716780036223700929030"}],"include_subdomains ":true} Server: ECAcc (muc/330D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f6b4aa00-e01e-0054-2e47-bb8596000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
391	192.168.2.5	50304	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14816	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 442 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:41 UTC	14818	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 22 63 6c 6f 75 64 5f 64 6f 63 73 5f 70 65 72 66 22 2c 22 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 22 2c 22 75 78 61 5f 65 76 65 6e 74 73 22 2c 22 77 65 62 5f 74 69 6d 69 6e 67 22 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 35 2c 22 69 6d 70 6c Data Ascii: {"scopes":[],"known_namespaces":["cloud_docs_perf","user_centric_perf","uxa_events","web_timing"],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":25,"impl
2023-07-21 16:51:41 UTC	14826	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 2 X-Webkit-Csp: sandbox Content-Length: 1464 Date: Fri, 21 Jul 2023 16:51:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 82f42074f5ea4c87893aeb40ac235fdf Connection: close
2023-07-21 16:51:41 UTC	14827	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 7b 22 61 67 67 72 65 67 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 64 72 6f 70 5f 66 72 61 63 74 69 6f 6e 5f 6f 66 5f 68 6f 73 74 73 5f 70 65 72 5f 6d 65 74 72 69 63 22 3a 30 2c 22 64 72 6f 70 5f 70 65 72 69 6f 64 73 22 3a 7b 22 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 73 74 69 63 6b 69 6e 65 73 73 22 3a 7b 22 6c 69 6d 69 74 22 3a 7b 22 2e 74 61 67 22 3a 22 69 6e 64 65 70 65 6e 64 65 6e 74 22 7d 7d 7d 2c 22 64 72 6f Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[{"aggregation_interval_seconds":60,"drop_fraction_of_hosts_per_metric":0,"drop_periods":{"fraction":0,"stickiness":{"limit":{".tag":"independent"}}},"dro

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
392	192.168.2.5	50306	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14819	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/controlbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:19 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14820	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 101325 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:13:19 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=134270322958112702616310509875758220452"}],"include_subdomains ":true} Server: ECAcc (muc/3376) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: d5d9b1f8-301e-0025-5a07-bb63bd000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
393	192.168.2.5	50307	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14821	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:28 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14822	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72438 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:13:28 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=34051113156411747861871668282568271950"}],"include_subdomains ":true} Server: ECAcc (muc/333A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 17882f32-601e-004a-774a-bb694e000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
394	192.168.2.5	50309	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14822	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/angularextensions.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:35 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14824	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 72436 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:13:35 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=807927202390423914610256424505313146278"}],"include_subdomains ":true} Server: ECAcc (muc/332B) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f6c6510e-e01e-0054-274a-bb8596000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
395	192.168.2.5	50310	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14823	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminbootstrap.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:37 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14825	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42139 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:13:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=166969663734439703738631900717219675105"}],"include_subdomains ":true} Server: ECAcc (muc/334D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f4262fa5-d01e-0070-3091-bb7336000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
396	192.168.2.5	50308	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14828	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/adminapp.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:43 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14829	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42139 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:13:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=164536890809833784518103058036891217498"}],"include_subdomains ":true} Server: ECAcc (muc/330F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 48e17727-f01e-003a-2491-bbd0b9000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
397	192.168.2.5	50311	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14829	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/mscorlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:30 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14830	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42139 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:16:30 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1687669655807794156195546231420804390"}],"include_subdomains ":true} Server: ECAcc (muc/330D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7ca86155-801e-001f-0191-bb79c5000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
398	192.168.2.5	50312	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14832	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/listgrid.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:01 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14832	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 71189 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:16:01 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=199351639075542658614415555819790090048"}],"include_subdomains ":true} Server: ECAcc (muc/336A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 198339d0-b01e-002b-744d-bb4a0d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
399	192.168.2.5	50313	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14833	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/peoplepicker.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14834	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47208 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=876371208251292859715193494428274310915"}],"include_subdomains ":true} Server: ECAcc (muc/3339) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 4fd53464-701e-001b-5d85-bbf4c2000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.5	49727	162.125.248.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:30 UTC	407	OUT	GET /hstsping HTTP/1.1 Host: dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=deghsLEKJOGSu-1QvrwgkKX3; locale=en
2023-07-21 16:50:30 UTC	408	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: local Date: Fri, 21 Jul 2023 16:50:30 GMT Server: envoy X-Dropbox-Request-Id: f5d96255ef764b5e93a64d5c93b356e3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.5	49844	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	1967	OUT	GET /static/webpack/production/44358a50a900da035ada.LGT6HPSCk03xwXtkplDP_6Ti9yb6DDIdp68pzO0HY98.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:35 UTC	2025	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 15547 Connection: close Date: Fri, 21 Jul 2023 16:50:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:31:51 GMT ETag: "dd977c5bf0413b561e91851dc4a22d24" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 49039a44484a184312d8f608c205b640.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: OBSiSPDCaK_6r-LDHKsfHv_FcS03MScEtI7HxAuJqEOKgC5o6cgfnw==
2023-07-21 16:50:35 UTC	2026	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 7d 6b 77 db b6 b2 e8 77 fd 0a 89 27 5b 87 ac 61 46 72 da ee 96 0a a3 95 d8 4e e3 36 b1 53 3b 69 9a 2a da 2a 4d 41 12 13 19 54 49 d0 8f 48 ba bf fd ce e0 41 82 0f c5 e9 3e fb dc 9b 95 65 91 20 08 0e 06 83 79 61 06 b0 6f 22 36 8d 6f dc c9 e4 e5 d9 d3 a3 a7 cf 5e 1e 8b 8b e3 a3 c9 e1 8b b7 a7 bf 5c 4c 26 fe bd 35 36 9b d1 d8 71 57 59 ba b0 47 23 eb 9a 42 f5 24 fd 3f ab 60 45 93 c9 25 bc 4c 13 7d 93 b1 e9 92 aa 9b 70 19 67 d3 c9 34 0e 75 55 16 f0 e8 9a 4e a6 34 fd c4 e3 95 2a 5c 45 33 fd fc 3a a2 37 93 98 2d ef ac 31 59 b7 fa df f5 bd 59 c6 42 1e c5 cc a6 84 93 c4 59 5b 59 4a db 29 4f a2 90 5b 83 c4 4d 6c ee c0 cf d4 e6 c4 7a 1a 86 34 4d e3 e4 ee 59 30 9d 53 8b d8 f9 bb ce 3a a1 3c 4b 58 3b da 3a 79 f5 d3 98 47 b3 28 0c b0 c6 Data Ascii: }kww'[aFrN6S;i*MATIHA>e yao"6o^\L&56qWYG#B$?`E%L}pg4uUN4\E3:7-1YYBY[YJ)O[Mlz4MY0S:<KX;:yG(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
400	192.168.2.5	50314	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14835	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14836	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47208 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1145067733078076702910191613562779916234"}],"include_subdomains ":true} Server: ECAcc (muc/334F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 189bd679-601e-004a-0885-bb694e000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
401	192.168.2.5	50315	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14836	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/gridview.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:33 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14837	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42139 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:16:33 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=939082166688587444516953421789094003742"}],"include_subdomains ":true} Server: ECAcc (muc/3346) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 83260b95-701e-0069-6791-bbf38d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
402	192.168.2.5	50318	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14838	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/netperf.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:17:25 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14839	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 42139 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:17:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1298845519812763509791872838768837396"}],"include_subdomains ":true} Server: ECAcc (muc/3379) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 88273a99-b01e-002b-7691-bb4a0d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
403	192.168.2.5	50319	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14840	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/searchbox.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:42 UTC	14852	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=18268107209567437832932159548396918678"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 9b7f3b1d-001e-0073-5bf3-bb9252000000 Content-Length: 215 Connection: close
2023-07-21 16:51:42 UTC	14853	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 62 37 66 33 62 31 64 2d 30 30 31 65 2d 30 30 37 33 2d 35 62 66 33 2d 62 62 39 32 35 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 32 2e 33 36 36 38 37 35 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:9b7f3b1d-001e-0073-5bf3-bb9252000000Time:2023-07-21T16:51:42.3668755Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
404	192.168.2.5	50317	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14841	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/passwordstrengthmeter.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:32 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14841	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47208 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:16:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=10030704857410364823788260374184303550"}],"include_subdomains ":true} Server: ECAcc (muc/3365) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 03e7e24c-001e-0011-4b85-bb5075000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
405	192.168.2.5	50316	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14842	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:42 UTC	14851	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Fri, 21 Jul 2023 16:51:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4e5b334a0911439e8ba7b91d4a28355c Connection: close
2023-07-21 16:51:42 UTC	14851	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
406	192.168.2.5	50320	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14843	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/jsc/hipcontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:13:24 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14844	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47209 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:13:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=93284898370489768523422558324940486915"}],"include_subdomains ":true} Server: ECAcc (muc/3335) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 03e7e146-001e-0011-4e85-bb5075000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
407	192.168.2.5	50321	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14844	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/webcontrols/js/geminiwizard.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:32 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14847	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 47208 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:16:32 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=53628606083575703825498458695912785824"}],"include_subdomains ":true} Server: ECAcc (muc/3356) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: c5d70a3f-a01e-006a-7685-bb12e9000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
408	192.168.2.5	50322	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14845	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webuivalidation.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" If-Modified-Since: Wed, 19 Jul 2023 22:16:31 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:41 UTC	14848	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 66513 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Fri, 21 Jul 2023 16:51:41 GMT Last-Modified: Wed, 19 Jul 2023 22:16:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=264799021761618060413406473660770799529"}],"include_subdomains ":true} Server: ECAcc (muc/3371) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: ce79fac7-201e-005b-5258-bbf3fa000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
409	192.168.2.5	50323	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14846	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrends.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:42 UTC	14853	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1120941385833367841515161684584293603449"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: a4914e58-601e-0075-7ff3-bba1ed000000 Content-Length: 215 Connection: close
2023-07-21 16:51:42 UTC	14854	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 34 39 31 34 65 35 38 2d 36 30 31 65 2d 30 30 37 35 2d 37 66 66 33 2d 62 62 61 31 65 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 32 2e 35 30 38 39 36 38 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:a4914e58-601e-0075-7ff3-bba1ed000000Time:2023-07-21T16:51:42.5089688Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.5	49842	162.125.69.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	1985	OUT	GET /p/thumb/AB-xkKhbJ-5eZjqJkfR4QswIuG92izqYLGt1vO9MVU9zXMyuB-IIhiBQzvHqqU_6fMC5FGtA83r1PzfBmbax1X3rUdvnGLadcwGZ4667XLS4HptYyv2zdDSG0a9qm9HlNb6LmfjzHVHqZbrbbOpCw9wfvG237D5GG-6XWekcNRlTQMzI34XPyXpnD0aewH1IpR8nz-iYeDEtmdJMD1E0U3zXYeKvqClh7qPODStlXeXuAGdgSc1AbcrkwxeKjc0g9Y1tsAfOxaEVgLW8OtsV6Nf71wA8pCp5KWoRoS9iITHPCc2gnvCm9nXf9PpSgQHKneIWMpjTDrZYdRmLqJlm_Z_4mTsywrvF2e6cuv7ZGMityP5VoCtBPg-_GC-Z392qNyDnukyEdr_az-qUCcD25HSM/p.png HTTP/1.1 Host: uc9ff0c3b81d2247537d6da1800e.previews.dropboxusercontent.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:35 UTC	2091	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=31536000, no-transform Content-Disposition: inline; filename="CcD25HSM.png"; filename=UTF-8''CcD25HSM.png Referrer-Policy: no-referrer Timing-Allow-Origin: Vary: Origin X-Content-Type-Options: nosniff X-Dropbox-Content-Length: 243248 X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 147 Content-Type: image/png Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:50:35 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5a5ec00bca1c4dc898728b156df5bdbe Connection: close Transfer-Encoding: chunked
2023-07-21 16:50:35 UTC	2092	IN	Data Raw: 34 30 30 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 01 f0 08 06 00 00 00 38 b7 1d 3d 00 00 01 35 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 78 9c 63 60 60 32 61 80 82 dc bc 92 a2 20 77 27 85 88 c8 28 05 f6 7b 0c 6c 0c 2c 0c 82 0c da 0c 16 89 c9 c5 05 0c 98 80 11 c1 fc 76 0d c2 bb ac 8b 45 1d 21 c0 95 92 5a 9c 0c a4 ff 00 71 65 52 76 41 09 d0 e8 0a 20 5b a4 bc 04 cc ee 01 b1 93 0b 8a 40 ec 05 40 b6 68 11 d0 81 40 f6 0e 90 78 3a 84 7d 06 c4 4e 82 b0 1f 80 d8 45 21 41 ce 40 f6 17 20 db 21 1d 89 9d 84 c4 86 da 0b 02 f2 c5 20 8f 7b ba 3a 9b 19 5a 9a 99 e9 1a e9 1a 2a 24 e5 24 26 67 2b 14 27 27 e6 a4 a6 90 e1 2b 02 00 14 c6 10 16 b3 18 10 1b 33 30 30 2d 41 88 21 c2 b3 24 b5 a2 04 c4 72 29 ca 2f 48 ca af d0 51 f0 cc 4b d6 Data Ascii: 4000PNGIHDR8=5iCCPICC Profilexc``2a w'({l,vE!ZqeRvA [@@h@x:}NE!A@ ! {:Z*$$&g+''+300-A!$r)/HQK
2023-07-21 16:50:35 UTC	2108	IN	Data Raw: b4 6d ce c3 5e c7 0d 0a Data Ascii: m^
2023-07-21 16:50:35 UTC	2132	IN	Data Raw: 34 30 30 30 0d 0a 23 7d 11 39 5e d6 94 ba 8a bc ee 13 7b db 78 dd 27 f6 b6 cb 71 16 f5 23 c7 66 0e 80 d4 17 11 61 6c 09 01 19 30 1b 80 74 c1 e9 87 67 61 b7 8d d9 ab d2 ae c9 f1 7c 2a f3 71 73 d8 85 d7 9b c3 de b6 b5 6f 3d 54 e4 b8 4e 2a 72 dc 1c 76 9f bc 9e 7f f5 55 e4 b5 90 4b 07 ec 25 8a 62 03 79 97 a2 46 72 a5 bc ae 72 a3 dc 9f 1a 03 c4 ed 3f 4b 06 98 c7 f8 d7 a2 e4 d7 de cb 31 0d 03 f0 a1 e9 f2 ef 7d 56 eb 19 84 7b 4f 3f 85 a7 9f 7e ba a5 f0 4f bf 24 ce 66 c9 7c 01 77 b3 6b fa 9a f5 63 cf 1b f3 f9 d8 f3 e9 3c ec 8b d0 ea bc ee a6 fc 9a 22 c7 ae 9e b7 4d 8e e7 f3 ba 2f ec f3 16 b7 8b 3c 7f 97 25 c7 8b 4a 77 b7 e7 8c 7d 13 38 e7 50 8d c7 70 04 30 7b c4 4a 34 66 9c b6 ff c4 1d a0 65 ca d6 ef b8 0b 57 07 28 72 6c 5e 73 f5 d6 be 6e 2a 6b df 6c da 4e 39 96 Data Ascii: 4000#}9^{x'q#fal0tga\|qso=TNrvUK%byFrr?K1}V{O?~O$f\|wkc<"M/<%Jw}8Pp0{J4feW(rl^sn*klN9
2023-07-21 16:50:35 UTC	2148	IN	Data Raw: 29 6e d4 b4 fa c1 0d 0a Data Ascii: )n
2023-07-21 16:50:35 UTC	2148	IN	Data Raw: 34 30 30 30 0d 0a ce 95 a7 b5 62 23 e7 f2 fa b0 d3 4e 6c a6 de 45 71 53 76 c0 02 45 02 58 fd c1 d9 30 d8 0a c7 b1 3c 3c 21 88 42 39 99 c0 7f fc 31 de fe e5 2f f1 93 bf ff 2a 7e f1 f5 6f e0 dd df fc 06 fb 27 a7 b8 1e 18 95 2a ad 81 1c fc 08 70 21 48 29 37 22 51 5a dd 48 93 e1 69 82 36 06 2a 32 b7 6e 42 70 59 9d 0a b2 0c fa 2c bb e2 20 d3 17 75 4c ca 41 53 0c 99 c4 43 df f2 5c 30 c0 2e 20 04 80 6c ab 1c 50 2f 00 9d 03 51 09 4f c6 8f a8 fc c3 fa 52 19 69 58 ba e9 1a c1 49 ec bd 63 73 4c 37 c5 14 31 24 80 2c ac 01 16 68 03 71 cb 67 86 23 a7 4a b5 61 65 cf 82 23 20 1f 33 18 20 17 ab 20 54 99 84 19 0c d6 58 7f 0e 15 e0 47 00 55 a0 e0 d4 b8 13 e4 fe 41 2a 0b c9 b8 1f 74 de 8b e9 67 a4 46 c0 5c b1 e6 8c 97 2a 33 54 ba 96 84 38 e7 6c bd 91 f2 81 52 86 8f 29 00 5a Data Ascii: 4000b#NlEqSvEX0<<!B91/~o'p!H)7"QZHi62nBpY, uLASC\0. lP/QORiXIcsL71$,hqg#Jae# 3 TXGUAtgF\*3T8lR)Z
2023-07-21 16:50:35 UTC	2164	IN	Data Raw: 79 08 1d 81 62 85 0d 0a Data Ascii: yb
2023-07-21 16:50:35 UTC	2165	IN	Data Raw: 34 30 30 30 0d 0a ff 1c 94 6a e5 31 8e e4 28 aa 4e 69 85 16 b3 19 f9 f3 dc 46 8a 4a 22 e4 34 90 12 82 24 f9 01 d4 c0 24 b8 43 19 44 09 8f 90 7c 05 04 c0 b2 91 e7 d5 0a 14 a1 3f 03 02 d9 60 08 73 6b 6e 65 f4 49 66 4c e3 91 3f b5 12 77 7e 2f 8c ac 07 a9 d4 10 8f b6 5a 36 c0 11 76 f8 d6 9c eb d6 af 63 35 dc 63 53 d4 1c af eb 58 1d c6 ee 3a 4e f0 be a1 c0 c4 9e 19 3d dc 13 eb 38 7a b8 df 9a bc af 39 b8 bd 01 40 63 73 2b e9 f8 71 9c 77 36 1c 99 33 ca 9f 6b 94 77 c2 2e 1f 46 8c 9f 32 bd d7 82 e1 4e 57 2b 71 37 72 d7 f0 70 97 dd 91 d1 f4 9c 72 6f 01 1f 07 6f 07 06 51 3c 7e 0a a6 64 c1 b0 b0 44 be 4c 99 37 bb c4 a7 a5 3a 32 3d 1c 45 58 2d 96 1f 82 22 14 3f 03 23 f6 63 f6 87 ac 56 94 40 3f 70 ca 76 20 b8 c0 0c 13 79 1b 78 2f 05 a1 23 5f 37 dd 10 d4 db 80 40 ce bd Data Ascii: 4000j1(NiFJ"4$$CD\|?`skneIfL?w~/Z6vc5cSX:N=8z9@cs+qw63kw.F2NW+q7rprooQ<~dDL7:2=EX-"?#cV@?pv yx/#_7@
2023-07-21 16:50:35 UTC	2181	IN	Data Raw: 83 ae 83 a2 1b 74 0d 0a Data Ascii: t
2023-07-21 16:50:35 UTC	2181	IN	Data Raw: 34 30 30 30 0d 0a 63 02 23 81 a3 27 f2 5e 20 6c e5 b3 24 92 71 39 00 c8 79 0c 38 e2 10 85 97 a2 3f 2c ca b2 fb ee 13 09 5a e3 dc 80 35 99 a0 25 20 15 5c 31 5e 8f 1b 82 1b f0 f6 ad 3c 6e eb 68 8f ad 7e 56 dc 26 e0 2a c3 ad ff b2 8c df 4f 82 67 62 c4 ec f0 59 23 ff 92 3f 21 51 9b 06 5b 86 0b 9b 70 f3 a2 7a 7f 50 b8 80 4a 5e 53 cd 5b c7 e1 fe de aa 7b cf 2e a8 a1 31 63 f3 01 aa bf 7e 9a c2 43 2a fc 2e 4a af 9e 85 64 0d a2 79 71 8b e2 cb e1 3b bb 13 b4 de 9e 3e 3c fe c4 13 38 71 e2 c4 10 c6 9c ed c1 7b a7 08 71 5a b6 38 71 e2 04 36 6e dc 88 03 07 83 db af 4b ce 4a 3e ff 45 30 0e 2a df 0e fc 83 ca bb 81 21 92 5b f5 bd e4 fa 76 fc dc 20 31 06 c5 e2 20 8e 1e 3d 82 e2 e0 a0 57 0c ac b5 92 24 d0 6d 1c 16 5e 93 da 10 f7 3a d0 3f 80 23 47 df 1c 9e 62 92 1f e8 b0 7e Data Ascii: 4000c#'^ l$q9y8?,Z5% \1^<nh~V&OgbY#?!Q[pzPJ^S[{.1c~C.Jdyq;><8q{qZ8q6nKJ>E0*![v 1 =W$m^:?#Gb~
2023-07-21 16:50:35 UTC	2197	IN	Data Raw: 8f 7f d0 41 88 30 0d 0a Data Ascii: A0
2023-07-21 16:50:35 UTC	2197	IN	Data Raw: 34 30 30 30 0d 0a 25 f1 ff b0 e2 1d 43 9a 9d 42 ef 0e fe 2c ec ff ab e3 8a 38 c1 fb 9a 82 3b 78 1d 21 b0 85 8a ed b2 99 23 9a 3d 10 02 83 f5 b4 43 79 57 15 60 66 e7 ee 6b 08 1d 1d ed b8 fe fa eb b1 74 c9 12 bc f2 ca 2b b9 f8 7b 41 c3 8c 92 28 83 7d 7d 03 78 ea e9 a7 71 e0 c0 01 4c 9b 36 cd b5 97 ac e9 49 62 50 2c 95 f0 c4 af 7f 8d 3d bb f7 40 33 96 e7 c1 00 be 4c db 25 17 5d 84 cb d7 ae f5 71 ee 3e cb b2 4d 11 4e d7 6b 08 79 65 3f 05 4a 72 bc 5e 3d 6e 86 2a 71 57 e8 b3 82 30 0d 10 4a 69 8a 87 1f 7e 18 77 dd 75 97 ab 73 4e 2a a8 39 b0 cc 40 94 95 3d 2f 58 57 0b a5 cd b8 9a ab eb bf 34 9c 39 63 16 fe e8 8f ff 18 1f fb f8 c7 31 75 ea d4 68 4c 54 7e 92 1c f1 94 da 29 fd c4 0d 5c 68 80 c5 f5 54 4f bc f5 24 da 8f 8d 19 9d 5d 1d 48 92 04 9a 48 0c e4 92 6d fd d3 Data Ascii: 4000%CB,8;x!#=CyW`fkt+{A(}}xqL6IbP,=@3L%]q>MNkye?Jr^=nqW0Ji~wusN9@=/XW49c1uhLT~)\hTO$]HHm
2023-07-21 16:50:35 UTC	2213	IN	Data Raw: 4c e0 c0 81 83 68 0d 0a Data Ascii: Lh
2023-07-21 16:50:35 UTC	2213	IN	Data Raw: 34 30 30 30 0d 0a b6 5a c8 4f cd f5 3f 82 e2 e7 f1 e2 c2 02 3e f7 b9 cf e1 a6 9b 6e c6 9b df fc 66 67 d0 a8 c4 96 8f 27 02 67 30 ab d5 6a 78 ee b9 e7 f0 37 7f f3 61 7c 4b 79 bb e9 b5 c7 98 08 83 95 8e b9 7f ff 3e ec dc b9 23 a9 42 0c 25 f3 f3 73 38 7c f8 10 0e 1d 3a 84 7b ee b9 17 77 de 75 27 be ff fd ef e3 e8 33 cf e0 f8 89 13 60 06 32 32 e2 c4 8c 87 1e 7a 08 7f f6 67 7f 8e 7d fb f6 63 f7 79 bb 83 74 d9 cb 2b 4a a7 7b ef bd 17 9f f9 ec 67 31 3b 3b eb ae 53 b7 76 a0 c7 5b bd 5e c7 b6 6d db dd ed 23 7e 9e 5b cb 83 83 be 2e 23 29 d3 76 d5 69 bd c2 0a 53 50 dc ab fa 91 1e 02 28 4a 53 e4 15 3c ad 2a ae 34 ad 3e 73 58 5e 5d 2b 6d c7 60 d8 55 6a 47 60 e2 54 fc ee 5d 55 02 63 77 cc 81 c5 8d 9e 9c c2 15 5c f8 44 19 f7 8a 98 5b 14 5c f0 36 f6 d7 00 39 b0 d1 0d 9f Data Ascii: 4000ZO?>nfg'g0jx7a\|Ky>#B%s8\|:{wu'3`22zg}cyt+J{g1;;Sv[^m#~[.#)viSP(JS<*4>sX^]+m`UjG`T]Ucw\D[\69
2023-07-21 16:50:35 UTC	2229	IN	Data Raw: 3a ad 28 f1 5e a9 0d 0a Data Ascii: :(^
2023-07-21 16:50:35 UTC	2229	IN	Data Raw: 34 30 30 30 0d 0a 4f 14 77 fd 1b 40 88 aa cb aa 1e 65 10 60 8e 3b f5 c6 2b ee a1 51 64 c0 c6 04 63 81 73 e5 f6 67 c8 83 7b a7 18 03 dc 31 02 eb 0d 12 62 36 62 65 d4 08 a3 2d 75 57 c1 5a d2 71 f9 51 c2 87 81 bd da 69 a9 10 b5 77 85 84 c8 d3 ea ae 28 b0 3e 8a be bf 26 32 fa f9 84 d0 8f a9 52 5e b8 c2 8f a0 c2 ef 15 76 58 04 36 15 ea 17 d8 d1 04 e4 3e 8b 21 fa 24 d2 3f 03 05 4f 23 8e b0 61 7c b9 18 c5 38 38 41 f3 20 d8 2c e8 29 bc f7 fe 04 ac 5d bd 4d ec 27 af 84 87 fd 08 f3 be 01 b0 fb ee ce 51 c5 3a a5 ca 91 fa 41 28 d8 af 56 3d 69 fa 9f 9d b8 3e 53 74 5c 29 ec b5 83 7b b6 e2 fa 1c 1d 5f 18 74 5c ed b4 96 b8 3e c7 fb 7a c1 3e bb e8 28 e9 6c c5 f5 39 3a 06 b8 5c f0 00 08 e2 72 b2 db a7 8a 30 bc 9b 7f f5 4e 16 ab 7d 15 f9 cd 45 8d 9f e2 1e 5a 15 8c ea 54 da Data Ascii: 4000Ow@e`;+Qdcsg{1b6be-uWZqQiw(>&2R^vX6>!$?O#a\|88A ,)]M'Q:A(V=i>St\){_t\>z>(l9:\r0N}EZT
2023-07-21 16:50:35 UTC	2245	IN	Data Raw: f6 3f d5 2b 47 50 0d 0a Data Ascii: ?+GP
2023-07-21 16:50:36 UTC	2245	IN	Data Raw: 34 30 30 30 0d 0a 2e d0 c6 04 85 2c ec 4c 01 08 67 83 28 85 11 72 48 1d 8a 4e e4 ff c6 80 37 01 58 30 0d a5 fa 99 01 93 0d ae 5a 00 c2 4e b2 81 8b c2 9c 93 d4 c9 ce 20 96 e7 a8 37 1b e8 a0 8b 76 cd 62 6c e7 66 ec bf f1 4a 8c ed de 1e ae 1c 0a b3 c2 37 af b7 a5 7e 75 e8 b8 3e d8 db d2 5a b1 b4 39 93 3e 4f 94 98 34 64 a9 7f 59 c8 ef 9f c5 a7 2a b0 9e 28 ed e1 6f 41 db a2 38 26 8b 8c 37 92 b9 07 ec d8 52 5f d2 5d 3f 18 4c 63 05 d8 69 09 44 fe 14 ba 16 6b 0e 39 95 11 2b 84 c7 54 ca 65 21 c0 6d cc 1e e2 67 0c cf e7 aa d2 0b 8b f7 9d fe c5 5c 9d 5c eb 5f 56 db 72 86 aa a0 47 26 39 1f ab dc 50 2a af 5a 92 73 af a2 fc 77 a2 c2 d2 69 b7 fd 77 f7 7c 64 74 14 5b 36 6f c6 cc cc 0c ea f5 7a dc 6d 61 c4 f3 d0 25 1e f8 23 c6 fb 84 76 0c b7 93 3c 32 82 66 ab 89 66 ab 85 Data Ascii: 4000.,Lg(rHN7X0ZN 7vblfJ7~u>Z9>O4dY(oA8&7R_]?LciDk9+Te!mg\\_VrG&9PZswiw\|dt[6ozma%#v<2ff
2023-07-21 16:50:36 UTC	2261	IN	Data Raw: d7 b6 c0 67 db 98 0d 0a 34 30 30 30 0d 0a a7 0d 3e 57 df 2d 23 f5 3f ee c5 24 17 91 cb 65 9c 04 86 10 59 77 4b 66 b3 19 97 77 ae 72 ee ca 45 9e fd fa 0b dc 7c e7 53 6e 7f 74 93 83 9b f7 58 1d 1d 33 ac 07 40 09 fd 8c f5 4c e8 76 f6 b8 78 f9 02 57 5f 7e 8e 2b af 3d c7 c5 e7 9f a6 3f b3 03 73 d0 4e b1 33 01 41 48 84 a4 f4 93 31 19 22 4f 08 24 13 34 68 27 3a bd a9 64 ca 25 10 13 ac d7 e8 7a 8d a6 08 31 e1 67 03 db a4 37 28 62 35 0a 4c f1 da 3b 2f cf 6d bf 36 f6 41 eb 1d ce 8c b8 5d 87 bc a5 a9 47 5b 8e fb de 26 82 9c 52 4e a3 78 e3 46 78 4d ae 97 ea 1e 00 99 4c a9 11 36 da f9 aa a4 11 9e 78 f8 99 8d d9 71 64 3c 66 95 44 3a 3c a2 53 25 68 b0 5a 10 5d 56 e4 d5 3c 46 6e e4 2b 73 2b ca be 01 5e 73 38 5e 51 d0 8b 21 60 0c dd 2a aa e4 51 34 c5 8c a4 0c 58 51 26 7d Data Ascii: g4000>W-#?$eYwKfwrE\|SntX3@LvxW_~+=?sN3AH1"O$4h':d%z1g7(b5L;/m6A]G[&RNxFxML6xqd<fD:<S%hZ]V<Fn+s+^s8^Q!`*Q4XQ&}
2023-07-21 16:50:36 UTC	2277	IN	Data Raw: 56 c5 a7 30 a2 dc 97 7f 6f 0d 89 c6 a8 2a 0d 0a 34 30 30 30 0d 0a 29 d4 f6 f7 56 c2 19 f5 dd ac d3 63 f4 5d 21 e2 81 7b da 10 ea 16 87 9a 5a 05 6e d4 d8 e8 bb 8a 9d 1e de ef dd 24 11 12 29 af b1 79 0f 34 74 c4 c5 2e fd d9 73 c4 ce 24 b7 2e 7c 41 6c fd 03 ed db ec 9b c7 ed db 57 b1 fd b4 ad 37 5c 3a 65 f2 c0 e9 57 cb e1 75 7a a3 79 47 b3 df c6 a3 f7 cc 51 13 54 d4 bd 71 b9 2b 2f d4 25 d9 53 a8 40 8a ca f5 eb 0f b8 fe e9 03 5e 7d f5 3c f3 19 3c fd d4 8c b3 fb 33 e4 38 31 44 8b aa 3a b7 d7 73 f5 a9 05 fb 73 b1 b0 63 a0 ef 84 97 5f ba cc d9 bd 19 07 4b 61 88 82 c6 81 8b fb bb 5c bd 78 96 b9 c0 b1 c2 ed 3b 0f b8 71 e3 36 31 82 76 79 f7 27 53 50 ea e0 72 18 2e 8a 8a d7 0e 99 ca 11 9b 20 34 05 1b 47 f2 8c 75 ee 79 1a a9 10 88 50 3c d8 85 24 e4 f0 61 cd 4c a0 21 Data Ascii: V0o*4000)Vc]!{Zn$)y4t.s$.\|AlW7\:eWuzyGQTq+/%S@^}<<381D:ssc_Ka\x;q61vy'SPr. 4GuyP<$aL!
2023-07-21 16:50:36 UTC	2293	IN	Data Raw: 6e cb 8c 94 0f 4a 76 ad 9c b0 62 8c f1 e8 f9 c5 5a 27 a5 19 c2 d6 0d 0a 34 30 30 30 0d 0a 17 a6 bf ea d6 01 2a 67 34 8d 44 24 f3 c4 a3 86 96 ea f2 bf 4d 67 46 76 57 db 2e 27 63 c9 90 2a 0c 7e 9e f8 26 48 ca bd 12 7a d1 92 99 02 83 69 d3 dc b7 83 8d be a7 d3 1e 11 cd b4 6f 7b 9b fa 95 f6 bd 26 44 40 0b 81 ce 0a 21 69 3c 02 a4 30 9c 99 72 91 63 cd 54 71 12 10 f1 a8 3a ae a5 e3 d1 fc 94 f0 ce f7 b9 f7 e7 ff 82 f9 9b ef b2 5a ec c3 bc 27 7a 21 04 67 4a 2f ef 29 09 cb 76 1d b1 bf 7f b8 ef ef 1e a3 8e 0c 9a 8c f4 2b 77 fd 32 31 6b e9 ab 95 c7 ca 0e de 7c 66 eb 5c 34 cf cb c6 4d 65 1c ab 60 1c b1 08 24 f1 99 61 2c 61 43 9e b3 cb 81 9f 7f f4 19 67 d7 ef 31 eb 3c 49 60 0d 7c f0 f9 23 3e fe fa 9a b5 cc 19 f0 f8 e4 48 1a f8 e2 eb 2b 3e f9 fc 92 f7 df 38 60 96 d3 96 Data Ascii: nJvbZ'4000g4D$MgFvW.'c~&Hzio{&D@!i<0rcTq:Z'z!gJ/)v+w21k\|f\4Me`$a,aCg1<I`\|#>H+>8`
2023-07-21 16:50:36 UTC	2309	IN	Data Raw: d3 92 2b 02 43 f2 ac f2 ba 6a 89 e7 6f f6 8b 68 1b 7f 3f 7e b1 8c 5b 33 5f 58 14 06 a1 dc 0d 0a 34 30 30 30 0d 0a 6b ee 3b 60 c8 e7 43 b5 c0 41 2a bb 39 86 00 8c 14 ba 3e 96 f1 83 cb f4 d2 13 99 b3 64 df ad 39 9d 0b b7 f7 3c af 9d ec f3 fe fd 5b bc 77 e7 80 b7 8e 03 af 1f 08 87 b3 64 55 c5 34 8c 61 39 13 88 ea 64 69 5a 0a 69 de 19 23 c4 db c7 da 33 3b ed 77 7b b5 6e 5e c7 8d 6b 37 bc 16 da eb 95 c5 91 7c e6 c8 16 fc d4 22 ed e2 4e 92 11 47 a3 61 95 8c 70 5d 8e c9 36 84 57 e2 5f 32 ba cd 48 2f 0e 6b 2e 2f 2e 48 29 e1 bd af e3 6b 78 c2 9d 13 db 75 7f d7 93 bb 6e ef ba b6 f5 dd cd 07 65 f3 c9 e7 eb f7 c6 fb ed 21 dc 58 99 e7 1d f3 cd f7 6f 5c fe a7 f7 7d c3 47 ea 66 de 89 38 76 f7 fd 52 d6 b1 71 6f 6f 15 4b 2a 26 c4 95 fd e7 9c c3 a7 c4 e0 06 9c 77 f8 c1 5b Data Ascii: +Cjoh?~[3_X4000k;`CA9>d9<[wdU4a9diZi#3;w{n^k7\|"NGap]6W_2H/k./.H)kxune!Xo\}Gf8vRqooK&w[
2023-07-21 16:50:36 UTC	2325	IN	Data Raw: f9 84 8b 0e 1d 3c 4a 60 2d 03 ab 34 70 ed 2d 27 80 0e 09 92 23 ad 80 35 f8 e4 08 83 c7 39 cf 20 33 06 ed 49 dd 82 0d 0a 34 30 30 30 0d 0a b0 38 e2 e8 f6 6b 1c bf fb 2e f1 f1 19 ab 87 8f 59 9d 9d 71 f5 f8 8c ab b3 73 96 d7 d7 a4 61 80 75 b4 18 58 ef e8 3a 4f 3f 9b e1 f7 e7 84 83 05 7b b7 6f 33 3f 3e a4 3f 3a 40 f6 e6 b8 7e 86 9b 75 ac bb c0 e0 1d 22 19 e1 10 40 3c c1 79 0b 11 10 ad 7e 9e ea 8d 11 1c 9c 65 0d f7 58 c9 a3 20 96 a7 c0 17 b7 7e 09 39 a4 27 20 59 98 77 5e b1 3c 52 d9 95 df 7b c4 97 b2 26 e6 42 5b 5c fd ab 35 b4 c4 52 36 8c 83 c1 7c 37 a2 fb e6 09 b7 fe d0 fe 21 b4 52 12 2c 25 53 6a f9 ba af a4 ee a9 91 f9 df 66 76 5f da 38 18 bf 59 59 b3 6c b9 b2 10 a3 84 aa 67 90 01 1f 1c 7e f0 68 0a f4 7d cf 6c 36 e3 f1 e3 c7 7c f2 c9 27 74 dd bb c6 28 67 81 Data Ascii: <J`-4p-'#59 3I40008k.YqsauX:O?{o3?>?:@~u"@<y~eX ~9' Yw^<R{&B[\5R6\|7!R,%Sjfv_8YYlg~h}l6\|'t(g
2023-07-21 16:50:36 UTC	2341	IN	Data Raw: d0 34 2b e5 a2 f7 b4 da 4c 40 92 ed 1e 88 ea 69 56 fd 43 db cc a4 7d df 6e fd 93 dd 4f 6e e5 e8 b4 af 23 e5 35 f5 b4 47 cd 2f f1 3a d5 8b 0d 0a 33 36 33 30 0d 0a 3a bc de 49 8e 43 c5 8e b2 34 ab d9 3d d8 b1 0d 71 db b4 f4 48 a4 de 01 ba 40 4b ba e5 ac 9d 0e a1 ad d3 ee 6d 26 66 d5 92 a3 f1 4c 98 ac cd 04 8f c2 2e f6 e6 f8 48 a3 e9 0c e7 7d 9b 0d 00 a1 b0 b6 33 47 b4 c0 d8 64 ba ff 8b e0 21 46 02 47 0c af 2b ff 10 81 c4 98 00 2c 31 01 1c c4 23 40 b6 08 2c a2 6b 68 1c 44 34 36 00 1a f8 e0 2d 20 13 42 29 d4 ba 5e e3 7f fe e7 7f f1 fc c5 1f f0 1f ff fe 1f 78 f1 f2 c5 31 78 32 8a 8e 2e 4b 03 76 8e d8 83 cf 9d e0 85 3e 47 7e cc 15 fb 31 fb a0 73 e4 c7 94 d8 63 da cc 19 8e 09 5b e9 28 65 8e 83 4a 9a a0 31 33 ea 46 56 fe 81 10 f4 cf 05 83 32 cc a7 1a 0b 10 e7 24 Data Ascii: 4+L@iVC}nOn#5G/:3630:IC4=qH@Km&fL.H}3Gd!FG+,1#@,khD46- B)^x1x2.Kv>G~1sc[(eJ13FV2$

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
410	192.168.2.5	50324	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14849	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/webtrendsstream.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:42 UTC	14855	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:41 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=66047191468865074699835423483867422350"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7b62706d-b01e-0004-62f3-bb47c6000000 Content-Length: 215 Connection: close
2023-07-21 16:51:42 UTC	14856	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 62 36 32 37 30 36 64 2d 62 30 31 65 2d 30 30 30 34 2d 36 32 66 33 2d 62 62 34 37 63 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 32 2e 35 33 33 39 37 34 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:7b62706d-b01e-0004-62f3-bb47c6000000Time:2023-07-21T16:51:42.5339744Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
411	192.168.2.5	50325	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14849	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/home.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:42 UTC	14856	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:41 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=788520417619487985816637892710904409688"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 73e80ef6-001e-0063-5cf3-bb573a000000 Content-Length: 215 Connection: close
2023-07-21 16:51:42 UTC	14857	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 33 65 38 30 65 66 36 2d 30 30 31 65 2d 30 30 36 33 2d 35 63 66 33 2d 62 62 35 37 33 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 32 2e 35 35 30 31 32 30 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:73e80ef6-001e-0063-5cf3-bb573a000000Time:2023-07-21T16:51:42.5501205Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
412	192.168.2.5	50326	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14850	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/reporting.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:42 UTC	14857	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1307880725440508338418308466102086570064"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 788a5bdf-701e-000b-01f3-bb31aa000000 Content-Length: 215 Connection: close
2023-07-21 16:51:42 UTC	14858	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 38 38 61 35 62 64 66 2d 37 30 31 65 2d 30 30 30 62 2d 30 31 66 33 2d 62 62 33 31 61 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 32 2e 35 36 39 34 34 39 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:788a5bdf-701e-000b-01f3-bb31aa000000Time:2023-07-21T16:51:42.5694490Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
413	192.168.2.5	50327	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:41 UTC	14851	OUT	GET /admincenter/admin-pkg/2023.7.17.2/en/js/assistancepanel.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:42 UTC	14858	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:41 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1436731294864275151817297657428928386953"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: b6452caf-f01e-0005-49f3-bb181a000000 Content-Length: 215 Connection: close
2023-07-21 16:51:42 UTC	14859	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 36 34 35 32 63 61 66 2d 66 30 31 65 2d 30 30 30 35 2d 34 39 66 33 2d 62 62 31 38 31 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 32 2e 35 37 37 39 35 30 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:b6452caf-f01e-0005-49f3-bb181a000000Time:2023-07-21T16:51:42.5779508Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
414	192.168.2.5	50328	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:42 UTC	14853	OUT	GET /images/webcontrols.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:43 UTC	14863	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=32583761419300935004922846597959568869"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 706152ec-d01e-0002-4af3-bb7479000000 Content-Length: 223 Connection: close
2023-07-21 16:51:43 UTC	14864	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 30 36 31 35 32 65 63 2d 64 30 31 65 2d 30 30 30 32 2d 34 61 66 33 2d 62 62 37 34 37 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 33 2e 31 31 33 34 36 30 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:706152ec-d01e-0002-4af3-bb7479000000Time:2023-07-21T16:51:43.1134604Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
415	192.168.2.5	50329	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:42 UTC	14860	OUT	GET /Images/transparent.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:43 UTC	14870	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=64809151209477797798651604647752225152"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 8e45b761-201e-0016-13f3-bb3c16000000 Content-Length: 226 Connection: close
2023-07-21 16:51:43 UTC	14871	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 38 65 34 35 62 37 36 31 2d 32 30 31 65 2d 30 30 31 36 2d 31 33 66 33 2d 62 62 33 63 31 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 33 2e 32 35 33 31 32 37 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:8e45b761-201e-0016-13f3-bb3c16000000Time:2023-07-21T16:51:43.2531271Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
416	192.168.2.5	50330	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:42 UTC	14860	OUT	GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:43 UTC	14871	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=138735233199585278519465433791467968486"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 2d9893a7-a01e-0045-5cf3-bb1f22000000 Content-Length: 226 Connection: close
2023-07-21 16:51:43 UTC	14872	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 32 64 39 38 39 33 61 37 2d 61 30 31 65 2d 30 30 34 35 2d 35 63 66 33 2d 62 62 31 66 32 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 33 2e 32 39 30 34 33 38 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:2d9893a7-a01e-0045-5cf3-bb1f22000000Time:2023-07-21T16:51:43.2904383Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
417	192.168.2.5	50332	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:42 UTC	14861	OUT	GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:43 UTC	14873	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1483945681366114688812407025658671518319"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7e32a226-501e-000c-4cf3-bb5dc9000000 Content-Length: 226 Connection: close
2023-07-21 16:51:43 UTC	14874	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 65 33 32 61 32 32 36 2d 35 30 31 65 2d 30 30 30 63 2d 34 63 66 33 2d 62 62 35 64 63 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 33 2e 33 31 30 35 33 39 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:7e32a226-501e-000c-4cf3-bb5dc9000000Time:2023-07-21T16:51:43.3105391Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
418	192.168.2.5	50331	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:42 UTC	14862	OUT	GET /images/servicestatus.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:43 UTC	14872	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=374727367468628616012652049850368272866"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 8f859881-101e-000d-47f3-bb0215000000 Content-Length: 223 Connection: close
2023-07-21 16:51:43 UTC	14873	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 38 66 38 35 39 38 38 31 2d 31 30 31 65 2d 30 30 30 64 2d 34 37 66 33 2d 62 62 30 32 31 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 33 2e 33 30 35 38 36 35 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:8f859881-101e-000d-47f3-bb0215000000Time:2023-07-21T16:51:43.3058656Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
419	192.168.2.5	50333	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:42 UTC	14862	OUT	GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:43 UTC	14874	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=156783923253012996196886447157303185942"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: b363aaee-201e-0029-0ff3-bbf4b5000000 Content-Length: 226 Connection: close
2023-07-21 16:51:43 UTC	14875	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 33 36 33 61 61 65 65 2d 32 30 31 65 2d 30 30 32 39 2d 30 66 66 33 2d 62 62 66 34 62 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 33 2e 33 36 31 38 34 34 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:b363aaee-201e-0029-0ff3-bbf4b5000000Time:2023-07-21T16:51:43.3618441Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.5	49848	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	1986	OUT	GET /static/webpack/production/c861c239bed0e42e4847.obO1giTD6WsT4sESd05O8sH8NTRGNr7BFGTPTNoAoKo.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:35 UTC	2042	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 30097 Connection: close Date: Fri, 21 Jul 2023 16:50:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:32:05 GMT ETag: "892a28cad5db513d7228cdc6e6834b18" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 ff571229df9f46b01b0e434bcb36f9e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: MsnXX0DdWfJxe2URemtg5-3y_yUxvdXpt9V6us5KQESjiKiwbVBYdA==
2023-07-21 16:50:35 UTC	2043	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd eb 6e 5d c7 95 2e fa df 4f c1 d6 8f 0d 09 60 88 59 f7 2a e5 b8 81 64 25 bb 19 9c e5 9c 46 92 5e 0d a8 b1 61 30 12 6d 13 91 45 81 92 ed 78 bb 73 9e fd 8c 6f 5c aa 6a 4e 52 32 65 d1 39 d9 dd 0b 10 b4 38 66 cd 59 f7 cb a8 6f dc 1e 7f 77 f5 ea c5 f5 77 67 9f 7f be ff 7f 7e f5 9b 5f fd 7a ff 5b fe e3 b7 bf f9 7c 77 fe 6f bf ff bf ff f8 f9 e7 9f fe e8 1b ff f9 9f ff f1 bf 9e 9c bd fe e6 cd 57 8f ff e3 3f 1e 7d 7b 49 af df bc f9 7f 5f 5f bc be bc f9 fc f9 cb eb 6f 5e 7c fe e2 fa b9 3d 78 7d f5 c5 9b 47 ff eb f4 07 9f dc d3 2f be 79 f5 fc ed d5 f5 ab c7 97 a7 bb d3 97 4f 7e 78 f4 cd 9b cb 93 37 6f 6f ae 9e bf 7d f4 cb 97 67 37 8f 77 4f e8 e7 c5 e3 dd e9 a3 7f 79 f9 fd eb af f6 d7 5f 5e 3f 3a 7d dc 3f 7b f2 c3 cd e5 db 6f 6e 5e Data Ascii: n].O`Y*d%F^a0mExso\jNR2e98fYowwg~_z[\|woW?}{I__o^\|=x}G/yO~x7oo}g7wOy_^?:}?{on^
2023-07-21 16:50:35 UTC	2059	IN	Data Raw: 8a 91 bb 90 39 b0 fa 94 dc bd 38 49 3c cd dc 3d 24 ad 03 6a da 73 8b a8 99 03 bb ca b0 ca ae 1b 83 d6 65 73 54 24 cd ce 2c f3 1c 51 35 33 7b b7 1c 51 35 e9 98 74 6e 04 d5 cc 1c 9d 98 d7 06 d3 09 6b 7c 8a aa 99 ba bf 25 4d 77 e2 58 cb e2 6a 2a 1d b6 71 35 f5 79 5f 3b 49 dc 88 c5 1e 38 93 37 99 2e 39 e6 7a e4 3c d2 33 36 cb 11 57 33 c3 f2 2c 8e b8 9a eb 56 53 37 60 93 1c 6b 73 17 70 e8 4e 6e 79 03 0e d5 58 87 b9 82 d2 dd 79 a6 d1 e6 3c 13 87 ee 70 9d 89 23 37 0e cf 99 38 71 f3 70 9c 89 03 b5 f8 e1 38 53 e9 ee 38 d3 68 73 9c 49 07 55 91 f5 2b 36 1a 38 08 c5 ff ad d8 82 e0 c0 75 7e a4 e3 c0 55 2f 41 4e 69 7c df 1d 67 e2 c0 cd 71 87 5f f8 86 e9 8e 33 71 30 b7 61 be c7 e5 4c ee 52 51 2f 86 69 7a ba 3f 9b dc 79 32 65 87 ad 52 e6 32 13 47 6d 1d 1e 33 71 d2 c6 e1 Data Ascii: 98I<=$jsesT$,Q53{Q5tnk\|%MwXj*q5y_;I87.9z<36W3,VS7`kspNnyXy<p#78qp8S8hsIU+68u~U/ANi\|gq_3q0aLRQ/iz?y2eR2Gm3q
2023-07-21 16:50:35 UTC	2079	IN	Data Raw: 74 b2 e1 60 f2 b6 09 07 3f ee 16 1c 94 c9 1c 2a 27 43 a6 e1 c7 30 67 5a 6f 71 8a d4 93 24 54 ce 64 bf 91 6a 9c ec 37 aa 04 cb 9a ec 37 68 36 af ec 37 72 5d 99 6f 80 f1 19 e6 1b 5e 5c 46 77 f3 8d 55 8b 45 64 07 97 f9 86 6d 1b 78 0a 91 52 4b b3 3f 1e 7e 0f 66 17 08 2f 32 c5 f0 ae 45 bc 86 98 7a 01 5d d2 a1 b6 d0 d5 26 94 ee 6a 13 46 9b da 44 e5 db f5 50 9b a0 fc d8 cb 88 a9 4d d4 2a 52 7b 53 9b 68 8b 78 3b 31 b5 89 e6 59 4a de d5 26 9a 98 41 74 b5 09 88 76 96 49 18 db 0a db 99 dc 52 9b b0 e7 a6 36 d1 70 5b 9f d4 41 d6 ed 46 47 14 e6 04 66 73 04 bf 8c 18 de 4a 0f b5 89 56 c5 21 4f 77 c0 e3 d9 d5 52 9f 18 d4 70 e7 a7 74 08 dd e2 14 c3 bb 06 89 43 60 6a 13 e8 38 df f8 bb a5 4e 31 bc ab c4 43 ee 6a 11 b0 fb c8 53 0c ef 26 6e 5c 46 7a 81 3f 9d a1 36 a1 74 57 9b Data Ascii: t`?'C0gZoq$Tdj77h67r]o^\FwUEdmxRK?~f/2Ez]&jFDPMR{Shx;1YJ&AtvIR6p[AFGfsJV!OwRptC`j8N1CjS&n\Fz?6tW
2023-07-21 16:50:35 UTC	2091	IN	Data Raw: 63 6a 75 e8 97 df e8 97 af 5f fe 50 bd f1 cf 4f 53 fb fa f4 f7 bb f0 fa 4b 78 36 b4 3a ff fa f9 35 ec 7f bd bc be 3a bf 0c fe 38 f9 76 7e fd d7 f5 a5 77 ec fd f0 d4 bf 59 0d eb bf 73 fc 75 b4 db 0b 02 00 Data Ascii: cju_POSKx6:5:8v~wYsu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
420	192.168.2.5	50335	52.97.201.194	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:43 UTC	14864	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.microsoft365.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=9DDC34FF918C4725B9396D2D814A87B8; OIDC=1
2023-07-21 16:51:43 UTC	14865	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 8418b2a0-d836-0ee2-02b0-d098b98d9e67 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedFETarget: GV0P278CU003.internal.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: OWAPF=v:15.20.6631.16&l:mouse; path=/ X-CalculatedBETarget: GV0P278MB0147.CHEP278.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-Version: 15.20.6631.16 X-OWA-DiagnosticsInfo: 1;0;0 X-IIDs: 0 X-BackEnd-Begin: 2023-07-21T16:51:43.240 X-BackEnd-End: 2023-07-21T16:51:43.240 X-DiagInfo: GV0P278MB0147 X-BEServer: GV0P278MB0147 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-FEProxyInfo: ZR0P278CA0117.CHEP278.PROD.OUTLOOK.COM X-FEEFZInfo: ZRH X-FEServer: GV0P278CA0049 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=ZRH"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: ZRH X-FEServer: ZR0P278CA0117 Date: Fri, 21 Jul 2023 16:51:42 GMT Connection: close
2023-07-21 16:51:43 UTC	14866	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
421	192.168.2.5	50336	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:43 UTC	14869	OUT	GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:43 UTC	14879	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=58179511951253866229711079749445708061"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7dc561fe-d01e-0012-5af3-bbb111000000 Content-Length: 226 Connection: close
2023-07-21 16:51:43 UTC	14880	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 64 63 35 36 31 66 65 2d 64 30 31 65 2d 30 30 31 32 2d 35 61 66 33 2d 62 62 62 31 31 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 33 2e 38 36 30 38 37 34 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:7dc561fe-d01e-0012-5af3-bbb111000000Time:2023-07-21T16:51:43.8608749Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
422	192.168.2.5	50340	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:43 UTC	14876	OUT	GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:44 UTC	14881	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1326066576398208751010870606806578724536"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7f925e32-901e-005e-68f3-bb2121000000 Content-Length: 226 Connection: close
2023-07-21 16:51:44 UTC	14882	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 66 39 32 35 65 33 32 2d 39 30 31 65 2d 30 30 35 65 2d 36 38 66 33 2d 62 62 32 31 32 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 34 2e 31 37 31 32 35 36 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:7f925e32-901e-005e-68f3-bb2121000000Time:2023-07-21T16:51:44.1712564Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
423	192.168.2.5	50342	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:43 UTC	14876	OUT	GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:44 UTC	14882	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=15542631283118363262515863387296048801"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: ce83f249-b01e-0014-4df3-bb82ae000000 Content-Length: 226 Connection: close
2023-07-21 16:51:44 UTC	14883	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 63 65 38 33 66 32 34 39 2d 62 30 31 65 2d 30 30 31 34 2d 34 64 66 33 2d 62 62 38 32 61 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 34 2e 32 30 35 33 36 38 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:ce83f249-b01e-0014-4df3-bb82ae000000Time:2023-07-21T16:51:44.2053680Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
424	192.168.2.5	50339	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:43 UTC	14877	OUT	GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:44 UTC	14883	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=103114071788253946883094387041536369509"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 11431a03-901e-0013-48f3-bbeecd000000 Content-Length: 226 Connection: close
2023-07-21 16:51:44 UTC	14884	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 31 34 33 31 61 30 33 2d 39 30 31 65 2d 30 30 31 33 2d 34 38 66 33 2d 62 62 65 65 63 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 34 2e 32 33 33 39 39 36 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:11431a03-901e-0013-48f3-bbeecd000000Time:2023-07-21T16:51:44.2339964Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
425	192.168.2.5	50338	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:43 UTC	14877	OUT	GET /Images/list_bullet_5x5.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:44 UTC	14884	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=48358710320058380602542031069458824186"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 02e423ee-a01e-0018-71f3-bb15a6000000 Content-Length: 226 Connection: close
2023-07-21 16:51:44 UTC	14885	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 32 65 34 32 33 65 65 2d 61 30 31 65 2d 30 30 31 38 2d 37 31 66 33 2d 62 62 31 35 61 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 34 2e 32 34 30 36 36 37 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:02e423ee-a01e-0018-71f3-bb15a6000000Time:2023-07-21T16:51:44.2406675Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
426	192.168.2.5	50341	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:43 UTC	14878	OUT	GET /images/spinner_16x16_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:44 UTC	14885	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=148217828247611059296759877868015989"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 5407fb96-701e-0024-21f3-bb3c61000000 Content-Length: 223 Connection: close
2023-07-21 16:51:44 UTC	14886	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 35 34 30 37 66 62 39 36 2d 37 30 31 65 2d 30 30 32 34 2d 32 31 66 33 2d 62 62 33 63 36 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 34 2e 32 34 36 36 39 36 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:5407fb96-701e-0024-21f3-bb3c61000000Time:2023-07-21T16:51:44.2466961Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
427	192.168.2.5	50343	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:44 UTC	14880	OUT	GET /images/spinner_24x24_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:44 UTC	14890	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=1000116557054852137714172517795811372363"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: e23c1bb4-401e-0000-51f3-bbcac1000000 Content-Length: 223 Connection: close
2023-07-21 16:51:44 UTC	14891	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 32 33 63 31 62 62 34 2d 34 30 31 65 2d 30 30 30 30 2d 35 31 66 33 2d 62 62 63 61 63 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 34 2e 36 31 34 39 38 38 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:e23c1bb4-401e-0000-51f3-bbcac1000000Time:2023-07-21T16:51:44.6149880Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
428	192.168.2.5	50344	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:44 UTC	14887	OUT	GET /shell/images/signup_ms_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:45 UTC	14892	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=157869514617823802233221411434565380134"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 70615913-d01e-0002-05f3-bb7479000000 Content-Length: 223 Connection: close
2023-07-21 16:51:45 UTC	14893	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 30 36 31 35 39 31 33 2d 64 30 31 65 2d 30 30 30 32 2d 30 35 66 33 2d 62 62 37 34 37 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 35 2e 30 32 35 33 37 32 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:70615913-d01e-0002-05f3-bb7479000000Time:2023-07-21T16:51:45.0253724Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
429	192.168.2.5	50345	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:44 UTC	14887	OUT	GET /shell/images/o365_gallatin_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:45 UTC	14891	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=406392148016038205116028067083528849482"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 185148b4-401e-0062-51f3-bb08e6000000 Content-Length: 223 Connection: close
2023-07-21 16:51:45 UTC	14892	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 38 35 31 34 38 62 34 2d 34 30 31 65 2d 30 30 36 32 2d 35 31 66 33 2d 62 62 30 38 65 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 35 2e 30 32 35 30 31 37 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:185148b4-401e-0062-51f3-bb08e6000000Time:2023-07-21T16:51:45.0250176Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.5	49851	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	2008	OUT	GET /static/webpack/production/2cdc887fa30d028a6cac.yYomW_BQJnWDD10UrVD9zI1YaI83_RjUsYv9vtzPLm0.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:35 UTC	2060	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 41585 Connection: close Date: Fri, 21 Jul 2023 16:50:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:07 GMT ETag: "895d732e3f4c851612d16d80d33d6732" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2aefdd231d9806ea2eced3399f411f80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: Dyd0PWEo0XIGI6NlrCDkhkT2gN3YXeOtEiBLDNDoh_CkHeOcidw2Ug==
2023-07-21 16:50:35 UTC	2061	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd 69 77 1b b9 92 20 fa 9d 7f e2 51 bc be 2a a6 99 5c 65 cb 36 e9 34 5b b6 e5 b2 aa bc 5d 4b 2e 57 95 c4 e2 49 91 a0 94 36 99 49 67 26 b5 58 62 bf ee e9 e9 65 7a ef 59 7a ba 67 e9 65 96 de a7 97 99 79 d3 3d d3 cb 3d e7 dd aa 3f 32 7f e0 fe 85 17 11 00 12 40 66 92 52 95 d5 e7 bc 29 9f a2 90 81 00 10 00 02 81 40 20 00 94 8f 3d 7f 18 1c d7 fa fd 27 cf 37 1e 6e dc 7f b2 49 81 cd 87 fd 07 8f 5f 3d fb 74 bb df 77 2e c4 38 3f df ed 59 b5 e9 2c 3a 2c ef ee 96 a6 ee 94 85 7d 77 38 f1 fc 9f d4 c2 fd 60 34 ea 1f 79 ec b8 1f f8 e3 53 11 b3 0f 59 b3 50 7e cc fc e1 98 89 8f c1 38 98 0d fb c3 60 10 09 c0 d0 8d 0e f7 03 37 1c e2 f7 4f 36 6f dc 66 ee fe fa ad 52 cf 3e 2b 34 1b b7 5a ed d1 cc 1f c4 5e e0 97 99 1d 5b 67 cf f7 df b0 41 5c 1b Data Ascii: iw Q*\e64[]K.WI6Ig&XbezYzgey==?2@fR)@ ='7nI_=tw.8?Y,:,}w8`4ySYP~8`7O6ofR>+4Z^[gA\
2023-07-21 16:50:35 UTC	2077	IN	Data Raw: 64 bb f8 88 6e f0 e6 32 cb 07 15 8a 74 1f 7c 93 83 94 aa 20 8c 54 3e 6f 22 58 95 48 6c 9e d5 4b 46 f7 e8 49 dd ec e9 d6 4e 51 10 92 5b bc 88 a3 a4 f7 29 1d 14 fb 0a 93 46 83 20 64 b5 37 51 b1 59 bb 5d 5b e3 89 21 ed 2c 89 83 c2 51 e3 14 8a 66 ba 1e 0c 96 7f a7 c5 8d e8 f0 2d f3 dd c8 2e ca c7 03 e9 c1 47 aa d8 96 7f c4 a2 d8 3b 20 db 20 d0 8d fa 3c 64 5d 5c 2d 6e 0e 3d ac 27 ea 5c fa 01 0a 7e 4e d2 76 9d 12 3e 81 37 40 fd d2 4d 6c 3e 25 7b e6 80 1e c6 ab d6 c7 ed ee 7e b2 ab 88 de bd 03 2d 96 56 30 87 f4 cc 1a 46 45 4e 73 dd 1e 39 6b 2d 7b ec ac df b0 a7 4e b3 75 db 1e 82 b6 b0 6e 1f 3a cd 7a c3 3e 70 ee 34 1a b7 9a 77 ee b4 6e de b8 75 a3 71 e7 4e d3 9e 38 cf dc 67 f6 91 93 b8 74 de b4 4f 9d dd dd 12 3e 08 6f 4f 7b f6 6e 69 df c3 b7 be 9b 32 f8 29 83 88 Data Ascii: dn2t\| T>o"XHlKFINQ[)F d7QY][!,Qf-.G; <d]\-n='\~Nv>7@Ml>%{~-V0FENs9k-{Nun:z>p4wnuqN8gtO>oO{ni2)
2023-07-21 16:50:35 UTC	2109	IN	Data Raw: 1b df 8e ca 8e 45 bb 56 2a 53 f5 d6 76 72 a4 2a c9 7b 2b 4b eb 82 cc 6d ee 74 b5 db 93 a5 24 0d ed 63 43 bb 54 14 1e 08 d8 f5 f0 9d 45 37 69 ef 40 95 f6 30 36 2e 67 4f ae 50 d7 8a 81 2c de f3 7e 6f 58 f7 aa 4d 95 f6 a5 62 62 75 57 05 d0 ea e5 37 04 7a b4 61 43 a0 bf 19 43 9f 1b 75 16 2e 39 4f 96 e4 fd f4 b2 2d 0c a5 71 47 92 d0 4a 1a 9b ae 9f d0 ba 30 f1 13 4a b2 7f b6 a0 91 63 95 6b ba 0b 81 7d 2b 98 2f 36 6e 96 23 5e 6b 23 63 f9 a0 00 9e 0d c8 bd 8e ed c2 f8 e8 71 1f 40 39 54 7c a0 1b 4d fa 5e cf f6 34 ca 7d 55 d0 8e 3e 04 79 49 f9 85 78 a2 90 6a 35 29 c4 ab 56 2f 53 c4 ab ef c0 dd 39 cc ad 75 2b e6 f2 28 76 1e c7 e5 12 4f 49 d7 4f cb f2 9e 24 7c 24 7c 10 8d 5b a0 18 dd 68 78 c6 cb a0 b0 45 4f 76 27 99 cf 75 7f d3 24 d3 cf b4 76 52 92 2a e1 1a e8 9a 4a Data Ascii: EVSvr{+Kmt$cCTE7i@06.gOP,~oXMbbuW7zaCCu.9O-qGJ0Jck}+/6n#^k#cq@9T\|M^4}U>yIxj5)V/S9u+(vOIO$\|$\|[hxEOv'u$vR*J
2023-07-21 16:50:35 UTC	2125	IN	Data Raw: c4 75 9e 4d 3f 84 49 3e ff db ec 03 a5 3a 31 ac 43 22 58 87 fc 00 4f 2e 74 88 ee e9 90 0c b9 18 84 6c bf dc 53 55 bd 77 70 e8 3f cd 8d 5e ab 54 71 af 31 bc 74 b5 e6 3b 53 73 04 ac f6 0c a8 e5 09 51 d4 24 4d 78 12 4e 6e fb f5 24 a5 ea f4 f4 07 4c 52 8e 41 70 a9 32 fb 9e ad 55 ef 41 4f af b3 ea 4d a2 cc 6f e4 ed d3 38 e7 ec 49 61 2e a0 ca 9e ba cc 4e 62 dc 17 e7 62 b0 32 b8 0d 0b e9 33 9d c4 17 50 f4 69 28 7f cf e1 10 57 3f 61 56 de d1 c5 14 2a 7f 08 e5 af 37 58 a8 59 29 2c 75 95 b0 21 d7 fa b5 90 b9 e4 82 4a 29 12 54 76 37 af e4 71 9a 2e 65 07 7f 92 47 e4 8d 5d 5c d7 43 ae fb 68 ea 81 47 e3 b8 91 a3 b9 cc 0d 5b b2 66 95 fd 00 e4 1d a6 f4 a2 99 4c 50 0a e2 a1 cd 2d 4e e3 69 96 5c c6 ec 9b 98 b3 38 1f c5 ec 7d a1 7f d3 87 fb 26 af f9 38 1b b0 22 32 17 fb 43 Data Ascii: uM?I>:1C"XO.tlSUwp?^Tq1t;SsQ$MxNn$LRAp2UAOMo8Ia.Nbb23Pi(W?aV*7XY),u!J)Tv7q.eG]\ChG[fLP-Ni\8}&8"2C

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
430	192.168.2.5	50346	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:44 UTC	14888	OUT	GET /images/backgrounds/image1.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:45 UTC	14895	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=324262020797518618918259781857621447884"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 0521524a-f01e-0067-66f3-bbda3d000000 Content-Length: 223 Connection: close
2023-07-21 16:51:45 UTC	14897	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 35 32 31 35 32 34 61 2d 66 30 31 65 2d 30 30 36 37 2d 36 36 66 33 2d 62 62 64 61 33 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 35 2e 30 37 35 33 34 30 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:0521524a-f01e-0067-66f3-bbda3d000000Time:2023-07-21T16:51:45.0753406Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
431	192.168.2.5	50348	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:44 UTC	14888	OUT	GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:45 UTC	14898	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=617283670864160315914242022653710421477"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 185148f7-401e-0062-10f3-bb08e6000000 Content-Length: 223 Connection: close
2023-07-21 16:51:45 UTC	14899	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 38 35 31 34 38 66 37 2d 34 30 31 65 2d 30 30 36 32 2d 31 30 66 33 2d 62 62 30 38 65 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 35 2e 31 32 34 39 36 30 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:185148f7-401e-0062-10f3-bb08e6000000Time:2023-07-21T16:51:45.1249604Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
432	192.168.2.5	50347	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:44 UTC	14889	OUT	GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:51:45 UTC	14897	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Fri, 21 Jul 2023 16:51:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Hunenberg&ASN=212238&Country=CH&Region=ZG&RequestIdentifier=95843785066190579103887475367142923049"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 336a099d-e01e-0026-01f3-bb82d9000000 Content-Length: 223 Connection: close
2023-07-21 16:51:45 UTC	14898	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 33 33 36 61 30 39 39 64 2d 65 30 31 65 2d 30 30 32 36 2d 30 31 66 33 2d 62 62 38 32 64 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 37 2d 32 31 54 31 36 3a 35 31 3a 34 35 2e 31 32 33 38 31 31 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:336a099d-e01e-0026-01f3-bb82d9000000Time:2023-07-21T16:51:45.1238112Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
433	192.168.2.5	50349	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:45 UTC	14893	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1083 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundary2jjm8U5HPB5Hw5hp Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:45 UTC	14894	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 32 6a 6a 6d 38 55 35 48 50 42 35 48 77 35 68 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 32 6a 6a 6d 38 55 35 48 50 42 35 48 77 35 68 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 32 6a 6a 6d 38 55 35 48 50 42 35 48 77 35 68 70 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundary2jjm8U5HPB5Hw5hpContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundary2jjm8U5HPB5Hw5hpContent-Disposition: form-data; name="t"deghsLEKJOGSu-1QvrwgkKX3------WebKitFormBoundary2jjm8U5HPB5Hw5hpCont
2023-07-21 16:51:45 UTC	14899	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 24 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:51:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dd7e69d77b944bcaac001c6194b4aaca Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
434	192.168.2.5	50352	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:47 UTC	14902	OUT	POST /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 525 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:47 UTC	14903	OUT	Data Raw: 7b 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 2d 30 38 6e 77 5f 77 4a 77 48 56 6a 61 44 6e 35 54 5a 79 4c 6b 39 35 54 68 41 54 35 49 6f 54 45 70 73 33 56 71 31 5f 78 38 54 4e 30 42 50 63 36 66 32 48 32 54 67 72 66 73 46 75 38 78 67 56 4b 48 54 6f 52 43 51 31 70 32 7a 78 6b 50 76 7a 31 59 51 65 76 46 70 55 68 Data Ascii: {"doc_id":"EAiNyh0Etp1-SLOVW1yl7","auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu-08nw_wJwHVjaDn5TZyLk95ThAT5IoTEps3Vq1_x8TN0BPc6f2H2TgrfsFu8xgVKHToRCQ1p2zxkPvz1YQevFpUh
2023-07-21 16:51:47 UTC	14904	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 34 X-Webkit-Csp: sandbox Content-Length: 271 Date: Fri, 21 Jul 2023 16:51:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d91b232cc247421ab4a4b290c8afd254 Connection: close
2023-07-21 16:51:47 UTC	14904	IN	Data Raw: 7b 22 66 69 6c 65 6e 61 6d 65 22 3a 22 50 6c 65 61 73 65 20 66 69 6e 64 20 74 68 65 20 62 65 6c 6f 77 20 73 68 61 72 65 64 20 56 69 74 61 6c 20 44 6f 63 75 6d 65 6e 74 73 20 e2 86 93 2e 70 61 70 65 72 22 2c 22 6d 61 78 5f 61 63 63 65 73 73 5f 75 72 6c 22 3a 22 22 2c 22 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 22 3a 7b 22 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 5f 74 61 67 22 3a 7b 22 2e 74 61 67 22 3a 22 61 63 74 69 76 65 22 2c 22 63 6f 6d 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 64 6f 77 6e 6c 6f 61 64 22 3a 74 72 75 65 2c 22 65 64 69 74 22 3a 66 61 6c 73 65 2c 22 66 69 6c 65 5f 6c 6f 63 6b 5f 73 74 61 74 65 22 3a 7b 22 2e 74 61 67 22 3a 22 75 6e 6c 6f 63 6b 65 64 22 7d 2c 22 71 75 6f 74 61 22 3a 30 2c 22 72 65 6e 61 6d 65 22 3a 66 61 Data Ascii: {"filename":"Please find the below shared Vital Documents .paper","max_access_url":"","state_and_actions":{"state_and_actions_tag":{".tag":"active","comment":false,"download":true,"edit":false,"file_lock_state":{".tag":"unlocked"},"quota":0,"rename":fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
435	192.168.2.5	50353	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:47 UTC	14905	OUT	GET /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:47 UTC	14905	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 142 Date: Fri, 21 Jul 2023 16:51:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b51edf293ab8459693aba91ca8cd11af Connection: close
2023-07-21 16:51:47 UTC	14906	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 67 65 74 5f 64 6f 63 5f 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 5f 6c 6f 67 67 65 64 5f 6f 75 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/get_doc_state_and_actions_logged_out": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
436	192.168.2.5	50354	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:49 UTC	14906	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 593 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents-%E2%86%93.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:49 UTC	14907	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 31 62 39 30 32 66 63 31 32 63 66 38 34 32 33 64 39 62 65 38 66 63 37 37 39 64 66 31 65 63 62 33 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 72 69 72 75 77 31 62 6e 77 63 64 62 31 32 72 79 33 75 67 35 67 25 32 46 50 6c 65 61 73 65 2d 66 69 6e 64 2d 74 68 65 2d 62 65 6c 6f 77 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 36 6f 67 35 63 67 74 61 34 33 31 36 61 68 61 69 32 31 75 6a 79 69 6e 76 32 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 32 32 77 65 62 Data Ascii: request_id=1b902fc12cf8423d9be8fc779df1ecb3&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Friruw1bnwcdb12ry3ug5g%2FPlease-find-the-below-shared-Vital-Documents-%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D6og5cgta4316ahai21ujyinv2&aggregated_sw_data=%7B%22web
2023-07-21 16:51:49 UTC	14908	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-dsLPUC6uswChFUfBqMV3' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-dsLPUC6uswChFUfBqMV3' 'nonce-RyF546ZKPCT8xwtQMapA' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 8 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Fri, 21 Jul 2023 16:51:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 61e80d5247a94d8c8a67db840767cf60 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
437	192.168.2.5	50355	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:50 UTC	14910	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:51:50 UTC	14911	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Fri, 21 Jul 2023 16:51:50 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b968ff93380f46c9a095fc2600a1f058 Connection: close
2023-07-21 16:51:50 UTC	14911	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
438	192.168.2.5	50356	23.227.196.140	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:51:54 UTC	14913	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_2e62c59c862fb482c11d.js HTTP/1.1 Host: mvolenoazaqoerutien.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mvolenoazaqoerutien.com/?uiqqiefr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=pkGSWwmWSwTI; qPdM.sig=Ul5qA3SbUk7TD36dPRjCJ-MVJxU; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrCNxESxjroO3ikgy7vq4S4xwr-EvUKYaj9dc4cc3RoUs1Iw56Hsl368PDRriHPMUGdBD7YTfIEOiTvPTndeXWu_qG6FIkizCFVYp3bvy6fAUgAA; esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7Wevrwh_xYFXyoxQFgm-5dkiLNtSw6tzxBNT2aL1uW8vG0-xSNOKsBW54PTwV31pxc0iFBRaZeXbqPCBeoV9cbfermB9ZivtXG6SqQviJWIwXRH79REofb0pHwAKft_akNah4mSpGJRcNy0ZRH86reJ1w_IqOLj7jqqVVCvQbcYF_FNTFblHKhx4dblLfcTfgCBnobDoqCiby6yxfZKY44n2-5evgir1uKowkXm70s3sUq1mkibslDGXUAu751tMgycSoK7xVeh2LdQ7zjxFYQIyP6RWvCbjW0E6ZC9OKu_SVvYl_GAjCimy5hEq2LNv_oYFJkjOYfslmwkwes-aD_ruLdCc_YTEE6zhs58VVDz9jS2yhHfyIqyf0-BnernmcwMdjzsl3yEYVFuRuDXyri6ru5E-PvAHzUroNDacg9Rv4n4MgAA; fpc=ArQjXTss-z9PuVNWIVMS0ru8Ae7AAQAAAHOuTNwOAAAAuL4zcAMAAAB2rkzcDgAAAA
2023-07-21 16:51:55 UTC	14914	IN	HTTP/1.1 200 OK Date: Fri, 21 Jul 2023 16:51:55 GMT Content-Type: application/x-javascript content-length: 4730 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE85F09C x-ms-request-id: 09255893-001e-003f-71f3-bb9f7d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230721T165155Z-3necrehvwh551174b2d0nnynw8000000034g00000000ds4v X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-07-21 16:51:55 UTC	14915	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-07-21 16:51:55 UTC	14915	IN	Data Raw: e5 57 ed 53 db 36 18 ff de bf 42 78 1f 48 8a ed bc 10 92 90 36 bb 6b 81 0e ba 52 72 24 eb 6e 07 5c 4e 96 95 44 60 4b 3e 49 4e c8 80 ff 7d 8f 14 3b c4 21 74 b4 bd dd 6d 37 ee 88 13 e9 79 f9 3d 2f bf 47 72 e5 f5 d6 2b f4 1a 79 2f ff 43 fd c1 bb f3 01 3a fb 80 06 c7 27 e7 87 a8 07 bf fe 40 9f cf 06 27 07 47 2f b7 63 9c 9a ff c1 84 29 34 62 11 45 f0 0c b0 a2 21 12 1c 09 89 18 27 42 26 42 62 4d 15 8a e1 53 32 1c a1 91 14 31 d2 13 8a 12 29 ae 29 d1 0a 45 4c 69 50 0a 68 24 66 a8 04 e6 64 88 7a 58 ea 39 3a e9 95 7d b0 4f c1 1a 1b 33 0e da 44 24 73 f8 3e d1 88 0b cd 08 45 98 87 d6 5a 04 3f b8 a2 28 e5 21 95 68 36 61 64 82 4e 19 91 42 89 91 46 92 12 ca a6 e0 44 a5 b0 5e 74 e1 22 2c 29 52 54 a3 91 90 7a b2 c0 e1 a3 be 91 cc ac 2a eb 66 e1 51 59 71 00 3f 65 21 18 1c Data Ascii: WS6BxH6kRr$n\ND`K>IN};!tm7y=/Gr+y/C:'@'G/c)4bE!'B&BbMS21))ELiPh$fdzX9:}O3D$s>EZ?(!h6adNBFD^t",)RTz*fQYq?e!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.5	49855	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	2041	OUT	GET /static/webpack/production/203e68a375ea7f28c0de.MMYkLQEeFZd4PYXbLlLiCe5SizWEJT-CGzSC04pJQ8c.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	2355	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 161609 Connection: close Date: Fri, 21 Jul 2023 16:50:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:05 GMT ETag: "6c45a1193c091a08f258c0d89f840161" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 fa2f998214db1c6c6bdb96ceff3ce5d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: DDOwOepKnthicVtFDsoGkUvwLaO4r93W5AHWsrHvLDlshOElF3qqBg==
2023-07-21 16:50:36 UTC	2355	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd e9 76 db 48 b2 2e fa 9f 4f 41 e3 d4 56 13 45 90 22 38 0f 82 b5 65 0d 65 75 d9 96 5b 92 5d 55 cd 62 ab 21 32 29 a2 0c 02 2c 00 94 ac 92 b8 df e7 be c6 7d b2 fb 45 0e 18 48 d0 83 5a f7 9c b3 96 2d 22 e7 c8 c8 c8 c8 88 c8 cc c8 d2 9d e3 4d fc bb ea d5 d5 9b b3 83 a3 83 57 6f 8e f9 c7 f1 d1 d5 e1 eb 0f ef 7e be b8 ba b2 be 9a e3 f1 71 38 d2 ab 8b 65 38 2b 0d 87 da c2 5e b0 e0 ca 9e cc 1d ef 7f 52 df 57 fe 74 7a 75 eb b0 bb 2b df 73 ef 65 ca 35 aa 66 81 0a 2c bd 89 cb 64 60 ec fa cb c9 d5 c4 1f 87 32 62 62 87 b3 6b df 0e 26 14 fe 9f 6b bb d5 69 5c 4f 6b da c8 78 28 d4 fa d3 a5 37 8e 1c df 2b 31 23 32 3c fd 81 55 d9 e7 85 1f 44 a1 e5 95 cc 5a cf d4 57 86 59 eb b4 37 f2 9d 5d ff c1 c6 51 75 c2 a6 8e c7 de 07 3e 1a 8a ee 4b 91 Data Ascii: vH.OAVE"8eeu[]Ub!2),}EHZ-"MWo~q8e8+^RWtzu+se5f,d`2bbk&ki\Okx(7+1#2<UDZWY7]Qu>K
2023-07-21 16:50:36 UTC	2371	IN	Data Raw: 9f 5b 18 e4 77 39 b1 1e 10 88 86 38 71 1c 9f 7a 75 85 11 61 c1 8f e8 bb a3 84 98 93 1d 82 af 22 41 70 3b 45 e9 5f ee 3f a6 22 15 d1 ca 6b 2f 33 d1 59 02 42 44 21 b7 f7 97 db 59 c3 ff 76 ce a0 a4 8e 2c 6b 80 cc 46 f3 ba 90 35 1d 59 e1 f7 32 87 f0 9b 38 83 68 20 cd 1a 68 8e 17 5d 1a 4a 77 fd 75 da a5 ae 4b a3 20 71 89 a5 e2 12 55 ad bc 54 1c 62 bc 95 43 8c bf 4e 9a 57 5f 25 cd 94 6d 81 5c a8 27 47 ae 15 03 f3 c4 79 ea fc b1 24 1b 92 9d a0 4e a9 c0 19 2c c5 62 5f b5 78 bc ce 41 f9 58 93 0c 12 5b d1 43 b1 52 43 34 62 ce 2d a3 d1 38 85 66 8c 01 b1 23 e1 77 5e 1c 64 a9 26 86 1a 68 4f 99 17 08 62 f2 53 3d cb 9f 56 42 58 a1 53 48 7c 72 25 05 81 f8 6f 9a 69 69 2a c9 a1 8a 0c 0b 0c 52 63 72 91 a7 fb 8a 57 c4 64 fe f7 25 ee 72 7b 0b b7 0e 44 bb 7e 4e bb de 3a 6b e6 Data Ascii: [w98qzua"Ap;E_?"k/3YBD!Yv,kF5Y28h h]JwuK qUTbCNW_%m\'Gy$N,b_xAX[CRC4b-8f#w^d&hObS=VBXSH\|r%oii*RcrWd%r{D~N:k
2023-07-21 16:50:36 UTC	2380	IN	Data Raw: 82 64 70 ef 2f 69 f1 21 40 90 ed 2e b0 17 14 05 d9 45 bd e9 28 5e cf 14 45 f7 35 71 97 25 65 a0 12 94 ed 97 36 06 2c 4a 43 f5 1b 5a 01 f9 dd 42 29 24 31 98 c4 9c 85 1d cd a8 49 95 a9 48 e7 60 8a 13 80 c4 1f ac 13 a7 ec 95 0e 9c 0f ad e3 8d dd 25 d4 cc 87 ff 82 70 53 ad 56 57 80 6f 2a b7 1d 0d 48 31 c6 98 b3 7b 47 6d fa 8f 75 0e aa b9 b6 79 19 c5 2f c0 ab eb 44 33 fb 96 09 23 2d 80 12 40 10 c8 02 13 a2 a3 62 bf fa bf 42 8d 1a 89 37 65 c7 23 b9 29 64 cb a5 26 6e 7b a2 ab e3 c4 11 97 09 fd d2 7d 0e 95 df a7 91 f6 5f a1 1c cd 90 8c 3a 72 38 b9 c8 fa 37 51 ee 6f 6a 28 41 d2 e4 89 d5 a7 6d 8e 8d 3a bd ad 75 26 04 b8 b5 56 0f 9d 2b 79 06 c1 ac af d2 fd 71 09 97 82 e4 5d 70 42 a8 6c f9 33 c5 13 5e 0d 18 7f 8f 3b 5d 41 88 0a 44 79 ba 75 33 0c b7 96 97 73 39 a7 0a Data Ascii: dp/i!@.E(^E5q%e6,JCZB)$1IH`%pSVWo*H1{Gmuy/D3#-@bB7e#)d&n{}_:r87Qoj(Am:u&V+yq]pBl3^;]ADyu3s9
2023-07-21 16:50:36 UTC	2396	IN	Data Raw: 27 07 89 ba 98 02 d3 69 ec f6 8a 25 76 7b 18 43 42 e3 c4 4c 6d 08 99 29 da 55 65 53 6a 11 b3 af a3 2c 7e 52 87 2f 52 0c 47 ff 4b 0d 77 3f d5 a1 97 c5 cf 6b f8 e8 5f c8 ee da 9f 74 6c d0 a6 d7 db a0 15 2d f6 46 f8 65 52 69 fe 59 13 f8 4f 46 37 19 a3 c9 2b 0a c3 60 cc 88 28 bd 28 59 5b 43 e4 c7 02 59 14 7b f8 78 e8 99 ec ac a6 14 da c0 b0 5a 50 51 b3 72 ab 83 00 ac eb 45 a0 d2 83 42 f6 b4 c5 22 f8 ad b6 7d ad ce b3 f4 0b fb f6 b1 47 83 f2 bb fa 0e fa fb 31 30 cc 7d b6 9a ef 07 4f f9 73 c0 d6 b1 45 7d 3f 40 34 dd b0 2f c6 f6 fd a0 b7 87 b2 bb b0 4f 22 3c 4c b1 16 c2 9f 2d 85 76 d3 61 d3 44 e0 80 d5 11 56 08 84 2f e4 66 8e da 49 68 af 8b a1 66 e2 ef c8 c2 10 ce 21 ab 78 61 46 f7 ef b5 b1 2b fb 99 17 af 1f eb 78 10 a4 39 fc a9 73 b2 72 a5 bf 65 1e ff 56 6b 32 Data Ascii: 'i%v{CBLm)UeSj,~R/RGKw?k_tl-FeRiYOF7+`((Y[CY{xZPQrEB"}G10}OsE}?@4/O"<L-vaDV/fIhf!xaF+x9sreVk2
2023-07-21 16:50:36 UTC	2399	IN	Data Raw: 31 a6 99 8e 34 cd 89 b7 53 23 28 44 8f c3 8d 5d a6 1b 84 40 5e 17 65 c5 4a a7 dc 17 39 2f 59 c4 8a f2 23 8f 4a ad 47 28 b5 30 9b cd 64 cb 78 8b 04 dc 3a e6 52 69 8b 74 d1 a5 2c cb d3 f2 65 7e 5c f8 22 43 ed fa 66 1e 7f 44 45 17 63 2f e4 1c d1 27 8f 07 51 fe c8 ce 2d ea 97 fc ce 1d f4 e4 8e ad 47 c0 7b 44 bc 4c a1 69 9e 6d 23 84 4a 34 b4 52 61 82 21 ad b4 bc 38 8b 9d 9c 41 22 21 29 e0 bb d3 47 5f d4 d7 a6 f8 35 96 d0 7f d9 9f 1e 44 d5 da 9a 87 42 70 67 d9 24 97 85 2c 28 08 4b 31 89 df 7a 18 0f d2 5f bc f7 12 c1 bd 7b 8f 16 20 96 79 a7 30 75 3d 47 27 a2 15 d9 79 ec ed 60 0f 8e 5e e5 e1 c7 dc df 38 ca e0 d0 cb 87 65 e0 e7 36 92 c9 84 3e ab 90 e2 11 90 91 f6 0f 83 41 68 f4 6b ff 54 f1 76 2c 8b 57 52 fc c7 d4 fb 98 a3 19 aa df b3 70 08 cd b7 df e7 8a 6f fd 8b Data Ascii: 14S#(D]@^eJ9/Y#JG(0dx:Rit,e~\"CfDEc/'Q-G{DLim#J4Ra!8A"!)G_5DBpg$,(K1z_{ y0u=G'y`^8e6>AhkTv,WRpo
2023-07-21 16:50:36 UTC	2406	IN	Data Raw: 3c 1e cd e3 8b 70 ac f9 93 8b 68 0c ff 43 99 38 a0 4f d1 de c7 0d 09 b9 92 53 49 c1 dc aa cf 44 78 ac a8 d1 54 a8 da 0c 72 4b 03 d8 56 23 f3 26 f4 fd c0 fa fe c4 fa fe 24 40 c4 39 b5 d4 cf 09 ea 6e 12 97 5c fd 66 f9 27 f1 19 14 57 04 a7 f6 37 8c 09 c3 89 4d 81 c9 06 9f 05 54 a5 4f 68 00 9d 86 f4 0b a7 40 ac da 49 ab 6a 27 56 d5 4e a0 6a 40 6a 2a ab d3 a3 51 ed 4f ec ee e2 db ad d0 ba 6b 1a 48 55 30 e7 65 74 1c c3 10 ad ec f3 a3 3e 7c 8c d9 ce f6 de a0 af fa ca ab e2 31 9f 06 2a 15 32 f2 de b0 ef 1b 9d c9 24 96 d1 08 23 11 c6 21 8e c6 0b 4e 38 8f d9 9e cd d3 e2 90 d3 b5 b5 d5 f3 8d 09 9c 4f a3 93 3b 77 ac 0c fe e5 a9 0c d0 93 91 77 11 9f 42 61 3c 40 e1 5a 33 c0 e4 79 4c e3 f3 34 38 67 37 00 68 92 35 24 8e a0 98 ab 2b 18 40 17 d6 d8 3c d5 63 f3 a8 39 36 4f Data Ascii: <phC8OSIDxTrKV#&$@9n\f'W7MTOh@Ij'VNj@jQOkHU0et>\|12$#!N8O;wwBa<@Z3yL48g7h5$+@<c96O
2023-07-21 16:50:36 UTC	2428	IN	Data Raw: 84 fa 44 5d e6 e8 fa 8f 1c 98 9c 2e d7 dc cc 6a 52 4c 7f 56 f7 6f 95 9e 85 fd 0a 59 cc cd f3 72 9f 13 df 4d 8a 48 6a 7c 62 1a d5 48 9f 99 2d 42 55 47 a6 f3 b9 3a 2f 35 5d 44 46 bc 83 4d 94 5e 68 13 d6 c1 a1 46 31 9f 69 c1 bc e3 5e 16 d3 e6 39 0e 0b fb b4 b8 8c f2 33 40 f8 31 ed 05 fc e5 a8 ec 50 2c 3d 60 2a 75 5e 1c b6 5d ac 56 1d 10 ec 1f 90 5a 45 e9 71 21 cc 99 90 3f ea a5 9e 65 cd 9c 99 53 b3 2c bf 13 13 52 9b 9d eb 8f 4c a8 c4 16 17 bf 64 76 e8 c8 d8 8c 92 41 16 0d ae b4 d7 5e 2d 52 60 d1 b2 b5 45 f1 f8 62 cd 0d f5 94 ba d2 bd 82 b2 47 b9 bf 60 cb 6e 83 87 54 b0 8d e6 1d e1 0c f4 dc c2 73 52 df 76 c9 cf 85 f2 40 d5 ba 73 d0 20 4b 1d fc dc 90 3b af 74 b7 11 21 95 1a d3 60 18 44 3a 7d 72 4b 90 40 8e c5 0c 17 ca 92 cc b2 43 fc 21 78 22 b9 d4 f7 ca 43 16 Data Ascii: D].jRLVoYrMHj\|bH-BUG:/5]DFM^hF1i^93@1P,=`*u^]VZEq!?eS,RLdvA^-R`EbG`nTsRv@s K;t!`D:}rK@C!x"C
2023-07-21 16:50:36 UTC	2444	IN	Data Raw: 22 0b 06 e1 38 c8 ae 19 8d 36 e8 3c c7 1a 50 08 18 02 61 8b f6 bc 8c 5c b2 a9 90 db 41 06 28 94 f1 04 00 d7 6c d0 9c 04 20 f2 ea ed 66 22 ca ee 80 88 38 42 2f 0b 39 79 9a 70 11 99 4f 23 ca 90 c0 4d 42 8a be d1 24 13 d0 9c 99 09 85 52 b6 d7 d4 29 15 65 0b c8 92 4f 45 12 b0 72 fa 52 7e 20 43 0b f4 ea 7c 01 b9 df cf cc 74 6b 50 d1 71 9e e8 2f 34 9c 74 7d 5f 96 2f 88 ef ca bb b6 27 06 e7 c9 1e dd 04 f3 41 fe 54 58 0c fd 7b 25 26 c6 e3 23 0b 8a a1 74 01 c2 cb a6 c1 cc 42 48 bf a8 9b 20 bb d5 2c 5a cb ab dd 84 a5 d8 0e 1e 1f ed c4 7f 98 d1 fd 79 b2 b8 18 49 0f 37 ba bb 8c 94 57 6a 72 1a a3 57 2a fe f1 23 f8 60 2a f2 66 42 0d 44 a8 b4 72 84 53 6d e0 a8 08 90 7e 2a cd 8f 83 37 1d 2d 26 c1 4f 26 f2 5a 5a c5 10 77 b2 b5 bc 62 7e 1c 32 f3 e3 82 2c 8f e5 68 33 ee 30 Data Ascii: "86<Pa\A(l f"8B/9ypO#MB$R)eOErR~ C\|tkPq/4t}_/'ATX{%&#tBH ,ZyI7WjrW#`fBDrSm~*7-&O&ZZwb~2,h30
2023-07-21 16:50:36 UTC	2460	IN	Data Raw: b8 64 22 8f 4c 0a 6e a4 43 26 25 4c 35 d6 8e 00 f9 ed 3c 6f 4c 29 ae 99 78 74 44 6a 22 c4 70 99 05 dd d5 5c 52 48 d6 22 fc 75 5f 13 c6 39 ed df e1 b5 5f af c1 2e bc 98 a3 7c 17 46 e1 4a 11 3f bb 16 e1 a5 9b df ff 7e a9 fc fd f2 7f 85 52 ad 1f b9 e5 e5 60 30 0a bd a3 e3 b8 bc 30 5f bf 55 5e f2 41 4a 68 39 a1 1f 1d 3b 67 56 79 7d 6d b7 fc 88 a5 84 5c 98 71 ad 3f e8 b9 34 b0 40 aa 72 cb ad e5 f5 a5 9d 76 e8 0d e2 32 17 16 10 53 88 16 7a 29 2f 6d ad a1 e7 95 d6 ce 9b d5 76 d0 1f 40 20 54 ae ec fa a7 5e 18 f8 04 c6 42 a8 dd a0 d7 0b ce 60 be 95 40 ab b7 e7 17 ca d1 c0 6d 13 55 10 2c 90 55 c8 75 4e 6f 84 af 83 20 8a 10 18 af 97 c8 d3 28 1f c7 f1 a0 71 f3 a6 db ee 3b 55 4f ad 53 2d 08 8f 58 30 a4 bb 59 af cd df e4 79 97 1f ad 6c 73 9f 4a c2 b5 09 b9 3a 89 8e c9 Data Ascii: d"LnC&%L5<oL)xtDj"p\RH"u_9_.\|FJ?~R`00_U^AJh9;gVy}m\q?4@rv2Sz)/mv@ T^B`@mU,UuNo (q;UOS-X0YylsJ:
2023-07-21 16:50:36 UTC	2463	IN	Data Raw: 65 c0 db c6 51 ec 84 71 63 cd 9d 00 73 5b 73 ad 5e ce 98 e6 57 2c e4 ca 94 96 90 21 1b 2e 6a de 76 60 0d 8b 58 2a a9 79 86 21 59 5c 09 2f 68 94 3c 2e 64 3c 4e a8 77 9e 0d aa 9c 4b bc 4e 6a 79 1e d3 f2 9c 39 10 42 fd fd 84 65 59 ed 4b 2b ad 0a a7 7c 03 13 eb db b1 6f fe 60 ef 07 e5 67 f1 33 ff 59 68 d5 e6 00 27 df db bf 69 0d 6c 9e bb dd 73 70 d5 9c 65 30 30 25 24 85 b4 49 62 50 ed 3b 6e 44 bb f2 50 7c 41 9a 89 d5 b5 f1 16 8b be 9d 7f 5b 05 c6 a9 50 6e 40 c0 8d 89 75 4c 7a 86 75 64 e3 7a c5 a8 28 af 95 ce 6b 61 de 53 1b 6f c5 39 2c ca 34 49 67 9a 18 37 4a 13 eb cc d6 69 59 43 65 5a 4a 47 b7 2c ae 10 37 62 50 4a f7 16 f6 01 a7 bb 36 17 b7 0c eb a0 a8 78 91 40 af 03 0f 85 da ef d8 dc 91 f7 72 11 04 16 ad e7 a7 30 6c 46 cb e6 8e ac b7 8a b2 b3 68 3d 3b 85 41 Data Ascii: eQqcs[s^W,!.jv`X*y!Y\/h<.d<NwKNjy9BeYK+\|o`g3Yh'ilspe00%$IbP;nDP\|A[Pn@uLzudz(kaSo9,4Ig7JiYCeZJG,7bPJ6x@r0lFh=;A
2023-07-21 16:50:36 UTC	2475	IN	Data Raw: 13 ef 64 4a fe 52 3e 00 f2 b1 99 ce 8d 81 4a d6 49 92 d3 cb 71 52 f9 78 a7 b5 7d b0 b6 b2 6f 27 46 05 91 db 1e 86 2e 3a 8c d5 da 30 61 7e 2f e3 a2 cb 56 c8 8d 1a bf d8 47 77 c0 3a 3b db e6 5c a7 83 c3 da 29 be 35 0b b8 01 25 28 bc 77 0b 0b 41 77 ae ed c4 4a 8e 5d 0c 80 1d 43 37 09 b1 1f a8 f7 78 82 68 a7 b0 94 11 7e a1 a5 a3 e2 1f 91 e5 34 f1 de 25 d3 aa 54 f0 7a 73 73 6f b0 6f 77 ac 52 0f 8d ce c8 73 79 b6 32 97 de 37 93 57 53 a3 89 e6 20 30 f2 5a e7 83 8a 51 f9 81 f4 d5 3c b0 8c 8b 59 c3 54 3e 4d 1b 00 d4 d0 45 6a 52 43 fe 36 67 f3 97 45 63 16 d8 19 5e ed ad 02 b2 13 38 1d bc d7 37 d6 5c 72 0f 99 af 68 b4 e6 68 e6 b2 03 75 02 c1 6b cd d9 1c 32 df 8c ef 0f c5 fd e6 73 73 31 5e fb 3e 44 27 f1 36 24 1b d2 fc d1 46 63 ac ba d9 3c 04 6d e1 84 a0 4f 63 45 59 Data Ascii: dJR>JIqRx}o'F.:0a~/VGw:;\)5%(wAwJ]C7xh~4%TzssoowRsy27WS 0ZQ<YT>MEjRC6gEc^87\rhhuk2ss1^>D'6$Fc<mOcEY
2023-07-21 16:50:36 UTC	2488	IN	Data Raw: 9e a7 17 c9 f8 c6 18 d9 98 78 3a a5 d4 d3 bc 11 0c c5 43 e1 09 7a c2 32 9c b0 4a 1a 67 22 dd a1 32 22 6f a8 64 4b 34 99 4f 53 5f 8b be 49 4b 3e f6 26 38 ec 91 b9 b4 d0 30 30 f1 08 4e 7e 26 53 0f 1d 79 04 97 8c 6b 73 34 98 34 f8 b7 e5 f6 87 b0 b8 60 36 71 65 07 d5 54 3c 5e e1 1e a4 bf e3 8e dc 35 ac 7e b8 0f e0 8b 6e 73 41 f6 51 1f 58 38 f6 09 b4 67 ec 9a 98 2d 03 d9 a4 45 fa 04 3d 0d 58 4e 69 2c e0 0c 01 65 55 c3 e3 a9 cd b0 13 56 64 66 a6 ab 36 83 17 68 3b cf 11 09 36 a2 85 ee 9e 94 98 35 e1 c0 de 77 d5 63 42 50 cd 5a d8 56 b6 42 a1 b2 7b c1 60 d7 3d b4 a0 83 0a ab 1c 75 6a 21 31 f0 54 de 3e a2 6f f6 f1 99 78 1f f7 0c 34 95 b3 64 fc 5a dc 58 bb 0d 2a 72 1d ce ce 4a ab 2f 5b 7c 32 88 26 71 48 78 06 8a 87 a4 32 3d 15 7c dd 87 b0 39 ec 1c 72 9a 90 f3 9c 4b Data Ascii: x:Cz2Jg"2"odK4OS_IK>&800N~&Syks44`6qeT<^5~nsAQX8g-E=XNi,eUVdf6h;65wcBPZVB{`=uj!1T>ox4dZX*rJ/[\|2&qHx2=\|9rK
2023-07-21 16:50:36 UTC	2495	IN	Data Raw: d3 95 f8 f9 f0 3c 05 49 df f9 e8 61 e7 81 b9 66 a0 cb f4 80 67 6f 28 76 20 3e cd 0a 66 d8 f9 ca 0a fe fb ee 1d be 28 8f 6f f9 18 7a 3f 29 93 ab 6a 18 be 3c 78 7e 68 24 84 28 29 a2 ac 16 e7 f3 e1 e1 cd d5 59 31 a5 54 d8 9d 51 3a ec 66 f0 9b 73 a2 b3 69 71 36 0c 39 06 10 be 2f 91 a0 4f 20 5d fc 36 96 12 5c 8b 3a b8 26 60 b6 de b4 3a 6b d9 83 75 be 98 2c ca 2b da f1 87 cf c4 2f e6 2e c1 c3 f3 27 f3 f3 73 d8 62 87 9b fa 83 72 0d cd a0 34 ad d6 68 0b 99 a0 c3 6a cb 00 6f 5f fe 86 0d 29 ac 9f b8 53 cd fb 46 01 3d b6 dc 3e 0e 8f f9 d5 20 c8 fc fa 33 2a f3 04 d6 22 99 f8 32 6b 4d dd 9a 26 57 b3 74 d2 c8 04 3a eb 9f 78 51 3c c9 00 fc f8 91 17 d8 93 fc 6c 5a 24 ad e9 9f 7c 2c d2 f1 f9 89 d1 76 f8 00 12 da e6 dd 3b df 53 cc 14 5d cc c8 6d bb 58 4f 9b 57 34 ec 64 0d Data Ascii: <Iafgo(v >f(oz?)j<x~h$()Y1TQ:fsiq69/O ]6\:&`:ku,+/.'sbr4hjo_)SF=> 3*"2kM&Wt:xQ<lZ$\|,v;S]mXOW4d
2023-07-21 16:50:36 UTC	2507	IN	Data Raw: a1 31 7f 0d 57 ac e2 68 9e 59 31 cb 61 2c 53 3d 96 d1 ef de 2a f8 d3 e5 18 6b 6f aa c9 bf 69 68 a8 b7 ef 05 73 96 ec ce 9e 5b 21 58 49 ff db 74 f6 77 f6 95 0d f4 dc be 2a 03 37 43 0a 66 8e b1 de ef 67 88 96 c4 1c ff 1e f8 13 a8 90 ea 29 ea 04 b9 96 36 80 3d 1a 22 32 55 58 dc d1 5a e8 c3 5a 8e d6 5c 89 21 31 3b e7 39 de 44 2b 7a f6 8f d0 ff 47 d1 4f 1b dc b4 e4 cc f5 14 af 5e d9 8b fb c4 9e f9 30 bf 3c b0 89 94 44 47 29 c7 32 33 a5 d5 04 67 bd bf 82 73 3d 6b d2 2c 3b 6e bd 96 fd ba 3d d1 89 35 d1 4b ee 4c ff 69 f1 4c 4b 0b c9 88 74 8e 06 a9 28 71 d0 f6 b0 7f fa 29 46 5b d2 9f 96 c7 2f 6a f5 67 73 72 29 a0 8c 66 b5 1c 22 7d 76 0d 9b c6 95 37 fe b8 56 db af a1 81 2d e3 0d 7b ef 5d fe 61 fc e5 4b 8c be df 1c f3 1c d4 04 73 21 40 55 2e 6a f9 a9 78 34 f8 37 34 Data Ascii: 1WhY1a,S=koihs[!XItw7Cfg)6="2UXZZ\!1;9D+zGO^0<DG)23gs=k,;n=5KLiLKt(q)F[/jgsr)f"}v7V-{]aKs!@U.jx474
2023-07-21 16:50:36 UTC	2536	IN	Data Raw: a2 2b 82 64 1a f2 3d 9d ce 42 8c 60 eb 80 29 b2 08 03 5f 26 1e 34 38 b0 20 40 15 4d f8 f4 6f dd dc 24 c1 0d 72 3d 4c 6f ec fc 05 50 a6 d8 cb f3 5a 18 87 56 35 95 e3 f7 b9 64 6e db 9b c0 f2 f4 92 7e 90 ce 60 8d 05 16 d9 c8 19 6e 71 a4 3b 0c 31 9e ab e3 c8 d8 14 b0 3a b8 55 44 a8 24 c6 67 45 fe 74 80 ee 20 32 8f ae 01 90 6d 51 55 21 b4 be ed cd 3c a6 b0 99 22 54 7b 48 e7 13 cc 5f 88 c4 3b ce 2f 91 43 5e 32 be 1d 00 dd 09 6b b4 47 2d 20 62 1f 03 e6 f6 e6 19 be 7a eb 25 81 de 9d 48 f3 fd 2c c8 ee e3 e4 a3 5a 75 36 4c b7 03 5f 83 2a 99 56 6a 5d cd d5 00 b5 d5 25 03 e3 f2 65 9a 12 3b 8f 67 f3 99 a2 ca e2 49 42 66 34 e3 78 62 81 ba b0 21 7d 92 b4 50 53 e7 f3 e4 86 db 96 f2 30 00 b5 0e 74 d8 6d 38 63 54 3b 06 82 0a 08 76 7d 4d 40 7a cf 43 12 9e ec ca 64 a7 4b 51 Data Ascii: +d=B`)_&48 @Mo$r=LoPZV5dn~`nq;1:UD$gEt 2mQU!<"T{H_;/C^2kG- bz%H,Zu6L_*Vj]%e;gIBf4xb!}PS0tm8cT;v}M@zCdKQ
2023-07-21 16:50:36 UTC	2552	IN	Data Raw: 6b 72 41 aa 22 16 60 b7 68 8a a1 46 c7 9a a6 3c ab b4 e7 af ba 47 1d 56 b9 51 4f f4 75 fe a8 fb f5 e3 63 eb eb 03 85 24 46 39 b9 2d 28 22 df 13 4f 97 8f 15 2b 6d 55 ef 0c c3 91 e0 57 45 75 8f 50 c7 3c 3f ad 8d 34 0c 6f 24 26 85 dd aa b2 8c d2 76 e0 b6 3b 7a db ef 0e 3b cd 5a 42 f6 01 04 61 ac 4f 62 cb 2f fb d1 a1 4d c1 39 a0 8a 85 7c 71 d4 ed 11 77 74 22 bc 97 9f ef 22 7f ed 86 30 71 15 c0 e9 9a 37 f7 c3 98 75 a3 94 5e d6 a2 e2 4a 11 9c de e8 b7 de d2 98 2d 7c 21 f1 ee 95 7d 0c a9 64 2d 2a 7c ad 6c 7f 8e 69 4d 3e 52 58 b9 d6 58 43 4d c7 c7 ca b2 ae fd f1 05 4e ee 10 95 ed 1e 79 61 8e 04 84 36 49 38 6d 9d 2f 2e 3f f5 66 bc 23 bd ea 0d 1f 19 f1 19 50 3e 34 e2 e7 70 60 c3 80 b7 86 5d 44 c5 85 af 58 46 4e b4 e0 db fd ee f9 23 33 c5 9e ac a8 34 a1 d6 c2 b2 12 Data Ascii: krA"`hF<GVQOuc$F9-("O+mUWEuP<?4o$&v;z;ZBaOb/M9\|qwt""0q7u^J-\|!}d-*\|liM>RXXCMNya6I8m/.?f#P>4p`]DXFN#34

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.5	49856	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	2042	OUT	GET /static/webpack/production/e03046a2b8dc7c103bce.SZIL9KJIbSE8UBobNlCwsjQoiX0ekEuZ6bvWx6u226s.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	2372	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 22002 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:23 GMT ETag: "c6cb1cfb737879950133a6559e6facf3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 fec5e83bcae9ab1295b776b3f64183d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: _RQxoy1cQWx1mOqj29bllMNh6003LGXwWXZi_wQ3TU4FyjMyJmsSnw==
2023-07-21 16:50:36 UTC	2372	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd bd eb 7a db 38 b2 28 fa 5f 4f 41 b3 cf ca 88 31 2d eb e2 ab 14 b6 47 b6 e5 8e a7 7d c9 b2 9c ce cc 72 7b eb a3 48 48 e2 84 22 b5 48 ca 8e db d6 7e 82 fd 00 fb f9 ce 93 9c aa 02 40 82 17 39 49 77 cf 3a 33 f3 75 4c 01 85 42 a1 50 28 54 e1 52 a8 3f 7a 81 1b 3e 36 46 a3 8b eb fe 69 ff f8 62 40 1f 83 d3 d1 c9 fb 8f 57 3f 0f 47 23 eb ab 10 2f 2f 77 f7 46 63 b1 8c 67 f5 bb 3b 7d 61 2f 58 34 b2 dd b9 17 fc 6f e5 7b 14 4e 26 a3 07 8f 3d 8e c2 c0 7f 12 39 63 40 cd 22 f9 63 19 b8 3e 13 3f 1c 3f 5c ba 23 37 74 62 91 e0 da f1 6c 1c da 91 8b bf ff f7 e1 84 ed 35 27 cd 7d fd de 7c ae b5 9a dd c9 32 70 12 2f 0c ea cc 4c cc d0 78 be 1e ff 93 39 49 c3 65 13 2f 60 1f a2 10 30 24 4f f5 c4 d4 47 23 16 5f 86 ee d2 67 ba f9 fc 60 fb 4b d6 dd 68 Data Ascii: z8(_OA1-G}r{HH"H~@9Iw:3uLBP(TR?z>6Fib@W?G#//wFcg;}a/X4o{N&=9c@"c>??\#7tbl5'}\|2p/Lx9Ie/`0$OG#_g`Kh
2023-07-21 16:50:36 UTC	2414	IN	Data Raw: c1 d5 9d 32 7e ee 23 2b 21 32 d5 72 d0 9b af a6 02 91 6a 25 22 95 83 f0 36 e4 4a 15 68 a2 58 4b 1f 78 c4 0a f9 93 be f8 e2 f0 55 18 dc 8a 50 14 90 a6 7c 66 45 38 20 cf 0f 97 ce ec 94 82 63 d0 ef 2b 8a 2e c4 01 00 33 3f 65 7d 5e 91 cc 03 6a 14 37 5b e8 c9 96 1d 7e ad 69 af c9 ef 35 61 a8 29 43 dd fe 92 4b 39 e9 c5 31 18 2e 43 da c8 a8 67 81 4e 71 89 29 8b 2a 83 43 26 e8 06 34 79 e3 f1 a7 55 4a 80 4d 55 fb b8 52 ba 86 d6 dc a5 32 1f df 33 c8 88 71 32 83 ca 5f d5 aa 18 e0 f4 8a 6c 2a db 62 0e 3a 4a 8b ba 7a fc 71 a1 84 d7 ae 1b 18 ca 64 a5 70 7e d1 cb 3a a4 8c 0e 0b 50 60 11 7e 5c 49 74 61 35 9c 88 1c 52 eb 55 09 40 75 11 a0 e5 cd 9b 0d a5 70 2f 13 a3 35 25 94 f8 2b 0a f4 6b f4 ab 45 de bc 51 5a 94 72 c8 cd dc bf ac 80 08 6a d3 e3 47 0e d2 ad 79 1e 38 68 a4 Data Ascii: 2~#+!2rj%"6JhXKxUP\|fE8 c+.3?e}^j7[~i5a)CK91.CgNq)C&4yUJMUR23q2_lb:Jzqdp~:P`~\Ita5RU@up/5%+kEQZrjGy8h

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.5	49857	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	2108	OUT	GET /static/webpack/production/ea67d264b690942c8510.zy-U6PEBZo5tZvAwyC0Mt1Ga6AOObigtU7jOeqlAl_Q.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	2610	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94627 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:33 GMT ETag: "5c3729b768565d111532b0e648364f99" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 d75d7156b5e1833582c3070298720664.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: EJqnon5c4Lx8_M7VuDSpEqtj5ZWzOOUTU8ZTOEtnrp-v4gVSDG-lww==
2023-07-21 16:50:36 UTC	2660	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b e2 c6 d2 28 fa 9d 5f 81 b5 df ed 85 82 c0 80 ef 30 ca 6c c6 c6 33 ac d8 c6 cb 30 99 24 c4 e1 11 92 00 c5 80 88 24 7c 99 31 fb b7 9f ba 74 eb 86 c0 ce 65 9d f3 e1 e4 c9 b8 51 5f ab ab ab ab ab aa bb ab 0b 8f ce dc 72 1f cb 83 c1 65 a7 79 de fc 70 d9 a2 1f ad f3 c1 d9 a7 cf d7 3f 74 07 03 fd d5 1c 2f 2f fd 3b b5 bc 58 fa 93 42 bf af 2c 8c 85 ed 0d 0c 6b e6 cc ff 6f ec f7 c0 1d 8d 06 0f 8e fd 38 70 e7 d3 67 91 32 84 aa 6d 4f 7e 2c e7 d6 d4 16 1f e6 d4 5d 5a 03 cb 35 7d 11 61 19 fe 64 e8 1a 9e 85 df ff d7 3a 3a ac d4 86 66 4d b9 d3 be e5 aa 95 d3 fa 68 39 37 03 c7 9d 17 02 cd d6 4c f5 5b 67 f8 bb 6d 06 65 cb 1e 39 73 fb c6 73 a1 8a e0 b9 60 6b ca 60 60 fb 57 ae b5 9c da 8a f6 ed c1 98 2e ed fa 4e 65 a5 36 1e 0c 2f 3f Data Ascii: k{(_0l30$$\|1teQ_reyp?t//;XB,ko8pg2mO~,]Z5}ad::fMh97L[gme9ss`k``W.Ne6/?
2023-07-21 16:50:36 UTC	2676	IN	Data Raw: f2 52 70 f4 51 bf 82 8e 6a 93 c5 e4 75 cc 97 17 45 59 c9 31 5a 89 31 da fb ad 5e e8 ff 56 bf 2b aa f5 bd c6 66 86 94 1a f9 d0 65 10 5d 7b c5 6b a5 4c 0c 74 19 0a 46 67 46 17 6c 5c 55 1b e9 78 e9 46 d7 cd f7 5c a6 6e f6 ab a1 d2 36 da dd b5 df 2b f5 70 98 47 1a 7c a8 f5 d1 4a 70 cf 38 af dc 78 07 fe b9 68 7e 6f 8b 0b e4 36 8a e4 ef 21 ae 64 96 0e 2a 75 4c ac 56 56 19 ac 78 63 6d 4f 45 74 a5 43 b5 7d 71 ac 60 f2 9e a2 4a 87 50 d7 53 c9 fc be 82 df f0 15 cf b2 57 2b 9a 7b 35 f4 55 b8 7f 90 ba 18 f7 57 5c 65 4e 1c 7a 1d ed 66 e9 4f e4 85 14 11 75 cb 33 87 63 43 17 99 59 89 e9 ee f1 f5 62 99 55 4e 41 ca 2b b2 10 ca d7 9a 7e a5 9e 85 cc 28 2b 01 1c 1c ec af af 9e 7f 65 f1 44 4d 17 96 e8 33 d7 bd 77 6c b4 ad 21 22 d8 e1 80 8c f3 78 d9 6b a2 2f 41 db 12 f3 d9 a1 Data Ascii: RpQjuEY1Z1^V+fe]{kLtFgFl\UxF\n6+pG\|Jp8xh~o6!d*uLVVxcmOEtC}q`JPSW+{5UW\eNzfOu3cCYbUNA+~(+eDM3wl!"xk/A
2023-07-21 16:50:36 UTC	2746	IN	Data Raw: 0c 40 95 c8 74 2a 45 1e a5 54 cd 29 5b 74 65 47 0f e0 e7 c2 08 26 20 c7 2a f0 93 2f 0e 00 ee e0 b7 0f 64 8e af 18 e8 40 a3 ca 14 1f 2e 87 38 62 b4 3a 30 11 27 ec 6b 1c ab ee 66 a6 92 77 41 38 7f 1f 73 d9 ac 29 31 61 18 13 d5 7a 2c 55 8d 74 1b 60 82 ab f5 05 d4 8f 30 6c 49 0c ab df 52 cc 54 0f 91 af ae f8 58 e1 37 4e e0 1b 4b 75 45 9c 12 e7 1b 46 62 1d 90 7e 41 ae dc 79 30 f1 eb 47 b9 95 b6 e9 b8 60 4c 99 18 95 07 03 c3 f7 9d f1 bc 10 fb f9 6d a5 cd 55 74 a1 40 6e 15 e2 6d 93 8a 11 7d ca 0c 19 10 50 ce 8c 78 2e 32 5f ce ce dd c0 4f 55 27 d7 86 b2 a2 86 fe 2f 73 5c 60 ea 8e 75 7b 95 f2 cf 8f e7 1d e8 0a 86 81 37 1e d6 dd 47 49 ef d6 05 96 89 41 5a a6 97 05 58 e8 26 9f 82 3c 32 40 0c 85 2c 09 00 65 fe 88 2b 4b 89 3a 28 2f 13 ed a2 2c 17 07 6c 68 dc db dd 89 Data Ascii: @tET)[teG& /d@.8b:0'kfwA8s)1az,Ut`0lIRTX7NKuEFb~Ay0G`LmUt@nm}Px.2_OU'/s\`u{7GIAZX&<2@,e+K:(/,lh
2023-07-21 16:50:36 UTC	2762	IN	Data Raw: 58 18 81 ab a1 16 49 e1 9d 3d 99 f0 a7 9d 10 7f 78 83 88 b1 34 8c 95 5d 0b 36 d8 62 0c 04 e1 01 09 e1 24 61 f3 29 d1 65 35 95 3e 0c 36 ce 4f 0e 2e 80 07 0c 80 3d 6c 9c 9e 9d fc 74 b8 3f d8 97 ec 82 18 85 e4 12 bf c6 b9 c2 e0 97 d3 b3 c1 39 32 0e ac ed f0 e3 e9 d1 e1 00 a2 0f 8f f7 8e 3e ed 1f 1e ff b0 f1 1e 8a c2 ca b2 71 74 08 d3 02 ea bd 38 61 6d ea 3c e7 60 e3 e3 e0 6c ef 03 7c ee be 3f 3c 3a bc f8 b5 c8 16 b7 c3 8b 63 ac f9 00 78 d2 ee c6 e9 ee 19 ac 4e 9f 8e 76 cf 36 4e 3f 9d 9d 9e 9c 0f 00 88 7d a8 f9 f8 f0 f8 e0 0c 1a 1a 7c 1c 1c 5f 94 a1 61 88 db 18 fc 04 1f 1b e7 1f 76 8f 8e b0 35 ac 6e f7 13 74 e3 4c 70 b8 d3 5f cf 0e 7f f8 70 b1 f1 e1 e4 68 7f 00 91 ef 07 00 df ee fb a3 01 6f 0d 7a b7 77 b4 7b f8 b1 b8 b1 bf fb 71 f7 07 ce 17 4f a0 22 d6 49 cc Data Ascii: XI=x4]6b$a)e5>6O.=lt?92>qt8am<`l\|?<:cxNv6N?}\|_av5ntLp_phozw{qO"I
2023-07-21 16:50:36 UTC	2917	IN	Data Raw: 48 46 28 b9 4d ad d5 95 ad cb b9 d6 96 03 d1 ec aa c1 11 b9 80 25 ab c9 df 52 64 d2 50 41 0d 71 9c cc 9c 24 e2 1a 3a e2 9c ac b9 51 93 f3 b0 26 97 9e 5a bb 26 e1 ac cb 80 1c f0 ae a2 26 9a 21 30 7b 24 35 75 e5 da d1 ea d2 e0 77 89 c2 e4 8a 0a 21 85 d8 2a 75 47 f2 62 c4 31 a7 83 fd 38 a4 0d 02 50 22 bb 4d 00 4a ba 97 ec b9 29 9b 68 4a ba 00 d2 94 43 dc 24 e6 dc 94 63 02 30 55 55 37 88 5e a9 bf 2d 35 40 b2 c2 2e cd 28 04 be a1 c6 a2 c3 80 1f c6 67 b0 9c 0d 8d 6e 5b f6 0d ff fc 33 91 ab 2e 73 75 f4 5c 9f 93 e3 da d4 c7 75 18 1f 57 c1 9b 9a 2d 82 23 3d a7 1a 52 06 68 d0 64 a7 95 a4 dd d6 cb 7d 4e 50 8b 1c 03 39 70 35 b9 ac d6 2a 92 f2 25 2e 6a 6d 39 ef da 92 c6 24 49 d7 3a 44 63 72 19 90 35 37 61 f0 c5 a4 a8 ca 31 94 c8 6b ca 62 40 75 72 dd 6c cb 82 10 aa 51 Data Ascii: HF(M%RdPAq$:Q&Z&&!0{$5uw!uGb18P"MJ)hJC$c0UU7^-5@.(gn[3.su\uW-#=Rhd}NP9p5%.jm9$I:Dcr57a1kb@urlQ
2023-07-21 16:50:36 UTC	3129	IN	Data Raw: ff d2 89 76 b0 b4 42 94 7a 61 6e a5 b5 b4 d2 39 bf 42 e6 93 8b 73 2b f5 d6 4a 78 6e 25 0c 56 a2 f6 4a ed fc 4a 35 5a 69 47 2b 41 67 25 7c 6b e5 dc d2 ca 42 33 a6 9d 7f 73 65 91 3c 24 ef 37 e2 27 e7 ce 17 0b 78 b8 5f a1 19 ff 1e a2 11 07 e3 23 fd c7 15 92 7a c2 e6 e2 45 76 35 d7 c2 01 fa 97 9a 71 21 be ee 28 3e e0 32 3e c9 cf b7 8c 4e c6 a7 b0 e3 db 8e c6 f9 5d 47 c3 f4 ae 23 96 ed 12 dc 4e b4 d4 21 3d 93 5e 7f b4 b0 ef 15 e2 1e d3 e3 15 0b ca 1d 45 c5 81 65 d2 90 46 54 eb 34 43 d1 5f e3 4b 87 0e b0 e7 f9 4e 33 9f 94 ec 2b 94 6a 11 0f 9f 20 1f 3f 5d 78 35 ea b4 f3 9d 73 51 9e 0e 73 f9 f3 0b cd 0b e4 57 d0 c9 b7 9b f3 51 9e 76 c4 fc 85 a0 9d 0f 13 46 f4 55 89 19 bd c8 08 78 9c 7c 76 15 87 89 1e a1 ae c8 6f 4e fc 92 08 fe 6c 72 14 74 cf 9e 81 0e 3d f1 d6 68 Data Ascii: vBzan9Bs+Jxn%VJJ5ZiG+Ag%\|kB3se<$7'x_#zEv5q!(>2>N]G#N!=^EeFT4C_KN3+j ?]x5sQsWQvFUx\|voNlrt=h
2023-07-21 16:50:36 UTC	3145	IN	Data Raw: 2a 43 44 ad cb 71 b2 d9 d5 39 f9 23 da 35 21 5a ee 09 d1 2e 44 54 33 93 a6 4e ea 60 76 b1 e6 f9 22 da 35 21 5a f6 46 94 19 4c 70 21 5e cd 96 8d e5 fe 27 ca 54 9f 90 38 4d f5 19 e1 16 42 68 dd bf fe 44 99 e9 0b 42 6b 68 05 a3 dc 41 28 ad fb d7 9f 28 53 7d 41 68 dd 24 fc 04 9b 5e 52 ea 74 62 e9 30 75 f8 c4 34 d3 4f 84 2d 2f 1d 38 8c 62 9f 98 a6 fa 09 08 5e 53 7d 0e 49 16 3f bf 99 3e 07 0a 5d 3a 48 20 f3 9a ea 73 00 b3 1a e8 31 d5 4f 71 7d 17 c5 d5 79 a6 2f e1 fa ae e1 33 fd a6 fa 12 ae 48 d3 3c a7 fa 10 57 03 3f 8f 99 7e 0e 02 6b 60 e8 37 d5 97 70 35 f0 33 4c f5 4d b8 82 db 85 6b b6 f0 dd fb 7f 7b a6 64 4f 22 34 6e d6 ef 6f 9a f5 73 0b df 65 84 db 08 a1 35 4a ef 6f 9a f1 73 08 df cd 09 ca 5d 84 d2 ba d0 29 9f dc 18 9f b4 9d dc 58 53 4f 6e 10 12 b7 55 63 f5 Data Ascii: *CDq9#5!Z.DT3N`v"5!ZFLp!^'T8MBhDBkhA((S}Ah$^Rtb0u4O-/8b^S}I?>]:H s1Oq}y/3H<W?~k`7p53LMk{dO"4nose5Jos])XSOnUc
2023-07-21 16:50:36 UTC	3167	IN	Data Raw: c7 cd 92 eb df 11 4c b0 4e 47 19 a0 f6 cf b4 56 cd e5 6c 62 e5 6f 00 b9 f8 b3 f8 f9 79 7f 1c 95 2c 7e d0 fe 59 03 8e 38 58 59 0c fd 0c 20 c7 30 8b 9f 9f f7 97 42 fb 2e 0a ad 7b d8 91 04 2d c2 ca df 06 4a d0 1a f8 f9 39 80 12 b4 06 7e c2 04 da 56 3e 75 68 0d 0c fd 6c a0 04 ad 81 9f e7 4a 2a 8d f8 7c 7a fb ba ba 93 4f cf 4f d0 dc b3 8e 07 63 92 90 4f 94 95 c0 55 24 b3 f5 88 f9 34 f2 0b dd f8 a9 41 9f 09 3f e4 84 a7 13 43 35 ea d3 d8 c0 c8 8d 9f 1a f6 69 e4 57 77 e3 07 8e 78 6a cc 68 cc 61 ca c6 23 de 1e e5 e4 8f 6b 12 f9 69 e4 e7 81 6b 12 c0 bf 9d c5 d0 0f d7 24 f6 d3 c8 cf 0f d7 24 f8 d3 c8 cf 80 6b e6 41 4f 84 59 d9 0f d7 ae 19 d7 72 2f b8 76 cd b8 96 b3 70 35 6e c5 77 cd b8 96 7b c1 b5 6b c6 b5 dc 0b ae 5d 33 ae 65 04 57 ab 2f 1a 87 de 5f 46 72 fd 8c 45 Data Ascii: LNGVlboy,~Y8XY 0B.{-J9~V>uhlJ*\|zOOcOU$4A?C5iWwxjha#kik$$kAOYr/vp5nw{k]3eW/_FrE
2023-07-21 16:50:36 UTC	3183	IN	Data Raw: a0 ef ec 82 3a 52 93 30 02 80 f9 9c ae 0d 9c db 2c 18 a9 83 7b 0c 2c df 01 cb 9f 85 8f a1 94 d8 18 40 52 a9 13 e4 83 80 59 f8 ec 4a 89 03 23 f7 e1 c0 65 95 1d 8f 46 2b 10 60 96 20 1c 9a 85 e2 73 70 3d 4d 9b b8 5a 7c 0e 09 71 e2 50 f7 70 00 db 66 01 1c 1c 70 2d b3 1b b0 9b 30 b4 99 85 97 c3 3b e0 5d 66 a1 f0 e1 40 68 39 0b 1f a1 71 30 d5 80 6f bb 38 28 12 28 c2 38 10 75 cc 42 c9 db 41 db 81 ca 7b 33 74 f3 3f 0a 00 df 4c 71 20 49 be 4c 33 c9 74 01 25 03 9f 11 2a 15 0d fa 59 51 f5 53 64 f4 b3 b3 b2 4e 0c 1f 27 bf 40 5f f6 93 49 83 02 16 2e 41 5b 09 16 b6 02 95 81 12 48 79 e1 6b e8 08 38 74 9b 4e 85 0d 57 77 30 5a 4d 9a 82 d5 15 88 db 1c 03 0c ad dc 50 43 33 1e 86 56 7e 82 ac ca 31 c5 66 3f a9 ec b8 d8 4c a0 1a 3d 28 c8 94 21 67 9a 81 0f 3e 60 75 61 f6 3b 50 Data Ascii: :R0,{,@RYJ#eF+` sp=MZ\|qPpfp-0;]f@h9q0o8((8uBA{3t?Lq IL3t%*YQSdN'@_I.A[Hyk8tNWw0ZMPC3V~1f?L=(!g>`ua;P
2023-07-21 16:50:36 UTC	3200	IN	Data Raw: 60 26 09 86 75 99 96 63 d2 16 ec a5 35 f8 80 b8 03 60 b1 0e 1f 1e 2f 40 bf f9 75 90 3a 68 64 89 c2 7f c6 31 44 f8 4b 3f 28 a8 ea 30 3e 53 b8 5f 72 80 9b 6c 9e df aa f6 3d af e8 30 cd db 37 9c cd 9a 26 b6 f2 83 6a de 7c ea b1 0c 87 7b 96 4d 0d 8f d6 6c 8b bc 0b 16 44 38 e9 22 b7 8b 84 16 6e 82 e1 65 e9 30 b4 d6 ce 67 52 82 46 19 85 5f cc 2c 5c e5 c1 18 71 fe 1e e8 1a 72 8b 39 c8 2d e4 b9 09 45 42 b8 3a 59 06 a7 b7 be 01 cb 42 7f 4e 4f 91 d3 79 40 bb 25 aa e6 1c bf e4 25 c5 1a 72 ec 92 e7 ef c2 b2 20 9f 9a df 80 36 04 f8 05 ea 9b 32 39 76 53 4b 2a 35 c0 e2 b7 f5 6d 1a 81 5b 39 d8 b9 b7 9f 41 1b 64 4b b7 9f 43 1b 7a c1 8b 20 40 6c fb 27 04 4b 79 64 ba 09 4c 01 0e d6 a8 4c 0a 0e 68 ec 26 7c 22 dc 02 9f b7 06 1f 79 77 60 81 6b f0 0d 74 07 26 3a 0d d5 fb a4 61 Data Ascii: `&uc5`/@u:hd1DK?(0>S_rl=07&j\|{MlD8"ne0gRF_,\qr9-EB:YBNOy@%%r 629vSK*5m[9AdKCz @l'KydLLh&\|"yw`kt&:a
2023-07-21 16:50:37 UTC	3236	IN	Data Raw: dd d7 77 44 19 52 51 f8 ba e6 4e 2d c6 9d ae 6b be cd 62 7c db ba 66 3c 16 13 cb dc d1 34 59 64 34 79 47 13 7e 91 8b 11 ef 68 0a 2f 32 0a bf a3 ed 90 22 b3 43 ee 68 3b a4 c8 08 6c 43 c3 4d 9b c1 cd 27 2a 55 39 63 40 57 a4 2a 04 54 11 65 c8 9b cc 90 59 6d 62 0f 19 b3 48 6a 54 eb 0c 2f 4b db 21 eb cc 3e b2 34 5e 77 19 5e 25 8d 4a 71 cd 36 23 fd 0d 4d fa b6 41 fa 3f 33 54 09 8d ea 36 33 b1 82 46 f5 84 e1 95 d1 a8 9e 33 54 0a 22 6e 68 3b c4 66 76 c8 86 06 03 36 03 03 1b 9a a3 b4 99 f0 69 43 c3 60 9b c1 e0 0d 0d 83 6d 06 83 ef 6a b3 2f 05 b3 8f 28 64 8f 18 b2 94 c6 ec 01 43 15 d7 a8 9e 33 54 68 62 32 7c c2 64 c5 61 92 95 7b da bc 1c 66 5e f7 74 d7 ec 30 66 71 4f 33 44 87 31 c4 7b 1a 08 3b 0c 08 df d3 f6 91 c3 ec a3 7b da ce 75 98 9d 7b 4f 33 7d 47 31 fd 48 40 Data Ascii: wDRQN-kb\|f<4Yd4yG~h/2"Ch;lCM'U9c@WTeYmbHjT/K!>4^w^%Jq6#MA?3T63F3T"nh;fv6iC`mj/(dC3Thb2\|da{f^t0fqO3D1{;{u{O3}G1H@

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.5	49858	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	2125	OUT	GET /static/webpack/production/aa7bc43daf3c3d0c03a8.i3qsTcFgoOzzyfb1BvKL1Ngsl_TBIEdwWAwwi2z1rq4.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	2513	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49931 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:11 GMT ETag: "c2295f578375683a6fb54652cbfd7f4b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 9defe0d67603d45217a1199d0f877384.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ct95CSg3eZlOTJ48EYmyGB-kVuexqydU90_qjRmre-MlJZa6yxELMQ==
2023-07-21 16:50:36 UTC	2514	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd fb 7a db 48 92 27 fa 3f 9f 02 c6 9e 63 93 2d 02 c6 fd 42 15 db 2b cb 72 cb d3 b2 5d c7 72 a9 a6 47 a5 d1 07 91 90 c8 36 44 68 09 50 b6 2c 69 bf 79 8d 7d 8b 7d a6 f3 0a e7 05 4e fc 22 13 37 12 94 e4 5b 77 cd 6c b9 4a 20 90 f7 8c 8c 8c 8c 88 8c 8c ec 7e 9c ce c6 e9 47 fd f8 78 ef ed d6 8b ad e7 7b 3b fc b2 f3 e2 78 7b f7 97 37 7f dd 3f 3e 1e de 9b e2 e6 e6 f0 a8 a7 5f 2c b2 49 f7 f0 50 bd 88 2e e2 f9 71 34 3e 9f ce fe 67 ed fd 38 3d 3d 3d be 9c c6 1f 8f d3 59 72 25 63 4e a8 e8 78 5e 7c 2c 66 e3 24 96 1f a3 24 5d 8c 8f c7 e9 28 93 01 e3 28 9b 9c a4 d1 7c 8c ef ff 39 32 e3 c8 35 3c 57 3d ea 5f 77 4c c3 0b 06 a7 8b d9 28 9f a6 b3 6e dc cf 7b d7 9d a7 7f 7a d4 51 fe a4 6c a7 17 57 f3 e9 d9 24 57 2c c3 08 95 bf a4 e9 59 12 2b Data Ascii: zH'?c-B+r]rG6DhP,iy}}N"7[wlJ ~Gx{;x{7?>_,IP.q4>g8===Yr%cNx^\|,f$$]((\|925<W=_wL(n{zQlW$W,Y+
2023-07-21 16:50:36 UTC	2529	IN	Data Raw: f7 14 f1 14 e4 9b e9 14 09 d3 07 a2 b0 ed 80 8b 0f 0a 2a 2e a9 56 28 88 16 13 24 6c 52 19 97 4c 8f b4 07 ec f8 41 53 14 14 5b 50 98 90 36 14 30 6b 3f 69 b2 d9 0f 4e 7d d7 cc a8 8f a4 76 92 44 f5 cd ad 2f 1d cf ce 3d fb 78 ff 09 86 e9 5e c4 4f e7 df 19 e1 eb 48 80 2d 35 b1 b8 a2 d9 bc 55 87 e5 0e bf 08 13 eb a0 94 27 38 46 61 30 85 5a 11 56 e6 10 c9 35 7e 95 25 e1 8f e8 3c ad a6 3f b8 0a 8d f7 54 7e 6c 25 0f 18 a8 cb df 03 65 0a 04 ca 01 18 7e 40 af 8c c7 bc 25 a9 db ae 25 58 47 6c 52 12 06 07 cc f5 79 cc 36 61 d5 26 34 56 c4 b3 58 b5 1d 08 f3 b6 b7 17 14 bc a4 25 b6 ad 89 0f 32 b0 0c da bb 81 60 2f 97 67 7c 2b 07 79 2f ab f2 80 96 43 d1 8d a6 4f 42 5a 37 82 91 ee 7b 81 dc d3 23 81 23 14 33 97 37 fd a0 63 20 11 d3 a9 31 d1 3e 94 14 2e ef 0b 53 b1 1a 17 cb Data Ascii: *.V($lRLAS[P60k?iN}vD/=x^OH-5U'8Fa0ZV5~%<?T~l%e~@%%XGlRy6a&4VX%2`/g\|+y/COBZ7{##37c 1>.S
2023-07-21 16:50:36 UTC	2529	IN	Data Raw: be 84 67 15 75 3b df 8b 55 91 5b b1 24 2b 53 67 4c 0f b2 2b 8d 04 85 41 af 2e 5e 3c df be 74 21 69 a2 f9 96 09 35 81 cd 32 ba 8c 24 1e c2 82 92 d1 b3 fc 11 09 c5 34 48 a1 cf dd 34 88 8d f5 b1 79 c0 29 b4 22 85 07 cd 45 18 22 bb 86 5a c4 0b 6a d1 64 35 d0 84 10 20 b1 c3 8b 8a b4 32 45 a2 d5 4a d2 50 19 8a f2 99 9d c4 1b 86 81 2b d4 aa 36 41 91 e7 d9 36 85 38 54 36 a5 a4 a2 6c 46 34 34 04 e2 1d c6 c6 e3 56 42 2b 4a 28 19 70 32 91 0a 56 01 bc b3 58 bc fa a1 43 e0 08 3d 40 c3 83 7e 85 57 1d 68 93 8a 78 17 d5 97 45 69 b2 2c 8d 6b e4 7d da a2 42 91 0c 1c 57 b0 4d 33 9d a6 07 ef 34 d3 a2 84 9d 08 58 22 84 e0 24 c3 00 90 09 79 35 f0 3c 5d a8 b4 7c d1 20 4d 54 58 15 c4 9c 74 85 42 79 7c 7e 91 44 bf 0b c6 0c 3c b1 82 85 ba a0 f2 6c fb 81 7d 6c f7 c0 df 0d 2e 4d 67 Data Ascii: gu;U[$+SgL+A.^<t!i52$4H4y)"E"Zjd5 2EJP+6A68T6lF44VB+J(p2VXC=@~WhxEi,k}BWM34X"$y5<]\| MTXtBy\|~D<l}l.Mg
2023-07-21 16:50:36 UTC	2568	IN	Data Raw: ea 59 34 87 f0 03 96 99 6e dd 64 8c 75 4a b5 00 a8 93 76 cd fa b7 46 c8 55 cf a0 99 0d 2a dc 80 d2 49 34 fa a0 45 f3 79 fa b1 ae 1f ac 4f 09 ab 98 a4 d6 d2 24 65 c3 83 07 b0 5b 06 2c dc c0 6e c1 48 90 46 d7 c6 f6 00 3d 47 c4 43 3a f2 2f e0 cd 0e 4d b2 13 8e 69 41 03 e8 97 76 86 cc ee 42 30 36 ac 3d a2 68 21 4a 0b 1d 1f 89 c0 4d 97 9a 3a 48 50 60 30 c3 00 16 11 05 20 65 70 90 f0 26 8c d8 8a 89 0a d6 c5 a8 ed e4 c8 2a 1a ca 47 53 11 6a 23 44 b2 81 a8 1d 8a e6 4f ee d6 14 9d 44 84 6d f9 49 94 24 15 b2 e5 d3 d1 87 78 fe cf 60 43 3c 42 5c 6c 7f f8 bc 9b 67 6a c2 0a 84 5e 4c 73 9f d6 6f 84 b3 c5 18 7e 42 8e c3 67 56 24 13 ff f3 c2 1b 85 0a cb af c2 f6 93 0a 80 36 d7 dc 12 a1 0c 30 58 ee 3c 40 df 43 ec 81 07 73 14 d3 24 f1 c6 d0 6d d8 ac 8a 1f 51 0e 36 fe 60 de Data Ascii: Y4nduJvFUI4EyO$e[,nHF=GC:/MiAvB06=h!JM:HP`0 ep&GSj#DODmI$x`C<B\lgj^Lso~BgV$60X<@Cs$mQ6`
2023-07-21 16:50:36 UTC	2576	IN	Data Raw: 97 cb 06 c3 2e 23 38 cf e1 93 e1 92 06 0a 1b 7b 45 ba 61 7a f4 1a fd 5e 7d dc ba 0b 0f cc 0c 20 38 31 73 58 c7 87 cd ad 80 04 14 7b 3f d7 1a 57 90 a3 e1 aa b3 fa 6a 64 44 35 f0 a5 66 c2 eb 38 ae c3 8a 1c f3 c5 46 73 dc 5f ae 67 0b f7 40 ea ea f0 aa b8 2a 3f a6 da fe be 9b ef 6a d7 f2 65 f2 d8 3e 39 94 b6 12 aa 5c fa 3d 45 7c 88 cf 65 13 11 21 ec 8b 08 08 cc 16 0e 84 31 fe 08 5b 3f b6 c7 04 ad 24 d4 5e bc 82 b9 8a db 6f b0 37 be a1 41 2a 5f f4 da 12 34 d6 2a a0 fb ce 27 d7 7d ad f4 9c a2 80 10 ec 5b 04 ea 78 08 dc 05 4e 32 b8 81 c9 39 dc a1 7c 9e 84 ad f3 ed 81 54 1b 7a 4d eb 17 ee e7 4e 52 80 e2 03 42 23 c1 9b f2 56 e5 f9 a2 72 e9 af 8b d1 8b f1 0d 9d 54 c3 05 c9 c9 72 1f b9 6d 80 41 ef 91 ee 50 58 57 c6 3c 86 85 2c 2e bd 26 18 5d 58 3a e2 dd cd 00 91 96 Data Ascii: .#8{Eaz^} 81sX{?WjdD5f8Fs_g@?je>9\=E\|e!1[?$^o7A_4*'}[xN29\|TzMNRB#VrTrmAPXW<,.&]X:
2023-07-21 16:50:36 UTC	2592	IN	Data Raw: 23 bc 27 4b 61 61 97 22 8b 29 19 67 9b e6 64 b4 61 4e 52 ab 50 4d ca 6a b4 2a f4 00 f5 cc 33 4d 15 56 4b c6 03 d9 a4 20 38 19 cc 91 9e 30 37 f0 a4 98 ec 24 19 52 bd a1 5f b0 5e 10 1f 29 6b 53 42 22 70 1b 0a 64 01 98 95 8d 87 95 76 0c f5 dc f4 42 1e 3d bf d3 cf ef c6 07 84 95 a5 30 1d c2 90 91 9c 40 89 11 81 a9 db 04 b9 d8 e1 e4 14 a4 c3 30 d7 c4 d5 04 a9 26 38 b5 67 e6 05 98 2c 2c dd d0 63 7f 87 4d 57 c6 48 23 ef 33 8c 77 66 31 25 12 6a f5 93 da 36 1e 64 88 db 27 b6 71 e8 e0 25 b7 a1 08 dc 69 62 20 40 cc 59 09 21 c5 03 1b 28 28 04 dd 48 5c 73 1a 0f 58 4b 5f 2d 81 bc 14 2e 0a 62 12 cb 91 c2 7a 72 6b 9b 80 bc be a5 4d de 7c d4 36 2d cb 38 5b 99 01 45 6f 28 71 07 b1 ac f7 f6 d8 65 ab ec fa e5 78 72 f6 c7 95 4e ef 0f 40 e0 93 20 9b c3 f9 0f 4e ae 71 46 58 ab Data Ascii: #'Kaa")gdaNRPMj*3MVK 807$R_^)kSB"pdvB=0@0&8g,,cMWH#3wf1%j6d'q%ib @Y!((H\sXK_-.bzrkM\|6-8[Eo(qexrN@ NqFX

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.5	49859	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	2148	OUT	GET /static/webpack/production/e1bc9664cd927a5217ca.Wqovou_Yti7G8yY3_MC3rgY9LTbMwHwduywhmvmZ3ZY.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	2601	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 469214 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:27 GMT ETag: "7bc1b91faf9d93a22e801c231e6f9078" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 fec5e83bcae9ab1295b776b3f64183d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: LLx06l_Tczmb9h2DSjGMwEKj9_FBl_NsrlE1wJe26H6FsgkUkHfMIA==
2023-07-21 16:50:36 UTC	2601	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 6b 63 e3 b8 b1 28 f8 5d bf 42 66 f6 3a e4 1d 5a ed 57 bf a4 61 7c dd b6 7a da 67 fc 3a 7e cc 24 71 bc 5a 5a 84 24 c6 14 a9 90 94 dd 1a 5b e7 b7 6f 55 01 20 01 3e 24 b9 ed 64 37 8f b6 08 14 80 42 a1 50 28 14 0a 05 f3 d1 0f bd e8 b1 d5 eb 1d 9f ed 1f ee 7f 39 ee d2 8f ee 61 ef e0 db f5 e9 af 97 bd 9e b3 14 e2 f9 f9 e6 d6 6a 4d a6 c9 c8 bc b9 31 26 ee 84 c5 3d d7 1b fb e1 ff 28 bf 7b d1 60 d0 7b f0 d9 63 2f 0a 83 99 c8 b9 83 aa 59 2c 3f a6 a1 17 30 f1 d1 0f a2 a9 d7 f3 a2 7e 22 12 3c 37 19 dd 45 6e ec e1 f7 ff 7c fe 74 d7 ef ef b2 3b e3 d6 de 8f 63 77 66 6e 7d b6 5a fd 28 ec bb a9 79 33 98 86 fd d4 8f 42 93 d9 a9 1d 5a 4f 8d b3 bb 7f b2 7e da f2 d8 c0 0f d9 79 1c 41 7d e9 cc 4c 6d a3 d7 63 c9 49 e4 4d 03 66 d8 4f 0f 6e 30 Data Ascii: kc(]Bf:ZWa\|zg:~$qZZ$[oU >$d7BP(9ajM1&=({`{c/Y,?0~"<7En\|t;cwfn}Z(y3BZO~yA}LmcIMfOn0
2023-07-21 16:50:36 UTC	2612	IN	Data Raw: 88 7a 5d 3e 24 af d4 46 f7 2a 53 c5 e1 e0 bb 7f 24 3f bd b3 da 37 42 41 31 6c 43 a8 28 b7 76 ea 30 ba b6 01 7f b6 6e d1 7d 7d 81 2a b7 b7 20 6f 69 4b 16 34 93 dd cf c7 78 32 74 f8 65 dc 45 69 1a 8d e1 23 de f3 c9 40 d6 ce 93 30 9f 43 62 e6 f5 a4 6d c4 64 02 73 1c bc f6 8e 26 b2 b6 41 2b 03 4f 20 fb 58 5b d6 5d 51 1d af c4 27 d3 9c 4e f7 3a 87 04 ee 59 e6 44 b0 67 04 29 1c fa d3 f1 46 be 08 a0 43 b1 f2 a1 f1 aa 0c 96 fa a4 2e 1a 18 ba 7d c3 c7 0b 76 86 aa 1d 61 32 5d bb b3 8d e8 6e e3 d1 0d ee d1 c7 7d 3a 1c 65 75 6b 5b 8a 2c 3e d3 1c 4d a9 91 b6 2c 3d c6 b8 f6 80 6e fa d4 30 dc 3b e0 f5 0d 5c 45 92 94 2e 14 de b9 b1 56 13 01 ec 53 fe 25 cf 9e a3 39 56 ed 87 88 6a 6b 07 aa 27 86 e7 04 30 da c8 a5 5c bf 3e 71 87 a1 9f 4e 3d 66 4f b3 9c af b1 4f 94 b4 27 59 Data Ascii: z]>$FS$?7BA1lC(v0n}} oiK4x2teEi#@0Cbmds&A+O X[]Q'N:YDg)FC.}va2]n}:euk[,>M,=n0;\E.VS%9Vjk'0\>qN=fOO'Y
2023-07-21 16:50:36 UTC	2628	IN	Data Raw: 05 d3 af 62 b1 85 17 24 8e 3b 4b 2e 5c 14 d7 ca 9c 8d 74 0e ab 33 71 ae c0 60 1e 9a 38 5f c9 60 9e 73 9c 61 d8 71 41 5a 94 59 ac 51 cd 63 7d e0 b1 c4 46 e3 91 c7 79 4c 65 b1 7a 79 45 2d 55 ac 9b 39 0f f5 17 2f 94 ff e4 06 ab 7a 16 f3 ca 2c 56 69 d3 ce 79 ec 6b d1 8c f7 b4 40 ef cb bd 9a 96 a9 7e 95 aa 99 1d 67 37 77 da 3e dd 60 54 1c b9 74 4e c8 ef d4 11 be 76 03 55 c3 cc f2 4a ca 64 b1 82 bc 0b 25 c5 51 3d ff b7 c3 9f 40 f0 e7 a6 64 79 62 fc f2 6b 47 5f 73 2a 5e e7 ac ce 0f 81 89 09 13 67 86 6a cd 85 1b 7a d1 f8 88 6b 48 a1 d9 85 85 27 c9 23 f5 67 1d 08 2a e7 82 bb 74 d9 7e bd a4 45 e3 34 7c 85 e6 5f 4d 5f b3 87 34 02 7e 9e cc 2d 27 e6 6f 80 f9 02 e6 8b 6f a1 b0 28 f1 fc 1c c2 a6 d1 b7 9f 54 5b 5e d0 52 be 70 1b e9 3a 4c db fd 16 bc 7f 2c e8 bd 8f b3 ad Data Ascii: b$;K.\t3q`8_`saqAZYQc}FyLezyE-U9/z,Viyk@~g7w>`TtNvUJd%Q=@dybkG_s^gjzkH'#gt~E4\|_M_4~-'oo(T[^Rp:L,
2023-07-21 16:50:36 UTC	2644	IN	Data Raw: 72 5c c8 26 93 ca f3 cf 19 95 90 52 9c 28 fe 28 f6 c6 fb 10 24 3c da ce 5b 7a 2c e0 38 63 f5 cb 35 78 22 ee 5b 43 3c 02 6d dc 78 7e f5 ce c7 cb 0b 2f c1 ef a0 b4 da 07 79 4e 5d 64 d5 df 51 4b 05 83 41 d5 e3 87 e1 6f 83 43 b4 c4 da 32 fe 5e ba a2 a6 64 37 8f 06 c3 37 14 ee 6f a5 f9 e7 87 a4 ac 5c 62 64 c3 f8 41 6f a3 08 bf 08 12 7f 84 92 31 14 ab 00 ef 6b 10 4c 1b a1 f4 95 5b 05 db 1f 01 06 6a 16 05 05 60 98 56 3f 49 6a cb 75 f2 c7 f1 f1 7b 58 1a 7b c7 27 fb 68 cc a6 2d 95 32 cd 7b e8 54 73 ed 5f b0 80 d4 15 f3 c2 15 dc 86 9a 23 7a da 56 a1 ca d5 c5 13 31 bf 0b bc f5 d3 83 0b 0a 53 35 16 5a 0f 57 3c 82 40 01 b6 7c 6c e8 c6 b9 bb ad bc 90 3e 92 a5 04 bc 47 5a ad a2 65 01 14 6e f2 85 61 f1 95 e1 cc be 34 4c d3 65 9f 17 78 f0 62 56 c3 ea ab 9e 61 d7 99 cd e0 Data Ascii: r\&R(($<[z,8c5x"[C<mx~/yN]dQKAoC2^d77o\bdAo1kL[j`V?Iju{X{'h-2{Ts_#zV1S5ZW<@\|l>GZena4LexbVa
2023-07-21 16:50:36 UTC	2676	IN	Data Raw: 47 a9 21 e6 4f 4f 6e ac 1f 41 30 06 f9 9b 43 2b f7 cd 86 de 6e 2f 9d 3a 7d 8c 6a ea fb 25 48 ef 8a 53 a3 46 1c 8f 7e 5a d9 f6 0f 88 af 90 13 5b 6d 7e dc da 33 81 61 12 6d 87 6f a5 b4 a8 4e b9 9f 76 ee c2 77 5b de 4c d6 24 35 34 32 ed 45 3f 26 b9 43 93 4d a9 c0 92 9c 47 e3 c6 ea 9e 9d 7b 63 54 3d a7 9b 82 d5 43 20 0d 28 14 d7 c3 8c 08 b0 b0 86 3e 63 e8 d7 ea 32 ea 5d 15 05 97 b5 17 1b 15 f5 c5 de 1a 75 6a 57 e1 6b 57 fe a8 de e4 3a 15 4b 55 95 6a ad 0d 43 b5 bc be bf 51 c5 a4 be 58 d7 db 8d 8d 42 77 31 e9 1a 7a a2 6b d4 6b 90 4d 6b 47 5c ed 27 d8 14 b5 f8 e5 66 f2 4d 86 e1 4f ad 11 8d 52 2b 72 0c 3e 89 b7 27 86 43 65 d2 24 c7 d2 86 57 07 d1 79 c9 d7 68 19 2b 16 23 a3 7c ac 13 4f 96 a7 8b a7 d2 4c d3 aa 2c 36 1e d6 7b 59 d0 46 dc e4 ce 25 d7 a0 99 c9 92 24 Data Ascii: G!OOnA0C+n/:}j%HSF~Z[m~3amoNvw[L$542E?&CMG{cT=C (>c2]ujWkW:KUjCQXBw1zkkMkG\'fMOR+r>'Ce$Wyh+#\|OL,6{YF%$
2023-07-21 16:50:36 UTC	2677	IN	Data Raw: b3 a2 78 16 80 ac 7b 13 46 8b d4 42 f3 61 1f c6 1c 76 23 2d 2c a3 b0 dd 72 e9 18 38 b9 b8 9a 30 40 91 df c5 62 e6 b3 4a 29 22 68 55 21 9e ef 43 7e 7a ac 31 4c fd ac 76 64 2a 7e 6d a4 8c cd 1d 24 10 37 d2 f2 41 28 b8 19 3a 64 d2 73 da 94 28 57 b8 2c 0c 65 24 5f 37 c9 cd 4e 2d 15 1b e5 dd 8d 0d 32 28 ef 10 1a 2c 39 61 10 ef 0f 78 9d 42 8d 4a f0 cc 23 0a 63 6f 6b 39 0b b0 a5 7b 61 7d 25 19 2d 36 58 d3 c8 d3 3c a8 95 15 9d 43 46 4f a9 f7 c5 a3 f9 3b f3 61 39 b0 b3 33 5f ee 5f 08 42 96 a9 bb 93 44 78 25 ca fd 14 c5 df c6 91 4e 26 f6 2f b4 ae 22 e4 58 10 22 58 ec 61 1c 45 64 16 62 87 f3 d2 4f 22 15 07 30 7a 1b e2 65 84 53 9c 37 15 51 08 d2 4a cc c3 65 d9 15 67 df 2f 99 51 bc 7d 23 f0 7e 5e 09 e4 83 d7 e8 c5 87 d0 7e 76 10 98 87 1c 7e 23 f4 28 39 f6 11 a0 a4 2f Data Ascii: x{FBav#-,r80@bJ)"hU!C~z1Lvd*~m$7A(:ds(W,e$_7N-2(,9axBJ#cok9{a}%-6X<CFO;a93__BDx%N&/"X"XaEdbO"0zeS7QJeg/Q}#~^~v~#(9/
2023-07-21 16:50:36 UTC	2693	IN	Data Raw: d3 0b 55 ef 74 71 c1 7e b6 50 29 46 93 de 94 db 08 89 5b 10 a6 fd ff ee ff dd dd d8 91 9f b9 af 32 2d 70 2f 9e f9 34 8a 2a ec 86 c7 4a 98 1b 5d cc 62 7a fa ee ff cb fb 82 ea e3 7a 8d a8 ee 23 73 11 4e dc 3e 10 ac ca 89 e5 e8 dc 23 12 97 bc 65 78 5e f4 12 e7 22 32 31 48 d1 b7 c0 11 a6 08 26 3e 0b 70 b2 71 f6 6f e6 cf 9e 55 82 d0 3c 5c 38 94 85 e3 04 b5 d8 4e 0b 32 b3 38 e0 78 c0 74 9e ef 2f 08 9a 23 43 4f b1 b3 19 5e ec 63 8e 96 f5 7c 33 d8 7c 6e d9 cf c5 f6 29 0a 42 83 2c d8 ba 82 0d c9 20 3a 06 e2 78 78 28 47 22 4d 69 cd 79 78 e0 1f 2d 53 3a 56 48 2d 4d 1b 70 86 56 fc ec d9 46 c2 b6 5b 17 ec 60 ed 98 b5 82 11 ee 64 44 d4 8f 69 53 1a 03 ab b4 0e 2c bb 9b 0f a3 b4 bb f4 72 5a 09 8c 04 54 20 96 c4 40 2b 71 95 54 66 e5 39 f7 73 fb 34 15 48 fa 63 ef 11 c3 cf Data Ascii: Utq~P)F[2-p/4*J]bzz#sN>#ex^"21H&>pqoU<\8N28xt/#CO^c\|3\|n)B, :xx(G"Miyx-S:VH-MpVF[`dDiS,rZT @+qTf9s4Hc
2023-07-21 16:50:36 UTC	2694	IN	Data Raw: e8 51 1c 45 08 4a 11 b1 8f 54 fa 60 41 da b1 7c 82 82 3d 88 e3 4f 8b 39 27 d0 43 b4 54 12 a9 47 7e 31 42 3d e9 a5 31 ae 9a cc 5c 8d d2 4a 29 9c 31 31 00 93 85 44 35 74 59 2a 93 a2 c2 9b 56 ac fa 94 f1 49 e0 87 89 ea 93 fc ca 63 73 6e 46 9f 8a d5 69 5f 32 36 25 7f 09 7b 3c 2c ea 88 31 ae 70 dc 46 95 e5 3e 7e 74 01 ce 4b bb 00 25 37 10 02 b0 d3 cc c4 38 e5 f9 21 5d 39 f5 88 05 de a8 78 b5 f3 d5 f9 50 42 c5 13 14 3b 72 43 48 00 83 38 a1 33 c9 44 e3 99 0a 78 de 75 b3 5d 96 95 bb 59 27 9f 11 94 1e 38 2f 9d 73 de ab 88 fa 8e e9 d9 9d 22 61 da c4 e5 f2 e2 4e f4 cd 67 45 81 fa b4 96 8b 2c 96 78 58 3c 30 ae 2a b4 74 b6 2c 97 bb d4 c0 d2 4b dc 19 e7 09 4f 6d a2 f9 86 f9 29 40 72 15 0b 6e 7f f5 d9 f7 69 82 c3 aa 0d b0 19 e4 ed f9 c9 85 b3 68 95 b3 95 38 26 da 37 69 Data Ascii: QEJT`A\|=O9'CTG~1B=1\J)11D5tYVIcsnFi_26%{<,1pF>~tK%78!]9xPB;rCH83Dxu]Y'8/s"aNgE,xX<0t,KOm)@rnih8&7i
2023-07-21 16:50:36 UTC	2711	IN	Data Raw: 51 7c 0a 07 15 e0 f5 17 e1 a1 cd 27 14 ec 38 b0 b0 cc be c6 43 bf e3 90 c9 9d 89 b7 50 bf 83 e9 ea 37 3a 92 d0 ef 71 e4 ce b8 0b ff 39 19 53 6e 3b e7 f9 0f c5 32 db 18 35 08 a1 b3 92 8a e0 25 3e 28 90 90 61 f1 27 9c 7a 64 dc 65 6e ff 3b dc 1e db c6 cf 57 f1 2f 32 78 ae 37 74 ff 7b 5e aa ad ec 80 67 e7 de 05 60 21 7e 94 1b e4 12 c0 45 b0 25 31 6c 21 f7 d1 23 54 ad 1b d5 01 14 d1 09 f5 25 86 c3 b9 95 63 55 77 10 c2 5a 85 14 e6 9c 75 25 a6 28 ed 3d 41 94 36 01 d7 66 e7 e1 05 bd f9 a0 b2 92 71 9f 93 b9 d8 46 f4 1a c0 e5 66 de ee e1 36 c4 6c e4 2f 97 2c be 49 61 46 a5 2a 5a cb 45 62 0b bd 38 17 d4 1e 37 ea 54 1b d5 1c 5d 97 c2 91 36 b1 d3 15 f9 93 9d d8 80 6f 7c 26 ce 69 3b 11 77 3a 89 0d b4 1e 47 ee 3a 84 ee da d9 3f 23 e3 0b d4 69 23 f8 b4 89 2d 48 eb 0e b3 Data Ascii: Q\|'8CP7:q9Sn;25%>(a'zden;W/2x7t{^g`!~E%1l!#T%cUwZu%(=A6fqFf6l/,IaF*ZEb87T]6o\|&i;w:G:?#i#-H
2023-07-21 16:50:36 UTC	2727	IN	Data Raw: f2 25 60 14 fc 01 3e e2 43 17 80 cc e3 9b 61 9f 03 ea 9c df 52 83 80 16 bc b9 56 68 cb 8d b5 7c 9b 7c a5 c2 51 c9 8e 57 1a a1 31 bb b8 a8 12 4b ec f8 6e d1 c1 83 08 31 c6 84 32 9c b1 cc 1f c9 a8 0d 69 0b 95 1d 3b 92 fc 85 3c 27 0a b6 44 a3 39 60 38 90 8b e9 d5 ef 26 db 37 4c d5 c4 41 1c b6 f5 6d 01 94 e7 54 46 7a 46 fe 53 d1 a5 2a 5a 26 07 18 fa e6 d8 eb 71 39 e7 6a bb 8d 4e f6 c7 24 25 85 5d ec f5 53 fe 33 66 2f 87 e9 37 73 f4 ca d1 ef 1e 6c 16 9c 76 4d 04 22 a8 e8 dd 4e 20 2f 21 8b 69 0c 1b 6f 07 d9 e7 69 34 b6 dd e2 a4 aa 5a e9 b1 38 83 fd 20 82 6b a4 db bc c1 87 c4 2b e4 71 98 cd 66 59 ca 76 b2 ec 46 44 99 8d a4 d1 5b 5e b3 47 d9 14 1b 18 b6 61 bc 1c 2c 63 6c 4b 91 08 1f cb 6e 73 48 af 90 bf e5 98 4b 6f 56 c4 eb 6a 33 25 13 77 af 7d 0b 95 5b 23 1b 9b Data Ascii: %`>CaRVh\|\|QW1Kn12i;<'D9`8&7LAmTFzFS*Z&q9jN$%]S3f/7slvM"N /!ioi4Z8 k+qfYvFD[^Ga,clKnsHKoVj3%w}[#
2023-07-21 16:50:36 UTC	2743	IN	Data Raw: 7f d1 1c f1 3b 57 b1 e0 ab bf 49 73 12 26 43 bf 9f 9a 03 6b 26 ba 19 43 37 6e fe 08 05 2e ae 63 d1 db 10 18 9a 21 31 34 84 e3 7d a5 bb f1 f9 38 af 85 9e 2d 45 bf 4a 46 3e 80 65 18 c0 98 cd b3 6f cd f0 e1 3e ce 9b 15 fc e6 45 f6 7c 7f 2a 62 71 5f b7 45 ee c6 f5 37 2f 36 ae 69 1c a2 54 b7 6d 4e d5 71 5b e7 53 69 12 57 88 02 37 c0 93 dd c0 14 6e f2 29 74 94 29 74 ad 8d 4e 36 ec ae 34 d4 1b 1c ec 15 1b 6c 87 2e 60 f8 eb 2a 3b 81 5c c4 7d 59 a1 a3 a1 b6 72 47 68 1d 9e 75 b4 c6 3f de 45 93 38 31 d7 d6 c9 8b db aa 4c 34 79 78 05 c9 c9 48 ad c0 13 8b fd be 10 3e af 21 3e 6b 55 17 51 36 32 56 36 55 68 80 3c e8 54 c5 24 99 80 70 15 9e ca 8b a8 9c 48 ed 31 77 05 82 5d 3b 84 5f 99 f2 0a b6 73 9a 1b a2 b6 63 fa 3a 62 8f 91 da 0e 7d ed 4e d0 c5 10 7e 47 f4 0d bf de 78 Data Ascii: ;WIs&Ck&C7n.c!14}8-EJF>eo>E\|bq_E7/6iTmNq[SiW7n)t)tN64l.`;\}YrGhu?E81L4yxH>!>kUQ62V6Uh<T$pH1w];_sc:b}N~Gx
2023-07-21 16:50:36 UTC	2764	IN	Data Raw: 23 9b af 54 cb a9 01 96 f8 18 77 47 bf 26 1c 7c 85 7e 02 ec 87 2b 60 76 d4 30 66 68 5b 5d 32 a4 de 28 db 5b 63 cc ec 1c 76 b3 ca 01 9c 78 d2 4a 14 c3 e8 66 04 05 30 b3 82 1f f2 6c 0c 88 14 52 e4 eb 4b 0a de 33 1f 09 b7 a8 65 64 db e6 f0 02 6c ed f8 12 20 39 f5 6c 11 7d 06 ae 5b c3 7d af 9f 6e f5 7a 40 44 a3 78 5a c2 87 fc 70 ab 7d 11 33 81 2e 50 11 8c 4b 4b 0b b0 63 ec 91 98 25 1f a0 05 f1 f4 d6 c6 56 25 99 10 85 8c af 27 23 2f 48 b7 5f 30 d9 f6 3a 97 6d af af f1 f8 ad 4c b6 fd e2 29 93 6d 3f e3 a2 ed 75 26 da 5e 65 92 6d 8c e4 3a 26 c9 f7 3a 93 6d 53 48 57 94 6e 3f 7b c9 a5 db 2f 99 70 7b fd 35 93 6d af bd 58 63 d2 ed 75 ec 88 84 db 35 94 78 2f 28 e0 0e ca f2 ed 04 2e 28 81 b7 c5 22 11 a1 9c 68 7b 6b f9 c7 65 8d 78 fa 36 04 e0 ce ea 37 b0 be 14 0f 29 4a Data Ascii: #TwG&\|~+`v0fh[]2([cvxJf0lRK3edl 9l}[}nz@DxZp}3.PKKc%V%'#/H_0:mL)m?u&^em:&:mSHWn?{/p{5mXcu5x/(.("h{kex67)J
2023-07-21 16:50:36 UTC	2780	IN	Data Raw: 52 e1 15 0c ff ea 0d 8f 4e fe ee 0d ff 7e f4 e1 f4 f8 fd 89 37 1c d2 93 b4 9c a3 e0 ca 26 e9 09 67 38 a4 a8 5e ae 64 bd ab 99 d6 70 98 19 83 1b 49 42 75 6a 38 9c 8d e5 00 47 09 c3 a1 50 eb 28 bd c2 33 50 a4 65 3d 72 84 7d 87 54 a6 3e 20 86 c3 55 b4 90 63 f0 05 55 64 ac c7 0a 81 e1 4f 46 80 fb cc 4f 46 94 02 c7 54 c0 53 8b 3d 21 96 a7 10 f2 cb b9 68 4f b8 f4 e1 7f 8d 6e 50 70 98 aa 38 db 9f 68 23 0d b3 9e 2e 19 b4 a4 3a 81 53 0d af c4 bf 0a a0 16 82 04 38 5c 72 52 37 21 ca e9 37 1a 76 a9 be 37 2d bf 36 8b 15 7e 79 ae 37 a8 8c b1 8a c0 94 f2 ae f5 25 60 9c 61 12 8d e3 24 5e 65 60 3f c1 b3 f3 22 30 b2 27 08 94 56 a9 77 05 b7 7b ea cc 06 fa 0b 34 51 a4 0c 0a 1f ba 52 2f 73 26 23 85 53 98 f8 a2 da 03 33 93 59 69 9f 5c e8 fc 00 43 2f 18 a1 51 69 d1 7d 61 34 8d Data Ascii: RN~7&g8^dpIBuj8GP(3Pe=r}T> UcUdOFOFTS=!hOnPp8h#.:S8\rR7!7v7-6~y7%`a$^e`?"0'Vw{4QR/s&#S3Yi\C/Qi}a4
2023-07-21 16:50:36 UTC	2796	IN	Data Raw: a1 b4 c8 d9 83 0f a3 56 1c 76 1e bf 2b 98 5e 79 69 02 13 c0 b6 15 f1 56 dc 02 99 c2 e9 21 43 f1 2a 6e 7a ae ed 53 67 63 11 9a d2 26 c0 6a a2 8d aa 69 34 8c 1c 7f 56 5c 56 ed a2 d6 18 b8 af 26 f9 89 9c 4b 0b 7c d3 80 41 70 1b 03 49 f0 e4 02 6b c1 c6 32 9b 15 ab cf 82 9a 6b f9 5e a7 fb a8 a4 d6 3a 09 c4 e9 e0 6f e9 0f da 24 b4 8a 8b 07 7d 8f 79 44 0b bb 2a 5b 26 0c 6c a6 54 62 cc 50 ff 2e e7 d4 ac da 4c 92 24 c4 65 24 41 cc 20 09 85 8d 07 e5 8b 17 36 15 4e 90 7f 7f 3b bd 88 5b 29 57 4b 91 8d cb 93 85 da 02 74 21 5b c7 c7 09 e6 f3 ac 99 0d a1 4c f9 a1 5b 2a a7 0e 99 cb 80 2a 2a 91 0e 71 a2 97 84 2e 2d c5 da 80 2b 73 f9 19 a3 9e 6d 73 41 8c 52 77 59 14 b2 b4 d8 0e 8b 75 1f 39 12 98 4c d8 5c 47 79 76 d0 7c 2f 2e a5 a5 7c c8 aa 0b a5 ea b9 c2 4c 76 54 36 64 e1 Data Ascii: Vv+^yiV!CnzSgc&ji4V\V&K\|ApIk2k^:o$}yD[&lTbP.L$e$A 6N;[)WKt![L[***q.-+smsARwYu9L\Gyv\|/.\|LvT6d
2023-07-21 16:50:36 UTC	2812	IN	Data Raw: 2a 91 f9 2c 2b 46 13 5b f2 3c a2 c3 c2 34 a8 86 ba a1 50 e8 7c db a8 f7 9d a8 ee 63 9c 56 5c c6 b0 4c dc 3a b5 b7 9e 38 a8 36 eb 14 d4 3d 46 53 48 fa fe 26 7d c5 5f 85 93 66 1c 7d 35 52 5b e5 a4 09 57 7e 62 44 ac 93 13 85 39 aa b0 46 67 cc ab f2 c2 73 9b e7 f1 64 c0 27 3a 8d e1 a6 ac 42 65 48 20 a3 a7 53 8c 16 f1 6f b0 19 d6 fd 9c 18 16 be cc be 5f 77 71 62 a7 d6 78 c0 ce 4e d1 f8 96 1f 22 78 c0 c0 1e 70 c2 b0 c1 12 8c 37 1c 32 68 1f 88 e0 eb e8 d6 3a 6e ab d9 6a 0c 45 ec 20 23 08 52 b3 fd 90 4b 6b c8 af 8d 96 6b d7 f2 ef 06 5c 96 d1 ea 00 cd 19 00 11 68 30 ec 33 12 99 56 27 11 8c 96 3a 8f 8f fe f2 72 b4 e5 6e 15 7c af f2 aa e8 31 46 1c 90 70 52 e8 83 63 57 78 6b e9 e2 63 ae 55 d8 71 90 e6 23 ab f2 db 5a f5 c7 34 7e 75 c9 83 88 7a 5e 23 68 07 68 56 ff dc Data Ascii: *,+F[<4P\|cV\L:86=FSH&}_f}5R[W~bD9Fgsd':BeH So_wqbxN"xp72h:njE #RKkk\h03V':rn\|1FpRcWxkcUq#Z4~uz^#hhV
2023-07-21 16:50:36 UTC	2828	IN	Data Raw: a2 66 11 ed 97 ca 1a 92 4f be 86 76 a7 1b 1a b0 87 da 58 6b e8 ae f0 af 83 82 bc 1d cd d3 4c 4d 33 30 75 06 94 a7 87 de c2 77 b4 59 92 b8 f0 3d 44 3e 3b da 82 92 ba e5 3d 5a 19 17 d0 be 91 4a bd ca 4a 2f 15 e4 29 0f 3e e9 b6 8d a7 c1 c0 9e 02 ea 69 d1 93 f8 4d 31 44 b9 68 4c 6f b5 5a 86 59 47 8f bf 70 8d fb 4d 5e b1 4e 3e 9e e1 ca 46 4a 22 5a cc 89 a8 73 34 7e 82 43 0b 57 ad 1b 92 d9 0c 31 84 e2 49 01 b5 90 30 24 0b 42 0d 3a 63 21 ff 7f 76 2f 7d 1e ec a3 41 18 ff 28 79 34 b4 13 74 48 a6 ae 29 a0 85 00 37 b0 a9 5b c5 4d 4d 90 1c cd a6 09 c7 3e 41 6e 2a c2 cb 09 f9 b9 67 24 7f be 88 a5 d1 ea 3c 88 ac f6 32 2b bc 53 dc 6d 21 33 2c 8b 52 d4 6b 69 e2 0a 70 2f 5d 6b 4d 61 e6 b0 32 cb 5a a0 3e 32 a2 c6 5c b9 f1 a0 cb 6b ac 09 1b 30 fa 20 0f 94 01 2c 9f 29 7e b0 Data Ascii: fOvXkLM30uwY=D>;=ZJJ/)>iM1DhLoZYGpM^N>FJ"Zs4~CW1I0$B:c!v/}A(y4tH)7[MM>An*g$<2+Sm!3,Rkip/]kMa2Z>2\k0 ,)~
2023-07-21 16:50:36 UTC	2842	IN	Data Raw: 4f 55 77 57 57 55 0f 9b 30 56 62 28 80 00 b1 70 d1 70 2e 5c d3 5d 33 53 44 77 55 a3 aa 1a c0 00 68 1f 5a 0b 49 90 b2 16 5b a2 16 5b a2 e4 55 bb 6c 5d 6b b1 2c db e7 88 f7 c3 3b e7 bd 73 45 fd 05 fe 00 ff 86 17 91 5b 65 56 66 cd 0c 20 de 7b 75 65 13 93 1d 91 19 19 99 19 19 11 99 19 99 95 6e 89 a1 6c 95 63 0d 44 9f 5e c3 61 7c a6 29 29 bb 1c 27 ab aa d5 a2 c7 d7 6a cb 46 7e e0 2c e7 2d d1 66 fa d9 ca 97 4a f1 0c 03 6b 30 b7 b6 38 44 c6 0b b3 8c e7 87 c8 78 a3 64 af d9 3c b4 fe 6a 6f 17 c6 de a6 97 3e a7 a3 07 cd f7 7f 04 82 f9 3f fe f9 ff fb 24 ac ec de ff 31 4d bf 85 e9 1f d2 f4 9f 61 fa 07 34 fd ba 3c 34 93 72 89 47 f7 ba 49 bd e4 70 9f 38 66 4d 65 8c c0 16 d9 0d 79 9c 12 00 d0 df ec 92 72 26 00 78 51 7a 14 8a 9f dc c4 a5 e5 c0 d3 b9 92 93 67 f7 f5 e1 c6 Data Ascii: OUwWWU0Vb(pp.\]3SDwUhZI[[Ul]k,;sE[eVf {uenlcD^a\|))'jF~,-fJk08Dxd<jo>?$1Ma4<4rGIp8fMeyr&xQzg
2023-07-21 16:50:36 UTC	2858	IN	Data Raw: ee 93 1c 57 3a 7b 0c f3 29 81 59 a8 98 b7 be cf 8c 71 51 03 4e 2b f9 e9 22 92 bc ed a2 34 e7 ad 1f 32 84 46 8a ee d5 d2 0e 90 e1 ec 92 c5 62 a6 36 50 34 42 51 63 0c 29 fa 2c d5 5a ff 1d d1 6b 92 c2 64 55 d1 28 99 b4 ca da 77 de e0 45 58 44 77 43 ef 02 f1 8e 0b 9f d3 bb a8 9b e8 22 1d 2f eb 44 80 85 05 4a a9 6e 25 3c 5e 03 52 f0 95 f2 78 f3 c2 58 50 47 bc f3 63 b1 70 a8 20 58 d8 08 45 c8 0b f5 77 68 ab ef 28 45 c6 60 df e8 02 9a de 43 97 e0 7f 42 9d 35 72 29 5d ce fe 1d 51 81 0c fe 53 b6 dc c0 fb ea 72 ee 1f 73 53 27 43 ff 5f 6a 63 e8 5d 76 19 ce 57 8a 78 b3 5d 30 0f 88 ff 46 e0 7b a1 52 e5 87 9f 62 61 99 d1 58 21 f2 35 36 b7 cb cc b0 76 fb 1f b4 5f 62 72 a9 4b 82 ff 3f 74 49 f5 9a 80 33 3d fd e1 eb a8 05 56 57 55 d8 97 08 ac 02 64 9b 69 32 08 59 78 4a 05 Data Ascii: W:{)YqQN+"42Fb6P4BQc),ZkdU(wEXDwC"/DJn%<^RxXPGcp XEwh(E`CB5r)]QSrsS'C_jc]vWx]0F{RbaX!56v_brK?tI3=VWUdi2YxJ
2023-07-21 16:50:36 UTC	2866	IN	Data Raw: 51 6e 69 c1 92 c9 e0 e7 60 ed e9 47 a2 53 69 17 9d 5a 4c e2 e2 74 7a 4f f3 5e 3c 2a 8f 6e 6f 40 25 d2 e7 3b c0 81 a1 70 65 7f 2d 2a 77 7b c2 09 18 0c cc 46 42 c5 aa 1b 3d 09 db c8 2d 4e 92 7d 18 79 cb 87 84 b5 95 4f a2 d1 0a 2f 27 d1 99 68 3a bd 8e 2e 32 b8 2f 56 62 e1 66 56 d4 6c 77 b6 17 f8 28 78 86 9b d2 d1 dd 15 d0 a9 11 e8 5c b1 01 d2 29 d2 8d 6b 97 11 da 9a 92 9d 6a 96 a7 35 c5 aa d0 a4 b7 da 27 1c d7 f3 7c 3f 72 61 e1 86 7b 6a 28 1e ad e6 f5 70 37 1f ae 34 ad cd cd e6 36 0c 1d ac 7b 8a 0c 2a dc da 6a 4b 99 fe 80 9f 5c 93 a5 c8 ca 1f 80 6b 97 c3 02 22 5b 8d c2 7c 1f 16 07 61 36 de 23 24 94 95 97 89 d2 ab f8 56 6b f9 f3 f2 5d 7c 9c 73 e5 7a 04 8e a2 91 09 99 d5 57 f0 46 ca f9 70 7b 31 4d 17 39 29 f3 44 75 5e 0c f3 62 85 ee 9b 4e 0e 6b f9 a4 4a 47 e6 Data Ascii: Qni`GSiZLtzO^<no@%;pe-w{FB=-N}yO/'h:.2/VbfVlw(x\)kj5'\|?ra{j(p746{*jK\k"[\|a6#$Vk]\|szWFp{1M9)Du^bNkJG
2023-07-21 16:50:36 UTC	2882	IN	Data Raw: 3b 46 00 bd af 17 ce f8 72 43 f7 a5 ad 4f e1 7c 45 dc f7 fe 3e 34 bb 31 ab e0 9d 1a 28 88 93 4b 63 b1 2a 8d f5 35 79 6b da 55 77 d7 81 2e 7d 0d e1 b3 b8 23 38 37 45 69 6e b6 68 30 3e ac 72 08 72 6e 4d a7 34 a7 d7 ad af d7 d7 07 b0 8c 6f d1 99 98 cd 9c a4 a6 b1 12 e7 e0 01 d3 76 de 5d 87 23 dd 01 14 b8 e5 9c 75 d7 c5 51 b2 40 17 75 bc d5 5d bf d9 d8 e8 6d 6c 7c 84 aa de 45 d7 b0 76 88 69 e1 27 ab b0 73 e0 ee 64 92 6b 26 ad 7f 30 1d 2b df 45 9e bf de 9d 48 8e 81 9f cd 23 c4 05 1c 69 48 2f 0b 52 1f 84 e7 78 02 bb bf 37 d6 ce c1 b2 8d d0 b3 de ce 8c 3c 24 77 bb 63 f5 31 19 a1 63 9a ef c8 79 3c 8d c0 19 74 a7 77 7f bf 57 ba 46 c9 1d 3f 68 6e 82 14 f1 9a 7f c6 ca b5 49 df b1 08 0e b0 81 24 6a 29 5c 27 48 f0 cc 1e 84 83 f6 b9 a3 b1 af d3 2a 9f 12 fa 9d 64 8a 3a Data Ascii: ;FrCO\|E>41(Kc5ykUw.}#87Einh0>rrnM4ov]#uQ@u]ml\|Evi'sdk&0+EH#iH/Rx7<$wc1cy<twWF?hnI$j)\'Hd:
2023-07-21 16:50:36 UTC	2891	IN	Data Raw: b1 a5 c2 0d b7 fd 8a 28 06 3a 7a 13 c4 49 7a 15 47 1f ad b6 f8 dd 8f 46 96 23 f4 e8 a1 60 fd b2 96 ca 6d 8a af a9 3b 42 57 ca b0 54 e6 65 6f 48 9f a3 15 dd 8f 26 b3 3d e0 dc a9 a4 27 35 c8 40 f6 bf 80 10 df f6 9b f8 07 5d 3e e1 6f fc 03 ad 1f b5 49 f3 ca 01 a1 18 88 3f 4a d0 45 8e f8 e9 f4 b1 38 3e d4 e0 9a 68 6a df c5 15 f2 79 1d c9 77 7c 8d a3 68 22 c5 92 54 65 f1 20 74 3f 04 7c 97 c2 c9 e5 c6 29 8a 51 76 c2 8b 4b d3 42 7f 70 47 90 0e 5d cf 3b 61 e7 ba bb 84 7e 42 04 40 ab 28 7d 0b 07 4e f2 8b 8a 3b ed 18 a9 7e cf 1f 8d 10 dd 11 b1 e3 58 df 40 10 b2 88 e0 a5 b7 17 8d 68 35 64 01 b0 d2 f5 00 4c 9e 87 a4 e7 9a ad 0b 87 41 21 49 21 08 8a 29 06 61 41 4a 58 49 04 7f d9 12 2f c8 85 84 45 05 74 c7 55 6c e3 e3 8d 8d 7a dc 5d 57 8d e3 5d 08 72 bb 78 c7 a6 33 64 Data Ascii: (:zIzGF#`m;BWTeoH&='5@]>oI?JE8>hjyw\|h"Te t?\|)QvKBpG];a~B@(}N;~X@h5dLA!I!)aAJXI/EtUlz]W]rx3d
2023-07-21 16:50:36 UTC	2907	IN	Data Raw: ad 41 25 ac 18 de 2f 02 f1 73 5e 3c 2a 78 ce 19 d4 ef 21 81 c4 05 69 61 06 16 9a 32 28 d7 ef 2b 81 f0 25 55 5d 52 e8 92 b0 b2 9f 96 f9 68 ba d6 44 8d fd b4 2f c0 ab ae 94 4f 8a ea fd 9d b7 9a cb dc f7 b3 c1 60 68 12 3b f3 15 cb 75 cd 37 27 08 38 d4 d4 78 e1 cd e8 f1 82 45 70 44 c9 60 87 08 6f b6 1c 22 58 64 73 5e 20 4e c3 65 e7 28 c5 22 50 2d 34 25 7f b3 dd f0 d4 a2 5a 52 e2 68 8a 98 a1 a8 9e eb 7b cd 5e 79 38 5f a8 87 13 bc cf 6e 4a 29 cb 54 f3 84 ee 65 31 36 31 31 ab eb de 16 83 e7 fa 2e 7b ab a7 76 f9 73 b3 b5 ee 4d 31 6c 92 ef 4a 9b 13 95 c1 67 6e dd 3b 62 88 ec de 15 b0 08 54 07 9b 8d 75 ef 87 e1 d2 7a 57 d6 92 a8 0c 25 23 90 cf 1b e6 37 df bf 62 6d 6b dd c9 87 83 6a 2e d9 5c 8f da e0 45 3e 6b b1 9d 9f ef 56 85 9c db 28 e5 93 79 13 7d 3d 6f b7 14 bf Data Ascii: A%/s^<*x!ia2(+%U]RhD/O`h;u7'8xEpD`o"Xds^ Ne("P-4%ZRh{^y8_nJ)Te1611.{vsM1lJgn;bTuzW%#7bmkj.\E>kV(y}=o
2023-07-21 16:50:36 UTC	2949	IN	Data Raw: 39 a3 da b0 18 86 8d b5 5f d8 96 cb a1 4b d3 b5 11 1f e4 36 47 2b 8f 23 4d 13 b4 b1 32 c7 68 c1 48 c6 0f b1 1e 39 5d 78 7c ed 49 66 4b bc 09 e8 f2 98 70 b0 4f 92 c1 db 07 cd 0e f9 71 91 ee 8e c4 b7 ae 3d 1b f3 c1 8f 1c 3c 7a 65 a8 43 eb 3f 72 d1 04 a8 38 10 28 e2 39 2d 11 6f 40 45 b5 08 51 e1 c7 d5 7f e4 a4 52 80 14 1d 73 5e fd 08 12 58 83 bd ab d6 d5 53 e8 67 dc aa aa 08 75 3c c0 bd 72 0a 9e 06 26 c4 60 ed 50 c9 61 4f 02 7c e4 78 36 31 67 40 4a 45 1a d0 11 8a 8a 63 cf 24 7b 82 3a 86 08 69 74 b7 7a e8 ee 7a f7 76 29 7c a6 80 ac 1c 02 96 4a 24 29 8b 39 b3 8c 54 ec 83 97 a0 84 5a 85 0f 5e c2 c1 43 43 47 51 1c 11 14 ac 2f be 84 37 25 d3 90 8a 64 81 60 2e d4 24 8a 10 b1 2c 6d d7 8f 9b 78 5d a4 c9 a4 5c df 49 d3 e6 56 ae ab 1f 97 4e 38 d7 65 ba a3 69 31 b1 ca Data Ascii: 9_K6G+#M2hH9]x\|IfKpOq=<zeC?r8(9-o@EQRs^XSgu<r&`PaO\|x61g@JEc${:itzzv)\|J$)9TZ^CCGQ/7%d`.$,mx]\IVN8ei1
2023-07-21 16:50:36 UTC	2965	IN	Data Raw: 2b eb 02 6d df f0 0b 0a 3a c0 e5 8f 08 14 9f 73 fc 56 a3 17 62 f3 b7 a2 56 8a 7f a3 1f fc 96 74 39 1a 2f a3 d8 e2 2c 5f c3 10 e7 14 d4 74 cf cf 92 60 39 16 66 83 9c 5e e6 5b ba 7f eb d6 28 5b 98 15 af 52 c2 bc 52 fc f7 fa 74 ee 3e 5b ed 43 53 6c 05 82 16 49 78 ab d1 51 e8 a2 52 ed ee 81 4f ae d7 39 98 41 d3 dc 6b 9f 5f e3 f4 c8 cd 5b 4d 0e 41 27 05 f4 c9 ef d0 7c 6f cc aa bb 5e 7a 1c 22 af 82 5a 75 f0 2e fc 1d d4 b5 35 6c e5 14 ea 36 b6 2e dd b5 2e cf 00 d2 82 ae 7d 3e 76 ed 7a 7b be 49 6f 1d 15 f3 af e7 b3 ea ac f7 4a 4e 07 53 d9 a9 06 0d fa da 7e 2d c9 61 3d bb 35 db 1d 4a d2 19 b8 ee 66 b5 1b d4 16 f9 2d 7a da 76 f5 48 17 f8 be 65 bd 97 93 f1 18 c1 c1 a6 12 80 6c e5 fb ce 55 59 50 fa 74 f1 fd e6 65 99 b3 97 88 f6 9a ac b8 37 aa dd fb 56 1c c0 a5 68 ba Data Ascii: +m:sVbVt9/,_t`9f^[([RRt>[CSlIxQRO9Ak_[MA'\|o^z"Zu.5l6..}>vz{IoJNS~-a=5Jf-zvHelUYPte7Vh
2023-07-21 16:50:36 UTC	2981	IN	Data Raw: fc db 61 98 23 62 e7 12 7c cb 65 3c a6 13 70 d2 6e 35 19 0d d3 d3 7a ee 6c 1c 8d 34 75 75 ba 5a 47 8e 71 fe 6d 9c c1 a3 80 1c c3 e9 fe 53 88 e9 a6 fd f6 d5 a4 97 d7 55 82 51 7c 72 cd 69 f2 db 9c 7e 6f 2a c2 9b 54 e7 3c 39 72 4c 4f 49 6b 59 c7 23 df 44 3d 96 d6 02 6b e8 f3 51 4d 3c ea 02 a3 f8 68 4d e7 e0 f9 e1 74 52 61 b8 8b f0 6b c7 42 f5 7c 4a 76 d6 e9 12 92 fb b5 6f a5 ba f3 83 bd 55 7d fe b5 9a be dd 94 90 05 e2 85 3a c9 e2 10 e3 3a c7 ed d8 31 31 9e 27 ee 55 a1 68 8f 7d 13 83 02 cc ed c0 f3 65 95 c3 36 93 61 f8 48 4d ff fa f9 6a 94 e4 13 8d d6 e9 61 1f cb f9 a8 8d 55 5d e4 13 ba 40 ff 5b a6 de 2f e2 98 2e 16 b7 1d 8a fe bb 30 5d 74 04 65 6e fb 8c da 6d 87 e2 fd 2e 2c f2 d8 c1 c0 a9 73 b7 1d 33 e6 77 c9 ab 89 5c c1 6e fb a6 cb 6d 87 3d fc 5d 92 a1 65 Data Ascii: a#b\|e<pn5zl4uuZGqmSUQ\|ri~o*T<9rLOIkY#D=kQM<hMtRakB\|JvoU}::11'Uh}e6aHMjaU]@[/.0]tenm.,s3w\nm=]e
2023-07-21 16:50:36 UTC	2997	IN	Data Raw: fa 33 9c f7 6e 5b 4d 66 2e 00 5d 61 49 c0 db 35 0c 00 28 d5 ac 92 b1 e1 92 e2 84 17 5c d9 e5 bf 72 45 05 6f 4a 3a 86 4a 08 7d 40 74 b1 8e 4c 13 73 91 85 0c bc 5b 2e 09 78 d7 35 6b 96 de e7 ac 8a 37 45 47 b1 3f f1 43 27 e8 dd 4a 96 7b 6d e4 bb c8 8e 51 92 2e 87 b9 c2 40 fc df 16 13 ad 12 2a ea fa f4 c3 c1 5e 80 77 b7 2c 18 10 dc 9c 8c 7b 8c ae 9d 20 78 19 ca f7 a4 d6 7c 39 8f 73 00 f8 74 8b 56 ce 68 4c 5d 9a 5e 95 d1 42 64 b4 14 4f b9 80 3a c5 c2 29 fa a5 4e 77 ea 05 50 0a f9 d5 e9 d2 95 ea 84 21 f6 9c 60 6a 32 8e a1 92 cb 59 1a 4f 30 f0 46 c5 f9 6e 98 e0 89 55 27 8a aa 95 8a bc 06 d6 87 49 48 55 4a 37 12 2a ab 60 0f b1 97 ac ae c0 45 05 9f cc b3 c0 b9 8a e2 e6 11 a1 a4 1b 57 a1 97 a7 30 b3 85 6a af ad 6b 17 d4 0e 25 56 e4 27 9b e9 fc f4 8d d4 1e d3 9e 79 Data Ascii: 3n[Mf.]aI5(\rEoJ:J}@tLs[.x5k7EG?C'J{mQ.@^w,{ x\|9stVhL]^BdO:)NwP!`j2YO0FnU'IHUJ7`EW0jk%V'y
2023-07-21 16:50:36 UTC	3013	IN	Data Raw: 07 02 0d 07 bd e9 b7 20 ba 82 e6 cf c8 94 92 1e 95 f3 1a f4 5e e0 9b 4b f2 94 7b 93 57 70 2d 53 a1 95 32 c7 38 aa f2 62 28 14 bb bd 71 5e 5c c0 fd 9d 25 17 57 39 ec 49 18 b5 38 e8 c3 4d c5 a2 b6 53 ae f0 60 ee 13 b3 04 37 40 39 dc b3 6b 21 99 2f 8c ed ed 3b 02 f9 72 54 5b 6e 7b 4b d6 e0 de f2 96 a9 71 ad eb ab 02 ee ae cf 3a b8 7b 8b 29 a1 bd c7 32 b8 ad 25 5b e3 a1 10 56 b0 ca 0a 83 ad 15 5c 93 00 99 b2 27 10 ed ca 73 d3 7b d9 65 47 e7 79 4f 98 ac be dc fa 1e 04 55 2c df 1d 99 fa 8a 07 73 76 55 31 b0 92 ab 48 bd 4b ae af ca 2e b9 3e 3b 76 c9 55 ac de 25 ba 10 a5 dd 5e f5 d4 eb 2f 84 c5 5b 0a e2 fa d3 10 56 13 d3 09 2d dc d3 a7 80 a5 91 41 e5 f4 86 12 7f ef 70 14 7c 26 77 de 36 4f a8 16 8c 80 38 da 30 0b 73 79 c3 46 0a c5 07 38 fa fe 7d cd 8a 7b 10 23 91 Data Ascii: ^K{Wp-S28b(q^\%W9I8MS`7@9k!/;rT[n{Kq:{)2%[V\'s{eGyOU,svU1HK.>;vU%^/[V-Ap\|&w6O80syF8}{#
2023-07-21 16:50:36 UTC	3016	IN	Data Raw: 15 c0 7c 51 c0 d0 98 24 f4 00 75 7c 77 4e f3 5b 74 d7 23 3d 6b 7f af 73 7e f8 e1 e0 fd e1 d1 c1 c5 de f1 fb e3 d3 b3 4f bd cf f3 ed 25 bb db 8d 1c 9b 0b 7b 52 f2 12 cc d9 ee 3d 11 ec 08 0b 8b b6 bc 88 5a c4 e7 f4 e9 00 b1 ec 91 54 b0 3c ce f6 f2 f1 38 2d d1 7c 8d 74 1c ed 22 ec cc 94 02 73 d4 44 18 87 88 37 60 72 29 5e 88 97 aa 12 6f 86 43 e3 44 90 8e 52 5b 4f 9c 7d 09 87 d5 2c 18 6a cb 28 e6 5b f9 96 a9 1b 35 5e 87 ca 5e 87 96 b9 10 6f 29 68 cf a3 56 e2 aa 73 48 e2 41 28 7c 80 94 7a 87 4a 48 41 25 a3 e7 f1 5a 97 7e 6f 6c b0 ea 55 df 0e 55 ea 25 b6 49 97 16 0b d9 d1 af c7 e1 58 8d 9d 60 54 c4 d7 41 1f ed bf d1 ad 43 a8 c9 dc 9b b4 64 bf ee e1 24 b0 81 d6 07 e0 70 d4 36 ca 75 c4 79 09 79 cc cd 26 7b 1c ad 2e 9c 46 88 96 16 b1 2e 41 95 52 60 96 f9 7d 43 2c Data Ascii: \|Q$u\|wN[t#=ks~O%{R=ZT<8-\|t"sD7`r)^oCDR[O},j([5^^o)hVsHA(\|zJHA%Z~olUU%IX`TACd$p6uyy&{.F.AR`}C,
2023-07-21 16:50:36 UTC	3017	IN	Data Raw: 18 d5 67 e4 37 d4 56 24 51 6f f3 42 ac 2c 4a 97 22 0d 64 fa 42 04 75 a8 be 0d 89 21 a2 ac de 4a eb ab 03 c9 30 28 6f e1 22 cb fc b2 93 4c e1 a4 15 65 10 07 b5 b6 c6 80 44 5a 6f a1 2e 3e c9 2c 23 29 71 71 f2 81 b3 80 f2 87 12 0b b7 d9 5a b0 f4 eb f1 50 96 2b 43 89 62 a2 9e d9 e5 b6 80 54 72 dd 40 ed 19 a0 37 e3 9d 72 0a da 89 41 60 ec 17 31 f0 c8 71 c1 b2 40 bb fc 1c 9b 6f 36 6c f3 a6 fb 9c 47 e9 a0 b3 b9 e5 fe 46 16 5f f1 75 f2 cf 8d aa 83 6e 06 af b3 1d f3 f4 ed 5e 96 f9 18 8f c2 46 ef af 69 d8 e7 e5 7f 61 e5 d7 2b 06 64 1b 59 3d 71 ab 62 4a a7 76 94 5c c2 b0 87 c0 d6 e8 b3 2e e4 97 b6 7b 5d 50 af 50 df b4 a2 f5 33 ea cb 50 37 46 69 54 44 39 9e 1c ba 45 cf b4 f1 d0 d5 cb 8f 51 39 f8 10 57 37 1d 0a 5b d6 ce 7f 72 ae 0d 74 5a be de ea 36 41 f3 79 d8 2f 7f Data Ascii: g7V$QoB,J"dBu!J0(o"LeDZo.>,#)qqZP+CbTr@7rA`1q@o6lGF_un^Fia+dY=qbJv\.{]PP3P7FiTD9EQ9W7[rtZ6Ay/
2023-07-21 16:50:36 UTC	3033	IN	Data Raw: 14 04 dc 99 65 c5 85 01 3e f0 f1 4b 14 30 07 72 43 cf a0 d2 52 8e ee f8 09 34 77 ee 93 cb cf 2d a6 ab 2c 79 5a 4a 4a 82 d2 e5 aa 09 cc 4f 39 64 e7 79 c6 8d 8f 27 8b 74 0a 9d b7 00 bc 0c c8 97 1b 16 7f 3c 1c 4e be 3a 14 09 68 58 2c f7 80 b4 03 53 07 27 a6 42 38 1e 65 c0 2e 45 5c 1f 2a 72 3b e6 57 3c 86 f1 e1 56 7e 43 9f 75 db 52 8a db 30 f3 f3 35 d4 c0 ca 6f c5 03 d5 aa 21 20 10 6a 66 0f 13 83 5b b9 36 2d 01 cb 81 ff a4 32 c1 21 da 43 4e 6a 7b c8 ca 29 f3 97 14 b1 35 45 f3 78 96 f6 20 97 51 3b 72 44 1a 75 22 69 31 87 f2 30 a6 fb 02 90 53 1e 5a bd dd 00 ab a2 6f 7b 3f 93 6d c5 24 cf 9d 2e 3f 8d 6a 82 da a9 e0 41 9a 5f 5e 5c 0d d1 30 45 4f 45 d9 c8 18 e7 88 e9 a6 28 14 40 85 16 64 f0 9a 5c 9a 71 f0 9a 18 9d 59 cf 6b d5 64 ee cf 4a 11 04 43 3d 2a 3c af 75 a1 Data Ascii: e>K0rCR4w-,yZJJO9dy't<N:hX,S'B8e.E\r;W<V~CuR05o! jf[6-2!CNj{)5Ex Q;rDu"i10SZo{?m$.?jA_^\0EOE(@d\qYkdJC=<u
2023-07-21 16:50:36 UTC	3049	IN	Data Raw: e4 89 55 81 db 68 18 c0 98 94 11 6d 29 b3 a0 dd 99 14 c2 ce 59 ad 09 73 27 a7 08 30 54 d6 bd 24 92 c7 a2 52 be 1a 79 7a 2f 44 fe a6 57 80 08 f0 22 84 77 9a db 02 5a 6c 7a 68 52 ea 0d bc 10 cb d3 27 17 f5 3b 74 bc 39 2f 4a 8c b6 80 47 94 18 b1 79 36 08 3b 5f d2 2a 45 1c 3c b0 b4 a2 92 79 c5 fb 26 e0 bb 82 f5 85 19 2c 74 e2 b8 ca e3 ec d9 44 c0 77 86 71 45 00 e0 13 0a fb 46 66 0d d3 90 6d 45 b7 7d c5 00 8c 85 e5 fa 6f 29 6f 7c 70 07 43 0f 45 e8 8e 64 81 af 71 be 39 cc 77 ee 9a 6f fe ec 5c cc 37 e7 f3 09 af bc ad e8 fc 64 7e da 78 ec 61 ba d1 66 7c 17 1a b2 c2 65 0a 9e 4c 27 9c 52 bd 04 8b 09 e2 f9 77 1a 76 65 7b bb 10 1c 15 e9 9f b8 51 6d 9c 45 f2 39 cb 9a 88 0f 60 91 e3 29 0e 8b 8e 90 2c b0 bd 40 ff ab 70 c6 fe 1d 97 e8 64 bc a5 cc 3b 66 29 42 95 27 fb bd Data Ascii: Uhm)Ys'0T$Ryz/DW"wZlzhR';t9/JGy6;_*E<y&,tDwqEFfmE}o)o\|pCEdq9wo\7d~xaf\|eL'Rwve{QmE9`),@pd;f)B'
2023-07-21 16:50:36 UTC	3065	IN	Data Raw: 70 c5 d3 e9 1e 17 31 ad f4 32 bd 8c f9 2d b4 e1 6b ab e7 9b 9b 64 66 0f b1 c4 7b 82 e8 86 1d 69 bb 30 70 62 5b 07 55 99 5c ac 07 ad 93 76 89 97 47 13 c0 52 b2 57 16 01 34 8f fb e6 60 f9 38 e8 bc b0 0c 75 32 19 c3 18 df 4f db d4 21 d8 06 49 cc 27 a2 af 99 9b 6b 07 a5 2e 84 f8 b1 57 8b 95 cd 0c 26 85 ff 9e f1 2e 3a 69 1b ec 3b 08 7b 07 30 65 30 63 75 7d 91 21 08 b5 86 94 36 80 67 0b 7a 5e ed 2f 1f da 5e 1e 9c 1e a0 d3 8e df f1 80 96 a2 88 24 e2 87 1b 01 c8 83 ea e0 1c 79 a9 21 f8 57 67 cf 45 69 f5 a4 ad 84 0b 10 5a 0f 5a 59 fd 6c f1 6d 74 c3 d2 c3 e2 3c b2 05 3f b7 cc e5 92 dd 1a dd b2 5b 45 38 c3 f2 2a 4c 28 a4 bb f5 22 5e 1c ec 95 6d 81 6c be 44 a2 d4 3d 53 e4 66 63 70 ca 66 84 ec 8d 2f ac 38 ad ec d5 4e 8e a3 ac a4 d8 9d b8 5b 19 1a 14 b9 0a 6c 46 2c 73 Data Ascii: p12-kdf{i0pb[U\vGRW4`8u2O!I'k.W&.:i;{0e0cu}!6gz^/^$y!WgEiZZYlmt<?[E8*L("^mlD=Sfcpf/8N[lF,s
2023-07-21 16:50:36 UTC	3081	IN	Data Raw: a4 09 b7 d5 39 ae 8b 38 0a 8b 34 31 96 ac d5 e7 ea 6e 2e c7 e8 08 fa 36 48 c9 d1 f6 d1 e4 d2 99 cd ea fc 54 f4 58 b0 88 e5 40 5e c8 6e 8d 1b 72 ad 17 32 cc 9f 1a e4 66 4b 2f d0 75 d8 c0 0d 51 e8 46 5d 0a d1 d2 ef 92 d1 5e af 8b b1 59 76 6c d3 33 da b1 4f 65 bf 7e 35 f4 68 9e a6 95 3b 25 64 f7 79 3d 13 a3 4f 3a dc 68 81 fb 73 a0 b0 02 61 3a d7 fb 09 ec 25 c6 f5 5c 8b bd 22 9d d8 0d 78 35 42 5d 94 a3 bd c8 7a c1 28 5c e7 4a 1d 64 fd 51 57 18 35 66 73 bc 9c 83 ec 2a ee e1 0e 86 49 86 39 c2 e0 32 ba 7b 35 ea d2 72 98 08 d9 73 f6 b1 ce 70 b5 45 39 fa 56 8b 13 ba bc 21 a6 3b d3 12 a9 37 33 58 dc 76 6f 4f aa a1 da 34 fc 2b b2 6e 2c 41 be 91 6c eb d0 17 1d e5 a7 ef 8d 6e 61 a6 d2 f8 0a 7b 44 3c 05 a9 cf c6 35 fc 22 b3 52 4b fa d6 71 a3 e0 64 8a 13 00 87 80 a6 45 Data Ascii: 9841n.6HTX@^nr2fK/uQF]^Yvl3Oe~5h;%dy=O:hsa:%\"x5B]z(\JdQW5fs*I92{5rspE9V!;73XvoO4+n,Alna{D<5"RKqdE
2023-07-21 16:50:36 UTC	3097	IN	Data Raw: 82 b5 34 5c 8b 46 65 9c af a9 ac 63 41 63 2d a7 5b f5 a2 e1 07 58 66 96 c3 19 99 48 c6 0a 8c 6b 92 14 b8 c9 28 72 67 a6 4e cb dc 9b b7 f4 70 5f ba 6d eb 2e 4a 30 1a 6f 1a b0 1e 8a 7f 6a 8a 5f c7 69 9c 47 25 8f 1c 64 5a d0 b9 1b 22 02 2f ae e2 b1 ff 40 96 bd 4d 6e b6 3b 7f 13 14 ad ad f8 f5 df 16 b2 32 ff 82 d9 03 b7 c8 0d 0b 31 6f bc 0b e7 af 82 71 cb 47 04 37 0b b4 eb 07 0b 39 5e 7b 0b dd 48 c7 72 8c 87 32 42 9a 6b a3 85 03 7e 5d f7 a7 0f 91 f7 84 31 5a c6 ac 1d 63 55 cb 8d c4 20 5e cc f9 f8 f5 06 1d 10 fb d3 d6 2c 98 49 53 e7 c0 e4 d5 76 3d 66 0e 44 16 85 a7 9e 7d c5 17 66 12 4a 79 d6 15 da 65 0b 9e 1a 7c d5 6a eb 53 19 96 d1 4d 3a 99 c4 d9 ac a4 3c 8b 48 78 dd c9 6b c8 1e d2 03 18 4e 8e 98 4e 0e 5e 61 a6 1f 6e 14 b5 a8 2a 0c 34 66 e8 d0 00 fb 6c 50 36 Data Ascii: 4\FecAc-[XfHk(rgNp_m.J0oj_iG%dZ"/@Mn;21oqG79^{Hr2Bk~]1ZcU ^,ISv=fD}fJye\|jSM:<HxkNN^an*4flP6
2023-07-21 16:50:36 UTC	3111	IN	Data Raw: 3f 8a d8 6c d9 63 61 cd 97 fd fa 45 7c 8f f9 22 c1 18 6d 87 51 0a 5c 12 51 ed 22 af 32 8a 96 c9 80 b5 c7 e2 1a 21 90 42 9f 50 e6 b0 2c 4c 42 fc ac 7c 85 49 7b 75 93 37 1e 92 cc 61 f9 cd 96 df 5b 37 14 94 73 e0 03 d9 e0 13 68 29 49 7c 17 6e 5d 84 0d f5 b3 d1 c3 d7 9f 60 97 97 e1 2b 78 43 7f 35 bc 79 2b a9 23 ee f1 b1 55 47 f6 03 4b 4b 62 e7 4b 16 89 4e 8c 70 d3 f1 92 28 d3 b1 08 2c 9d 72 f8 00 b9 03 18 37 fa 03 f3 fe 7e 26 ae e3 15 0e 7f 22 1e 69 48 fc 6b 29 af d1 79 31 0d af 11 5a 4d fd 86 c3 e3 fc a2 57 d6 a5 6b 61 fb 8b a2 07 83 ec 1a 21 7e b4 6c 36 29 d1 ed cc eb dd b0 6d 50 f5 2f 33 e3 05 c7 81 c8 4a 20 72 12 eb 10 ec c4 88 fc 37 30 22 bb 46 f0 8b c8 84 55 86 b8 67 33 28 14 91 31 41 ae c4 c3 1e 8e b8 ae b8 52 c4 69 2f aa 86 9c 1e c0 d7 0b 42 4e d7 9b Data Ascii: ?lcaE\|"mQ\Q"2!BP,LB\|I{u7a[7sh)I\|n]`+xC5y+#UGKKbKNp(,r7~&"iHk)y1ZMWka!~l6)mP/3J r70"FUg3(1ARi/BN
2023-07-21 16:50:36 UTC	3127	IN	Data Raw: ce 3a da 2f f6 15 29 67 cd 5d ad 09 4a b4 a5 29 cd a6 6d 5f e7 d8 6a 13 85 d4 26 7c b9 c2 0e 17 25 79 04 d2 92 bb bb 1c a7 b1 c1 fd 39 ca 01 e8 17 00 9e 4b 88 09 0b fd 02 49 60 6e 11 02 69 d7 13 cc 7a b2 70 ff 0a b0 19 74 21 2d 3b 41 2d e0 ee 78 99 fd bd f4 3a 1a 83 19 c9 c1 ac b7 51 eb 56 d2 b6 8a 6e 32 2a e4 80 21 53 f7 cb b4 b6 1e 83 58 b4 e7 1b 36 aa 10 3b 9e e7 96 ed 1a 11 a6 e2 38 77 45 d2 2b 45 98 e2 14 65 49 38 66 4a 13 dc ce 0c 58 45 11 a4 04 e0 ef 3f a5 d9 97 c3 6a 03 a6 20 7b 38 70 38 fc 05 05 d3 22 1a 0e 59 a4 1a 89 04 44 fe 08 e0 c4 dc 07 92 83 ed 9a 62 33 05 19 d9 d0 90 d5 e8 53 b6 a6 e7 61 11 e7 c3 07 21 7c c0 2d 1f 9b b7 2c 27 8c 08 a1 1f 87 38 74 46 73 31 5b 45 23 2c be 3c 64 ab 03 7c 74 1d d5 d6 10 ab c8 ed e6 cc f8 96 7e 22 28 9d 8b 0c Data Ascii: :/)g]J)m_j&\|%y9KI`nizpt!-;A-x:QVn2*!SX6;8wE+EeI8fJXE?j {8p8"YDb3Sa!\|-,'8tFs1[E#,<d\|t~"(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.5	49860	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:35 UTC	2164	OUT	GET /static/webpack/production/02419c289b2cc43fe5ef.mApMZZrA0_77_F4UomVbkhteOHx43L41fkpjXFdH9ZE.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	2559	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 8415 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:27 GMT ETag: "c31862c91e99891006cd762d645dc48d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 fec5e83bcae9ab1295b776b3f64183d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: PfGcoqdRsiDM-oA586CFQJ1DKZ8BMs9kYoDEqN7PdpKPcE3S-gNSRw==
2023-07-21 16:50:36 UTC	2559	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 5d 7b 73 e3 36 92 ff 5f 9f 82 e6 dd 39 e4 06 a2 25 db f3 92 c2 b8 3c b6 e7 e2 cb f8 b1 23 cf 26 bb 2e 9f 8b 22 41 89 2b 8a e0 f2 e1 b1 22 73 3f fb 75 03 a0 f8 96 3d 93 ec 5e 25 15 8b 20 08 34 1a 8d ee 5f 77 03 88 f6 c5 0b 1c f6 c5 b8 bf ff 78 75 7c 7a fc fe e3 19 ff 71 76 7a 7f f2 d3 e7 cb 9f 27 f7 f7 e6 b3 35 9e 9e 6e ef 74 23 4c e3 b9 76 7b ab 86 56 48 a3 7b cb 59 7a c1 3f 4b bf ef 99 eb de 3f 78 f4 cb 3d 0b fc 95 7c 33 85 a6 69 94 3f a4 81 e3 53 f9 60 fb 2c 75 ee 1d 66 c7 b2 c0 b1 e2 f9 94 59 91 83 cf ff 74 5e b9 07 6f df be db 57 ef c8 ba 37 dc df 1f b9 69 60 27 1e 0b 34 4a 12 12 e8 eb ab e9 df a9 9d 18 0e 75 bd 80 5e 47 0c 9a 48 56 5a 42 d4 fb 7b 1a 5f 30 27 f5 a9 4a d6 0f 96 9f d2 d1 ce 20 d3 c7 0f 56 a4 30 33 d0 86 Data Ascii: ]{s6_9%<#&."A+"s?u=^% 4_wxu\|zqvz'5nt#Lv{VH{Yz?K?x=\|3i?S`,ufYt^oW7i`'4Ju^GHVZB{_0'J V03

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.5	49741	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:31 UTC	408	OUT	POST /paper/cloud-docs/edit?rlkey=6og5cgta4316ahai21ujyinv2&dl=0&parent_frame_performance=%7B%22fetchStart%22%3A1689990628336%2C%22requestStart%22%3A1689990628720%2C%22navigationStart%22%3A1689990628331%7D&parent_frame_referrer= HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 622 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.dropbox.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en
2023-07-21 16:50:31 UTC	410	OUT	Data Raw: 61 75 74 68 5f 74 6f 6b 65 6e 3d 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 2d 30 38 6e 77 5f 77 4a 77 48 56 6a 61 44 6e 35 54 5a 79 4c 6b 39 35 54 68 41 54 35 49 6f 54 45 70 73 33 56 71 31 5f 78 38 54 4e 30 42 50 63 36 66 32 48 32 54 67 72 66 73 46 75 38 78 67 56 4b 48 54 6f 52 43 51 31 70 32 7a 78 6b 50 76 7a 31 59 51 65 76 46 70 55 68 73 48 69 30 70 55 79 71 4a 64 53 4d 5f 4c 71 6c 73 7a 78 58 32 4a 44 4b 5f 37 32 54 34 73 57 71 6a 6c 6b 52 5a Data Ascii: auth_token=cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu-08nw_wJwHVjaDn5TZyLk95ThAT5IoTEps3Vq1_x8TN0BPc6f2H2TgrfsFu8xgVKHToRCQ1p2zxkPvz1YQevFpUhsHi0pUyqJdSM_LqlszxX2JDK_72T4sWqjlkRZ
2023-07-21 16:50:32 UTC	410	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self' https://www.dropbox.com; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:31 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:31 GMT P3p: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA" Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Set-Cookie: ET=e8a8e806414163dd; expires=Wed, 01-Jan-3000 08:00:00 GMT; domain=.www.dropbox.com; path=/paper; secure; SameSite=None; httponly Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/cloud-docs/edit X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 2a81ea4a-a675-44dc-a442-f43c4c387216 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 3026641eb6fb46e88df23c21e4f2ada4 Connection: close Transfer-Encoding: chunked
2023-07-21 16:50:32 UTC	412	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 45 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 2f 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 49 4d 41 47 45 49 Data Ascii: 2000<!DOCTYPE html><html class="no-js" lang="en"> <head> <meta charSet="utf-8" /> <meta httpEquiv="X-UA-Compatible" content="IE=edge" /> <meta name="referrer" content="origin" /> <meta name="robots" content="NOINDEX, NOIMAGEI
2023-07-21 16:50:32 UTC	423	IN	Data Raw: 32 30 30 30 0d 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 73 69 64 65 62 61 72 2d 61 63 74 69 76 65 20 68 70 2d 65 78 70 65 72 69 6d 65 6e 74 2d 66 69 78 2d 72 74 6c 2d 70 6f 63 6b 65 74 20 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 64 79 2d 77 72 61 70 70 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 62 61 6e 6e 65 72 2d 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 6c 6f 75 64 5f 64 6f 63 73 2d 61 70 70 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 70 2d 61 70 70 2d 63 6f 6e 74 61 69 6e 65 72 20 68 70 2d 61 70 70 2d 70 61 70 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 68 69 6e 2d 73 70 69 6e 6e 79 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 Data Ascii: 2000 <body class="sidebar-active hp-experiment-fix-rtl-pocket "> <div class="body-wrapper"><div id="banner-outer-container"></div><div id="cloud_docs-app-container"><div class="hp-app-container hp-app-paper"><div class="thin-spinny"></div><div
2023-07-21 16:50:32 UTC	439	IN	Data Raw: 66 61 6b 65 74 65 78 74 3d 22 22 20 64 61 0d 0a 32 30 30 30 0d 0a 74 61 2d 63 6f 6e 74 65 6e 74 63 6f 6c 6c 65 63 74 6f 72 2d 69 67 6e 6f 72 65 2d 73 70 61 63 65 2d 61 74 3d 22 73 74 61 72 74 22 3e 26 23 38 32 30 33 3b 3c 2f 73 70 61 6e 3e 3c 62 72 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 65 2d 6c 69 6e 65 20 67 75 74 74 65 72 2d 61 75 74 68 6f 72 2d 64 2d 31 67 67 39 75 7a 36 35 7a 31 69 7a 38 35 7a 67 64 7a 36 38 7a 6d 71 6b 7a 38 34 7a 6f 32 71 6f 77 7a 38 30 7a 69 7a 37 38 7a 71 7a 39 30 7a 39 7a 36 38 7a 71 71 7a 37 30 7a 74 7a 37 34 7a 64 33 6d 38 7a 38 35 7a 64 36 7a 36 38 7a 36 30 7a 36 35 7a 7a 38 33 7a 30 70 7a 38 33 7a 7a 36 38 7a 32 6a 7a 37 32 7a 20 68 61 73 2d 6c 69 6e 65 2d 6d 61 6e 61 67 65 72 20 6c 69 6e 65 2d 6d 61 Data Ascii: faketext="" da2000ta-contentcollector-ignore-space-at="start"></span><br></div><div class="ace-line gutter-author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz78zqz90z9z68zqqz70ztz74zd3m8z85zd6z68z60z65zz83z0pz83zz68z2jz72z has-line-manager line-ma
2023-07-21 16:50:32 UTC	447	IN	Data Raw: 32 30 30 30 0d 0a 6c 6c 3d 22 6e 6f 6e 65 22 20 63 6c 61 73 73 3d 22 64 69 67 2d 55 49 49 63 6f 6e 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 34 20 36 2e 35 76 39 2e 32 35 41 32 2e 32 35 20 32 2e 32 35 20 30 20 30 20 30 20 36 2e 32 35 20 31 38 68 31 32 61 32 2e 32 35 20 32 2e 32 35 20 30 20 30 20 30 20 32 2e 32 35 2d 32 2e 32 35 56 36 2e 35 48 34 5a 6d 31 35 20 39 2e 32 35 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 37 35 2e 37 35 68 2d 31 32 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 37 35 2d 2e 37 35 56 38 48 31 39 76 37 2e 37 35 5a 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 Data Ascii: 2000ll="none" class="dig-UIIcon" width="32" height="32" focusable="false"><path d="M4 6.5v9.25A2.25 2.25 0 0 0 6.25 18h12a2.25 2.25 0 0 0 2.25-2.25V6.5H4Zm15 9.25a.75.75 0 0 1-.75.75h-12a.75.75 0 0 1-.75-.75V8H19v7.75Z" fill="currentColor"></path><path
2023-07-21 16:50:32 UTC	455	IN	Data Raw: 32 30 30 30 0d 0a 66 35 37 35 36 31 39 36 61 33 62 39 39 36 32 31 31 38 37 63 65 39 61 32 64 63 34 64 22 2c 22 73 33 50 72 65 66 69 78 22 3a 22 73 5f 35 33 46 43 30 39 38 37 46 37 30 43 33 43 35 38 43 32 43 34 38 43 37 35 37 39 46 35 31 43 38 39 34 42 36 43 32 36 44 45 38 38 43 46 41 42 43 39 32 43 31 36 33 41 45 32 36 37 43 33 39 35 46 41 5f 22 7d 2c 22 70 65 6e 63 69 6c 4b 69 74 53 33 50 6f 6c 69 63 79 41 6e 64 53 69 67 22 3a 7b 22 73 33 50 6f 6c 69 63 79 22 3a 22 65 79 4a 6c 65 48 42 70 63 6d 46 30 61 57 39 75 49 6a 6f 69 4d 6a 41 79 4d 79 30 77 4e 79 30 79 4d 6c 51 78 4e 6a 6f 31 4d 44 6f 7a 4d 53 34 35 4e 54 52 61 49 69 77 69 59 32 39 75 5a 47 6c 30 61 57 39 75 63 79 49 36 57 33 73 69 59 6e 56 6a 61 32 56 30 49 6a 6f 69 63 47 46 77 5a 58 49 74 59 58 Data Ascii: 2000f5756196a3b99621187ce9a2dc4d","s3Prefix":"s_53FC0987F70C3C58C2C48C7579F51C894B6C26DE88CFABC92C163AE267C395FA_"},"pencilKitS3PolicyAndSig":{"s3Policy":"eyJleHBpcmF0aW9uIjoiMjAyMy0wNy0yMlQxNjo1MDozMS45NTRaIiwiY29uZGl0aW9ucyI6W3siYnVja2V0IjoicGFwZXItYX
2023-07-21 16:50:32 UTC	471	IN	Data Raw: 2e 7a 79 2d 55 36 50 45 42 5a 6f 35 74 5a 0d 0a Data Ascii: .zy-U6PEBZo5tZ
2023-07-21 16:50:32 UTC	471	IN	Data Raw: 31 36 30 38 0d 0a 76 41 77 79 43 30 4d 74 31 47 61 36 41 4f 4f 62 69 67 74 55 37 6a 4f 65 71 6c 41 6c 5f 51 2e 6a 73 2e 67 7a 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 31 39 34 30 38 34 62 31 62 30 38 65 34 64 39 63 66 63 66 33 37 38 30 32 63 36 36 64 62 33 39 37 33 39 39 38 34 34 61 64 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 70 65 72 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 77 65 62 70 61 63 6b 2f 70 72 6f 64 75 63 74 69 6f 6e 2f 61 61 37 62 63 34 33 64 61 66 33 63 33 64 30 63 30 33 61 38 2e 69 33 71 73 54 63 46 67 6f 4f 7a 7a 79 66 62 31 42 76 4b 4c 31 4e 67 73 6c Data Ascii: 1608vAwyC0Mt1Ga6AOObigtU7jOeqlAl_Q.js.gz" crossorigin="anonymous"></script> <script nonce="194084b1b08e4d9cfcf37802c66db397399844ad" src="https://paper.dropboxstatic.com/static/webpack/production/aa7bc43daf3c3d0c03a8.i3qsTcFgoOzzyfb1BvKL1Ngsl
2023-07-21 16:50:32 UTC	476	IN	Data Raw: 31 31 0d 0a 3c 21 2d 2d 73 74 61 74 75 73 3d 32 30 30 2d 2d 3e 0d 0a Data Ascii: 11...status=200-->
2023-07-21 16:50:32 UTC	476	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.5	49862	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:36 UTC	2530	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 931 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:36 UTC	2531	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6c 6f 61 64 5f 69 66 72 61 6d 65 5f 61 74 74 65 6d 70 74 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 2d 30 38 6e 77 5f 77 4a 77 48 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"EAiNyh0Etp1-SLOVW1yl7","event_name":{".tag":"load_iframe_attempt"},"auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu-08nw_wJwH
2023-07-21 16:50:37 UTC	3294	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 143 X-Webkit-Csp: sandbox Content-Length: 21 Date: Fri, 21 Jul 2023 16:50:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 50e681efbccc41dda1aeebfcd4364128 Connection: close
2023-07-21 16:50:37 UTC	3294	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.5	49863	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:36 UTC	2532	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 846 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:36 UTC	2533	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6c 6f 61 64 69 6e 67 5f 73 63 72 65 65 6e 5f 65 6e 64 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 2d 30 38 6e 77 5f 77 4a 77 48 56 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"EAiNyh0Etp1-SLOVW1yl7","event_name":{".tag":"loading_screen_end"},"auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu-08nw_wJwHV
2023-07-21 16:50:36 UTC	2710	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 2 X-Webkit-Csp: sandbox Content-Length: 21 Date: Fri, 21 Jul 2023 16:50:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 75a21839c094496ab2e1717bdb17f215 Connection: close
2023-07-21 16:50:36 UTC	2711	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.5	49866	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:36 UTC	2534	OUT	GET /static/webpack/production/5c4e3ef7b51c8e10ef28.p5qECeQFha0harwiGBk34lwjoVRUw-0hbHStF4MC5-g.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	2932	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 21206 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:37 GMT ETag: "176a3e30b15f97951df33759e0e1262c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 f6d3d027dc70c7291c2f685efb187ab2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: jUrJ-XjQT4HBzDPtctFRBQayQ0pMIw0AmD0OKR4CA97vBOL631ogHw==
2023-07-21 16:50:36 UTC	2932	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 bd db 6e 23 c9 b6 20 f6 ce af a0 72 70 d4 99 5b 49 8a d4 a5 2e 64 67 0b 2a 95 aa 5b bb 4b 55 b5 25 55 37 66 eb c8 42 8a 0c 8a d9 45 66 b2 33 93 52 69 4b 3c d8 0f f6 c3 60 e0 19 18 86 01 1b 18 63 5e 0c 3f fb d1 80 cf e5 5f f6 0f 78 00 ff 80 d7 5a 71 c9 88 cc 48 8a aa ae c6 9c d9 c0 ee 12 23 e3 1e 2b d6 2d d6 c5 bd 8d e2 61 72 db be bc 7c fb 7e ff f5 fe ab b7 87 f4 c7 e1 eb cb 83 1f 3e be fb f1 f4 f2 32 78 b4 c6 c3 c3 f9 85 d7 9e cd b3 b1 7b 7e ee cc c2 19 4b 2f c3 e1 34 8a ff 81 ff 7d 05 1d b0 54 fe 98 c7 c3 09 13 3f 06 93 64 3e bc 1c 26 83 4c 14 0c c3 6c 7c 95 84 e9 50 fc be 4e c3 d9 f8 d7 89 f8 15 c5 a3 c9 9c c5 03 f6 0f 2f 5e 3c 1f bd 7c 31 da 76 2e fc fb 46 77 e7 45 6f 34 8f 07 79 94 c4 2e f3 73 3f f6 ee df 5f fd c2 06 Data Ascii: n# rp[I.dg*[KU%U7fBEf3RiK<`c^?_xZqH#+-ar\|~>2x{~K/4}T?d>&Ll\|PN/^<\|1v.FwEo4y.s?_
2023-07-21 16:50:36 UTC	2948	IN	Data Raw: d4 f6 e5 40 82 2e 7e 9b 3a 2c 94 2c 0e 91 0c e9 84 e9 eb dc 92 06 ae 5e 84 21 7f ea b1 97 51 bd 45 9b 1a 52 25 75 0f 66 9b e1 80 b6 7a 33 63 a4 bd cf a4 61 a6 fc 5d 36 bd bc 97 ef 7c e2 d9 0d dd ae 1c a7 c7 10 48 1b e6 0e 65 0a 36 54 9a f5 95 b7 68 a1 16 54 af 99 5a 7a 9e a4 82 93 ab e5 4b 12 da 24 ae 3c f2 2b 87 2c 63 32 95 56 c1 2d 00 4a 91 b4 7e eb 41 17 07 82 7f d7 9f 73 54 9c 73 a7 38 e7 e5 3a aa c6 d2 7d 21 5e 06 ed 34 26 72 5b 06 63 38 bd ea 76 c8 28 c1 e6 6e f0 d2 df 6d 37 72 da 8d 46 dd 76 c4 d6 ed d0 b9 a2 32 d7 46 49 02 84 40 e5 38 82 19 41 f4 32 44 13 d9 b7 c9 2d 4b 0f 00 8c 5d 54 e2 52 bc 14 77 f3 72 f3 da 77 5a 18 45 2b 70 36 d1 3e 3f 1a 6c 46 d3 6b b8 29 4c 60 42 a5 4d 88 7c a7 3d 8b af f7 a4 ba a2 d0 23 c4 4a 75 04 bc b3 8a 24 e5 b9 89 8f Data Ascii: @.~:,,^!QER%ufz3ca]6\|He6ThTZzK$<+,c2V-J~AsTs8:}!^4&r[c8v(nm7rFv2FI@8A2D-K]TRwrwZE+p6>?lFk)L`BM\|=#Ju$
2023-07-21 16:50:36 UTC	3146	IN	Data Raw: f0 16 bc d2 fd a2 3d 0e b3 f7 b7 b1 c4 77 82 07 da fc fb 6c 63 b3 e8 3c e1 f9 1f d0 fb 2b 91 86 7a 38 a5 64 d4 4c fa 0e 57 76 02 9d 0d d2 3d 13 a7 ea b3 e1 2c 70 44 ac 95 9c 5a 0a 53 4b bf 4d 60 6a a9 c7 ce e3 f3 f4 e2 02 dd 7c 68 b4 de 7e 9a 86 77 00 b0 f4 2f 8c bb 97 f3 72 21 24 da c6 53 a9 63 23 f4 1b cf bd 58 44 ad f1 23 0f d5 1e 98 46 77 6d 8d af 5f f4 15 83 f4 0d 12 28 f6 05 2c 95 d1 19 03 49 5f cd 66 21 25 09 fd a4 d4 ea 94 33 50 b1 e7 7c d6 31 2e b7 d3 4f 60 fb 93 8d 0d 2f 3a 4f 2e 8a ca f0 43 44 f6 42 d5 23 eb e7 6e 4a ce e8 dc b9 fe fc a2 2f 07 20 2f f8 d4 4b cf b3 0b 0c 12 4c 56 9b 99 16 56 99 07 b2 07 e1 62 81 2f b9 94 df 16 33 22 c0 3d f3 d4 5f 41 4c 59 39 ee 15 0b e9 da 0c 20 e3 85 f4 71 c2 c0 cd 1e 37 59 12 1d 44 d4 fd c2 7f b1 53 8d dc fe Data Ascii: =wlc<+z8dLWv=,pDZSKM`j\|h~w/r!$Sc#XD#Fwm_(,I_f!%3P\|1.O`/:O.CDB#nJ/ /KLVVb/3"=_ALY9 q7YDS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.5	49864	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:36 UTC	2535	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:36 UTC	2536	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 35 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":25,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2023-07-21 16:50:36 UTC	2763	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 2 X-Webkit-Csp: sandbox Content-Length: 137 Date: Fri, 21 Jul 2023 16:50:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8738a814ef4b4f3391a16908472e98fd Connection: close
2023-07-21 16:50:36 UTC	2763	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.5	49867	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:36 UTC	2600	OUT	GET /static/webpack/production/e0d8148a84ecb269e327.IeP00FobWk-c_AtiUoDfLvHTgizjKX98gEi7b6K1JTg.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	3150	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 254348 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 20 Jul 2023 17:53:40 GMT ETag: "76835189f2c201501c6b3f4b7646368f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2aefdd231d9806ea2eced3399f411f80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: vYF4HL0vYa1BfU7SZW7KnbOScdGUFtrjztfHjjYgbVnXyruFJ2XzxQ==
2023-07-21 16:50:36 UTC	3151	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd eb 5a dc c6 b6 28 fa bf 9f a2 d1 9a 9b 29 4d 44 bb f1 2d 49 77 64 16 06 1c 33 83 0d cb e0 78 26 98 c9 27 5a 05 28 56 4b 1d 49 6d 4c a0 f7 77 5e e3 fc 3b cf 72 1e e5 3c c9 19 97 2a a9 4a 2a 35 38 c9 5e 67 7f 67 7e 6b c5 4d a9 ee 35 6a dc 6a 5c dc eb 38 8d b2 eb c1 d9 d9 fe c1 d6 ce d6 cb fd 5d fa b1 bb 73 b6 fd fa fd db 1f 8f ce ce 82 7b 6b dc dd 9d 9c 7a 83 d9 bc b8 72 4f 4e 9c 59 38 13 f9 59 18 4d e3 f4 2c bb b8 38 fb 1c 8b eb b3 2c 4d 6e fe 27 7f 39 87 ee 44 ae fe 98 a7 51 22 e4 1f 93 24 9b 47 67 51 36 29 64 41 9c 5e 24 73 91 4e aa ea bf 86 05 74 2b ce fe e7 c6 24 fc 26 7c fe 3c 74 4e fd db de c6 c6 c6 d3 d1 c5 3c 9d 94 71 96 ba c2 2f fd d4 bb 3d 38 ff 55 4c ca 41 24 2e a0 c1 61 9e 41 f3 f2 c6 2d 7d e7 ec 4c 14 6f b2 Data Ascii: Z()MD-Iwd3x&'Z(VKImLw^;r<J58^gg~kM5jj\8]s{kzrONY8YM,8,Mn'9DQ"$GgQ6)dA^$sNt+$&\|<tN<q/=8ULA$.aA-}Lo
2023-07-21 16:50:36 UTC	3151	IN	Data Raw: 00 a3 95 e1 c2 1b 7f 0e f3 7e 16 a4 ee 86 e7 c7 f0 cf 13 cf cf e1 9f 67 8f bf f1 fc 10 7e 0c 3d bf 80 7f be 79 0c df 93 a0 1e cd bb cd 60 6b c4 97 52 a4 51 01 fd 0b 6f ac 3e f6 4b d7 bb ed 61 bf 65 90 ce 93 64 25 08 c4 ea aa 18 84 b3 59 02 53 b9 8a 0b 3f cc 2f e7 53 91 96 85 77 77 87 05 e3 72 20 12 aa 3c ce 45 39 cf a1 8f 45 39 98 e5 59 99 95 37 33 31 b8 14 e5 eb 72 aa 8d ef dd aa 7a d0 1a da 6e ca 7f 07 71 9a 8a fc f5 f1 9b fd 11 f6 b6 18 eb bd e4 02 8f 40 ef 84 66 29 02 9a 53 19 c4 ae 13 4e c4 ba 88 e2 32 cb 1d df 29 44 22 d2 78 3e 5d 37 4b 6f d2 32 fc 02 3f d2 ac cc c3 b4 48 c2 12 b6 d4 f9 3d 4b c5 5e b4 3e 84 9f 51 26 8a 0f 79 38 73 3c 3f a5 be 71 0e b3 62 50 88 fc b3 c8 df d1 2c f6 d2 8b 6c 73 c9 37 dc 2d 5c f2 c8 f9 be 98 85 e9 8b d5 f4 bc 98 8d bf Data Ascii: ~g~=y`kRQo>Kaed%YS?/Swwr <E9E9Y731rznq@f)SN2)D"x>]7Ko2?H=K^>Q&y8s<?qbP,ls7-\
2023-07-21 16:50:37 UTC	3220	IN	Data Raw: cd b9 78 8d 01 58 bb 26 21 b7 e6 9e f1 36 16 4d c4 12 17 95 4d 74 86 51 1f 65 90 67 bb 1c a8 81 97 bc b2 2e 13 18 0e d9 e0 48 5e 56 60 ce 35 2a 03 9e 76 e5 1a c7 a0 fc d2 cd 2b 52 e1 43 6b 7e b6 a5 94 15 1a bd df eb 4b fa 5a f5 33 ea 22 ae 2b 8e 96 cd d1 86 a6 1f 3e 42 d5 5c 23 eb d0 c1 8a e3 d5 54 b6 56 6f 0d 71 d8 9a 89 6c d2 2f 39 ac 1c 92 cb 68 fe 20 ec fc 36 8f 73 11 f5 b1 3a 87 fe fa 95 2d 64 77 61 b6 20 8a d2 10 7d c6 a4 8e 7f 5b fb 56 35 85 18 f9 b0 2d 82 db 9e 6e 37 7b a8 65 e7 a4 ba ad 8f be c1 7f eb 55 8d 0f be 30 f0 e4 48 a1 35 13 7d a2 77 86 86 0e 47 1d 54 be 97 cb 47 01 7e 55 20 4e 43 1f d9 f2 d9 57 ec fa c8 50 45 f8 06 9e 1a 75 21 30 1f 6f fb a8 93 f3 f2 7b ba 95 b5 de 49 5d 2c 53 fe b5 ca b1 fd 2f 80 a5 0a bf e2 2c 47 2d a6 c3 d7 f3 a7 67 Data Ascii: xX&!6MMtQeg.H^V`5*v+RCk~KZ3"+>B\#TVoql/9h 6s:-dwa }[V5-n7{eU0H5}wGTG~U NCWPEu!0o{I],S/,G-g
2023-07-21 16:50:37 UTC	3242	IN	Data Raw: 4e f1 ec 97 85 6b 70 c3 92 2c f9 9b 22 4a d8 5b 4e 42 ee f6 e5 d2 b8 c3 65 7e 3b 59 0f 19 da a2 3f ad f8 03 c6 65 26 f1 0e 66 12 5f 96 67 60 63 26 e8 89 d4 ea c1 84 a2 12 40 b8 dc c8 9f 71 8e d1 8d 13 c9 d5 c5 c9 6a 5d 90 61 44 52 3a 39 a2 5e 6f 75 5c 1d 46 5e 0e 83 0b 8d 65 69 cf 38 e0 f0 d8 f8 ed 91 d9 7b 0c cb bd be 01 a9 15 a1 ce 3b 74 18 c6 e2 50 78 d5 29 1e d7 67 dd 33 72 33 8f 57 5e be 8a a6 71 b0 e0 4c e2 f9 29 59 e6 c3 31 9e 9b 0f b6 37 38 c4 35 e5 1b 1a df 08 3c 31 11 e4 ee ba b6 45 ae 6e b7 68 86 fa 67 c1 dd e6 7d b8 86 c8 fb eb f1 11 a3 37 1d 18 dd 3d 32 e0 e3 87 72 4a c7 33 64 6c 59 ce b5 9f d6 5e af a4 0a 62 fe 17 82 c8 d1 63 fd e4 af 87 eb 64 89 2e 3f ca ba 7d c2 90 81 96 b1 5b 0f 6b 79 56 84 1f 71 eb 71 d9 42 80 8e 90 00 99 f7 40 03 41 22 Data Ascii: Nkp,"J[NBe~;Y?e&f_g`c&@qj]aDR:9^ou\F^ei8{;tPx)g3r3W^qL)Y1785<1Enhg}7=2rJ3dlY^bcd.?}[kyVqqB@A"
2023-07-21 16:50:37 UTC	3258	IN	Data Raw: 18 1e a3 1e 66 32 ec 68 93 54 22 3c d0 34 89 1c 6b 71 d3 2e 49 71 fe 78 b4 01 1a 06 b6 f8 9b 26 ca df 14 d3 03 95 bd 06 fa d2 04 d0 26 b6 b5 be 09 ca 96 fa f8 d4 83 1d 82 52 b4 42 19 88 b7 ec f5 44 45 fc 2a b2 4f 8b 2a 28 3f fd dd 40 fc 35 da 1f 6f a5 fd 38 3f 0c b7 8e 5f cc 67 a4 8f 4e d8 47 08 d3 85 69 f5 da b6 58 47 ee b1 8c f7 58 a2 ef 31 e9 6e aa ef b3 c9 89 5c 96 e6 23 91 b8 ba c6 6d 53 d9 18 28 b6 b8 e5 a8 35 14 a4 33 86 ec 39 18 61 a2 08 2a c7 ab 56 2e 61 35 11 40 c1 88 cd ad ad 1d 51 6b 58 ae d6 1a 92 be 86 cd fd a6 12 3a 66 9d 66 e5 f6 6f 52 27 78 a0 29 c6 30 7e 43 d2 22 11 21 20 f9 f0 68 a8 11 22 e5 1e f2 2f 60 fa 40 de 69 18 d8 fb 0a 98 b8 54 e4 33 c6 8d cf c7 85 c1 8f c4 71 c9 c9 9a 6e ae 3e 3c 10 2b 4f be 95 5e 31 2c d7 dd 43 2d f6 11 f0 5e Data Ascii: f2hT"<4kq.Iqx&&RBDEO(?@5o8?_gNGiXGX1n\#mS(539a*V.a5@QkX:ffoR'x)0~C"! h"/`@iT3qn><+O^1,C-^
2023-07-21 16:50:37 UTC	3329	IN	Data Raw: ba 9a df 2e b0 aa 10 a1 7d 18 35 e6 9b 1e f0 da c2 5c c1 ca ee 10 d5 77 96 e6 7f 2e 6c 11 f6 42 8c dd 87 a6 a3 04 d1 ef 8a e5 62 9c 09 63 de fb 28 44 40 9c 50 50 d6 88 64 19 77 53 4b fd ce e8 f4 f2 a1 10 6d 47 93 f8 45 a4 12 c1 9b ec c7 24 d6 18 b8 4a 19 c9 85 c5 78 71 30 27 03 67 e9 35 73 5a e3 83 83 40 72 5d 5e 85 2f 1b ab 37 c7 41 13 ef 36 16 c6 98 ce a7 e8 1e ca c3 7f 3d fc d4 b2 aa 08 16 52 5c dd 71 c3 5c 98 a5 5c d1 ee 86 7d 41 f3 56 09 30 41 c0 19 91 d0 95 98 54 c1 86 5a a4 34 d8 b0 0b 99 26 8c 67 54 f9 28 c5 2a 2c 71 ea 87 20 fc 4d 16 62 b2 e2 70 3c 45 1b 05 0a ad d8 48 0e 3f af 29 9c 10 c6 72 ad 9e 1e 93 f3 c1 59 68 7f 3b e4 97 1e 06 f7 e3 e4 31 92 92 bd a8 51 66 23 67 38 ce 49 97 30 36 66 42 52 bb 33 22 56 54 a0 3f 45 94 42 0e 46 02 36 dd 49 d2 Data Ascii: .}5\w.lBbc(D@PPdwSKmGE$Jxq0'g5sZ@r]^/7A6=R\q\\}AV0ATZ4&gT(*,q Mbp<EH?)rYh;1Qf#g8I06fBR3"VT?EBF6I
2023-07-21 16:50:37 UTC	3345	IN	Data Raw: 2e 70 f6 8c a1 be c4 a5 84 cb 74 96 6b 74 c6 8e 51 0a 29 2d 48 0d 8e 84 26 97 be 9c bd c5 f6 f6 44 ac fb c2 56 cb c0 7c 71 0e d0 6e c4 55 ce 5c f5 f5 80 6b e8 8c bd 9d d9 8e ac 41 56 6b cf ce 2c 27 2b 6b 2e 9e 67 f8 bc 5e 1c 1f cf 1a 8a 43 35 cb 50 b8 3a 99 d4 3a ad dd 04 83 0f ca f9 5e 48 f5 45 29 db 20 20 23 b3 bb 71 5a 70 39 b8 91 9b e1 1b 17 66 2f 2d b6 a3 07 e4 93 6a cc 8d 82 3c 7a de 1b b4 09 bf ce 77 92 46 29 81 3e d2 19 8e e0 5d 69 8d b7 e4 fd d0 ae 36 62 29 fc 2f 2d e6 74 89 59 bb a9 39 7c 6a c9 9e 88 c8 9f 0c a4 ba a4 94 37 3a 63 ed 4f b7 d2 c3 ac a9 7b 59 b5 6f 18 0e a3 32 76 6c af 1f 5b 65 f7 b2 a2 6f cb 65 d8 73 3d c9 e7 92 72 fa 67 92 dc cb 05 50 8e 1a 20 70 74 00 d4 d7 41 91 a1 0b 41 25 38 8d 77 52 27 28 46 d4 4f 31 bf 49 0e 4f 81 89 97 4f Data Ascii: .ptktQ)-H&DV\|qnU\kAVk,'+k.g^C5P::^HE) #qZp9f/-j<zwF)>]i6b)/-tY9\|j7:cO{Yo2vl[eoes=rgP ptAA%8wR'(FO1IOO
2023-07-21 16:50:37 UTC	3361	IN	Data Raw: f2 48 83 8e 64 f6 41 a6 c6 e5 3c 5a 74 14 0a 86 87 14 9c bb b1 68 52 14 3c 0b c8 83 88 f5 b4 d7 0f 8f 72 9a 01 d9 96 58 14 87 59 d0 6b 4e 9c 28 6c a8 67 61 94 c2 b4 48 1e 1e 68 7e 9c 8b ae 62 6a a6 8c 54 18 1b 24 65 12 dd e2 4e 65 aa 3d 0a f3 d7 c9 66 12 e4 ad 76 a5 ac a2 78 88 1b 06 73 52 b9 f0 a1 76 6d 38 a8 d9 4f b4 da 35 cc 35 5b b3 2f 3c d5 ae f5 81 5b 86 5f 1f 6e d7 22 64 67 6a e3 ad 34 91 ea 36 0d 53 fa 27 76 f8 f8 ce fb 9b 3f 5a 1a 78 2a 2d d3 65 bc b5 af e0 9c 00 4b 98 42 69 a7 25 88 79 62 a6 a6 ef 48 df a9 04 41 c0 54 02 05 89 7a 40 84 4d 00 07 4a 09 3c c9 b3 81 5c 2e 77 83 3e c1 a6 ea 19 4e 40 67 9f 25 77 24 d9 4b f2 ac 53 ac d5 88 06 29 a1 8c f0 d0 ef 96 52 e0 68 57 4c da 86 22 6b e7 62 63 02 78 7a e8 75 09 48 a2 4a a1 20 50 21 5f 3d 6a 26 a9 Data Ascii: HdA<ZthR<rXYkN(lgaHh~bjT$eNe=fvxsRvm8O55[/<[_n"dgj46S'v?Zx*-eKBi%ybHATz@MJ<\.w>N@g%w$KS)RhWL"kbcxzuHJ P!_=j&
2023-07-21 16:50:37 UTC	3363	IN	Data Raw: f1 e4 01 95 a1 79 e9 88 ce 9f 6e 44 fa 80 34 42 f4 68 20 b4 78 3a fa 78 59 1b 10 bb 5d cf be e9 84 36 f4 74 c8 57 36 74 d1 f9 69 46 3f fa 3f 74 f4 e8 fd 71 cb db f7 ee 0f da 5b e7 ee b8 e7 ec 73 5b 77 9a 77 ac 6d f8 51 3d 87 1a 45 fa 04 6c cd 1d d7 e2 2f d5 73 ca 44 39 ac e7 69 a8 07 d7 28 a7 1e f3 f3 73 65 3c 06 70 de 18 c9 84 63 df 9d 8a e1 38 2b 49 d2 cf 46 39 f4 d3 d0 a4 22 7c 27 03 f9 bf c0 fc a8 c0 dc c4 ff 58 26 3c 46 f8 fe 17 78 1f 01 16 97 c3 f8 bf a0 7c 06 28 0b ee b3 d1 a8 d9 8a 43 5d 9b f2 60 81 c8 de 6e 19 41 47 ba 85 4a c7 2c 00 46 94 60 a5 2e 53 ab a1 0e 62 7f 5a 42 b5 44 26 54 4b b4 fc 80 5b 2f 36 b6 cf e5 c1 93 31 95 8f 3f fe 07 3a ea c7 27 8c 7a 67 67 e7 0f 74 d4 3b 13 46 fd b1 8f 7d 4c 65 36 d8 41 7e 66 5e 83 2f ce 73 42 48 d6 f6 29 5a Data Ascii: ynD4Bh x:xY]6tW6tiF??tq[s[wwmQ=El/sD9i(se<pc8+IF9"\|'X&<Fx\|(C]`nAGJ,F`.SbZBD&TK[/61?:'zggt;F}Le6A~f^/sBH)Z
2023-07-21 16:50:37 UTC	3379	IN	Data Raw: cb d7 76 4c b5 6e 3f 67 7c bd 7c 7b 63 f3 d6 f2 b5 b5 65 75 28 cc 8f e2 fc 8d 9f b7 b6 6a 57 9d 7b 5e d5 a9 ee 87 70 8c 3f 1b 86 6e 35 0c 8e 9d ea 21 3a 70 62 66 a0 67 fa 4e 52 85 63 30 59 c2 ef 5e 52 25 f1 ca 73 ab 49 58 45 33 9c aa 9f 54 23 df dd 3f ae ba 68 79 43 75 ae 7a 91 f7 58 8c 25 e8 46 15 2a ae 25 f8 0c 4c 42 75 b7 3f e4 42 cb 55 b4 d7 d9 3f 48 10 39 fb fe 5d 1c c4 6e 18 1e 7a a8 51 a0 2a d5 23 bf df af f6 e0 55 15 43 a5 63 7b c7 e1 90 2a 3f fb ab 97 df 70 9d 63 1e a6 5d 5b 41 5d 21 a0 39 20 b5 53 85 f7 76 b5 ef 25 50 24 ae 02 d1 a9 f6 38 61 0e 3c 53 dd 8d 23 0f 5e 3a c8 b6 5c 09 f1 6d 52 dd 05 8a 86 f3 04 34 96 43 e9 fb 2f 39 91 5b 75 e1 44 c5 64 3b 54 f3 79 00 43 ef 00 a0 03 f4 2c 10 2d da b5 a7 23 10 cd 01 44 18 19 29 8a ab 98 b1 08 07 e2 bb Data Ascii: vLn?g\|\|{ceu(jW{^p?n5!:pbfgNRc0Y^R%sIXE3T#?hyCuzX%F%LBu?BU?H9]nzQ#UCc{*?pc][A]!9 Sv%P$8a<S#^:\mR4C/9[uDd;TyC,-#D)
2023-07-21 16:50:37 UTC	3395	IN	Data Raw: 39 20 e7 0c f8 27 d6 b8 db 47 89 35 1c ee 0a 76 66 e9 9a e4 f4 29 ca 34 be 80 24 ee a4 9b eb c5 9b 5a 59 a2 e1 0b 19 29 b3 49 b1 0b 30 e1 aa 75 bb 3d b7 ac 2b 59 97 66 85 a0 98 5a 70 9a 56 74 cc 76 fa 22 20 5f bf a7 97 58 bd e5 76 43 b8 60 fd 6e 5e 61 75 4f 37 8c 2a ba b5 b5 3b 7a cf ec 33 f7 e4 80 89 36 21 29 52 67 71 a6 20 f4 d1 fa 97 6c 5a c9 ec 42 c8 5a 64 55 8d a8 31 f9 cb 96 ca ab b0 c3 e3 ba 40 a2 af c0 2b 06 17 41 82 f9 8a 69 77 42 9b b1 bc 23 9e 9a 1a 68 9b 4b 94 7a 00 ae 61 35 83 9b e2 af 3d a2 b0 2f 35 a3 b2 76 53 fc 8d f2 30 fb 6c 0f b0 53 36 40 7e 9d 5a 75 e3 1c ce bd af d7 17 25 de 15 9b 18 c2 80 0f 0b 77 78 1a eb 38 48 1b 4f 2f 36 db 59 f8 47 6b a3 ab 5d 8c 38 cc 1e 47 0c 5d 80 b7 0e fd 2a 60 72 65 f4 42 a5 c8 24 1a 73 84 4a c5 68 3c 3e 19 Data Ascii: 9 'G5vf)4$ZY)I0u=+YfZpVtv" _XvC`n^auO7;z36!)Rgq lZBZdU1@+AiwB#hKza5=/5vS0lS6@~Zu%wx8HO/6YGk]8G]`reB$sJh<>
2023-07-21 16:50:37 UTC	3421	IN	Data Raw: ca d6 a5 e9 5d 62 5b d8 ba e8 84 82 06 44 42 a5 24 e5 24 4c 3e c0 dd 2c a8 49 b8 0d b3 38 4c 72 20 7c 10 dc a6 21 46 a4 68 04 f0 c4 bd 49 3f 20 5b 42 e1 16 a0 de 35 d0 86 47 30 57 c4 dc 27 c0 18 11 dd 82 71 52 83 b9 8f c2 a6 ed 15 4b b4 c8 98 b8 d9 0a 6e c8 e0 0e eb aa 54 3e 35 4f c8 74 05 08 da 1e 24 9d 0c 48 ec 08 48 be 1d 36 ba 1f 79 49 fc f2 86 45 33 d2 d5 72 6e 95 67 df 80 d2 65 28 30 b2 da 3c 6f c9 d2 c6 39 fe 73 be bd 73 3d 9d 9d ef 18 09 66 f0 43 d7 fa ce b3 72 b3 f2 60 f1 ae 9b 08 e6 3e 93 2d 33 9c 5a 5b 9e 29 68 77 14 6b ba f2 cc 15 5a b9 79 09 cd ae f8 41 4b 33 77 f2 aa ff d3 f4 9d 4f 33 a7 79 ea ba ca 32 b5 3c 5b 3f 67 7f 60 c5 99 39 7a a1 a6 fb f9 f5 e7 0f 4f df 7e c5 e8 ba b6 ce 28 a5 71 97 ff 60 ca 9c 42 fe eb 11 64 06 79 5a f0 ba 74 49 cc Data Ascii: ]b[DB$$L>,I8Lr \|!FhI? [B5G0W'qRKnT>5Ot$HH6yIE3rnge(0<o9ss=fCr`>-3Z[)hwkZyAK3wO3y2<[?g`9zO~(q`BdyZtI
2023-07-21 16:50:37 UTC	3491	IN	Data Raw: 6f d9 e2 7c d2 07 ec c3 7b 8e a6 8c ed 3f 15 63 fb 0b 33 b6 b7 3e e7 a3 66 d8 1d eb eb ad b3 b7 b9 cd 0b 5d 74 d6 ee ab b7 6c de 37 87 96 ec 79 f6 f7 1e 23 78 dc 69 cf f8 48 aa f7 99 69 cb f1 d7 68 cf 78 c7 18 a2 81 fb b9 d5 77 86 56 b9 13 78 aa 3e c1 a3 1f f8 fa a7 8b f5 c9 a7 2f be 5a ef 7c e2 91 c8 d4 38 dd e2 cf e5 5e 9a 79 8c 62 d0 59 f0 e9 84 aa 9a 45 6b 47 a7 f0 54 1c bd e2 53 16 80 ba 22 bb 8e 75 6b c7 60 21 aa 83 fe e8 ec f1 30 d4 f9 f1 53 14 ae 2d 9f 7a fa cf f2 ec 8e ce 57 7f 5f 2f 17 b7 62 3f 97 3f 5d 28 e2 f3 55 79 6b a7 b8 2c 6a 91 96 77 f7 97 c0 e6 e9 cb f5 aa b8 7a 97 d7 bc e7 6a e7 a6 65 eb 97 cf 9f 9d 15 a1 7b 6a 79 57 cb 28 be 5d be da ac 90 c3 78 79 5d eb 9f ae 6e 8d 0d 99 8c e5 1a ff e7 d9 59 53 ae d2 9c 2e 35 4f 8f aa 8f 53 3e b1 fa Data Ascii: o\|{?c3>f]tl7y#xiHihxwVx>/Z\|8^ybYEkGTS"uk`!0S-zW_/b??](Uyk,jwzje{jyW(]xy]nYS.5OS>
2023-07-21 16:50:37 UTC	3492	IN	Data Raw: 94 8b 1a 31 e0 b0 3c cc 5f f7 f5 b9 fd a3 7d 7d 6a df aa c7 1c ef 9f 9c 3e 6d 77 a7 ac b9 fb 42 7b 53 6e bd 65 bc 7f bc 7f ff 13 6d bd e4 93 fd fd 65 2f 9c de 2b 00 f7 e3 d3 fd 23 3d 2c b7 5b f1 95 ae 2f 2d 0c 7f 65 0d 88 2f 36 5c db d7 47 d7 b7 a2 56 ab 23 73 ca 3e bd 2c d6 44 df f4 4d ea f1 df be d5 4b 38 33 42 5c 71 c7 8e fe 71 7e 76 71 f3 64 ff d9 66 73 f5 e4 b7 bf fd e9 a7 9f ba 9f 42 77 79 fd f4 b7 be ef fb df da 9d 8b e5 74 6f 44 8a bc 2a 43 fb fe fb 65 bc af ec 2e 7f 7e 6e 83 b4 72 72 97 27 27 86 56 9e 5e dd 7e e9 f5 fd ef 5e ad 36 cf 0c a5 2d b6 e0 57 3e f9 2e 36 79 ea d2 dc e6 2e 37 ae 0b 6d 6c 7c 97 db a1 f3 8d b3 7f fa a6 bc d1 86 2e 34 53 1b bb a9 71 63 e7 ec 61 bb b1 2d 5f 6b 7c 2c 5f 2a bf fa 6e 28 1f f1 6d 2a df 8b 9d 2b 57 1b ca ef dc 76 Data Ascii: 1<_}}j>mwB{Sneme/+#=,[/-e/6\GV#s>,DMK83B\qq~vqdfsBwytoDCe.~nrr''V^~^6-W>.6y.7ml\|.4Sqca-_k\|,_n(m*+Wv
2023-07-21 16:50:37 UTC	3508	IN	Data Raw: 5e 86 17 f9 7e 59 db d6 27 fc 1f 5b 95 7e 31 36 42 4b ea 91 12 89 1c d1 40 90 95 83 ea 89 4d 64 64 75 b5 70 4e 64 09 15 b6 07 ef 06 22 5e 28 0c 8a 00 a8 07 ed 31 11 b7 49 8d 80 47 aa 55 75 b9 1f 55 2b 41 d1 03 4f 72 28 48 b2 89 71 80 5e 81 9c a1 53 25 d0 1e 7c 4a 50 34 8d e7 e9 95 48 e3 a8 ea 60 6c 8d d2 1d c8 df dd 92 d1 3d 7b 3f b0 4e 50 10 9c 6b 11 6d 78 6f 9e 8b 24 dc 4b 9d 83 21 77 db 2c ee 14 12 2b b9 f3 91 de e0 2d ca 47 58 cd e9 3f 35 f3 22 6b 08 bd 1d 91 b6 39 d7 60 f0 c0 58 5a 2f bc d5 39 96 f2 61 af 38 44 04 60 ca e0 49 db 00 1b 9d 39 eb 11 6e 92 97 4e ca f5 ac 22 00 cb 22 5f bc 75 ad 00 2b a5 9c 84 28 04 89 8d 20 7e 28 f6 16 7c 00 16 6b b7 d1 21 e8 47 c6 7e dd 36 5c 6b cf e6 66 8a 08 ce 84 24 65 16 b0 e8 51 a2 a7 e8 04 d2 4f ed 40 29 08 d7 85 Data Ascii: ^~Y'[~16BK@MddupNd"^(1IGUuU+AOr(Hq^S%\|JP4H`l={?NPkmxo$K!w,+-GX?5"k9`XZ/9a8D`I9nN""_u+( ~(\|k!G~6\kf$eQO@)
2023-07-21 16:50:37 UTC	3509	IN	Data Raw: 71 b5 0e 00 91 49 8a 80 c9 94 ed c4 60 3c 9a 65 d1 cc 82 f7 d4 60 d1 7d 57 fb a9 30 f7 86 d1 6f 88 63 66 8b 0e 6c e2 82 1a 8e d2 a8 a3 3a 97 f4 d5 6d 47 06 47 ec 46 59 03 50 45 ec a1 53 0b 0a ab bb 34 71 e9 c4 68 2d 61 d2 50 4f 14 ea 54 11 cd 10 1a 88 51 75 ac 1c 0c f0 64 82 57 14 28 48 26 6a 24 36 9d 75 24 b5 4d 9a 34 a4 a3 0f 8b 96 e3 68 c2 12 9e 64 11 a8 89 10 b4 78 a8 9e 71 d8 40 92 0a 6a e0 71 06 63 56 80 99 05 c9 46 31 1d 55 26 99 c8 33 5c 41 84 dc a6 2e d6 de 5f 80 b9 e9 82 d0 a0 f7 6c c7 81 44 37 02 c6 be 53 de 46 ae e8 1d 56 16 bf 2a 7f 2c 00 21 f2 cc 46 1e 58 69 45 c1 17 d7 29 1d cd a9 6b ec 40 2c b8 51 5e b9 d2 36 d5 c2 a5 53 9f 23 36 82 03 f0 42 a4 b3 76 55 c4 49 61 c3 17 d6 d2 1f db 7a 4e 9c 22 d3 a8 aa 46 d7 a2 57 29 00 62 a5 ac 67 55 f9 41 Data Ascii: qI`<e`}W0ocfl:mGGFYPES4qh-aPOTQudW(H&j$6u$M4hdxq@jqcVF1U&3\A._lD7SFV*,!FXiE)k@,Q^6S#6BvUIazN"FW)bgUA
2023-07-21 16:50:37 UTC	3525	IN	Data Raw: a1 08 44 c4 49 f7 e1 6a 9b b2 02 52 87 15 dc e1 26 71 42 29 c7 67 db 8e 01 90 fc 1c 5d 70 eb 4b 96 3a d7 2b 55 8b 55 1f d3 62 98 e0 03 66 ed 2a 29 59 a0 5c 93 23 04 09 6a 66 30 73 09 d7 db 4c ea a9 ff 29 be a3 77 ca 77 51 92 a3 31 11 46 57 28 83 26 21 01 2a 93 97 a1 77 09 dc 65 5c ee 78 c2 ab 3c c7 d3 45 28 f5 31 0a 2d 9d ae a3 ab 8e 94 e2 fa bc 94 51 a8 c2 ee 95 bd 62 7e 59 b0 ec 5c 96 92 61 ff 30 22 df 30 37 b0 eb 12 91 79 27 e2 07 be 82 62 22 19 bd e3 3b a0 e7 73 b4 ca 82 8c b4 09 ef c2 b5 9e 1f 16 40 fc 24 63 b8 73 c7 48 1d 17 14 f1 72 0c d3 25 ca 97 4c 4c 28 ca 2f 57 09 73 5a 6b 9a c4 34 e4 b4 5d d1 1a 0a 17 30 5e 47 7f a8 d0 3b 34 36 25 a4 2e 6a e3 25 fb d7 4e 89 4b 10 4c 83 02 f8 06 31 a0 94 ba a5 66 e6 c5 1c a8 85 3b 20 9d 7f 9b c7 a8 7c 2c 4e 35 Data Ascii: DIjR&qB)g]pK:+UUbf)Y\#jf0sL)wwQ1FW(&!we\x<E(1-Qb~Y\a0"07y'b";s@$csHr%LL(/WsZk4]0^G;46%.j%NKL1f; \|,N5
2023-07-21 16:50:37 UTC	3526	IN	Data Raw: 22 e6 1c 58 a7 13 1b f6 6b 12 2c b6 04 c2 bc f6 25 9a b6 20 57 e0 4b 42 ca 41 43 6f 6e f6 8d 51 da 44 b8 df 30 e8 aa 05 94 2f 11 91 2d 0c c3 cf ce 04 2f a2 b5 8a f8 8f a3 9b 66 39 1f d0 2b 20 2c 4b 0f ce 89 28 95 e5 c9 75 82 a1 05 90 93 53 14 bf 91 fa d3 8e b6 c5 64 0e 31 85 5e 50 f9 e4 a8 55 f3 cf f5 f9 53 79 e4 e5 65 43 ce 06 0a 59 51 ff de da 5a c8 29 45 c5 c7 3a 29 83 a9 1a 1d 63 97 ac 5a a3 44 11 94 a6 d6 80 4c 37 9b 90 a9 e2 1e c0 f4 f1 3c 46 67 21 5a 7d 91 a2 6a 8a ef aa 63 91 b0 47 aa 05 06 0e b5 72 ec 26 64 7a d5 d4 28 9b 92 11 be 0a 23 c3 4d 49 2f 19 81 55 4c 5c 5f e9 b5 71 7b a5 d7 7c 79 a5 d7 55 c3 5f 44 51 b9 6a 50 53 6b 60 5c 43 78 aa a9 fc 75 80 1c 0f d6 c3 42 86 40 b4 a6 b4 24 36 53 8d d3 5f 72 96 7e ef 39 b7 4e 20 9d e1 1d 6f f9 e9 5b b1 Data Ascii: "Xk,% WKBAConQD0/-/f9+ ,K(uSd1^PUSyeCYQZ)E:)cZDL7<Fg!Z}jcGr&dz(#MI/UL\_q{\|yU_DQjPSk`\CxuB@$6S_r~9N o[
2023-07-21 16:50:37 UTC	3542	IN	Data Raw: 8d 76 40 4d 9d e6 7b 9e 13 70 9f 77 92 20 86 8b 7e 3d 92 20 c1 e0 a5 0a 4f c3 b5 68 62 03 24 d6 51 49 8f 20 7f 58 a3 61 e5 ae bf 57 db 02 7a d6 cb 0f ca 45 90 7d fd b2 a2 7f 01 6e ba 5b 35 db 4d c6 85 a0 7c d2 85 a4 67 56 80 24 0b aa fd 1a d4 88 e0 69 1c e5 4d d3 94 93 2c 97 4c 92 f4 cf 82 74 cd 79 b6 5c 64 1d 0e 61 e9 54 cb 65 44 9e 36 53 7c ea 50 33 2d eb 68 ec e0 26 fb 47 72 1c 47 36 99 5f cd f3 eb 67 81 a7 30 c6 f6 81 35 8f 04 f9 48 83 8f 2b 11 d9 b2 13 58 1d 38 bf 27 5b 28 1e 1e ee 17 e4 26 4a a6 f4 a8 8b 61 7a 96 a1 3b 35 fc 13 de 03 70 f0 c7 59 a1 84 84 85 86 4d a1 40 2b 22 e4 4b 32 b5 c2 10 a1 63 d2 62 2d d0 96 81 36 c2 a0 42 15 03 3d 59 8d 1b 37 a7 2d e2 44 a5 bc 25 0b d0 fa a2 15 70 2c 00 f7 f0 3f 6c 0d 48 5f 12 e1 be b9 b9 0c fa fe bd f0 a0 b6 Data Ascii: v@M{pw ~= Ohb$QI XaWzE}n[5M\|gV$iM,Lty\daTeD6S\|P3-h&GrG6_g05H+X8'[(&Jaz;5pYM@+"K2cb-6B=Y7-D%p,?lH_
2023-07-21 16:50:37 UTC	3558	IN	Data Raw: be 8f f9 29 55 2c a6 cd 5a 0f 27 d7 0f 81 e4 7a 7d c6 bd de bd 5c 7f 92 dd fb ab 7a 48 6f 36 ad 61 55 da 31 93 16 ab 96 84 8d bf 22 36 11 61 5d b5 69 e9 f6 b9 cd 53 f8 90 0a a1 80 4f 88 6b df 3e 13 8d f5 9a 27 a3 f3 50 b5 87 27 e4 51 2d ac 9d 92 55 83 d5 6a 33 f7 2b 69 b1 d7 f2 49 ff e1 89 68 e8 f5 a8 cc 30 1b 8e 6e a5 ef df da 89 f4 fb 6c 35 08 04 12 9b c0 6a 68 ba ae 60 d9 30 37 d6 61 e4 fe 7e c3 ac 6e 1d b9 b1 a1 1c 55 f5 99 47 29 c2 29 f8 30 94 6d df 3b d4 74 30 19 54 e4 93 72 49 92 20 f6 8c 2c 59 fa 86 92 dd ad b5 9b 92 4f 07 ff aa e3 cc 1f 3a e6 06 ad c7 dc 36 61 2f 85 2c b9 fb 23 9c 19 df 52 a9 9f 83 c2 15 58 49 86 4f 4b 1e a8 db 2f 85 3f c6 f0 e9 ee 4e a9 56 8b 75 1e 4c 17 97 11 bb 02 f5 a7 61 ec 66 3f fb d0 4f 71 5e 0d 7e 7e ef de c6 cb cc 0e 9d Data Ascii: )U,Z'z}\zHo6aU1"6a]iSOk>'P'Q-Uj3+iIh0nl5jh`07a~nUG))0m;t0TrI ,YO:6a/,#RXIOK/?NVuLaf?Oq^~~
2023-07-21 16:50:37 UTC	3569	IN	Data Raw: 78 84 25 40 1d 21 b9 25 19 c2 06 bf cf fc 8d f3 f5 fc b4 f9 25 67 5d aa 4a 25 a9 64 93 64 f7 3b d3 97 20 4b 75 5d b5 6a d5 aa 75 95 84 62 17 0f ba 2b fe 73 73 ba bb 36 84 a3 e1 06 0b 6d d5 81 09 45 e8 03 fe 03 3d 6c 69 0b b0 8b 07 d7 ce 9f 81 38 96 e4 62 8b 68 9b b7 35 0f 4b 84 0b 8d 08 17 9a 11 ae a3 b3 0a a6 1a 2d 18 37 ae 6c 05 ce a5 31 14 cb 5e c3 30 09 84 5b 66 4c ca 5f 84 4e 61 05 eb b0 7c 85 79 81 77 e7 64 b3 53 7d 49 96 f8 d5 52 ce f8 1c 60 d3 64 73 6e 11 a2 b7 08 d1 5b 01 77 58 da 44 8d 7e 9c 79 88 b8 7c e0 b0 5b c5 e9 99 8c a7 96 db a9 a3 4d 2a a2 49 4d ec 13 67 11 82 63 d5 63 42 9b 71 60 9f b8 c7 84 bc c7 00 e9 6b 9b 9e 05 cd f4 8e d1 1b 0a 4d ec 4d a1 ca ae 85 d7 81 4e 6c b9 1e 1b 25 cf 49 9f b7 b0 a6 ba dd d4 ea cd f2 eb 4a bd 69 5f 90 d7 c4 Data Ascii: x%@!%%g]J%dd; Ku]jub+ss6mE=li8bh5K-7l1^0[fL_Na\|ywdS}IR`dsn[wXD~y\|[M*IMgccBq`kMMNl%IJi_
2023-07-21 16:50:37 UTC	3585	IN	Data Raw: 9f 96 12 ce a8 f5 d3 bb 89 38 b2 0d df 3c 6f 42 c2 a9 18 53 2e c3 69 82 26 53 0d 7c a0 7a 0e 5c 4e af 17 8f 61 0d 8d 9c b0 b1 c7 c7 99 e6 4c d3 d2 e0 86 79 43 cd 24 ea 5e 0b 3e a8 bd c4 69 76 e6 94 a5 6b 02 4c 3f fb b2 05 4c 74 62 bc ee c8 d1 84 72 72 35 04 08 d5 3a 0f c7 42 77 d2 98 49 a8 66 82 09 bc 4c 88 de 1b d6 ab ac c9 2a 9c 2e e9 81 3d 9b 3a 65 1c d4 c1 38 95 9b a6 05 4f a4 99 50 1d fc 50 ef ec 6d 38 76 52 99 db a8 51 5f 9c a5 50 d0 1d b8 30 14 87 cf d2 07 61 fa d0 28 2f 55 77 68 00 91 98 57 eb 34 3d 5b 5b 33 2f 93 ea ce c5 8e 9a fe 2e 71 bc 8d 35 90 b4 b4 44 e4 76 0b 75 83 6a 34 6e 74 f9 d4 e0 98 8c d3 b7 61 6d 39 48 54 29 56 22 95 eb 90 e2 ae 13 dc 35 aa 52 f7 67 37 a3 54 d2 e1 4a 79 7e 37 77 34 5d 7b d1 98 96 29 00 69 1d b3 44 43 b5 c8 3e 94 64 Data Ascii: 8<oBS.i&S\|z\NaLyC$^>ivkL?Ltbrr5:BwIfL*.=:e8OPPm8vRQ_P0a(/UwhW4=[[3/.q5Dvuj4ntam9HT)V"5Rg7TJy~7w4]{)iDC>d
2023-07-21 16:50:37 UTC	3601	IN	Data Raw: 1a 3b d7 f0 e7 94 fd 09 1b a1 c1 dd 67 34 3a 56 57 e0 d2 af a4 3b fb 30 3d 4e 0c 4e 31 a3 91 72 34 1a 63 73 58 3f 51 ea aa 32 c6 97 1f ff 33 8a 0d be 29 af a9 7d 79 98 95 b6 ed 6e 44 b6 7a 3e 15 0a 25 12 31 2b e4 68 31 0c cc 61 0d aa ce ac 12 8b 8b 12 72 60 3b ad 56 d4 bf 5b d9 17 d9 25 89 11 94 89 ed 0e 63 19 cc b1 d5 fa c7 23 53 fc 35 26 5d bf 88 2f 55 ee c6 c0 fe ae dd dd da c2 0a 9a 22 1e 17 4b 9f 52 2e 47 ed ec 59 47 2c 75 24 66 ca 79 03 98 2a ef 47 2d 1e 1c 9d ad 0f c8 8d 94 b4 2c 1c f0 04 f9 1c 2a f2 b6 0c 00 71 03 f9 88 15 6c 5b 85 9c bc 8a 63 ac 05 05 f8 69 9c e2 6d 31 26 5f 13 72 78 ea 51 cc 1b 26 4f c0 b8 a4 f3 c5 1c 73 57 04 23 35 3c 50 16 cc d9 ad f4 eb 45 2a 6f 73 79 2f 4e d1 6d 15 b6 6a 28 9c 9c 5d 26 14 1a 82 32 73 7e 6e dd 51 88 92 27 c3 Data Ascii: ;g4:VW;0=NN1r4csX?Q23)}ynDz>%1+h1ar`;V[%c#S5&]/U"KR.GYG,u$fyG-,ql[cim1&_rxQ&OsW#5<PE*osy/Nmj(]&2s~nQ'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.5	49868	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:36 UTC	2610	OUT	GET /static/webpack/production/5c96e38211ab10ca7147.h3rhOr2LNO3D_82clEFt9El5YEWuTRA2E8rTrrtWqOo.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	3204	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 117778 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:38 GMT ETag: "8ab414d6da3d21234f27b48a0f9af76e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 ff571229df9f46b01b0e434bcb36f9e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: T_Gm3ofkkGvRytvSwrH4jUron8ivd44k1y955CuTa6aIiz-tPl5yQA==
2023-07-21 16:50:36 UTC	3205	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd eb 76 db 3a b2 30 f8 5f 4f 21 6b e6 73 93 1d 5a 91 7c 4b 22 b5 76 96 63 2b 3b ee ed 5b fb d2 e9 7d 32 59 5e b4 04 db ec 48 a4 9a a4 e2 78 3b fa d6 79 8d f3 02 f3 0a f3 7f 1e e5 3c c9 54 e1 42 02 20 78 93 95 f4 9c 5e dd 1d 0b 04 0a 85 42 a1 6e 28 00 d6 83 e7 8f 83 87 f6 f5 f5 d1 e9 de c1 de bb a3 21 fd 63 78 70 bd ff e1 ea e4 b7 8b eb eb 41 69 8d ef df 3f 7d b6 db b3 79 74 6f 7d fa d4 9a b9 33 12 5e df 40 23 12 fe 6f fe 63 ee 8f 27 84 ff 18 4d 82 f9 f8 7a 1c 8c 22 5e e0 f9 b7 93 39 f1 47 49 f5 7f ba d1 d4 f3 c9 75 4c a2 58 54 f2 dd d8 fb 4a ae c7 24 fa 12 07 b3 ff ed be 7a b3 f5 ea d5 56 b7 f5 d9 79 6a 74 bb 6f 7a b7 73 7f 14 7b 81 6f 11 27 76 02 fb e9 f4 e6 9f 64 14 b7 c7 e4 16 20 9d 85 01 c0 88 1f ad d8 69 5d 5f 93 e8 Data Ascii: v:0_O!ksZ\|K"vc+;[}2Y^Hx;y<TB x^Bn(!cxpAi?}yto}3^@#oc'Mz"^9GIuLXTJ$zVyjtozs{o'vd i]_
2023-07-21 16:50:37 UTC	3295	IN	Data Raw: 23 b7 4d 8b ce f8 56 a3 4c 9b 80 e1 2b 6f eb 26 70 32 67 a8 00 54 dd 8d e5 dc ae a4 ad 4f 43 87 ca d1 a0 6a dd 1a b6 63 95 ce 99 ed 1c 95 d9 ce d1 62 d1 28 4c 43 28 34 a2 97 b2 a1 05 ec 02 5b 3a bf 7b dd a6 2e 4e 7e a8 6e 5c ff 08 db fa 90 d9 bd cc 88 e5 a7 05 75 bb ba a1 5b c9 ac 36 3f 4b 98 67 52 4b f6 b1 3b 1e f3 e3 89 06 6b 9a 5d 0f a7 ac 86 3e 83 20 d6 4b e0 e8 ab a5 80 66 c2 4b 90 17 5c a0 3e 6a b1 d3 2b 9d 77 d3 c2 c9 60 55 3b a3 a3 14 6b 7d 79 ab d4 da c5 99 a8 88 78 76 e9 2d 83 be 29 9f a2 c6 20 64 91 91 ce c1 32 8e 91 41 0d 2d e1 20 15 42 2e f1 93 1a 75 1d a5 32 c0 05 0e 93 e2 c8 88 23 bc a9 0f c3 d6 6c 57 f7 78 c4 d9 de 8c b3 83 be 51 ea 83 a9 07 85 b3 0e 8f 50 6e 7c fd 52 4f 89 5d 3b 97 78 71 ba 32 e3 2d 45 11 f8 4a 99 15 9b 43 04 bc 7b 5b 81 Data Ascii: #MVL+o&p2gTOCjcb(LC(4[:{.N~n\u[6?KgRK;k]> KfK\>j+w`U;k}yxv-) d2A- B.u2#lWxQPn\|RO];xq2-EJC{[
2023-07-21 16:50:37 UTC	3311	IN	Data Raw: 63 60 01 2f 9a b7 ee f1 be f2 96 e5 a8 5c b1 41 c7 62 27 a4 28 b3 f2 bf ef 81 6a 70 2b 5e 61 68 00 72 13 87 8d da c7 fd 4a dd 5f eb a3 52 2c 61 31 cc e3 a3 67 db 0f b7 64 01 56 b7 70 25 1c b1 06 07 0f 70 ad 42 96 87 c6 65 08 d8 73 73 a0 00 53 df 22 1b aa 84 87 e1 fa 12 db 1b 64 1b df 20 db 20 1f 7a f1 02 ce 74 fb f1 b1 75 89 5a 05 97 11 2f d1 7a 55 1b 9b 8d 01 21 e1 88 22 47 43 eb a3 17 2f 02 58 3e 65 52 f4 09 bf 30 18 47 ee 9e 10 76 d0 5d 18 47 1c 89 3b c9 57 8f 8f 57 2f 5e c8 9f 3b ac c5 57 77 84 f2 d0 10 fe 11 9f da 3d 3a 9f ae ec af ae 65 51 06 07 aa 79 a6 10 d8 99 ba 2c 67 0c 71 ee 57 de fe 65 0f 8a 48 3e 71 81 bb 9f 55 4d 37 51 a6 7b 06 12 f9 5d 36 86 2d 87 68 5b 0c 9c 87 3b 3e d0 9e 00 b4 35 94 43 da 83 3b 3e a6 9c c6 36 63 20 c5 56 19 a0 f6 8a 2e Data Ascii: c`/\Ab'(jp+^ahrJ_R,a1gdVp%pBessS"d ztuZ/zU!"GC/X>eR0Gv]G;WW/^;Ww=:eQy,gqWeH>qUM7Q{]6-h[;>5C;>6c V.
2023-07-21 16:50:37 UTC	3327	IN	Data Raw: a1 bc 6b 1b 70 13 fe 1b a0 5d 8b a2 b3 9c c4 fb fc d9 05 ba 89 42 81 c2 1f d0 2e 7e 88 d6 3d 72 1c 50 94 e9 32 b0 c4 d9 68 fe 9c c6 1e e6 f4 aa 69 6c e2 40 54 db 3b 0a 56 09 ae e6 6b 64 3f 26 8a 9f 3e d3 fb 9f 39 ba fc 63 96 8c 95 ca be 94 0a 3e b1 b7 37 ad 87 06 17 d4 05 e3 ca 32 70 e6 95 7b fe 94 84 2b d7 39 33 32 07 02 8d 04 a5 06 05 fb 79 6c 0a 79 f5 3e b3 31 a8 2f 7d 5c d3 f3 1f 4d e1 c7 08 2e 8a e6 f0 3c ca be 22 8a eb 62 98 44 b8 78 31 a4 f0 ed 86 9e f5 d4 fc 82 47 8a d2 4b 53 7a 0a 9f f0 cf 42 26 4d e4 a5 75 77 c0 7e bb e9 60 2b 12 1f 0b 95 b0 a0 62 d1 f2 3a 5b 81 74 d4 a9 ac 35 13 c7 f4 6a 8b 14 2f c3 c3 ad 95 da 61 5e 39 2c ac 6f a9 62 58 88 c6 b1 52 33 cc 6b 71 a6 55 fd 76 a8 a8 7a 67 a3 83 67 ae b4 86 3e fb 34 85 93 c8 ac 9e a2 c9 a9 ea b9 b5 Data Ascii: kp]B.~=rP2hil@T;Vkd?&>9c>72p{+932yly>1/}\M.<"bDx1GKSzB&Muw~`+b:[t5j/a^9,obXR3kqUvzgg>4
2023-07-21 16:50:37 UTC	3409	IN	Data Raw: 7a da 7d bd 26 d2 ad 5e b9 35 45 eb da 8d 73 8b db f8 f6 17 f4 7f 00 e1 94 ca d4 fa 5d 75 50 a8 b9 53 72 cd 1e cd f2 57 cc 25 17 f2 67 9c 6e ea 8b bc 55 88 7d 92 b0 9b 37 ab d4 91 bc ea 08 ba 1b 74 5b 21 e2 66 62 28 2d dc aa 9b 5e ed d6 33 a0 06 39 69 78 bb 70 53 8b 37 f3 f9 5a 85 fb 5c b9 70 c6 9b dc 82 8d aa 64 99 f8 34 36 15 44 0d 57 14 a5 f4 90 1b 68 cd 9b 09 93 0d ac 7c 4e 88 e9 4d 45 4f c3 8d 44 f9 9c f4 81 d6 30 d8 9a 2e 0b cb e7 03 24 b1 a1 29 7a c7 60 9d 2d 9f 8e 36 ce 1a b3 d9 31 99 9f cb a7 23 68 77 b3 25 32 dd 00 96 4f a9 38 d6 3a ba 0f 13 b5 d6 13 52 0a af 42 56 c8 29 a6 c3 ae d0 47 41 52 c9 61 bb b4 41 99 2d f1 a9 e6 3a a7 ae 31 92 ef a8 8d 6c 7b c5 07 36 cf 69 d9 cb f7 6e b6 eb ad 86 a1 5a f4 58 a7 fd b7 b5 e9 fd 0f da d1 cc 62 4d a3 c4 b0 Data Ascii: z}&^5Es]uPSrW%gnU}7t[!fb(-^39ixpS7Z\pd46DWh\|NMEOD0.$)z`-61#hw%2O8:RBV)GARaA-:1l{6inZXbM
2023-07-21 16:50:37 UTC	3437	IN	Data Raw: 68 92 d8 3b e8 aa 2c 88 2d fb e3 74 93 33 d2 fd 15 22 50 73 88 da 24 4b 41 61 98 9c 94 a0 ba aa fa b0 14 2a 98 f3 27 15 db a3 c4 81 2e b6 7b af 70 37 86 38 19 22 54 42 56 c7 34 6e 99 05 ab ca 4c 66 a8 5b ea 90 17 9c c6 37 45 0f a5 42 4f 2a c3 a6 36 29 40 1b 9e 9b 40 5e 3a 9f 52 16 87 68 a9 b4 4b c6 ef c5 d7 c5 b2 be f1 e6 63 3e 26 0e 7c dc 1a c6 7d 42 f4 82 e6 6e f8 10 85 0c 89 01 8e 3a 2f cc 04 e9 75 3e 13 6c e7 5f 9b d3 18 ac 38 91 b5 aa 79 60 b4 f4 3e f3 ef 8a 33 38 43 87 46 18 9d 03 d9 78 fc 4c 63 1b 1a 96 c0 8c 97 45 44 41 5e d4 2b 71 07 41 22 ab 96 26 98 6b b7 97 77 22 6b 1a 3a 01 ba 81 67 76 11 6c 45 27 a2 66 b1 0f 89 f0 97 cf 42 d6 5c 9e a4 42 6d 4f 7c 68 39 df 04 ca 86 17 dc c4 02 d3 cf 6b 97 7a 01 7e a4 ec da 67 db 68 89 05 c8 bf 9e 6b 11 a8 15 Data Ascii: h;,-t3"Ps$KAa'.{p78"TBV4nLf[7EBO6)@@^:RhKc>&\|}Bn:/u>l_8y`>38CFxLcEDA^+qA"&kw"k:gvlE'fB\BmO\|h9kz~ghk
2023-07-21 16:50:37 UTC	3453	IN	Data Raw: 22 ea 1d 72 ba 6f 0b 96 b0 69 e5 03 b5 ac 6f 36 7e ec 9d 9e 34 b9 72 32 18 3f 54 2c c5 91 28 4f df 9b 7c 82 de aa 2b 69 9b 37 5f db da f9 1c f3 7f 6b 9f 8a 6f d0 f2 93 a9 9e 6e d8 52 07 94 64 e0 e1 36 f8 d7 33 34 47 53 61 86 09 57 c6 48 77 9a 8a 2d 5a 1e e8 90 89 e3 2a cf 33 a0 c6 d3 b1 81 a0 4b e1 2a 1e 02 05 3d f3 67 96 0c bf 6b e3 d5 b0 33 81 55 66 6a 47 e6 39 b2 8e 8f 3f ec 52 1d 8e d6 b3 58 ed 22 4b 6e c9 4a 41 26 93 e4 e7 93 bf cf ec 4b 3e 21 eb 17 32 2a bd 82 89 45 72 34 31 d5 9a 56 8f e6 43 d5 9e 9e ca 36 2e 99 f9 48 6e 94 23 10 a3 f6 69 2a 2c 25 ba 49 27 cb 91 4d a1 83 4c 05 18 0e 1a 7b b0 1d 1d 0c fa bc 24 cb 22 a6 a6 0c 86 ab fd 92 d1 b1 7d 3e 76 26 8f cb 5e a1 9a 1c 5d b1 18 e1 23 17 80 99 8b 2a 32 f5 04 0a 34 4c 8a 25 a1 3e cf 6d 8d 34 11 48 Data Ascii: "roio6~4r2?T,(O\|+i7_konRd634GSaWHw-Z3K=gk3UfjG9?RX"KnJA&K>!2Er41VC6.Hn#i,%I'ML{$"}>v&^]#*24L%>m4H
2023-07-21 16:50:37 UTC	3469	IN	Data Raw: 0b 1e 03 33 ae 59 0e 34 de 21 0d 78 a2 ac e3 31 bd 96 af 3c 69 f1 96 c3 c6 44 1e 15 b6 59 f6 26 79 3f 9b 97 9c bd a9 e3 58 c2 a6 4e 9a 6e e9 8b 83 00 6e e1 72 e5 2c 89 03 6c 40 f4 e9 ee eb dd 93 03 b5 59 d2 90 5a f6 3a ca a3 f4 16 21 e7 2d f5 a5 b6 5d 0a 2d 5d f6 c2 6d d0 88 7b 65 8b 16 8d a2 f6 db c3 dd b3 d7 c7 27 6f d4 56 75 40 f4 59 62 98 d9 dd 2b d9 c7 0e 8e f6 11 45 d9 0b 1c 1e 1c bd fb c5 fe f9 17 df 2f d9 dd 76 8f f6 4f 8e 0f f6 ed d5 0f de fe 78 7c 54 b2 0b 1f bc dd 2d ad 7d 5c f2 f5 6f bb 07 c7 25 03 fb e1 b8 c7 3a b7 62 bd 7c 63 45 88 b5 ee 7d 04 ad b6 cf 18 a9 b6 8f 08 a5 b6 4f 14 9f b6 cf 04 9b f6 af bb 25 35 8f f7 35 2c 00 e1 94 23 c6 c2 7f 50 c5 25 ae 8a e8 9c 8f d2 e4 a3 fa a6 95 ab fa e7 17 71 74 d6 76 18 7d 08 af be e0 ab 66 b5 4f b4 d4 Data Ascii: 3Y4!x1<iDY&y?XNnnr,l@YZ:!-]-]m{e'oVu@Yb+E/vOx\|T-}\o%:b\|cE}O%55,#P%qtv}fO
2023-07-21 16:50:37 UTC	3485	IN	Data Raw: 96 36 a3 a7 fe 0c 59 fc 84 64 5d 89 7a 94 cb 35 b5 16 2f 4d 85 ed 08 fa e9 5a 51 1c 11 6b e9 12 d0 27 49 82 7c ae bb d5 71 61 87 8c c3 c9 82 ff 8d 52 a4 06 98 b0 0d 0f 92 49 19 32 19 30 a8 f3 d2 da c6 0d 9b f3 4c 51 ee 74 2d 80 a3 b1 0e 10 e5 f1 7a b6 91 cb 57 ba c1 1a d8 56 4a 65 5d 93 57 02 3a e9 36 d5 41 c3 40 2c 4f 10 1f b2 5a f4 22 62 79 08 c0 65 a0 11 74 05 6a da f4 36 d4 7e 02 3f f3 df fa 51 30 95 6f 19 64 0f a1 e2 95 7c 7c 13 fd 5a bd bf 5a 1d 19 b7 2b 3f 68 a6 b8 eb a3 11 69 46 b4 42 bb 09 fa 87 19 d1 8a 0e 5d cb 6d 4e e2 0c 6a e7 d2 48 82 25 0f eb 32 6e c1 c8 99 5f fb b7 d5 59 aa 80 ff b2 12 70 de 68 6f 15 fb 90 3a c3 ab 7e b7 08 30 1e 2e 19 39 e2 39 37 b5 6f 71 36 bb 74 fd 41 47 cb 96 39 58 7b f4 59 76 eb 63 38 9d 82 e4 f7 f2 1a bc 87 20 7e 1d Data Ascii: 6Yd]z5/MZQk'I\|qaRI20LQt-zWVJe]W:6A@,OZ"byetj6~?Q0od\|\|ZZ+?hiFB]mNjH%2n_Ypho:~0.997oq6tAG9X{Yvc8 ~

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.5	49869	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:36 UTC	2611	OUT	GET /static/webpack/production/3af77e47b247f637744f.DQ6v0YSq6-ztqbzUE8-jtbGwsLA38ge3i3Qt_FY7yek.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:36 UTC	3184	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 62989 Connection: close Date: Fri, 21 Jul 2023 16:50:37 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:14 GMT ETag: "b42d9f48a0711e340c8650166f5041a0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 fa2f998214db1c6c6bdb96ceff3ce5d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: PBxlqLcKCsjnny6faK7W62kKfyPk22m5Jr-C33R_QLnfF4mkfp6hqQ==
2023-07-21 16:50:36 UTC	3185	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 77 db 48 92 2e fc 5d bf 02 e6 dc eb 2b de 26 50 d8 17 b9 59 3e 5e e4 b6 a7 bd b5 ed 72 f7 8c 5f 1f 1d 88 04 45 96 41 82 0d 2e b2 2c eb fe f6 37 9e c8 04 90 00 41 6a b1 cb ed 99 51 77 59 4c 00 b9 46 46 c6 96 91 91 fb a7 93 d9 30 3b 35 8e 8e 9e bf 7a f0 f8 c1 c3 e7 87 9c 38 7c 7c f4 e8 e9 6f 2f ff fa f6 e8 a8 7f 69 8e af 5f 3f 7c ec 1a f3 d5 62 bc ff e1 43 67 1e cf 93 fc e8 98 0a 25 f9 ff 93 0f ab d9 30 4d e4 c3 20 cd 56 c3 a3 61 36 58 c8 17 93 d9 28 5d 25 b3 41 99 7d 16 2f 27 eb e4 68 98 2c 3e 2d b3 79 fd e5 34 3b 9e 50 55 61 32 8c 42 d3 f4 3b 1f 7b e7 7b 96 6b 1f 8c 56 b3 c1 72 92 cd f6 93 de b2 17 77 cf 5f 1d ff 9e 0c 96 c6 30 19 4d 66 c9 eb 3c a3 2a 96 67 fb cb 5e e7 e8 28 59 bc c8 86 ab 34 e9 f4 ce d7 31 b5 7c 70 Data Ascii: iwH.]+&PY>^r_EA.,7AjQwYLFF0;5z8\|\|o/i_?\|bCg%0M Va6X(]%A}/'h,>-y4;PUa2B;{{kVrw_0Mf<*g^(Y41\|p
2023-07-21 16:50:37 UTC	3260	IN	Data Raw: 0e 09 0f 28 8f 8d cf 78 69 45 f6 3a 34 7c df 1d 98 1a 48 11 e4 04 97 f9 b6 0b 7d 5f a6 89 26 f9 90 fe 1d c3 09 5d ea 89 19 d2 07 d3 0c a9 b3 24 c7 8c d1 d7 f7 cc e7 09 14 2a a3 b7 fc 35 77 95 2a e7 9c ba 11 51 87 1d a2 45 50 2d a8 27 32 4d 20 21 8d 42 87 24 12 b2 09 01 54 29 e4 d7 3a 37 69 78 78 74 1d bb c8 83 24 11 48 12 3d 88 a8 99 61 45 83 9c c7 8f 1e 79 87 ad 34 e8 07 48 13 ab ff 2a d2 c4 ea 56 9a b8 31 0d ba 82 34 b1 fa 26 69 62 b3 74 53 9a b0 dd 3f 4c 9a b0 ad eb 4b 13 44 66 1c 45 9a 80 25 51 91 11 48 21 f0 60 84 24 f2 e8 1b 1e 4c 97 61 84 3f 2e a7 68 b6 31 c5 06 5b 0a e9 17 ab 3b 0a 88 a6 d8 24 5b 40 de 70 54 79 63 6d 53 53 30 68 46 34 10 07 75 39 18 80 29 53 86 43 b8 42 9d 05 40 74 ae ca a1 5f ea 0d 28 33 88 ad 27 7e 84 ce 62 39 57 a1 1b c3 49 f6 Data Ascii: (xiE:4\|H}_&]$5wQEP-'2M !B$T):7ixxt$H=aEy4H*V14&ibtS?LKDfE%QH!`$La?.h1[;$[@pTycmSS0hF4u9)SCB@t_(3'~b9WI
2023-07-21 16:50:37 UTC	3276	IN	Data Raw: 10 a3 88 e4 4a 91 59 92 7b c0 9d 35 d2 ce 52 3d 24 c7 a4 96 fb 34 54 a8 d2 ed c8 b1 33 78 ec 38 84 11 b2 85 b4 20 8a b6 50 9a 20 8b 31 c6 6c f0 6f 12 87 11 a6 0d 79 46 9c b6 08 ca 66 71 6c 47 64 cd b4 90 c9 25 9d 59 cc 23 8d 2b e7 a9 6b f2 f4 62 dc b0 04 b0 5a fa 72 b1 b4 08 9d 4e 9f 0a f6 71 86 41 f5 b0 58 18 3d 67 10 20 12 00 a8 7f bf 47 8b a0 ed 88 cc 25 3c 31 36 32 4c b5 38 e8 7b cb 86 a2 e0 f4 18 9f 41 0f 0b 90 b0 72 38 da 89 83 b5 c5 61 09 ba 2d 84 9c 6c 73 d9 2e a7 94 69 77 6c cc 6d bb cd 73 8b 3f 82 af 22 45 67 17 d1 04 b8 20 7a 84 b0 96 6d 5c e0 e5 e5 63 73 98 93 b6 80 89 76 64 f3 0d ad f9 06 b7 4f 64 11 1d c3 bd e7 be c8 17 4a b8 72 51 ee 13 5a 6f 89 95 d5 ea a4 f9 ca 5a 4d 9b 61 7f 82 16 d4 ef 5a dd be 8b 60 da 2d 43 fc db 14 02 40 c3 6e 22 f4 Data Ascii: JY{5R=$4T3x8 P 1loyFfqlGd%Y#+kbZrNqAX=g G%<162L8{Ar8a-ls.iwlms?"Eg zm\csvdOdJrQZoZMaZ`-C@n"
2023-07-21 16:50:37 UTC	3277	IN	Data Raw: dd 7d 7c ee 22 8f 2c 89 5e 0e d1 07 22 47 c8 5e d3 c3 19 96 fc 8c da 5f 91 40 f1 31 3a e7 be d4 30 ca 22 d4 b6 5a 5d 1d a1 6e 16 21 7e f5 95 31 e2 83 1e 1d a3 b6 42 a9 c7 6d 3a 56 ab dd 5a 3f 46 5c fd 2b a2 64 b7 ad 1e 8e 77 ba d6 a0 2b 10 68 5a 2d 47 47 80 db 25 f2 dd b5 1d ce fe d9 45 28 e9 56 67 03 12 5b 90 f1 7b b9 f9 5e 6e be 1b 0d 5f ad 4c bb db ef 0f 4f cf e7 63 cc 76 cd 33 63 d3 ad 5f 63 65 20 92 ba 3f 8e ab 3b af f9 e0 c9 a2 3a fe dc 3b a0 96 48 57 bb aa c5 66 f5 f8 d8 8b 5e 86 13 da 07 55 f3 9a 47 72 f8 a0 b9 aa ef c4 d6 99 17 ef 7d a4 25 1a 11 cc 51 0a bc 4e a5 96 46 3c f2 ac 68 11 f8 71 ad 6a 55 eb d6 22 5c d4 ea 3b 4b 2f 3e 5f ce 8d f8 e1 c3 d8 8a c3 fd f0 d2 5b 3e 71 23 af 56 17 28 0e 0a 28 56 6e 8d 16 da 5e 8e dc 9a 5d 37 e7 f4 a7 65 37 eb Data Ascii: }\|",^"G^_@1:0"Z]n!~1Bm:VZ?F\+dw+hZ-GG%E(Vg[{^n_LOcv3c_ce ?;:;HWf^UGr}%QNF<hqjU"\;K/>_[>q#V((Vn^]7e7
2023-07-21 16:50:37 UTC	3293	IN	Data Raw: 67 9a 31 8b 3d 48 ac 08 e8 45 2e e6 af 5c 08 28 d2 f0 50 c6 48 02 9d 16 3f 51 79 6e b1 21 e6 d8 64 cb d3 53 22 c6 aa e3 89 21 0a 83 c5 99 7a 8a 5f e4 50 bf cb a7 a9 d0 55 26 73 a1 9d 88 8c 69 a7 2e 87 55 f7 3c 46 b6 a0 ba 79 55 1c 87 b2 78 5e d9 95 3e 16 5e 58 9c 2d 61 8b fa 93 d9 58 f9 e2 2f 5c 1f 26 cc 7c 9d d4 b1 ff 3a f2 08 fa c4 5d 5e e9 f1 97 c5 41 ac 30 10 99 95 0f a4 bb 57 c5 53 9a 9d 6b 0b 5e c9 35 90 33 67 43 f3 32 0d 55 a1 71 69 58 ca 67 a7 2a b1 d7 99 02 3d 31 60 12 3d b3 34 f8 6d 61 50 4f fd e5 6c bb ae f0 f7 ba fc 4f 36 08 64 d6 0c 57 f0 01 48 ad 60 f2 6e 6a b6 f6 e6 08 0d 33 71 49 1f 99 8c 76 e9 6f 34 26 21 a9 76 69 9d d2 cb a7 af 5f be 0a 27 82 bf ca 48 ba 6a cc f4 d9 cb 35 57 62 75 cb 5d fe e7 ca 59 22 9c d1 b6 b3 9f d8 a2 23 c3 7c 73 74 Data Ascii: g1=HE.\(PH?Qyn!dS"!z_PU&si.U<FyUx^>^X-aX/\&\|:]^A0WSk^53gC2UqiXg*=1`=4maPOlO6dWH`nj3qIvo4&!vi_'Hj5Wbu]Y"#\|st
2023-07-21 16:50:37 UTC	3397	IN	Data Raw: 2d 98 ec 7c 44 7f e0 96 80 e1 91 ed 58 86 68 49 b8 a3 60 50 d0 98 81 d6 0c 1a 55 b5 fc 44 8b 86 1f 5b b9 d1 50 d1 b0 e5 de 90 b3 11 19 97 8c 02 13 7d 3c 78 73 15 fd 73 91 19 5a 78 f5 2c f1 85 5a 2e 99 07 2c 05 ae 07 c4 16 1b 26 a5 b8 1e 50 4d 2c 86 4c bd ed 97 05 00 94 a0 c4 e9 b7 73 a8 64 d7 26 e2 2c 00 28 34 c9 1c e2 6a 82 e0 ed 8d 95 8d eb 19 08 82 7a e9 05 01 6f ed ab f0 dc e5 d9 a6 11 a3 f5 32 b9 52 5b d7 fb 1f 34 21 62 f7 c3 a7 c9 95 d3 84 81 e5 72 f9 79 39 02 2d 23 61 99 03 f3 51 bf 78 13 4f d2 bd 77 e9 fa 78 2f e9 95 5a 48 3f 89 b7 09 ad 92 fb 9d 55 5f b9 dd f1 3b d7 96 e0 4f 4c a5 f0 95 fb cc 42 95 c1 4a 38 74 b7 60 46 0d 4d 68 9d 49 30 bb fc c2 c0 1b b4 71 0b dc d9 37 2c ad 8d 15 44 9c 7c c1 29 33 50 30 42 36 59 9d 28 1e a8 af 0c 27 62 92 2e 0a Data Ascii: -\|DXhI`PUD[P}<xssZx,Z.,&PM,Lsd&,(4jzo2R[4!bry9-#aQxOwx/ZH?U_;OLBJ8t`FMhI0q7,D\|)3P0B6Y('b.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.5	49870	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:37 UTC	3294	OUT	GET /static/webpack/production/00e4f72cc8d07e2964b5.ezimfJZlTtJey57m97Ax4xFG22d8BUDGW-mXRHxj1SA.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:37 UTC	3608	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 42732 Connection: close Date: Fri, 21 Jul 2023 16:50:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:25 GMT ETag: "bd71dd2dfd3da7db8433b7b535b9aea9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 9defe0d67603d45217a1199d0f877384.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 9uasKjJXbXO6Sxu3EnTdbgYry9nChbQeTo2h4bAshkHawYS2PYrebw==
2023-07-21 16:50:37 UTC	3609	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd db 72 e3 48 b2 20 f8 ce af a0 30 bb 6a e2 08 64 92 ba 8b 2c 96 56 a9 4b 66 56 e5 ad 53 99 d5 dd a5 d6 a6 41 24 24 a1 44 02 2c 00 94 52 25 71 ec fc c3 3e ac ad d9 ac d9 b1 79 d8 5f 98 f7 d9 3f e9 2f 59 bf 44 00 11 88 00 49 65 65 75 1f db be 28 09 20 2e 1e 1e ee 1e ee 1e 1e 1e 8d bb 30 1a c6 77 ad cf 9f 5f bf 3b 38 3a 78 fe fa 98 7e 1c 1f 7d 3e 7c f9 e9 ed 8f a7 9f 3f f7 17 96 78 7c 3c 3b 77 5b 93 69 7a dd 38 3b 73 26 fe 24 48 3e 5f 40 a5 20 f9 af e2 61 1a 0d 47 81 78 18 8c e2 e9 f0 f3 30 1e a4 e2 45 18 5d 8e a6 41 34 c8 8b ff e2 a7 e3 30 0a 3e 67 41 9a c9 42 91 9f 85 b7 c1 e7 61 90 de 64 f1 e4 bf ee ed 5e ec 0e fd ce b6 73 ee 3d d4 3a bb db 1b dd cb 69 34 c8 c2 38 6a 04 5e e6 45 ee c3 bb 8b 5f 82 41 d6 1a 06 97 d0 d4 fb Data Ascii: rH 0jd,VKfVSA$$D,R%q>y_?/YDIeeu( .0w_;8:x~}>\|?x\|<;w[iz8;s&$H>_@ aGx0E]A40>gABad^s=:i48j^E_A
2023-07-21 16:50:37 UTC	3624	IN	Data Raw: 68 d0 ff 24 7f 11 5d e2 5e 5c ff 37 78 55 3c 7d 80 27 d6 23 ef e0 97 10 48 a7 72 1c 1f 67 60 bc 75 76 77 36 5c 0f fe 5d df c1 7f da f8 67 7d 1d 06 ec e1 17 23 4a 9a 6f 91 fd 37 ba f9 35 ed 3e 7b 26 2e 7c 1d c4 e3 67 3f 04 43 be 45 56 dc fd ca 87 1d e5 de 35 56 fa 29 48 52 64 9b fa 7a 0b fe 8b 6f c4 ad b2 dd a7 b7 f7 ec 62 14 5f 3c bb c5 96 3a cf 5e bf 3a 3c 7e 7b 7a 0c 2d 3e ab 05 ad e0 0b de d4 97 6a b3 e2 4c 51 75 cc 92 10 54 44 91 26 de 11 08 76 c2 08 6f 9d 95 f8 ee d2 81 b0 d6 7b 39 4f 40 5c 6a a6 bd 9c 6d 83 fc 42 19 79 18 41 e1 68 49 9f 5e 5a f0 b9 af 26 43 aa 83 b0 ab a3 77 33 4c d5 88 79 df 8b 85 b2 9e f4 89 07 03 e4 67 b0 98 92 20 8d 47 b7 41 d7 87 5f 28 04 ba b1 87 49 6c 38 22 9a af 52 45 07 15 be eb 27 ec a3 88 fa 29 fc 0c 45 82 59 98 d1 1c 92 Data Ascii: h$]^\7xU<}'#Hrg`uvw6\]g}#Jo75>{&.\|g?CEV5V)HRdzob_<:^:<~{z->jLQuTD&vo{9O@\jmByAhI^Z&Cw3Lyg GA_(Il8"RE')EY
2023-07-21 16:50:37 UTC	3641	IN	Data Raw: e5 a0 76 74 34 e0 1e 9f f4 0a e1 46 40 5b f8 fc 37 0d 9f bf dd bd 94 79 ce e7 cf 41 fa 26 1e 4e 49 02 de 8a 93 3e 33 c9 e7 51 a3 43 5b 31 8d 2d da d8 69 ac 03 32 fa b4 c3 90 f4 1b 6d cf 6f bd f7 27 78 b2 3a 1b 9d f8 e8 fa b8 77 c1 9c 39 f1 46 f8 31 14 bd 89 73 6c a9 0b 6b 15 98 de 99 c8 1e e0 a7 a0 ba 21 ad 76 31 17 a2 d3 b9 9e 64 c9 89 23 29 a6 38 fc 06 35 ea a2 0a 3a f2 44 25 94 a8 60 cb 5b d5 e2 f4 88 65 17 66 24 e2 10 ba e9 68 88 ed 1c a4 87 5c 9b 83 18 61 0e 83 c1 0d 08 ad 8f f1 d5 d5 28 8f 40 8e 2b 32 24 88 64 8f aa 73 20 db 47 16 c9 7d 04 20 dd 8d ca 32 1f 11 67 11 1a 88 1e 1d 8f 7e 61 ee 6c 24 72 e7 7a d2 4c af 7d a4 9a 26 5a aa 4d c4 53 d3 87 e5 44 8c b6 20 38 73 15 f7 f7 fd c6 4a 9e 4d cf 35 41 10 a7 e2 1e 6a b8 88 9d c4 c9 12 dd 29 c7 f2 a1 2c Data Ascii: vt4F@[7yA&NI>3QC[1-i2mo'x:w9F1slk!v1d#)85:D%`[ef$h\a(@+2$ds G} 2g~al$rzL}&ZMSD 8sJM5Aj),
2023-07-21 16:50:37 UTC	3657	IN	Data Raw: fa 82 02 30 10 53 69 ca c1 83 99 ff f2 85 9e a1 eb 51 e0 ac 18 df 0f e3 87 fe f5 af 54 98 ef d8 80 91 ff 1c b6 4f 0e 7b 9d 2f 3d ef e4 10 01 e4 e1 f7 ee c1 2f 1f 7b 2b f0 04 ff f0 66 8d f8 fe 1e 48 e8 4e da 8a 35 7b 7f 1e 1d 1c 12 35 a6 0a 35 a2 05 1a 75 56 ac 45 c4 fe 80 90 15 f2 5f 83 e4 1a 34 dc cd 82 b3 f4 d2 05 8a cc 42 e5 a4 1e 24 a6 a2 58 14 5d ea c9 86 b3 cb 49 72 4d 10 49 b4 41 1b 9e 98 98 7a c0 d9 a3 ea 22 be 0f 97 5a f6 40 86 2a 71 ab 31 4c d0 6c 53 6d 19 f6 78 e2 d2 e3 8a a6 4f 0e cb 1b 8e 93 ac 7e 1b 66 76 c3 38 60 f2 a4 55 db c6 41 e4 d1 58 e1 ac a1 d2 4a ba c9 7e ba ee f5 10 81 59 93 70 90 a4 98 e7 85 07 17 f3 af d2 99 54 84 7e c2 95 a2 07 08 ff 96 c8 59 a1 2a 72 4f 2d ad 0d ba cd 50 eb 8d 43 47 cd 41 51 b3 4f 53 65 d5 1b 98 f5 56 4e bf a2 Data Ascii: 0SiQTO{/=/{+fHN5{55uVE_4B$X]IrMIAz"Z@q1LlSmxO~fv8`UAXJ~YpT~YrO-PCGAQOSeVN
2023-07-21 16:50:37 UTC	3659	IN	Data Raw: b6 f1 ce 69 8b af 5d ba 1e 06 6e 63 7e 91 87 d7 a0 af f7 60 c0 83 59 c5 df 51 98 36 3e 33 c6 15 df ee 60 9e 9b ae b0 5d a5 5c a3 b0 f6 9d 51 62 2d 7e c4 b5 ef 16 ea 74 c3 d1 2b bf 08 3a 97 87 1b 88 93 45 46 eb 2e 66 9c ca 7f 09 60 c3 1d 0a 84 0f db ca 2f 3f 55 1b e5 5b 2d 07 24 7b 6d f6 05 d1 5e e6 0c 15 ef 25 1c 5d 55 87 4d 13 cd 63 16 51 3b 54 de d9 28 b4 39 cb 4f 20 0b 2d 5b 93 e3 53 e1 5b 17 60 ce 80 a4 d7 10 74 58 10 a4 ca da d0 87 ab 59 e5 81 b5 04 44 5a 9e 2a 80 5d ca b8 bf 58 2e cf 01 b0 19 f4 3e 5a 18 ff 78 25 71 44 d9 87 db 21 4f 54 95 db d8 52 d4 96 e0 79 8d c4 17 93 d2 ac e8 cd 9d 48 04 00 13 a8 f2 06 41 3d e8 75 6e 4e b5 3a c5 72 da 7d d5 0f ae 1b 6a 6e 71 33 91 c4 34 e6 a1 21 ae 32 12 7e 31 c4 bd 98 8c a6 62 05 26 38 07 2a 4d 2d 3a 03 05 c2 Data Ascii: i]nc~`YQ6>3`]\Qb-~t+:EF.f`/?U[-${m^%]UMcQ;T(9O -[S[`tXYDZ]X.>Zx%qD!OTRyHA=unN:r}jnq34!2~1b&8M-:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.5	49871	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:37 UTC	3605	OUT	GET /static/webpack/production/51ad636d17314c9fbda6.-4AanJk8XBB8Xq-UvkkSlFpQHmXs-lIik_lOJMsVMYg.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:37 UTC	3685	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 79623 Connection: close Date: Fri, 21 Jul 2023 16:50:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 20 Jul 2023 17:53:46 GMT ETag: "831aae6dbf6c84f3c6178b1b606257f3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 fec5e83bcae9ab1295b776b3f64183d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: EZ9T-T2BRzteIo8--5_56QUPcpLWK_VZc_EdnqCYKSEQePLhl3W5fg==
2023-07-21 16:50:37 UTC	3686	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd ed 72 db b8 96 28 fa 5f 4f a1 68 ea 7a a4 09 a5 c8 4e ec 38 f2 56 e7 3a b6 d3 71 b7 1d bb 63 27 e9 de 39 29 17 25 52 12 3b 14 a9 26 29 3b 6a 47 53 f3 1a b7 ea de bf e7 15 ce ff f3 28 f3 24 77 ad 05 80 04 40 90 a2 6c a7 f7 9e 53 d3 b5 77 2c 92 f8 58 00 16 16 d6 37 9a 37 5e e0 84 37 9d ab ab 93 b3 fd c3 fd 57 27 47 f4 e3 e8 f0 ea e0 cd fb b7 3f 5f 5c 5d f5 57 96 f8 f6 ed d3 e7 56 67 36 8f 27 cd 4f 9f 1a 33 7b e6 46 57 03 a8 e4 46 ff ce 1f e6 81 e3 bb fc 61 e8 87 73 e7 ca 09 87 31 7f e1 05 23 7f ee 06 c3 b4 78 60 27 de b5 7b e5 b8 f1 97 24 9c f1 97 33 6f 24 2a 24 ee bf 0f 9e ed ba cf ba cf 46 8d cf d6 6d 6d 73 7b 7b b7 37 9a 07 c3 c4 0b 83 a6 6b 25 ad db b3 c1 ef ee 30 e9 38 ee c8 0b dc f3 28 84 6a c9 a2 99 58 8d ab 2b 37 Data Ascii: r(_OhzN8V:qc'9)%R;&);jGS($w@lSw,X77^7W'G?_\]WVg6'O3{FWFas1#x`'{$3o$*$Fmms{{7k%08(jX+7
2023-07-21 16:50:37 UTC	3702	IN	Data Raw: d5 e8 63 f8 50 ee 0a 65 13 eb 4f c5 53 b6 df 74 51 f3 64 33 bd 86 4b cb 11 91 bb 73 5b a1 04 2d d3 2d ce b3 ca 6d 65 db c1 d2 1d b0 70 63 26 4b 12 6f ca ae 95 26 13 4f ae 80 0d 53 c0 d3 82 26 b0 21 dc 04 a8 f6 c0 b7 83 2f 0d 98 53 1f 2d 1f f0 11 ce 5a 32 a6 af 06 33 25 5f 2d e3 78 73 53 ee 4c 87 5c 2e 6d cf 6c 2f 32 cd b8 ac 3b 74 61 65 1c 3b 5a c8 d6 08 42 74 b6 71 ab 40 c8 4a 9a a0 93 3a 9a 45 de d4 d4 8d d8 fa 06 30 0d 3d f1 2d df 6a 19 e5 41 fd 84 5a 71 31 77 ee 40 1b d2 61 79 d7 e0 82 9a 72 5a e2 6e 03 79 0f c9 88 17 c8 e7 65 91 94 c7 ef 59 41 69 cf e3 c7 26 ca 79 4f 5f a8 d7 42 6d 33 cf a5 ad 2d 7e 2d 14 bf 64 e5 79 77 1d bf f5 24 4b 49 2f b9 38 70 a2 5d db 0b 18 ad 95 69 66 a0 13 ed a0 43 04 83 8d 4f 2e c9 09 27 fb dc 0c 38 c1 74 a8 1c de d3 46 07 Data Ascii: cPeOStQd3Ks[--mepc&Ko&OS&!/S-Z23%_-xsSL\.ml/2;tae;ZBtq@J:E0=-jAZq1w@ayrZnyeYAi&yO_Bm3-~-dyw$KI/8p]ifCO.'8tF
2023-07-21 16:50:37 UTC	3743	IN	Data Raw: 7b 73 67 e0 22 43 89 9d 7e cf ce 94 99 e2 fd 41 4b 50 3a 40 19 d8 5c 40 7b f9 b9 d5 49 26 6e d0 94 25 96 1a 08 61 20 80 ee c0 2e 23 f2 d7 64 ae bd ad 16 08 97 68 71 60 a8 41 39 d8 60 7d e2 d0 07 b1 db b5 bf 18 96 07 1a 59 22 d9 00 6c 55 dd 2e d6 e7 30 a9 91 87 b0 f4 ea da ed 67 aa f3 c6 e6 0b f5 62 d4 cd 67 5b 4c 60 df 42 09 7e c8 78 80 39 f7 e7 98 b1 c8 21 0a 34 e2 71 46 cf b6 b7 30 d0 a8 5c 31 3e ee 17 78 63 e0 b5 f4 b0 74 ec 34 8f 8f e6 5f 30 0d 6e 4e b1 cd 0a 75 3a 9d 54 f5 3c 0f ec 6b db f3 71 3b c2 41 43 94 8c 9a 38 fc 63 f1 f5 a7 1d 83 9d 92 e9 98 a5 6a 75 5e 8f c5 71 38 c0 1f e3 75 25 2c 1c 07 e4 64 20 49 5c 38 4d e3 8b a8 fd 85 3f de 5e 98 6f 41 82 36 fe 35 61 77 2c b1 66 58 72 7d 2f ae f3 96 14 a5 f5 e2 fb 39 ff ad d0 1e f3 d6 86 95 94 9f 40 c0 Data Ascii: {sg"C~AKP:@\@{I&n%a .#dhq`A9`}Y"lU.0gbg[L`B~x9!4qF0\1>xct4_0nNu:T<kq;AC8cju^q8u%,d I\8M?^oA65aw,fXr}/9@
2023-07-21 16:50:37 UTC	3744	IN	Data Raw: 6c bf a7 55 f2 4a ab c0 ec c2 6c 04 43 10 54 b4 7a 30 f5 33 64 20 9e f8 de 20 b2 a3 45 69 33 97 bc f0 09 2b cb 62 b3 c9 66 b2 fd ec 01 c2 08 68 d2 4f dd 60 8e 81 14 38 e7 84 65 49 e7 d4 1b a3 1d 0c 48 52 8a 2e a2 14 7c 15 89 45 dd 24 81 3f b1 f4 e5 20 9c 2d 04 c8 72 05 e0 bd f6 63 c3 07 76 b1 44 22 bd 39 fa 8a 8a 1b e9 05 6a 7a 50 c9 15 24 e1 2b 52 62 68 df a4 47 d8 fe f1 44 7a e6 37 3b 48 6f 3e 02 b5 b8 00 aa ee 06 d2 4b 46 d8 3e ba 03 05 30 4f 01 eb 63 18 39 94 26 55 7a 87 31 ce 6f 3c 54 90 2d e4 b1 ce 07 98 da 61 a0 0c d3 76 f0 49 68 e3 d2 2f e5 97 fd 3d e3 0a 81 dd ed 6d 1e cf b1 bb bd c3 74 02 bb 4c 23 80 77 f6 0d 99 ea 80 14 02 dd 2e bf 0d 9a e7 1e 79 8a 79 4a a6 cc b7 7b 44 2a 82 4d 7e db 5f 77 4b ba 0f 9a 5a 7e ce ee fb db e2 b7 fd 3d db dd e6 d7 Data Ascii: lUJlCTz03d Ei3+bfhO`8eIHR.\|E$? -rcvD"9jzP$+RbhGDz7;Ho>KF>0Oc9&Uz1o<T-avIh/=mtL#w.yyJ{D*M~_wKZ~=
2023-07-21 16:50:37 UTC	3760	IN	Data Raw: a5 ab 54 c0 ce a9 a2 27 47 19 1b e8 51 8b 60 dd 6f 64 35 e2 39 dc 41 78 fd 43 c7 61 d0 65 b5 3f e1 3a b4 a7 43 78 0f b8 4e b7 37 59 48 83 0d 56 6c 16 7e 51 56 b5 d9 f2 aa 86 3c 2c 65 1c 43 74 d6 47 15 3c ef b7 6f 69 90 59 6b 76 9f 4b 03 b9 ef 30 41 4c bb ca e2 fe de aa d0 2d 29 09 8f 67 0a 0f 41 92 bc 42 e9 d9 e3 ab 49 79 0b 7f a6 5f ac f0 09 53 b9 bf 14 29 33 bd 34 d0 a6 d4 38 e4 65 46 3c e7 56 a2 be 2f dc 2c 92 5a b5 0c 0f 8e de fb 59 dd 61 a7 4b 08 ba b5 55 d3 fc ee 41 83 c0 28 5b 84 1b 58 e6 4c 44 37 31 a6 94 5b 29 10 a4 94 82 83 41 00 f8 ae b9 83 66 df 55 89 8d cc 7a 86 ee cc 7e 35 73 56 47 87 d8 bd ff 6a f8 60 b6 34 27 4c e5 98 a8 cf ed 6a 8e 9c 3b b5 72 b9 55 47 45 66 24 c7 66 a0 e7 55 9c 08 fd cd f6 7d ee 05 ff 1d 62 86 e1 bd 94 02 aa 51 01 3b 65 Data Ascii: T'GQ`od59AxCae?:CxN7YHVl~QV<,eCtG<oiYkvK0AL-)gABIy_S)348eF<V/,ZYaKUA([XLD71[)AfUz~5sVGj`4'Lj;rUGEf$fU}bQ;e
2023-07-21 16:50:37 UTC	3761	IN	Data Raw: fb 27 9a 59 eb 74 dd 74 13 92 20 7b d6 05 58 f6 df 55 7a 8a 82 90 84 3a f1 78 9c 4c 50 8a f7 63 aa 2d 5c 7d c9 01 18 13 ba 89 d2 ca d3 21 ec c2 8e f0 9e 7a 6a 6e a0 25 ac 69 e5 7c e3 ee 24 2a 2f 1d 42 ef b6 22 c8 5c 4e d3 2f 05 ec 27 c5 ce cc 93 25 ec cc cc 59 37 1e 1e 8a 6a 54 01 77 e7 9c 08 8e 80 7c 8b e1 95 3f 24 6b af 88 ee 67 ee 10 5a 3d cf 80 a5 5a 2e 74 b2 02 9d 78 f6 52 24 82 5f d3 43 27 5f ae bd 14 c0 13 ab 1c 3b b9 86 e0 ec 97 22 aa f1 8a 62 24 65 f8 e4 73 11 3d f9 46 e0 b8 af 61 f2 4c 8c 9e c4 ca b7 39 f0 f1 8c 1a e3 c8 c9 35 c4 81 df a2 aa 5e 70 e4 e4 1a c6 3a ee 53 a5 6b 1c 3b f9 fa d5 6b 0e 9e 5c 85 ea 81 4d 02 42 00 87 1f 0e 39 c6 59 ef 52 81 37 1c 4e f9 6c 8d c3 29 5f 3c e7 70 ca 17 1c 4c f9 ec 35 07 53 62 cd 14 4d f9 fc 85 0c a7 1c e9 e8 Data Ascii: 'Ytt {XUz:xLPc-\}!zjn%i\|$*/B"\N/'%Y7jTw\|?$kgZ=Z.txR$_C'_;"b$es=FaL95^p:Sk;k\MB9YR7Nl)_<pL5SbM
2023-07-21 16:50:37 UTC	3777	IN	Data Raw: 7e cd f9 4a 3e 14 48 22 2a 78 4b c6 38 1f ff 49 a3 b2 e5 7a 11 71 7b ab 44 eb 6a aa 09 c1 c3 73 94 8e 57 7b ce 52 2c 63 2d a3 0f 9a 63 70 51 62 d7 7c 50 a5 cc be 0f 32 fb 9b ee 8f 08 bd fd 98 5d 5c c4 c3 bd 69 f9 31 1e 95 1f 48 89 04 47 fb 70 e7 e7 dd b3 9d dd b3 e3 83 8f 4d 21 b6 2f 58 b8 7f be 2a c4 fb d7 22 c2 f6 d5 6b 21 e0 4b f9 fe f5 8b 57 42 c2 7f b3 ca 32 fe b3 57 cf 59 c8 5f 5b 7d c3 32 fe ea 1b 11 68 fb fc cd 0b 16 f3 51 aa bf 60 e9 9f 0c da af de b0 94 bf f6 b2 cb 72 fe da 33 21 e7 bf 60 29 ff d9 8b d7 28 e6 63 8f a0 e8 39 35 f3 82 14 c9 ea 60 bc a7 c4 12 3c 8d 27 4f c5 35 ff 14 09 eb 4a 92 7a 34 c0 fb c8 91 8a cf f6 12 82 e4 32 9e 54 5a 82 68 43 09 eb 0b 8f 70 fe 14 03 9f fc 1a 46 f0 c2 ed 68 81 42 34 52 32 19 d2 a1 84 ea e8 a0 55 55 b8 8b 55 Data Ascii: ~J>H"xK8Izq{DjsW{R,c-cpQb\|P2]\i1HGpM!/X"k!KWB2WY_[}2hQ`r3!`)(c95`<'O5Jz42TZhCpFhB4R2UUU
2023-07-21 16:50:37 UTC	3817	IN	Data Raw: d3 a2 16 0a 02 da 67 fc c9 6e 7c 53 c9 bf be 74 6d 30 f4 31 39 4a 8b db 88 31 89 49 a4 de 65 bb 59 09 e4 4b e6 d8 44 fc 48 90 57 86 67 02 40 d4 be e5 93 8e d0 de ea e8 54 c2 1f 43 83 0a 25 05 6a 45 7c f4 cc ae 1a 5d a2 08 67 49 12 ac 62 f2 cd cc e6 20 6e 3b 3f b2 17 cb 75 a2 b5 ec 41 19 5b 7b ef 50 67 78 ac f7 13 5d ec 80 71 b0 4f c6 c7 9a 63 8d 0c 76 36 95 14 20 c3 9d b0 d0 1f a8 f5 a0 db 3b 47 76 4e 47 c3 ae c8 ac 8e 1d 6c 9e 0f bf f1 6e dd 49 15 26 b1 59 59 53 73 48 d9 3c b5 8d c9 2f a1 ba 66 f5 07 b8 58 94 8d 3c 6d 9f 94 9d c7 f9 b8 af 94 81 35 da 8f 2e e2 83 78 08 7c df a0 54 43 11 a2 50 09 46 40 78 34 72 d1 78 f5 8a b5 38 2f 64 38 82 f4 d1 10 4e 1a ab af 5f 3e d7 e2 11 5e b0 fe 06 75 2f 84 93 f6 1a b5 37 a8 e9 9d 13 77 70 d1 97 b6 64 dd db 02 15 31 Data Ascii: gn\|Stm019J1IeYKDHWg@TC%jE\|]gIb n;?uA[{Pgx]qOcv6 ;GvNGlnI&YYSsH</fX<m5.x\|TCPF@x4rx8/d8N_>^u/7wpd1
2023-07-21 16:50:37 UTC	3833	IN	Data Raw: bd ae b9 80 72 df a8 ce 7f 5a 0c 4b 45 0d 62 51 42 56 d0 2f 4f cd af a9 08 85 6c b7 76 d3 b9 70 ec 92 b9 ce 30 bf c2 61 3c be 89 41 49 f0 68 68 f7 f1 d9 c1 2f c5 fd c2 21 2f 6a aa 62 5b 03 3d e8 a5 6f 84 b8 64 5a 9c 35 84 85 6a 4b 18 21 2c d7 7a 1c 8c 3c fb b9 99 ee aa 3c a7 63 9d 2b 14 36 73 07 a2 cf 95 eb 20 6e 1a 40 1b c1 c8 01 e0 32 1f c5 42 e2 99 5c 4a e1 66 98 14 96 f4 c6 f0 e4 94 e4 a2 9a 5d ea 64 4a 15 d4 a4 58 a1 96 50 51 e6 61 57 20 23 d3 2f 0a c3 76 00 ca 24 50 f1 a0 1f d6 31 45 46 69 71 11 99 09 28 dc 5f 3e 3d b1 d9 eb f5 ce c4 c4 62 45 f3 c5 35 b4 54 61 45 e2 c0 7c e9 b9 af 26 01 2a be 76 31 5f a6 b0 91 fe 32 0c a2 23 b9 34 61 be 4a 21 70 d1 a5 f8 51 64 8b 1e 02 57 f2 a5 42 ff 3a 93 b7 86 bf b9 4e 7f dc 03 e9 03 1b 0d 7b 97 b2 51 9a 0d 43 f4 Data Ascii: rZKEbQBV/Olvp0a<AIhh/!/jb[=odZ5jK!,z<<c+6s n@2B\Jf]dJXPQaW #/v$P1EFiq(_>=bE5TaE\|&*v1_2#4aJ!pQdWB:N{QC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.5	49872	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:37 UTC	3606	OUT	GET /static/webpack/production/b11c258f8eee56d7cb5e.Hoi7ynA2p4z5-2Jcc2BP05ryA7I-X2lX9aG6h07S0OA.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:37 UTC	3666	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 42446 Connection: close Date: Fri, 21 Jul 2023 16:50:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:16 GMT ETag: "e01ba78b4da3f240439df1e93ab7bf83" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 cb0d3a2bdc5300e2d139e111e94efe5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 5BQZdOFa77k34e4XtXmTsdN3NIMsgHYD5enSGVsGBuWpLge9HVHFoQ==
2023-07-21 16:50:37 UTC	3667	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd d9 76 e3 46 b6 20 fa ce af 90 70 ce 55 03 2d 90 96 72 4e d2 28 b5 52 a9 74 ca ce 4c a9 24 a5 5d 65 5d 2d 2d 88 08 8a b0 40 80 06 40 0d a6 d8 eb fc c6 7d eb 75 1f ee 87 f4 a7 f4 97 dc bd 77 0c 88 00 02 14 e5 a1 4e 77 ad 55 4e 31 10 73 ec d8 53 ec c1 bd 8d d3 28 bb ed 5d 5c 7c 3a dc 7d bf fb ee d3 3e fd b1 ff fe 62 ef e3 d7 2f 3f 9c 5c 5c 04 8f d6 78 78 38 3b f7 7a d3 59 31 76 cf ce 9c 69 38 65 f9 c5 25 34 62 f9 7f 17 3f 66 69 94 30 f1 63 98 64 b3 e8 22 ca 86 85 28 f8 25 2c 26 71 ca 2e 4a 56 94 b2 2c 0d cb f8 86 5d 44 ac b8 2e b3 a9 59 38 c9 2e ff fb 8b e1 76 f8 e6 ed db 6d e7 dc 9f 77 b6 5f bf 7c dd 1f cd d2 61 19 67 a9 cb fc d2 4f bd f9 e1 e5 2f 6c 58 f6 22 36 82 be 8f f2 0c 3a 28 ef dd d2 77 2e 2e 58 f1 39 8b 66 09 73 Data Ascii: vF pU-rN(RtL$]e]--@@}uwNwUN1sS(]\\|:}>b/?\\xx8;zY1vi8e%4b?fi0cd"(%,&q.JV,]D.Y8.vmw_\|agO/lX"6:(w..X9fs
2023-07-21 16:50:37 UTC	3682	IN	Data Raw: 38 4b e0 6a 17 1f 32 0d e9 69 60 f0 78 5d 9f 24 16 ee cb 56 cb 87 8a 65 0f 0f 5b e8 44 dc 7c 4e d4 d0 d3 4a d8 c9 82 21 fe 75 e8 a9 d9 3c ea 99 68 c9 86 7e 3a 7f 21 fe f9 8b d1 4f e7 af c3 3f 7f 05 fa e9 fc d5 f8 e7 af 46 3f d6 c0 45 7f 0e fe f9 0b d0 4f e7 0f e0 9f ff 24 f4 43 4e e0 1d c5 e1 9d 2e 31 2e 11 aa 18 11 ad a5 f5 4e 6e 6c 8c 48 7e 72 1d cd 0e 42 99 36 cd 62 14 9b d6 9b 30 65 d5 8b 40 cd 0a 6b c5 85 66 0d f4 8e 21 a0 14 05 30 f0 91 f6 84 6a 1a ae 60 42 d5 15 8c 3c da 5c 01 56 32 f6 58 62 71 ef 79 83 a6 09 46 23 fe 49 ee ce 3b ca 0a 08 1d 49 44 64 7b a7 8f 29 24 f4 72 5e ba 8e da a2 06 de 3d 69 90 8d 7e d3 54 88 87 14 4b 3d e9 fc 80 46 37 ab ac 70 b9 99 bf 70 55 2b fa a4 13 ab ac ff cb 05 81 d8 42 b9 ca 91 3a 02 23 22 80 a8 35 82 9d aa ab 12 f5 Data Ascii: 8Kj2i`x]$Ve[D\|NJ!u<h~:!O?F?EO$CN.1.NnlH~rB6b0e@kf!0j`B<\V2XbqyF#I;IDd{)$r^=i~TK=F7ppU+B:#"5
2023-07-21 16:50:37 UTC	3703	IN	Data Raw: cd de eb 73 a5 04 7d f5 fe b9 f3 5c 9d e4 99 dd fb 93 19 1a 86 24 a8 c7 11 fa 84 ed e6 36 17 e2 e9 db d1 25 d8 ea 45 bc 9a 0e d7 bd 77 29 fe b2 31 1d 9b 52 be b1 0a 9e f8 ae 9b a5 5d 6e 7e 61 f4 60 66 c5 d3 e6 08 f4 cc e9 3f 72 b7 ea 68 ad c5 bb a2 3e 21 ee df 52 74 a3 b8 c0 09 a3 31 8e 6e 9e 84 c1 59 59 74 90 62 be 04 34 d9 af ed 8e b2 e2 ef 2c bc 9a 42 6f 99 5a d6 9f 04 e1 4e a8 82 36 c1 05 07 44 a4 86 f5 a7 5a 8a 12 65 75 cf 63 24 e9 07 5d 50 16 4e 4a 2b b7 b1 f1 a7 ec 8e 20 8a 63 35 be 55 b8 72 6d aa 98 81 29 f0 98 ae 05 98 c1 a7 e8 a7 be e6 44 d0 9f fa d2 85 a0 3f f1 75 07 82 3e 65 82 c0 79 8c fc 2b 7f cf bf f1 af fd 53 7f d7 bf 58 b6 bd dc 68 b4 f0 ef 82 8b 9d 0b ca 6c c0 97 0a dd 7f c0 15 73 33 a9 0b af af 73 43 ba 60 e7 1f 55 08 5f 53 9d a5 92 7e Data Ascii: s}\$6%Ew)1R]n~a`f?rh>!Rt1nYYtb4,BoZN6DZeuc$]PNJ+ c5Urm)D?u>ey+SXhls3sC`U_S~
2023-07-21 16:50:37 UTC	3704	IN	Data Raw: fa 0e e6 11 21 02 ca ab 8f c2 6b 75 25 17 fe 4f ad 54 b9 d6 df d7 1d 07 fa a2 2e 17 44 8f ad d6 24 bf c3 43 d7 78 34 30 bf 19 12 89 61 31 a1 d8 94 9a 47 ee 72 ed 7a a5 d1 f2 97 13 56 5d 76 90 a7 d3 e6 be 6b d1 38 61 de 16 2e a5 3c 5d 59 c5 9d 5d 8f 65 c8 76 d3 01 58 5c 74 ad 88 87 9a af bc 80 15 e3 f3 48 88 61 e5 12 2c 1a 34 a2 12 c8 a1 84 67 30 74 a9 c5 4f af 4d c4 08 ad de ca 95 58 04 a6 65 1c 4a 53 85 62 57 9c 77 ea 62 93 ed 6d 63 a9 e4 64 e1 46 4c e1 c9 ca 9b 5b 9c 6a d9 23 b6 56 40 4b ce 17 1d 93 33 ab d3 84 9f 5b b8 af 1d 47 c0 94 d3 97 7f ad a9 37 8b 4a c9 ef ff 6a 9a 6e 0a e5 a3 45 ed 68 31 65 e3 ac 96 98 0f ea 5c fd 1f 44 f2 bf c1 af c0 5c fd 40 59 ec ee 7b 23 4c 83 8a 18 e8 53 58 94 07 69 5c c6 21 3e d2 62 9a 20 c2 4b bf f6 30 51 99 7f 15 df b0 Data Ascii: !ku%OT.D$Cx40a1GrzV]vk8a.<]Y]evX\tHa,4g0tOMXeJSbWwbmcdFL[j#V@K3[G7JjnEh1e\D\@Y{#LSXi\!>b K0Q
2023-07-21 16:50:37 UTC	3713	IN	Data Raw: 70 f6 9b 13 bb 30 12 fa 16 ac b2 97 b1 9c bc f1 dc c1 5d 7d 61 b4 db 30 32 0b e5 e9 b1 5d 5b 27 0e 8e 4f ec dc b9 79 d7 f4 c1 c9 1d 63 e3 9b b7 4d ec d8 b4 79 f7 c1 87 c7 4a 72 92 48 27 8e 59 f0 af 22 3f 49 e5 30 39 7a 00 c1 fc f6 76 3c 2b 11 87 63 07 32 d8 6b 11 17 fb 6d d9 c8 c2 8e fe 14 03 12 f7 54 0b f9 58 90 3b 0d ff 5d 2c 61 99 10 d3 72 0e 1c e1 7d 91 fa 30 b5 5f 17 18 e8 40 6c 60 ed 73 63 9e 5a b9 84 de 83 8b a0 5e f1 53 83 1e ed 72 16 46 f3 38 18 61 e8 af 1d 95 2a 8e 4a 05 4d 16 ca 50 4d 43 39 2a 8e 22 d2 e5 8a fd d3 a6 ac 5e fe 0a 4b 15 ea a6 f2 b2 a4 5e 8e e4 7e 01 03 7d 9b 44 57 65 3d cd 58 fa f2 8c 7f 8c 96 ea 05 34 20 e2 1d 21 4a fa 1e 1d 27 4b fa 35 cb 37 9a d6 d3 f2 4e fd 96 b3 0c a5 e9 30 8a a9 d3 32 26 34 9c 92 83 33 fe 61 d3 32 35 ef 92 Data Ascii: p0]}a02]['OycMyJrH'Y"?I09zv<+c2kmTX;],ar}0_@l`scZ^SrF8aJMPMC9"^K^~}DWe=X4 !J'K57N02&43a25

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.5	49770	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	476	OUT	GET /static/webpack/production/paper_bundle.1885980d0c2e444b4c260d20339401ec.6JKOhZEZLVUo0awj9vBTCyS8J99CxnWy1B_2dSb-wc0.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:32 UTC	973	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 204641 Connection: close Date: Fri, 21 Jul 2023 16:50:33 GMT Last-Modified: Wed, 28 Jun 2023 17:27:24 GMT ETag: "0b34782f75d917e2934705a63663662f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fec5e83bcae9ab1295b776b3f64183d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: FWTwYgtAGm7jMgsPO3Gxr9EFMph3-BIaPrsQoMqbDfudIpWUGAUiQQ==
2023-07-21 16:50:32 UTC	974	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 6b 93 eb b8 91 28 f8 dd bf 42 e3 13 8e 3e d5 23 ea 50 d4 5b 15 b7 63 c6 8f b9 f6 ee f5 cc c4 d8 37 66 67 1c 8e 13 94 44 95 e8 92 44 2d 49 9d aa 6a 45 fd 8a fd ba bf 6e 7f c9 e2 4d 3c 12 20 f8 50 b5 ed b6 bb cf 11 08 24 12 09 e4 03 89 44 e2 53 51 c6 db e7 3f e6 f1 36 b9 6d d0 df 9e f2 ec 7a de 05 db ec 98 e5 eb 4f c9 3c 59 26 9b c7 4b bc db a5 e7 a7 f5 f2 f2 fa fe a9 6a 30 18 91 bf 9b ed be c5 f9 e7 20 38 5c e8 cf 60 f3 34 1c 7c da ef f7 0f 8f 9b 2c df 25 79 90 c7 bb f4 5a ac a7 97 57 56 52 b5 a0 bf 87 83 f1 e5 75 50 64 c7 74 37 60 48 3c 3c ee b3 73 19 14 e9 8f c9 7a 3c 41 2d 5f 50 cd e0 25 8f 2f eb 4d 9e c4 cf 01 fe 4d eb ec e3 53 7a 7c 5b ff 2a 3b 23 08 71 31 fc 7d 76 8e b7 d9 f0 bb 7f 3e ef e2 63 32 40 3f b3 ef 86 27 Data Ascii: k(B>#P[c7fgDD-IjEnM< P$DSQ?6mzO<Y&Kj0 8\`4\|,%yZWVRuPdt7`H<<sz<A-_P%/MMSz\|[*;#q1}v>c2@?'
2023-07-21 16:50:32 UTC	975	IN	Data Raw: e0 89 0a ab 7d 47 d2 b4 c2 a7 5f d2 00 7c 42 fc 3b e9 f9 c9 8f 5f fe 90 9c d2 3e f8 04 82 73 7f 79 df 7c ac fd 49 06 3b b4 fb 4b fc 66 e3 fe e9 8c ec ee 52 bf f9 48 7f 7a a3 bb 0f c9 5f 3b 6e ad 15 d3 c9 f7 56 00 4d d1 fa 00 45 e0 8d 12 6b 75 3f 4a 75 42 ab 5f 4a fd 21 bb e6 db e4 57 d9 2e f9 f7 3c b3 a2 a0 d4 aa 34 65 38 59 8e b2 72 df 84 6f 3c 20 f5 ac 0d da 8c f0 77 65 30 0e 67 1d 07 a7 03 e9 59 da b7 19 17 5d 3b 9d a7 cd 04 d3 ab 74 6f 3b b2 5e 66 0d 02 d4 ab 14 57 34 c7 ee b4 fd 7b 3e 57 68 38 be bf e9 b3 05 ff b1 fe d4 0e 94 f6 e7 0b 8d c7 f8 57 e1 3a 69 7f c6 e0 3f de bf d5 73 86 a6 23 fc 6b 70 98 34 3b 6b f8 c3 21 ce 2f 75 fe 5c b9 d2 af 7f f9 cb 2c 7b 8e c2 46 3a c4 d6 be 4f 4e 6c 39 12 4a e2 ae e3 51 a0 f4 c9 6f 2d 46 45 97 4e 97 11 29 10 fa e4 Data Ascii: }G_\|B;_>sy\|I;KfRHz_;nVMEku?JuB_J!W.<4e8Yro< we0gY];to;^fW4{>Wh8W:i?s#kp4;k!/u\,{F:ONl9JQo-FEN)
2023-07-21 16:50:32 UTC	991	IN	Data Raw: c3 45 3a eb 53 92 cd 20 5a 23 42 29 6a 06 60 1f 59 77 6f 9e 13 27 40 75 2c d7 1e d7 be f8 4f 44 82 ba d8 af 2d 9a 7d f1 22 48 cf 46 da ed ce 7c 29 5e ad ed 8f 2d 5d d1 a1 be f6 a0 49 44 cb 3d c1 59 43 36 b7 45 86 52 c4 0c b8 2a 89 4f d9 15 01 09 0e f1 e5 f2 16 94 68 df f7 74 28 fb 70 c0 80 70 b5 73 2d 9b b9 34 1e 13 73 73 3e 51 fe a7 5f 8d f0 c2 bc f1 9a 82 f1 d6 0e 06 6d 8e 97 45 a8 ab 47 0f 24 9b f3 65 67 da 5a 14 a7 07 b2 2d b8 14 c6 56 8b c6 b1 f1 ea d4 c1 ab f5 53 d5 ee e1 ba 5a f2 da 92 c8 4c dc 8c 5b 4f 08 c5 c5 42 b1 34 c1 3b 24 ec 4f c0 cc fc 30 ad 31 2f 77 1c 45 af 8c ed f1 d6 5c 47 84 7b 65 72 2f 9a fb 68 e4 8f 67 78 6e 3c f4 cd ef 1d 9e b6 ab 23 b4 25 5e 76 ec 56 fb b5 44 70 99 cf 1c 38 38 5b c7 0c 95 a5 7d bc fb ac 02 74 5e e1 58 ad 14 9b 54 Data Ascii: E:S Z#B)j`Ywo'@u,OD-}"HF\|)^-]ID=YC6ER*Oht(pps-4ss>Q_mEG$egZ-VSZL[OB4;$O01/wE\G{er/hgxn<#%^vVDp88[}t^XT
2023-07-21 16:50:32 UTC	992	IN	Data Raw: 4f d1 7e 46 f8 47 f0 92 c7 97 8b 34 2b b2 ec 7c 44 4b 11 89 6c cc 42 c7 f4 e9 bc 3e a5 bb dd 31 e1 cc 47 d7 27 5e 5e ac 80 6d 29 a4 95 2d 75 5c 26 27 46 8a 4a 94 45 44 aa bb 2a 8b 6f a4 a8 48 8e 68 5e 92 1d 9e 93 d7 60 73 45 ab f9 7c f3 91 dc c1 01 73 15 96 df 8b fd 6a 1f 3f bc 1f ca d3 91 c0 ce 36 e9 31 19 34 c2 f7 9f 4e c9 2e 8d 07 78 19 0c 8a 6d 9e 24 e7 01 6a 34 f8 7c 8a 5f 83 5d f2 2d dd 26 ac 3a b1 0e 1f 6e 8d 80 db a8 41 07 cb 1a 81 e3 2c 93 d7 12 8d 70 bc 89 16 93 c9 c3 e3 f6 9a 17 a8 d2 25 43 7a 3f c9 85 6a a4 f3 ba cf ce 48 ec a7 3f 26 eb 31 9e 3f 26 2a 26 91 26 3b 48 41 25 5f c8 22 c4 dd b0 e5 80 e7 db b6 44 c4 b0 b0 b8 d7 34 66 e8 49 7e 65 cc 1a ca 06 9a d2 df fb 9a a1 d6 fd fb 4c a2 24 6a e8 a2 86 67 15 f5 f3 8c 66 35 0c 17 61 82 b4 ba 61 f3 Data Ascii: O~FG4+\|DKlB>1G'^^m)-u\&'FJEDoHh^`sE\|sj?614N.xm$j4\|_]-&:nA,p%Cz?jH?&1?&&&;HA%_"D4fI~eL$jgf5aa
2023-07-21 16:50:32 UTC	1002	IN	Data Raw: 01 1d 2d f6 b8 43 44 51 62 a2 e5 28 34 00 3e 8e 31 3f a5 4f 24 0b e8 99 9c 3f d1 88 73 25 3e 88 38 52 01 d2 92 0f 0f 02 ac 1c 4c 28 c5 6e c9 f7 f1 f1 61 4f 44 9e 7d da 5e 37 68 04 9b e4 c7 34 c9 3f 8f a2 e1 60 34 41 ff 46 33 f4 9f d5 03 bc f2 e4 60 05 db da 90 eb 58 d7 be 5c 09 ee 49 44 09 fd 43 7a ba 64 79 19 9f 4b 7b 97 50 65 2b 17 03 69 76 ec 95 c5 3b f3 ca a4 f0 c4 4e 52 86 41 6a 5d 4a 81 f8 55 32 42 79 c2 82 29 7b 7d ee 40 de 4a 25 a9 c1 71 d4 aa d2 9f fc c1 d2 bf d4 35 b9 fe 6b f6 14 91 fb f4 68 89 90 fe de a5 15 6f da aa 9a 89 db 66 c1 d8 d2 26 ff 98 e1 4d 33 4c 60 86 8f 72 f4 a0 10 14 24 13 6b a5 12 80 ae 0d fa 89 a5 cd 61 56 5e a1 e7 7e 92 df 6b 06 72 8b d9 c0 0c d8 e2 fb 16 6f df 82 4b 76 4c b7 6f 5a 22 07 e2 5e 6d 7a a4 c9 0e 24 e5 33 4d 56 a4 Data Ascii: -CDQb(4>1?O$?s%>8RL(naOD}^7h4?`4AF3`X\IDCzdyK{Pe+iv;NRAj]JU2By){}@J%q5khof&M3L`r$kaV^~kroKvLoZ"^mz$3MV
2023-07-21 16:50:32 UTC	1018	IN	Data Raw: 19 b9 f0 a4 47 80 37 94 38 a7 33 d7 3e 66 20 fa 22 b4 3a ae 42 70 56 bd 00 27 6e f6 11 5f f9 3f ee 7c e9 07 91 bd 88 7e a6 1f 30 b8 a7 aa a6 13 e5 16 50 9f 8b 50 99 07 8b 7f e9 39 91 c3 5c c4 30 97 9a e8 a4 91 04 81 2c fd 9d f8 88 4d 36 64 23 2e 77 3f d0 da 10 74 f7 16 35 2d b3 37 0b b1 5d 9e 36 6b 6c 24 e6 25 6a 94 ee 74 55 52 51 da 30 2b 2b ef 41 ee 5d 1c 3b 33 2b 09 19 20 c0 54 d0 9e fb a0 f3 dd 45 23 d9 6a 54 7b cd 6a bf 85 07 33 f2 1c 3b d8 06 5f ce 32 80 6e 7b 36 98 d9 d1 cc f5 c6 0f 8c 2d 22 b5 15 78 f7 b7 da d3 90 f8 ae a5 b7 86 ab 1f 30 46 b8 bd 81 6a b5 f2 a4 fb 2d 2a 93 f7 d2 17 95 02 52 45 51 db bd 63 59 79 a1 c0 47 80 d5 00 99 dc 01 1f 79 61 6d e1 27 27 a1 aa 8f 76 ee 3e 48 39 6b e6 a2 3f 1d 00 6d 4d ed d4 8b 1b 20 5b e7 74 52 15 ae 2c f1 cf Data Ascii: G783>f ":BpV'n_?\|~0PP9\0,M6d#.w?t5-7]6kl$%jtURQ0++A];3+ TE#jT{j3;_2n{6-"x0Fj-*REQcYyGyam''v>H9k?mM [tR,
2023-07-21 16:50:32 UTC	1024	IN	Data Raw: 91 8e 65 e5 bc 7b 26 78 a2 68 d0 8e 8e 5d ea e9 06 d0 31 44 9c 2a ff 98 d9 91 da 7c 35 54 3e f0 41 a8 26 98 2e 94 a8 45 37 ba 32 81 4c 59 41 83 b1 2a 4c 56 2c 30 21 f4 12 b7 c7 ac 6f ce 07 5c 51 ea 86 2c 65 18 1f a4 8a 4e 6d 74 37 36 f8 4a ba 29 72 83 21 2d 20 45 d9 db 20 23 40 1a de 20 d2 95 a4 91 4a 5c 55 62 a2 f4 65 77 06 62 74 e3 1c 21 ba 64 d7 af 83 14 34 09 ac 6a a4 d0 08 ef 56 c4 98 e9 d2 c0 c7 1a 43 78 8d 54 5b 20 55 23 67 23 c5 68 6b 1d 5e 69 48 46 ce c6 64 c7 75 b4 24 2b 6a 01 34 e2 c9 8d 9f 2e d1 e5 86 5a 11 50 98 b6 e4 be b0 63 96 6a ff 6d b0 9f 91 12 65 4c f1 e1 0e d2 8e 92 b0 8c 08 06 ba e1 2a 33 b0 f6 25 10 ee 7d 58 d3 1e 3a 4e a8 66 90 01 2a 72 f2 cd 0a 74 4c 49 24 15 70 ce 47 3c 0f d3 a8 29 b5 1e 73 ae 68 6c 80 f2 59 86 33 27 0a d2 1d fa Data Ascii: e{&xh]1D\|5T>A&.E72LYALV,0!o\Q,eNmt76J)r!- E #@ J\Ubewbt!d4jVCxT[ U#g#hk^iHFdu$+j4.ZPcjmeL3%}X:NfrtLI$pG<)shlY3'
2023-07-21 16:50:33 UTC	1110	IN	Data Raw: 52 2d 1d 99 9b cd 7d 20 b0 39 31 7e 8f 03 be e2 4e 02 7b ee e8 ee 8d 63 bf 5c 64 9e 7c 24 0c d0 24 70 64 2f b2 f8 97 e3 09 b7 f4 b3 55 1c 19 d8 1f cc 6a 46 74 09 1f 34 cb 95 33 d9 e7 e4 12 5a 4a 94 39 16 7d 2f f2 20 cb 80 aa e2 05 b8 00 44 5e 51 58 3e 19 63 8b 7c 6c aa c3 c2 82 16 34 54 50 6c e4 89 2d 2b c8 75 ad d6 24 0a e1 cc 03 28 3a 68 a9 a4 6f 86 44 8d 02 ed 90 1f 8b 79 3b 51 2f c7 14 25 a1 03 2a 46 8f 2d 6f 5d e1 96 3e df 35 90 20 c5 a7 ee 81 df 8b b0 0f 49 91 68 73 8c 53 69 8c 01 22 a4 78 6f 06 4c 4c 58 06 02 b0 d1 bf ff 5e 2d dc a8 56 6b 19 a8 87 a5 12 8a 7a a4 59 26 3c 5c 02 81 14 2e a0 05 b8 23 1b 2a 81 e6 62 1b 18 f5 35 3d a5 af 56 61 e4 4e ee 69 18 95 28 b9 65 9e f2 6c 5d ef 38 2d 44 57 f0 57 14 57 74 f6 60 cd a8 8a 89 c8 db e9 32 1b e1 a5 46 Data Ascii: R-} 91~N{c\d\|$$pd/UjFt43ZJ9}/ D^QX>c\|l4TPl-+u$(:hoDy;Q/%F-o]>5 IhsSi"xoLLX^-VkzY&<\.#b5=VaNi(el]8-DWWWt`2F
2023-07-21 16:50:33 UTC	1140	IN	Data Raw: fa 2d b3 d5 61 6e 2e 32 b1 8c ac 10 6c f6 85 65 86 f8 53 86 48 f0 13 9d ba 5c 5a 06 2e 76 4f 36 22 68 d6 34 a1 08 df 06 60 fb 8b 95 c4 38 0d 31 93 8c 06 07 26 e0 70 33 1a 51 c0 84 70 2d 18 bd a3 d3 7d c4 d3 98 56 dd c3 b0 05 3a 1d e0 3f 03 6f c3 61 d6 a6 71 5a 5a 27 5d 87 94 3e d4 1a 4e 8f 5c 68 5d 12 ac e1 d4 12 b9 00 d9 2a 7b 32 c8 33 3a 26 cc 2c dd ae df 99 20 a0 6e 59 cd dd a8 b7 bb bd 46 31 72 60 43 07 b3 3a b0 95 c9 a5 c1 b8 b4 8d 7a b5 18 c5 17 67 06 ba 48 a1 8c 9e 8b 3f 18 1f 12 aa 38 ab 37 6b f5 5a 41 5a dd de b2 28 0d fc c8 0f 07 be 62 6d fd 5e ed b6 da 4e ab 20 bd c0 19 ba 4e a0 ea b4 76 ab 69 f4 ea 85 c9 85 60 8a d8 d8 fc b3 94 16 83 c3 1b 7a b0 2d 67 8a 84 80 41 bb 1b 0e 1c 27 6d 1a f3 05 c1 44 70 47 a8 45 0a 5f 15 ed 3e ce ee c2 85 f6 f4 ec Data Ascii: -an.2leSH\Z.vO6"h4`81&p3Qp-}V:?oaqZZ']>N\h]*{23:&, nYF1r`C:zgH?87kZAZ(bm^N Nvi`z-gA'mDpGE_>
2023-07-21 16:50:33 UTC	1156	IN	Data Raw: b2 3a b5 4c 41 14 02 8c ea 96 ef f2 b3 ac da d7 79 5e d0 0d 04 06 ef 14 1b e8 6e dd 69 22 c5 48 b1 81 a6 c5 14 a9 04 96 d6 3e 40 08 9c 78 dd ac 89 fc 7b af d9 ed 76 9b 0a 08 04 fc e2 0b 86 3c 95 b5 b2 7c 5b 20 b5 07 4e 08 e6 3e eb 2a 56 f4 90 65 a9 c1 02 1d 7f 38 86 17 15 55 43 a0 fa 31 f1 42 87 42 a8 db f9 9e 18 b6 58 1f a3 bc db 10 71 e2 22 3e 5d a0 a9 93 31 a8 cd fb 54 7b 5d 50 79 b5 a1 ba 5c e6 d9 00 d4 51 86 44 32 aa 2b 7c c1 18 1d a2 76 fe 93 6f 06 8e 3d 9d 31 fb 79 ec b4 47 13 b0 19 49 d2 d1 f4 d6 97 d2 3e 41 e2 3e 76 20 63 53 52 2b 85 46 d6 db 96 c7 cb 72 87 76 df f9 36 09 bc bf fe dc c0 03 b9 e1 0e fb 1b 70 f4 7d 70 8d dc e8 c3 69 fd 03 d6 b5 3e 1e f5 ff e4 56 33 86 75 33 29 90 97 e6 ca a1 be c0 f0 d9 a5 c9 64 64 b2 c5 26 f2 24 8f df 58 64 1a d3 Data Ascii: :LAy^ni"H>@x{v<\|[ N>*Ve8UC1BBXq">]1T{]Py\QD2+\|vo=1yGI>A>v cSR+Frv6p}pi>V3u3)dd&$Xd
2023-07-21 16:50:33 UTC	1190	IN	Data Raw: dd 90 ad c3 71 f3 a9 59 7e d6 6a 47 df a9 23 ac 7c b0 e5 18 23 f8 5d b8 c8 e8 20 b2 60 1f 3a e3 8c 7b ab 80 8e 42 02 a3 ba 1a 32 23 7a 80 57 4f bc 66 50 92 18 a8 5a 62 83 b8 ee 7e f2 84 5e 57 a4 96 a1 09 f6 60 47 70 fc 77 fe 37 19 7e da ba aa 2e ed 92 a3 c8 61 dd 0a dc d9 db af c3 ae 2f 5d c6 de 0b 47 65 9d 87 03 c7 17 0a ef cd bc d3 93 1c 89 5a 4b 77 c3 a8 d4 ab 51 ab 4b 38 29 3b aa 9b 5e 61 73 d9 80 5e 23 2a 8c cb e6 b7 13 3f f0 ab 62 bd ed b7 e7 cd 81 fb 92 6f 9b 5d d3 a5 57 71 5e 4b e8 39 33 81 55 9f 24 3a b5 97 d1 53 f0 fd 83 47 bb 02 67 3d 58 8b 75 14 6b d9 f4 73 ec ce 55 26 5a 6f 56 ed 7b d7 05 f2 f4 3f 5f 18 aa 40 2a 18 94 28 31 fc 16 c6 d3 6e ec 29 ef ce 88 c4 eb f4 69 3d f7 7c 14 2d 4f 5f 23 ec 8e e3 ae 80 b9 9b 1b cb 0b 7d 96 49 de 89 36 ba cf Data Ascii: qY~jG#\|#] `:{B2#zWOfPZb~^W`Gpw7~.a/]GeZKwQK8);^as^#?bo]Wq^K93U$:SGg=XuksU&ZoV{?_@(1n)i=\|-O_#}I6
2023-07-21 16:50:33 UTC	1242	IN	Data Raw: 4b 33 b3 e8 56 6e 01 e8 df 10 d4 3a 8b 4a 3f 68 59 dd b9 2f 26 d8 ac 4b aa 0d 5d eb 1b 36 c2 93 26 5a 8b 52 3c e9 ba 65 eb ac 5a 41 61 b4 77 bc 0e b4 e4 7d 30 5e b0 7d f1 31 a8 55 e0 ff f9 2d b8 6e 97 fd 88 dc 32 5f 86 95 23 dc 08 57 e5 df a1 ef 0e cd f9 09 7e c9 b5 97 46 91 56 94 97 c7 a3 96 6e 61 81 66 4f 67 d6 58 c0 a9 2f 1d b2 1a 4e e0 4a 6a 19 dd e7 a7 51 db 9c 44 45 37 5e 5b 51 8e 6d 74 5f da 1f 8b d1 7b 9f 0a ec ef 7c c6 5f b4 fb 21 e4 12 7d 2e df 38 9a 83 c1 54 a8 33 d1 da d0 be 0c a2 c8 92 64 b3 6f 50 72 eb 67 b0 de 7d a8 81 c5 5c 54 9c 70 cb 43 b9 01 19 86 a3 bd b8 3c fa 93 ed 85 9f 5c 4b 36 fd 6e ca 5e b3 9e b1 c8 3c ac ea 1a 6f db 33 b7 b7 70 03 83 70 7a 0f a5 ef 0e b0 74 55 ed d1 60 7b 20 4d 8c ba f5 fc 7a a7 96 1b bf 2a 9c 7a 5d 09 d4 d3 cb Data Ascii: K3Vn:J?hY/&K]6&ZR<eZAaw}0^}1U-n2_#W~FVnafOgX/NJjQDE7^[Qmt_{\|_!}.8T3doPrg}\TpC<\K6n^<o3ppztU`{ Mz*z]
2023-07-21 16:50:33 UTC	1258	IN	Data Raw: 58 5a 4d 28 7c 16 b8 8a a5 d7 84 ae 10 12 ba 92 1f 80 d7 a2 08 55 c9 07 1f 97 07 ae 62 e9 35 a1 d6 12 8a 92 0f be 2e 0f 5c c5 d2 6b 42 eb 93 50 93 7c f0 75 79 e0 2a 96 5e 13 7c 41 83 ec 27 78 89 8b ea 27 94 5c 22 22 54 24 51 13 1a 4f 42 43 f2 c1 b7 54 22 42 41 f2 c1 37 0c 22 42 3f f2 23 70 c6 13 ea 91 a8 09 cd 21 42 3b f2 23 28 e2 2b 22 94 23 3f 82 b2 36 45 84 6e e4 83 2f da 47 84 6a e4 83 2f da 47 84 66 e4 83 2f da 47 84 62 e4 83 2f da 47 84 5e e4 c7 50 ee d3 88 50 8b fc 18 dc 05 09 ad 48 d4 84 2e 48 10 4a 91 a8 09 cd 04 42 27 12 35 a1 79 4b a8 44 a2 26 74 47 82 d0 88 44 4d 40 9a c4 84 42 e4 c7 d0 89 49 4c e9 43 71 08 bd c7 43 e9 43 71 08 8c 67 4c e9 43 71 08 b5 96 d2 87 62 48 07 8b 29 7d 28 0e 81 f1 8c 29 7d 28 0e 81 95 1d 53 fa 50 1c 02 2b 3b a6 f4 a1 Data Ascii: XZM(\|Ub5.\kBP\|uy*^\|A'x'\""T$QOBCT"BA7"B?#p!B;#(+"#?6En/Gj/Gf/Gb/G^PPH.HJB'5yKD&tGDM@BILCqCCqgLCqbH)}()}(SP+;
2023-07-21 16:50:33 UTC	1337	IN	Data Raw: e7 49 bd 0e 0d cf 03 52 92 f5 aa 43 73 9e d4 eb 66 98 a8 04 92 93 f5 aa 83 d9 c2 a8 be cf 50 59 47 ea 75 33 4c ab 04 72 95 f5 aa 43 b2 8e d4 eb 66 a8 ac 23 f5 3a 34 34 11 48 5d d6 ad 0e 0a 2b 52 af 9b a1 c2 8a d4 eb d0 c8 46 20 93 59 af 3a fc b2 38 eb eb 90 b0 22 f5 ba 19 2a ac 48 bd 6e 86 4a 1b 52 af 9b a1 d2 86 d4 eb 66 98 6a 04 e4 39 eb 55 87 66 1d a9 d7 a1 41 a1 40 c6 b3 5e 75 a8 f1 a4 5e 97 a2 b3 8e d4 eb 52 6c d6 01 09 d0 7a d5 c1 5c 66 ac be 43 72 1e 48 85 d6 ab 0e e6 60 a3 fa 3e c7 06 0e 48 8a d6 ab ee 96 19 ad 57 1d 4c 72 46 f5 7d 8e 4d 1b 20 47 5a af 3a 78 a3 8d d5 77 70 da 90 7a dd 1c 33 85 80 94 69 5a 75 34 b2 11 c8 9b d6 ad 0e 4e 5a 52 af 43 c3 b4 80 0c 6a 5a 75 34 da 07 48 a3 d6 ad 0e 49 5a 20 97 9a 56 7d 89 ce 79 52 af 43 83 46 80 ac 6a bd Data Ascii: IRCsfPYGu3LrCf#:44H]+RF Y:8"*HnJRfj9UfA@^u^Rlz\fCrH`>HWLrF}M GZ:xwpz3iZu4NZRCjZu4HIZ V}yRCFj
2023-07-21 16:50:33 UTC	1353	IN	Data Raw: b2 2c 54 74 8a 47 fc 15 1a 59 56 68 88 5a 28 11 7f 89 46 96 25 9a a0 0b 28 e2 2f ce c8 b2 38 c7 9c 85 c3 5a 9d 91 6d 75 86 e8 5c 89 f9 eb 32 ee af cb 70 42 af fc 98 bf 3c e3 fe f2 8c a6 b4 6c 8f f9 ab 34 ee af d2 98 21 bd 62 fe 62 8d fb 8b 15 57 a0 62 fe 6a 8d 7b ab f5 74 ca d8 fb 62 fe aa 8d fb ab 96 46 66 ad d9 d8 b2 66 51 79 10 f3 97 6c 6c 59 b2 61 3d 37 19 c3 ca 5a b8 71 6f e1 0a a9 80 2b ae b1 c3 ca 8d 6d 2b 77 8c 4f 9c 84 bf 74 93 fe d2 0d c2 84 d4 3a 12 fe d2 4d fa 4b 37 9c c6 a4 e6 97 f0 97 6e d2 5f ba 1c e5 3e e1 2f dd a4 bf 74 09 db 2a e1 af dd a4 bf 76 e3 59 ef f8 17 f8 02 6b ed 26 bd b5 cb 92 0e 09 7f 0d 27 fd 35 4c 23 b3 56 70 62 59 c1 fe 78 12 50 66 4f c2 5f c1 89 65 05 87 01 6b 89 b1 96 70 d2 5f c2 52 44 cc ba 41 0c bd 8f 4c f9 eb 78 da 5f Data Ascii: ,TtGYVhZ(F%(/8Zmu\2pB<l4!bbWbj{tbFffQyllYa=7Zqo+m+wOt:MK7n_>/t*vYk&'5L#VpbYxPfO_ekp_RDALx_
2023-07-21 16:50:33 UTC	1362	IN	Data Raw: 3e b7 9a 46 69 6a 79 e5 cd e5 7c b3 aa 52 28 ca 88 ef da 93 29 06 ef d5 5f e0 11 e2 8a 0b 9b 57 cd f1 4d a2 df c4 b6 f1 1f a2 c8 37 b6 0c 41 7f ce 17 3f a5 fb 72 b3 7e 20 46 22 db 37 5a 75 55 fa 6f 75 42 c7 87 d2 2b 7c 3a ae 7e f4 bc c8 84 85 22 9a c8 46 aa 5f 38 bd aa 20 1e 3c 3f 7b f2 ec e5 9b 67 f7 bc da 5b f6 a6 2a 81 6a 06 aa 4c 1d cf d0 26 03 ac fc 9f d9 be 1c c9 5d 7c 24 8f cb 8e 09 9b 80 1a 3b a1 46 af f7 45 ba ea 57 b2 dd 2e 34 f2 3f f7 db 21 b6 d6 6c 95 a7 3d ab 96 57 55 3a 15 d3 15 bf ee b1 57 8b e2 aa d3 c5 e3 3f a5 0a 4a 9c 69 b5 88 a7 45 a9 d9 66 f5 cf 84 b6 2d 2f c5 7d 94 cd 00 62 3f eb 81 82 bc 4a 5a c8 45 10 41 1f fb 53 fb 39 39 88 bb cd 0a b4 8d 7e bf 9c c9 ff b2 81 3a 09 7c fa 8a aa 86 b2 d9 e6 6b b8 29 c8 e6 63 a4 23 b2 ee 31 68 26 e7 Data Ascii: >Fijy\|R()_WM7A?r~ F"7ZuUouB+\|:~"F_8 <?{g[*jL&]\|$;FEW.4?!l=WU:W?JiEf-/}b?JZEAS99~:\|k)c#1h&
2023-07-21 16:50:33 UTC	1363	IN	Data Raw: 0b ea 02 41 e9 07 50 d0 0d 11 0f cf ef 82 f0 32 2c 07 8d 2f cd 8b 91 e2 c5 81 d1 f5 18 96 b7 9d fc 85 1c ae d5 86 30 be 51 a3 7c 87 95 db 89 33 be 7e ce b4 e4 67 9e d7 07 28 45 bb 7e 02 4a e0 4a d2 ad 87 99 73 3f 79 88 1f c3 6b f8 5c 33 3d 4d df 50 1f c6 a8 37 ca 0f 1b e6 a1 63 72 61 a5 c2 ff f2 e4 70 69 92 43 bb 3e 50 6c 5d e4 79 59 cc 9c 0e e1 e8 6f fd c1 68 0a 3e 2e 15 c6 05 f8 40 78 d8 aa 87 62 1d 81 1e b5 87 fd 62 f8 6d f3 93 59 97 89 69 a8 e1 f2 21 ba 0c ab af 99 ce 54 5c 5b 63 00 15 b0 e1 83 50 1f 66 5d 32 05 36 5e b7 9c 9d 3a c8 e2 24 ec 4d bd f2 42 2d d2 43 01 72 9f 4d 87 ba 1c c7 bc 2b 5c bd ed e9 95 8b 41 d4 d8 68 35 e9 88 fd 25 94 8f 58 2f 27 47 6f 58 55 19 ab 0c e2 8f 6d 8f c0 44 61 fb 6b 3a fe 11 ea 17 ea 31 42 71 33 3f 68 32 68 df 27 2d 89 Data Ascii: AP2,/0Q\|3~g(E~JJs?yk\3=MP7crapiC>Pl]yYoh>.@xbbmYi!T\[cPf]26^:$MB-CrM+\Ah5%X/'GoXUmDak:1Bq3?h2h'-
2023-07-21 16:50:33 UTC	1379	IN	Data Raw: c4 f9 17 98 c8 3c ec f8 8a b3 2e 2a c4 0f 20 89 6e a0 84 b9 54 47 4d 3e 24 24 30 a7 8f 59 86 d0 7c 0a e4 78 dd 1e 74 ba 93 56 85 8b fe 7c 70 26 69 b2 b1 a2 4c ef f9 8d f3 49 1b 6d 00 0e 6c 89 b3 5d 5f 5a 5a cd d2 38 cd 03 e0 80 87 e6 9e 9c 3a b7 96 a8 41 27 09 cf bc a1 65 c0 ca 1e b4 38 38 8f 9f 36 35 d0 07 d2 9e 62 db 85 b0 19 f5 66 84 2e df 8c 32 b3 d8 58 47 1a 72 c5 d0 08 00 20 7a b2 bf 75 25 ac a8 9b 77 00 fc d6 15 03 b8 ed 08 c3 83 63 7d 00 c1 39 11 0f a7 80 15 20 e1 80 a5 a0 03 0d 23 76 80 30 a4 00 49 bb 1f 4f de d9 14 22 07 a6 f7 ed f2 b9 c8 de 27 79 c2 26 49 4d f0 ec 50 d6 cb a7 df 45 8d d9 55 1d f5 2e 07 15 ad 4f 5f 61 94 30 7e b6 45 27 9a 97 01 99 fb cc 7b 9a 34 b6 4f 64 87 e5 c0 61 3f cd 88 92 48 03 67 c6 4c 92 fe 72 0a b2 4e d6 7d 6d db 65 53 Data Ascii: <.* nTGM>$$0Y\|xtV\|p&iLIml]_ZZ8:A'e8865bf.2XGr zu%wc}9 #v0IO"'y&IMPEU.O_a0~E'{4Oda?HgLrN}meS
2023-07-21 16:50:33 UTC	1395	IN	Data Raw: e2 37 4d d2 4d 38 89 b8 b6 e5 2a 7c eb 1d 5d a3 3d 31 83 f2 00 d7 7c f6 55 a2 59 ec d2 6d 2c 8a a2 2d 85 1e fc f2 6a ae 6b e5 d8 fd b8 61 fb d4 88 46 0d ae 5b 7b 13 cb 97 bc 3c e1 22 8b b5 29 be d9 23 9d a7 b6 10 2e 9b e6 0a d4 ee b9 3a ee d7 d1 36 f1 6a 66 93 74 40 44 01 a5 0c 63 78 cb 25 04 f8 3d a5 60 3f 63 b7 bb 18 65 b5 7d ca f6 ab 83 d6 de 14 6d ae 68 7b d5 dc 83 9d 0f cb 92 db e9 0b 3b 2e 13 e6 ed 6e d6 5f b5 f9 b1 4c 86 ab 1b ac d9 b2 a1 5f 9c 41 86 d4 20 bc 93 f5 57 7b 10 8d b1 a9 fa 19 cc 3f 76 5b 49 1b 78 63 2b b1 17 50 ca 72 5c 84 b7 de 05 9b d5 7c be d6 36 6b 65 05 ef 46 68 78 56 10 0b 6a 26 60 3f 17 49 79 b1 37 9f 84 60 1d 49 e7 4a 7d 2b 4f 03 4a f5 2e 9c cb ea f9 65 85 87 56 ba 3f f5 7d 9f b1 79 02 9b d2 bb 33 aa 07 40 54 2b c5 fd c3 26 86 Data Ascii: 7MM8*\|]=1\|UYm,-jkaF[{<")#.:6jft@Dcx%=`?ce}mh{;.n_L_A W{?v[Ixc+Pr\\|6keFhxVj&`?Iy7`IJ}+OJ.eV?}y3@T+&
2023-07-21 16:50:33 UTC	1411	IN	Data Raw: 8e 53 5d 58 5b 51 e6 52 05 3f 88 e3 b9 c9 73 1e b9 7d cf de 85 2b 46 c5 8c fd ce 0d bd b5 a0 43 88 eb 06 53 ff fc 85 0d be 61 57 5f 9b f7 17 6d b0 c7 63 b0 39 b4 b8 31 9e 75 c1 e6 a2 cd 8d 21 03 78 3b 40 23 d1 e6 11 ee c6 25 e3 81 4f 64 19 94 c0 59 02 2a 39 e4 f9 fa c0 88 e5 13 bb 02 db 3c 43 c2 3d ff 77 1b 3e f8 db f3 f3 f1 6a f3 75 32 e1 7c 05 90 c0 41 79 3a 6c d6 5c 4d c6 0b d6 28 57 26 ae 48 34 03 5c ec 1c eb 66 c7 24 81 bf 9f d0 1d 16 be 45 7d 34 9c 96 3c 2d 2c e7 22 1d 83 e5 8c 12 f6 65 1a 8c d0 85 84 43 19 da 9f 75 32 81 aa 79 d0 95 7f 88 71 f5 f2 a8 8c 04 e1 a9 d1 a5 a1 0c 47 2c 6c 54 ef da 41 4c b6 36 a4 8b bd 1a bb 28 d2 a5 8b 67 2d 53 be e1 59 fb d0 55 98 f2 3f 48 17 2b e4 8c 64 6a 20 9c ce ec cf d2 7d 0a 92 05 31 62 95 6a 08 67 c3 3b 9e 96 50 Data Ascii: S]X[QR?s}+FCSaW_mc91u!x;@#%OdY*9<C=w>ju2\|Ay:l\M(W&H4\f$E}4<-,"eCu2yqG,lTAL6(g-SYU?H+dj }1bjg;P

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.5	49874	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:37 UTC	3606	OUT	GET /static/webpack/production/4ba0049880d2af404923.9CRyHZrHq1b9LsB2fiT0_y-o9kmEIIvVJy4qkE3xjW0.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:37 UTC	3727	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 50463 Connection: close Date: Fri, 21 Jul 2023 16:50:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:30 GMT ETag: "8f70798d752a7bea2934a21a7d86d99c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 cb0d3a2bdc5300e2d139e111e94efe5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: MSvbIO0Jfko3kGgG6wWq9UyNdV1dcdbjoU5XjN66qwWJArU5t8A7gA==
2023-07-21 16:50:37 UTC	3728	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 59 73 e3 58 97 20 f6 8e 5f 41 a1 3d fa c8 4e 90 29 6a c9 85 fa 58 39 4a 2d 29 55 6a 4b 2d 99 55 a9 96 15 10 71 49 a2 04 02 4c 00 94 52 a5 e4 c4 37 d1 7e 69 bf ba c7 d3 33 5e 66 26 c2 31 e1 87 09 77 87 23 1c e1 08 f7 f4 c3 f7 4b c6 d5 0f 7e 6c ff 04 9f 73 ee 05 70 01 5c 70 93 94 95 e5 ee af bb 52 04 70 f7 7b f6 7b ee 39 e5 1b db b5 bc 9b da c5 c5 ee c1 da c6 da eb dd 4d fa b1 b9 71 b1 be 7d ba ff f6 f8 e2 a2 39 b6 c4 97 2f 67 e7 95 5a 7f 10 74 cb 67 67 7a df ec 33 ff e2 12 2a 31 ff 5f 88 87 81 6b 39 4c 3c b4 1c 6f 60 5d 58 5e 2b 10 2f 5c 33 b4 af d9 85 c5 82 ab d0 eb a7 5f f6 bc 4b 3b ae d9 b7 db a2 ce bf 58 ae 5b 0b ed 7a 7d 41 3f 37 ee b4 fa f3 e5 a5 46 7b e0 b6 42 db 73 cb cc 08 0d bb 72 77 70 f9 13 6b 85 35 8b b5 6d Data Ascii: YsX _A=N)jX9J-)UjK-UqILR7~i3^f&1w#K~lsp\pRp{{9Mq}9/gZtggz3*1_k9L<o`]X^+/\3_K;X[z}A?7F{Bsrwpk5m
2023-07-21 16:50:37 UTC	3734	IN	Data Raw: 90 f2 26 9f 47 3f d8 ba 9f 73 4f b2 ea ba 82 7e a8 9d 14 22 e4 b5 0b be 13 f2 6a ab 79 26 3d 19 90 87 86 9d 00 b9 ae 03 94 df 1b 96 d5 d1 4c 0e 08 94 8f a6 e7 eb fc 12 f9 45 7c 31 3c 0b ca e9 4b e6 a3 41 99 5f 32 ff aa c7 af 38 a8 3d d3 35 3b c0 54 f3 f0 1a 4d ea 91 60 d6 08 27 65 48 1a 86 f4 2f 8b 90 b3 89 f3 cc 3a cf b3 84 2b b6 e9 86 fe 2d c6 af 56 00 47 7d 78 be 5a 0e 53 95 7b 62 ce 35 69 01 40 78 c2 96 ca cc 90 66 5e 21 6f 19 86 c1 b6 a1 f9 c9 75 1e 54 db d5 01 75 8e 08 d4 f6 a7 a6 9a 11 a4 21 38 5c c4 48 56 04 70 52 74 84 7b 01 dd 63 f8 1c 17 d3 cf df 9e 5b 8a bc 2b 45 de f2 31 b0 09 37 48 01 6f 1f ec b0 7b dc 67 2d db 74 24 25 45 6c 60 46 6d 99 46 d7 1e 15 e5 69 9f 80 ef d3 d7 e7 8c 8a 9d 35 b6 8b 86 01 4a b2 2f 4f a0 00 ca a0 89 d3 22 65 26 3a 82 Data Ascii: &G?sO~"jy&=LE\|1<KA_28=5;TM`'eH/:+-VG}xZS{b5i@xf^!ouTu!8\HVpRt{c[+E17Ho{g-t$%El`FmFi5J/O"e&:
2023-07-21 16:50:37 UTC	3737	IN	Data Raw: 27 19 a1 78 f9 11 a7 ae 4d 3f f7 e9 ad dc 05 e6 be b1 37 d1 47 4b 19 dc 0e a4 a9 69 11 3f 97 1d ef 34 ad 8e 7a 87 a1 1c b1 71 55 88 8f 9c 78 1e 85 72 84 0a b3 d2 b2 07 96 36 69 f0 41 5e de bb 27 31 cb 7a e0 09 cf 08 06 eb 41 9e 13 29 29 0b 08 81 e4 19 11 91 25 11 d0 99 45 c7 e8 73 76 b0 6f ee 83 dc 31 3f df 06 4a 82 2b db 41 1a 87 77 d6 be 5b 80 7f 7e 5f 5f 58 10 14 23 e5 30 31 cc bc 4b f9 40 6c 96 77 6a 23 6c 38 c0 5f b5 d5 7b ba a8 e4 8e 15 ce ee 84 d4 f3 9e 8c eb 67 fa 12 08 27 dc 81 05 a1 52 18 2b 63 2f 30 6e 95 2c f4 56 e9 93 e4 71 cd c4 82 c4 9e 2a b7 53 7a aa 84 09 15 c9 6d 17 7c 1c 0e 8d d1 c3 46 a3 a9 18 33 fe fc 06 06 fc f5 fd 58 34 e1 c8 62 78 93 1f 23 91 3b 4b 04 ec 39 1f 33 da 7c 8e 02 45 85 70 b5 a9 84 52 33 e0 91 09 aa 84 e7 23 34 03 11 45 Data Ascii: 'xM?7GKi?4zqUxr6iA^'1zA))%Esvo1?J+Aw[~__X#01K@lwj#l8_{g'R+c/0n,Vq*Szm\|F3X4bx#;K93\|EpR3#4E
2023-07-21 16:50:37 UTC	3783	IN	Data Raw: de 0c 8e f2 d4 41 2c 93 54 31 59 4c bc 6c 2d 3c 08 9f 3d df ab ef ab 6a f3 d2 bc 3a 65 da fa e5 0f ff 31 d3 8c c8 61 d4 f2 3e 6e 3f 55 0c 3c dd 86 1e 9d 23 ae d1 4b 26 88 db ee c7 a7 af b7 14 fe 87 71 65 4a f2 75 d3 f5 7a af 28 9d 11 02 8b 00 14 91 a3 ca 5b fc d0 de 50 f9 40 32 54 cc 07 ac 64 71 fd 0c b0 25 55 f1 60 e7 d9 e5 cb 23 65 ee a5 50 aa 47 97 47 d4 3b 18 c6 6b f0 29 38 5d fe d1 55 24 ca 82 12 e8 78 29 b4 6d 5e d8 fa 69 f1 fd bb 8e 62 c4 91 4e 3e 34 2c 2f 22 fe ee cf fd 70 47 91 45 6d 03 33 df a2 4b 67 af cf 13 5e 91 37 e7 4f cf 0f f6 37 4f d5 b9 9d b0 18 5a 5f dd a4 0e 56 71 3a 3d ab 6f e6 ab ec c4 e5 12 a8 13 09 a4 de ff b4 bf a2 dc 32 2a 44 c5 7b 3c 15 ae 48 a9 66 7b 37 1d 5f 55 41 14 a3 55 be 24 1b 8a 62 99 23 90 e3 36 1b 9e 21 cd 5a db 5f 38 Data Ascii: A,T1YLl-<=j:e1a>n?U<#K&qeJuz([P@2Tdq%U`#ePGG;k)8]U$x)m^ibN>4,/"pGEm3Kg^7O7OZ_Vq:=o2*D{<Hf{7_UAU$b#6!Z_8
2023-07-21 16:50:37 UTC	3795	IN	Data Raw: 93 1c ca b8 34 60 50 90 52 b1 7f 61 96 da 91 75 37 54 1c c9 8f 9f 74 d7 2c 5a 1d 7b 5b c9 09 bb d3 80 aa d4 e6 13 da ee 84 57 39 3e 53 e3 bf 39 af e8 67 10 0d ce d1 cc 7b 8e 61 fb 67 59 de 23 df 48 26 6a 8a ef 29 ca e8 fa 54 3a f6 f9 39 81 5a 01 bb c9 e5 96 85 50 de 92 b0 bb f2 ad 6d 28 05 ab 7d f0 44 e8 43 a4 bb 69 5e 45 55 f0 1e 67 1d 98 2d 43 d4 92 18 42 e8 c8 0a 71 42 c0 66 97 3a 33 ab 3c 8f 85 5e d5 ba 2a 33 c4 c8 a6 b4 ca b9 60 73 fa a3 3c 02 5a 82 7f 59 47 a8 c7 85 b0 87 34 1f b5 13 cc f4 9d 70 32 32 43 4c 24 bc c4 cc b3 6f d0 cf 7f 3c f0 0a df 6a 35 53 c7 f0 8c 2c 9c 11 b3 a8 78 b0 d4 f5 45 db c2 c1 31 93 5f d6 8a 07 2b c8 9f a2 b4 6d 3e a0 dc a1 b9 67 96 64 99 a5 9a 38 5a 09 ea 26 0b 21 70 d2 93 9a 94 79 85 b1 ec 5a ba 9a 1c ee 74 0f 95 8d 39 54 Data Ascii: 4`PRau7Tt,Z{[W9>S9g{agY#H&j)T:9ZPm(}DCi^EUg-CBqBf:3<^*3`s<ZYG4p22CL$o<j5S,xE1_+m>gd8Z&!pyZt9T
2023-07-21 16:50:37 UTC	3811	IN	Data Raw: 64 d3 f1 78 34 8a e2 b4 b3 63 ed ab 98 ad ce b5 23 f8 a0 3d e0 97 3a 7b e8 c2 6d 66 72 86 a7 b1 ef 88 a7 7a ce 66 78 e1 fa 53 d4 cb e1 39 00 88 26 19 37 aa e0 77 63 d6 80 df 76 52 fd 06 eb 7c a5 df e2 7a ea bc cf 74 7c 02 41 35 d8 1c c1 a7 a4 46 bd 4c 62 c9 1d 9f a2 c1 f7 b2 58 da 4d 2b 1c 7e c1 3a 03 27 ed f2 af 46 5f 22 4d c3 a8 71 86 86 1b fd 9d ba 4f 6a 6c e2 d1 df 49 7e e8 aa 9d 2b c9 32 88 f8 14 8b 24 1d f4 00 10 86 a5 20 43 fc 39 3b 9b c2 ca d1 4b e8 d0 0d e2 a4 69 1f aa c7 ff 94 ac ef b3 ef 98 d3 52 66 a8 b3 33 94 1b e0 7f 4e 40 cb be a3 ea ea e7 e7 c9 08 4b 38 6e c6 b1 7b d7 cc ff 86 0b 96 0a ff 3a 9f 41 14 3c a3 72 29 40 8b 1d b7 84 18 92 17 d3 ba f5 f2 17 16 99 83 91 ac e7 e7 6a fa 1d 61 9a 8c 2d 76 9b 34 13 8d 52 69 2b e0 dd c3 24 aa 78 35 c4 Data Ascii: dx4c#=:{mfrzfxS9&7wcvR\|zt\|A5FLbXM+~:'F_"MqOjlI~+2$ C9;KiRf3N@K8n{:A<r)@ja-v4Ri+$x5
2023-07-21 16:50:37 UTC	3812	IN	Data Raw: 91 af 02 c3 e8 f4 ed 7e 44 0f 45 00 26 97 ec 3f ae fb 96 60 19 e8 15 ac 06 bc 32 1e 61 a1 85 32 bf 16 85 17 8f 47 ac 8b 34 da f0 a9 b0 cc ec 11 f0 27 57 de 7b 2e 23 a4 d9 87 f5 c4 b9 42 d1 0b 8e 73 e4 8b 71 16 c3 4e e0 54 7e fa 76 f4 4c db 54 d4 93 eb 1d 22 b7 a9 2a 66 f1 76 94 b1 32 cf 90 93 01 12 0d cc 4c ab 7d 88 46 bf bd 30 1d ec ba 98 dd e2 ae 05 a4 fd fc 12 58 1c ba 73 78 32 fb 7e 92 00 a3 9e b4 9a f7 c0 dd 5e 77 e0 f4 7a 9d c6 e8 f5 4f 97 9f 90 b1 e3 75 89 46 9d c6 21 34 69 4c 1d d8 fb a0 e7 77 ee b1 e9 d1 4f bd dd 67 5f 8b 4d 0f a8 0d 34 06 58 fa 49 ca 8d 07 1f b6 d7 5e ec 15 1b ef 52 1b 1c b9 07 3b c3 6d 9f ed ec 0f de 8e 2c 03 63 93 06 26 56 1c 54 92 6f a3 d8 b5 f4 9f 14 da 73 92 9f dd d1 68 70 c7 85 bb dd f8 8a 6e 59 75 98 d3 76 88 4e c8 0d df Data Ascii: ~DE&?`2a2G4'W{.#BsqNT~vLT"*fv2L}F0Xsx2~^wzOuF!4iLwOg_M4XI^R;m,c&VToshpnYuvN

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.5	49875	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:37 UTC	3607	OUT	GET /static/webpack/production/52403d18eae03c7ba478.cST5QAZGfkuKpwKd-cXLWyE_ukg0vbK6XJVnkD66jdI.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:37 UTC	3626	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 14745 Connection: close Date: Fri, 21 Jul 2023 16:50:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:32 GMT ETag: "1d09b2fd9dd2ee93998166c19de4fb2e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 01c82f5226ffef5f7e654ffdbab24db6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: qX7VzLu38Tih_XkRw2sWW0wsccV0E2wYqnEeBiT7O0FbOOqnw5Wx4A==
2023-07-21 16:50:37 UTC	3627	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d eb 72 db 38 93 e8 7f 3e 85 c2 ad ca 8a 35 88 7c 8f 63 e9 70 5d 8a 2f 89 33 be 25 76 92 c9 b8 5c 2a 5a a4 64 4e 24 92 43 52 4e 34 8a b6 f6 35 b6 ea 9c 97 fb 9e e4 74 e3 42 82 24 48 91 4e f2 7d b3 fb 23 b1 88 5b 03 8d ee 46 77 a3 01 b4 bf b8 9e ed 7f e9 0c 06 a7 17 fd c3 fe cb d3 23 fa e3 e8 70 70 f0 fa fd f9 af 57 83 81 b9 b2 c4 b7 6f 37 b7 46 27 98 45 f7 ed 9b 1b 3d b0 02 27 1c dc 41 25 27 fc 4f fe 31 f3 ec 89 c3 3f 86 13 7f 66 0f 6c 7f 18 f1 04 cf 8a dd 07 67 60 3b d1 e7 d8 0f 78 62 e0 8e 44 fe 83 eb 7c 19 f8 de 64 fe 9f 91 33 8c 5d df 1b 4c fd 07 27 d4 6f c9 42 db 58 df ea 8e 66 1e 4d 6e 3b 24 26 96 b1 78 b0 c2 56 48 3c e2 93 88 0c 89 4b ec de c5 dd 1f 50 b3 63 3b 23 d7 73 2e 43 1f 5a 8d e7 ed 98 e8 83 81 13 9d f9 f6 Data Ascii: }r8>5\|cp]/3%v\*ZdN$CRN45tB$HN}#[Fw#ppWo7F'E='A%'O1?flg`;xbD\|d3]L'oBXfMn;$&xVH<KPc;#s.CZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.5	49876	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:37 UTC	3608	OUT	GET /static/webpack/production/9546d61e0af1829a5943.1niBeLXONVtz6eCwiOhEjyXETqjOWmtbnfYPS-qFGMQ.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:37 UTC	3778	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3788 Connection: close Date: Fri, 21 Jul 2023 16:50:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 08 Jul 2023 03:20:26 GMT ETag: "4729c4788725e58bd054118223446e03" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2177a1d449a3e8dc7269040f15d81cb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: U9l7fVMf9dZ_HtxoCXIxn5B6zaHBCjEgDJ4wSQ0IGrGMRsNxRYy0kA==
2023-07-21 16:50:37 UTC	3779	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 5a 6d 73 db 36 12 fe ae 5f 61 f3 5a 0d 79 81 69 29 4e dc 44 32 eb 49 1c f7 65 ce 8e 73 51 d2 36 a3 d1 78 68 12 92 98 50 20 43 82 4e 5c 99 fd ed b7 0b 80 24 f8 66 3b d3 5e 66 32 a6 f0 b6 c0 62 f7 d9 67 97 34 bf 04 cc 8f be d8 97 97 67 17 2f 5e bd 78 79 76 2a 1e 4e 5f 5d 9e fc f2 fe f5 7f 66 97 97 ce bd 23 6e 6f e7 0b cb 8e b3 74 6d ce e7 46 ec c6 34 b9 bc 82 49 34 f9 4b fd c8 98 1f 52 f5 c3 0b a3 cc bf f4 23 2f 55 0d 1f dd 74 13 30 7a c9 69 ca 8b 36 e6 f2 e0 9a 5e fa 34 fd c4 a3 58 35 c6 c1 52 f5 ff 35 7a 36 fe e1 e9 73 fa d4 58 90 ed e0 e0 d9 e3 c9 32 63 1e 0f 22 66 52 c2 09 b3 b6 17 57 1f a9 c7 6d 9f 2e 61 e9 37 49 04 93 f8 8d c9 89 71 79 49 d3 f3 c8 cf 42 6a 90 ed b5 1b 66 74 b2 3b ca ad 29 b7 df 45 59 f2 73 12 65 f1 4b Data Ascii: Zms6_aZyi)ND2IesQ6xhP CN\$f;^f2bg4g/^xyv*N_]f#notmF4I4KR#/Ut0zi6^4X5R5z6sX2c"fRWm.a7IqyIBjft;)EYseK

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.5	49877	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:37 UTC	3666	OUT	GET /static/webpack/production/493371368d24a7dd558c.kZEJL0_iTh7LJAa5DQuPA7IwgSVAB6-F2gm4NhZnoIE.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:38 UTC	3842	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 130252 Connection: close Date: Fri, 21 Jul 2023 16:50:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:27 GMT ETag: "ceb026a4b90600dde7f1a4cf077d0125" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: XbNO5bn7ZqNf92jCE8VW9omc7m8-1v3JJQLvf1CRl-f_lSC5bWsXfA==
2023-07-21 16:50:38 UTC	3843	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd eb 76 db 48 b6 30 f6 9f 4f 01 e3 7c c7 43 1e 83 94 28 4b be 50 c3 d1 27 eb e2 56 b7 2c 79 2c b9 7b ba fd 69 e9 40 44 91 44 0b 04 d8 00 28 99 2d 33 6b f2 33 3f 92 95 1f 5f d6 ca 59 2b 59 c9 53 e4 01 f2 28 f3 04 79 84 ec bd ab 0a a8 42 15 28 4a f6 cc 39 b9 cc c5 22 80 aa 5d b7 5d fb 5e bb 9a b7 61 1c 24 b7 9d cb cb e3 d3 dd fd dd 37 c7 07 f4 e3 60 ff 72 ef bb 8f 27 3f 9c 5d 5e f6 ef 2d f1 e5 cb a7 8b 56 67 3a cb c6 cd 4f 9f dc a9 3f 65 e9 e5 15 54 62 e9 7f 23 1e 66 71 10 31 f1 30 88 92 59 70 19 24 83 4c bc 88 fd 3c bc 61 97 01 cb ae f3 64 2a 5e 4e c3 a1 fc 7e 13 b2 db cb 24 8e e6 ee 85 77 d7 dd ea be ec 0d 67 f1 20 0f 93 b8 c9 bc dc f3 5b 77 8d d3 ab 5f d9 20 ef 04 6c 18 c6 ec 7d 9a 40 b5 7c de cc 3d f7 f2 92 65 ef 92 60 Data Ascii: vH0O\|C(KP'V,y,{i@DD(-3k3?_Y+YS(yB(J9"]]^a$7`r'?]^-Vg:O?eTb#fq10Yp$L<ad*^N~$wg [w_ l}@\|=e`
2023-07-21 16:50:38 UTC	3858	IN	Data Raw: 03 9e 82 cf 6d 6d 17 c7 76 af 92 60 4e 82 3e 8a 5d b4 ba 4d 3a 51 49 bf 5c 52 5c 08 80 8b 5e 4f e0 26 40 8a 2f 0b d3 17 74 3d ab 33 75 7c c7 a2 a9 c4 25 91 fa 4f da 38 e4 7a f7 22 2f e3 8e 8a 1d 17 c1 f5 5c 10 b7 5c 3a 2d 52 9d 0a 83 aa 4c 0d aa 52 ee 12 c1 cb 1a 26 98 49 85 b2 8d 2d b5 81 a6 0d 77 aa 15 57 11 98 56 69 ce 90 81 78 90 74 f7 c5 c6 f3 4a 46 bf c7 85 f4 f9 35 f1 07 04 52 58 06 f8 e9 71 e1 cf 10 c7 ce fa 39 3a 57 fd d4 c7 6b ac d3 8c c7 bb 95 cf b4 23 fb 6a 89 ba 1c c5 77 45 11 3c 8b 90 b2 0c 96 48 5c e1 d1 12 51 72 55 b0 9f 2e 16 9a 47 7b 16 5b a4 0b aa 19 83 90 fe 1e d4 7f ca a8 2b 80 60 2e b4 70 d8 cc c5 71 60 71 14 f8 93 20 5d 17 ce 9e 1f ff 21 77 00 a8 3c 95 e3 fc 97 32 06 40 9d 11 3c 7a f4 07 d7 99 b3 bc e3 14 d0 9d 2c 0f a3 c8 49 d9 6f Data Ascii: mmv`N>]M:QI\R\^O&@/t=3u\|%O8z"/\\:-RLR&I-wWVixtJF5RXq9:Wk#jwE<H\QrU.G{[+`.pq`q ]!w<2@<z,Io
2023-07-21 16:50:38 UTC	3864	IN	Data Raw: bf b7 43 b2 fb aa 8a 8c 24 98 f4 5b cc 3e 99 a0 c4 e1 17 cc 32 52 99 d8 29 7d ff 2e 1c 8d 23 3c 86 c8 b1 2d a0 88 65 df 7a e7 16 7c 99 3e 7d 1a 83 3c 31 03 e9 a3 3f db 9e 36 db 5d 6f 56 50 8e 7b cd a3 61 79 6f 42 d9 e1 66 8e a7 88 f3 4f e6 a7 e3 84 07 f1 5e f4 65 7f fe b4 45 96 53 8f bb 35 2a b9 51 ea 9c 65 69 65 16 d1 4a a3 a6 e0 10 18 c8 c4 76 51 30 6e 20 b1 94 4a c2 b0 c9 86 4e 82 86 b9 30 56 ec 53 be bb 84 5f 66 a8 f4 63 0c bb 2a 09 a9 b1 e4 3e df 94 49 37 bb c2 6d db 7d 21 c4 cd 2d 99 75 b3 62 ce 15 d6 dc 8d 8d 75 6e ce 25 99 73 b2 54 e6 6c 7c 9d d0 c9 3d fe 44 c7 b4 66 00 d3 d6 50 fc fa 2f 6b 30 a3 61 bc d6 c9 81 c3 34 ab f9 35 f0 ce d5 29 99 58 f7 fd dc 27 0d 10 ef a1 10 41 6d 03 b4 0f 4e 8c 52 a0 d7 e2 df 26 9d c4 e5 e0 5d 34 55 f8 4f 9f c2 ff 80 Data Ascii: C$[>2R)}.#<-ez\|>}<1?6]oVP{ayoBfO^eES5QeieJvQ0n JN0VS_fc>I7m}!-ubun%sTl\|=DfP/k0a45)X'AmNR&]4UO
2023-07-21 16:50:38 UTC	3880	IN	Data Raw: 18 58 45 17 35 48 86 15 f9 fb fd e3 d1 17 47 91 3f 27 ee 71 a3 12 aa 16 78 75 18 3d 7d f9 b8 ae 23 8e 62 36 c0 19 d8 df c9 e3 e5 78 7a 65 f7 b7 39 26 11 37 1a 7b 7b b2 fc 72 f1 66 e1 de 2e 44 fe da 4d c7 0f de fd 63 f8 fe f9 4b fb 03 ed fe 6b 77 13 bf da fd 63 f1 38 f9 d3 fe 6a ed 95 c5 8f c3 79 34 7f 3b 73 0d 69 df 64 f7 35 a3 83 f8 f3 e6 9f 87 bf fd 5a dd 4d c5 f5 c3 4f e7 2f 5f bd f8 87 a3 a4 a4 fb 56 52 11 ca 9f af ae ff 74 d4 88 54 2f ab 71 57 f1 b3 49 7e f0 9f 7f e5 8e 0b 60 dd e1 2d 8d 09 3d 8b da 54 77 78 d4 df 3d ef 7b ec 4f af 47 8f 85 7a be df c1 37 e2 17 7b 79 c4 6f 40 7f 0f de 89 1f de aa 85 3a 5b 85 83 ba bb 6b e9 1c d5 2d ea 61 91 9f 3a d1 64 8b d4 90 9b 1b f7 a9 72 19 e7 c7 49 8c ca 03 bc da e8 ef 11 02 03 7e 42 b8 d6 76 64 55 33 58 20 30 Data Ascii: XE5HG?'qxu=}#b6xze9&7{{rf.DMcKkwc8jy4;sid5ZMO/_VRtT/qWI~`-=Twx={OGz7{yo@:[k-a:drI~BvdU3X 0
2023-07-21 16:50:38 UTC	3896	IN	Data Raw: 1c 5e fe db 1e ee 7d 7a 45 9f 57 63 67 01 76 ae 1c f5 00 78 d9 da bb 69 42 91 8f 8a a4 f5 9f dd 13 6c 7c 64 f5 37 9f 8c 06 00 3e 0a 05 3f 64 46 d6 61 8b 22 6a 86 17 6d 9c a3 4f 1c 6f dc f2 fd db b0 bf e8 15 fd 39 b3 6c 85 fd 14 7e 0c 57 d2 5d f3 9e f8 93 a9 ea 9b 6e 8b 05 b3 f1 98 7d f2 f8 09 dd bc 43 61 80 ae a6 14 f5 39 4c a7 29 70 ad e3 30 46 ce 50 37 0b 15 f6 67 b1 93 31 35 e6 88 80 2b 59 d0 79 06 e4 08 e4 61 e0 ff f4 54 13 c6 6e 06 dc 98 10 71 b3 58 c3 5e 9e 7d 98 ea 15 11 d9 59 5c 70 5f 83 f5 79 0b 86 ef ff 82 6c 82 7b 1c a5 63 ad 43 89 d1 99 ba e6 ff 1d 6b 73 6d a4 4f 3c 16 e9 9e 72 ff 36 27 cb 33 0f dc 11 c9 e0 e7 2c 4a 11 3d 2c c5 13 bf 75 cd 4a 01 ab 2d 91 a9 37 9a e2 a3 b2 2d 5c 38 9a 64 5b fc c1 8f b5 4d 80 44 ca a2 70 34 c2 7b 41 85 45 76 58 Data Ascii: ^}zEWcgvxiBl\|d7>?dFa"jmOo9l~W]n}Ca9L)p0FP7g15+YyaTnqX^}Y\p_yl{cCksmO<r6'3,J=,uJ-7-\8d[MDp4{AEvX
2023-07-21 16:50:38 UTC	3900	IN	Data Raw: 5e 59 12 8a e3 fc 37 38 44 a4 e0 31 ca d8 4b e6 7a 81 4e 2e 2d 5f 47 a8 b5 63 76 a3 a0 66 a4 82 fc c3 c2 2a de da 40 b7 a5 dc 61 73 e1 85 8a bd 43 60 6e a7 ce 6e d4 4e cc 66 2a 03 83 59 82 87 93 8a 2e 1a 65 1f 66 3b 52 95 4b 36 20 dd 68 31 7a 33 5e a8 07 d1 04 db 27 96 c3 fc e8 66 0e 7d ae a3 a6 8e e2 dc 4e ce fd d9 2e db 77 9b 2d 74 85 53 85 9a 8e 95 f4 7f 0a cb 94 bf 4d 49 ed d7 f2 c9 47 2c 1e 21 23 9c 90 8f 77 9c 93 0a 2d 07 74 4f 52 4c 34 5c 64 d1 eb 05 5c ef ec 78 b4 d5 9f 96 45 31 e9 cd 17 90 23 80 27 c9 fa 4c 7b 58 48 54 aa fe ad ea 73 29 b9 92 df c6 5c 23 ce 14 4c 5b d1 dd dd 16 4e 03 c4 9c 08 98 c4 95 8c cc db da 82 31 52 60 80 63 62 82 91 27 18 8d a2 44 87 50 e8 69 7b bb 95 dd dd 69 2b a1 c3 e1 c5 8e 84 30 71 76 1e 98 fc 1b 3c 32 49 21 3c aa bd Data Ascii: ^Y78D1KzN.-_Gcvf@asC`nnNfY.ef;RK6 h1z3^'f}N.w-tSMIG,!#w-tORL4\d\xE1#'L{XHTs)\#L[N1R`cb'DPi{i+0qv<2I!<
2023-07-21 16:50:38 UTC	3916	IN	Data Raw: 2f be 41 71 b5 81 91 98 e7 2c 02 43 3d b1 d6 5f a6 ee dd 22 1d 54 a3 5e 13 7b 74 21 f6 e8 82 8d 31 2e 90 db bb 18 07 17 5d 5c 39 86 ff 67 93 40 b9 62 07 6f a3 ae 7c 13 fe 8d d3 3c 85 01 ad be 99 88 15 a6 4b d8 4b 13 8e 7a 54 33 92 0e 18 15 9b 4a 45 2d fd 00 05 e4 50 b2 0e ec c7 09 b0 98 18 af 63 38 01 41 ec 30 b8 0e 46 c8 c6 70 76 04 85 05 0d 28 a9 58 6e 18 55 42 6d 0b 56 ce ab d9 3b 00 f4 17 95 85 65 61 38 5d 1b 0e 0c 5a 0a b7 59 27 69 69 7b 4d 09 e0 e0 df 53 2a 6e 9d ed fd a6 0d 34 f3 80 6d 02 b2 87 56 4d a8 86 80 a2 7e 38 98 8a df cc e4 cc 63 3a f5 d0 98 39 4a 34 14 ce 36 c7 5b ac 67 2f f5 cd fd 6f 61 20 8a 0a 14 4a 9b f9 f6 35 29 e7 53 53 98 5c b9 de fb 1e d4 0f 3f 27 39 9e d5 86 86 3e b5 df 72 df 3e ae 47 2d bb ed a3 ee 18 8c 08 b2 80 59 c1 22 60 5a Data Ascii: /Aq,C=_"T^{t!1.]\9g@bo\|<KKzT3JE-Pc8A0Fpv(XnUBmV;ea8]ZY'ii{MS*n4mVM~8c:9J46[g/oa J5)SS\?'9>r>G-Y"`Z
2023-07-21 16:50:38 UTC	3932	IN	Data Raw: 17 81 0a 97 27 ac 02 9b 59 46 61 fd 8d cb ff 96 d7 ee 5e a8 c0 12 8c de e3 e1 c5 dc 9c 39 98 d4 0c 5d 08 8e 40 51 0f 3d 7a 1c e5 99 ce 32 14 2b 99 c4 5a 0c 45 d3 13 07 53 7a 80 21 4b f9 31 a5 c2 4a 1b 95 74 56 4f 1c 8f da 5a 16 c7 9a 2f 31 8c 45 fb 35 9d ae 4c 21 7a 39 9a 53 40 eb ae af da a2 ce f5 2c 52 d3 5b 9e ff ce cb 1e 30 89 34 94 d4 c5 a9 2a 97 a9 f4 7f ee c5 cd b9 ba e9 f7 47 6f e5 11 dc 53 f6 ce 9a 92 3e 8b 6e f1 3b ed dd bc eb 9b be bc d5 b9 97 a7 3c 06 9b bb a7 6a b7 be cb ee 2d d7 bf c3 ea f0 31 41 93 09 51 37 86 66 a3 35 d6 bc d1 43 30 ab 92 96 e9 6f f1 7d d9 76 39 f6 e7 97 ba d5 e7 ef aa 81 0a aa 7e ef fb e0 c2 df 7d 07 58 51 de 01 1b a8 58 f5 68 82 8a bf 2f 23 5b f0 2d b0 52 1f fc 4d 58 49 0d e7 f7 81 d3 e7 8b ef 00 28 93 49 42 4d 83 b0 2c Data Ascii: 'YFa^9]@Q=z2+ZESz!K1JtVOZ/1E5L!z9S@,R[04*GoS>n;<j-1AQ7f5C0o}v9~}XQXh/#[-RMXI(IBM,
2023-07-21 16:50:38 UTC	3934	IN	Data Raw: 9a 51 27 f2 fd 4e 3e aa de c7 db 2f 5f 7e 7d 69 89 06 24 ba 2b 7b 49 f9 41 f6 38 29 43 9f 65 ee 14 43 36 52 b7 6e 19 3b 2e 63 cf 32 08 5f 1d 83 16 3d 7a 42 b0 b0 db e0 0b 9c ad 96 df f7 af 30 fe 6a 7c db f3 87 f7 21 a0 5f 32 f2 c3 51 df bf 1e 86 b7 22 46 d4 db b5 e1 cb f7 96 00 4f df 36 f1 32 42 97 67 51 ce a6 51 c6 79 94 61 22 65 b4 2a e2 a9 94 71 2e b8 50 0f 7b 11 ed 45 4a 8d 20 06 a6 01 aa 0f 7d bf 9d 84 09 6a cb 47 32 dc dc 41 9c f4 86 3f 5a 26 be c5 d3 91 71 0c 45 57 e5 00 e6 dd ef d3 e0 d8 1d ce 1e 3a e4 15 3c 6a f8 47 81 37 38 8e de dc be fb 4e b3 7c 02 50 b5 29 79 57 e1 38 a1 ae d8 ca ec a8 73 4c 65 3c d5 57 3f 7d 78 bb 6d c3 84 03 bd db 32 75 c3 53 2a 57 1e f4 ae 26 55 8c 8f 16 b4 ae e3 70 e0 03 f6 84 08 97 08 d1 47 c4 d2 ec 1d b5 ae 9f 5b a2 a5 Data Ascii: Q'N>/_~}i$+{IA8)CeC6Rn;.c2_=zB0j\|!_2Q"FO62BgQQya"eq.P{EJ }jG2A?Z&qEW:<jG78N\|P)yW8sLe<W?}xm2uSW&UpG[
2023-07-21 16:50:38 UTC	3950	IN	Data Raw: fc 72 0e c6 f3 ac 2f 6d 9b 06 b3 f2 7d 77 c1 5b 5c fc 83 7b ed fa d5 d9 3d fc 5c d2 42 5b aa 0f 0a 70 4b fe e2 52 57 5b 66 47 fb d9 a9 c9 c3 d2 e0 f2 53 cb 16 80 25 5e 1a bf 01 d7 60 10 90 91 86 74 29 57 68 c6 d8 4c 91 21 cb 94 43 ce a4 6d 11 bb af f2 b9 23 bb ba 40 95 7f e5 b8 38 bd 2f 90 b5 ad fa 6d 90 f4 76 52 26 a5 5a f9 04 a4 f5 e5 da 8b ef 15 c1 2b 4b e3 bb 22 a2 6d ae 8a 68 9b 22 d6 26 e5 f0 9d 92 c2 bc be e7 b6 b1 3c 34 a3 53 f9 1c 4e 22 d1 12 49 5e 9d 2d 9f ee df db f3 08 52 fe 48 51 1b a3 fc b0 fc 05 5f f1 30 aa 9d 1c 7f 68 1d df 1d 5b 02 05 6d a7 4d 30 58 52 d6 d7 04 a3 8f cd 9b 07 2e 4d 66 52 10 c0 27 ce d9 4a ea a1 4d 98 af 4c 95 e6 9a b3 a1 1e fe 3d 57 77 9a 31 26 bb 26 0a 7f 2c bd 97 a0 20 2f 40 81 ab d1 b4 f4 45 6c 0f b6 e0 e7 54 fe b9 15 Data Ascii: r/m}w[\{=\B[pKRW[fGS%^`t)WhL!Cm#@8/mvR&Z+K"mh"&<4SN"I^-RHQ_0h[mM0XR.MfR'JML=Ww1&&, /@ElT
2023-07-21 16:50:38 UTC	3966	IN	Data Raw: a6 27 24 e4 60 af 40 ef 7e d5 d7 d0 b2 14 bd 7f cb 7c 8a 21 6c d5 84 9c 59 38 09 e6 64 b6 47 ee d1 da 5c b2 e0 b8 e5 e8 b7 dc bb 23 90 cf 37 e6 c7 06 80 64 c5 c8 9d 1a a5 67 40 7e 67 80 18 03 2f 6e cf e4 df a6 53 1c f1 dc c8 96 3b e9 0c 3d 2e d1 39 12 2e 90 f8 aa 2e 0b 23 ef 97 d3 e3 8f e8 bd 0e 8c 74 c0 11 c9 1d b4 b9 52 63 38 70 26 22 b6 f4 03 06 2a a2 50 9d 92 e9 eb a1 b3 21 fe 5e a0 44 8b 6c a2 3e 7b 3c 4b 59 bb a0 d0 8e 7f 2f 60 71 19 ef 7f 54 a6 bc c6 09 51 a5 eb eb ba f1 b0 79 88 7c e4 a8 c5 76 b0 45 d6 56 d6 e5 33 48 01 9c ef 2c ca 00 ce 13 38 d0 1b 0c f4 4a e1 05 10 2d da 71 12 0e c3 08 c9 00 c2 88 63 2f 5b fa 86 9c da 82 46 a7 d0 fe 25 d3 67 cd 80 39 23 1a 79 20 6f 7b 44 e3 c7 50 a2 17 16 c5 4d 22 f6 39 a3 48 8d 32 39 13 a6 e8 da d7 58 12 21 21 Data Ascii: '$`@~\|!lY8dG\#7dg@~g/nS;=.9..#tRc8p&"*P!^Dl>{<KY/`qTQy\|vEV3H,8J-qc/[F%g9#y o{DPM"9H29X!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.5	49878	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:37 UTC	3684	OUT	GET /static/webpack/production/b12f522ce0ee55757f5e.2dcJbNyH591tHPSv0DWyEHi4jMDBGtqFibbP5rsRf_I.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:38 UTC	3859	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 4574 Connection: close Date: Fri, 21 Jul 2023 16:50:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:18 GMT ETag: "2e87ef19236c2ee364fcf6d7e3dffc35" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 cb0d3a2bdc5300e2d139e111e94efe5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: _rEQcdjrVqrYf3V58gB680poeMsq1RacmUh-NOuBLqjRO1zDHnYA5Q==
2023-07-21 16:50:38 UTC	3860	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5c eb 72 db c8 8e fe cf a7 a0 74 aa 5c 64 0d 45 cb 4e 9c 38 f2 70 a6 14 5b 89 3d e3 db 5a f6 c9 39 93 e3 52 b5 c8 96 c4 98 22 39 64 cb b6 46 d2 d6 3e c4 3e e1 3e c9 02 dd a4 c4 bb 24 3b d9 da 93 3f 26 d9 dd 00 fa 02 e0 43 03 8a f2 64 bb 96 f7 a4 f7 7a e7 57 ed 93 f6 c7 f3 0e 7f e8 9c f4 8e 4f ef 2e 7f ef f6 7a c6 da 1e f3 f9 d7 7b 55 f7 27 e1 48 f9 fa b5 ee 13 9f 06 bd 3e 0c a2 c1 7f 46 2f 13 d7 72 68 f4 62 3a de c4 ea 59 9e 19 46 1f be 91 70 6c bb b4 c7 68 c8 e2 6f be 3d 88 1f 1f 6d fa d4 f3 5c 67 5a bf d7 66 ef f6 0f 5a 83 89 6b 32 db 73 15 aa 31 cd 55 67 d2 55 ff 1b 35 99 6e d1 01 90 b9 0e 3c 18 c5 a6 0a d3 ea bd 1e 0d 2f 3c 6b e2 d0 ba 36 7b 24 ce 84 b6 6a cd 85 7a c4 f4 0b 4a 99 ed 0e 2f 3d 60 7a e6 9e 78 e6 b9 ed 3e Data Ascii: \rt\dEN8p[=Z9R"9dF>>>$;?&CdzWO.z{U'H>F/rhb:YFplho=m\gZfZk2s1UgU5n</<k6{$jzJ/=`zx>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.5	49880	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:38 UTC	3898	OUT	GET /static/webpack/production/0ce09d6be201dc874940.Vjbt-av9zGPqb4iH55ZEtppKHIAS7YBNqMFhDsWmwmA.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:38 UTC	3989	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 47298 Connection: close Date: Fri, 21 Jul 2023 16:50:39 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:30 GMT ETag: "37ba99b8df4038887a5f9db0973aa540" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 633b37c269943f0b3472e0abe1a07b2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: C2rBrkP-D2ym6bYIJ5-FsqIQviDklSd-Mgbpo8iYq-Xkct68erzY1w==
2023-07-21 16:50:38 UTC	3990	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 72 db 48 b6 28 f8 ce af 80 d8 27 7c c8 31 48 93 92 6d d9 d4 66 7b cb 92 5c 56 95 65 a9 2c b9 dc 6e 87 43 1b 22 92 24 4a 24 c0 22 40 c9 2c 99 13 fd 11 fb e1 ec 88 99 88 f9 96 f9 94 fe 92 59 6b 65 26 90 99 48 90 a0 24 bb 6a fa ec 17 5b 04 12 79 5d b9 ee 97 da 75 10 fa d1 75 f3 fc fc cd f1 ee fe ee cb 37 07 f4 c7 c1 fe f9 de eb f7 6f 7f 3a 3d 3f ef ae 6c f1 f5 eb a7 cf f5 e6 64 16 0f 6b 9f 3e 55 27 de 84 4d cf 2f e0 23 36 fd 3f c5 8f 59 e8 8f 98 f8 d1 1b 45 33 ff dc 8f 7a b1 78 30 09 fa f2 cf ab 80 5d 9f 47 e1 68 5e fd ec de b4 9f 6e 3e eb f4 67 61 2f 09 a2 b0 c6 dc c4 0d eb 37 95 e3 8b 5f 59 2f 69 fa ac 1f 84 ec 64 1a c1 67 c9 bc 96 b8 d5 f3 73 16 1f 45 fe 6c c4 aa ee cd 95 37 9a b1 ce 46 6b 51 af ec 5c 79 53 c7 eb 86 Data Ascii: rH('\|1Hmf{\Ve,nC"$J$"@,Yke&H$j[y]uu7o:=?ldk>U'M/#6?YE3zx0]Gh^n>ga/7_Y/idgsEl7FkQ\yS
2023-07-21 16:50:38 UTC	4000	IN	Data Raw: 1e bf 7d 31 eb f4 76 fa cd d3 d0 eb 5d 5e 78 d3 66 df 0b 46 b5 cb fa 82 8d 62 76 73 05 bd f2 dd 95 97 e7 d0 8f 71 83 f6 90 17 21 a3 0d 20 60 3e 1a aa 92 0e fd 9f 51 b2 3c f1 a6 de b8 5e 9b ba 57 f5 9d 73 6c 59 d1 9b 12 4f 26 47 54 bf d8 73 e5 dc b5 26 68 d6 c4 5d 62 29 6c 14 5b 41 e9 f2 d7 d1 60 39 6c c6 5e 9f 7d 20 67 94 63 18 bc 5e 3b af 2f d2 73 df 12 5b ba d9 31 17 df ab ef 88 0b d7 dd e2 6d b6 3a 5c b3 36 e5 f8 33 7d fd 98 bf 7e dc 11 bd 6e 7e 26 fd 1e 97 ee 08 92 0f be 04 71 42 5a 4f 12 3f 8b f4 01 2a 7c 21 69 14 f6 1c 26 5d 69 76 27 13 a9 6e 85 e5 86 70 36 95 1d 84 71 20 6d 5f bf 32 ee 6c 20 c4 b3 de 30 02 d4 85 72 4f 31 5e e3 14 80 ce 15 a0 53 13 90 ad de 02 e5 31 1e f1 e9 88 f3 4a 61 b8 08 00 57 a0 b8 c8 40 71 c6 0d d4 a8 9f 60 29 16 fc 3e d7 d8 Data Ascii: }1v]^xfFbvsq! `>Q<^WslYO&GTs&h]b)l[A`9l^} gc^;/s[1m:\63}~n~&qBZO?*\|!i&]iv'np6q m_2l 0rO1^S1JaW@q`)>
2023-07-21 16:50:38 UTC	4016	IN	Data Raw: f4 c9 2b 0b f0 d2 69 24 d7 11 00 c7 68 84 99 f7 80 3e c4 30 43 fe 93 a8 47 3d 63 08 28 ca 06 e7 ab 0c 86 f3 ec 49 b9 50 99 eb e6 f4 f1 d3 b9 a5 dc 26 ce 15 db 3b 17 f8 41 9c fb 3a bb 12 04 46 1f b7 7b 23 5b 6a d7 5d 02 fd ac 23 b5 9f 6c d9 87 8f 0e ff 3e d8 b5 b1 47 82 c1 41 97 42 bc 91 9c 7f a1 cd 18 62 ae d8 0b 62 22 e1 20 70 33 f0 07 fd bd a8 37 9d e3 a9 2b fd f6 52 56 0a f9 26 f8 c3 4b a8 e8 7c 8c c7 29 0a 88 f2 7c ba e6 e4 f4 6b 1f fc 7e 35 7b e2 15 89 22 cb e7 93 9d 8d b2 a7 1c d1 a4 12 bc 72 28 a3 e3 1f a6 db 96 8c ca 82 e8 25 d8 3c b6 7c 6d 30 ce d1 d5 0f 98 de 2b 5f 73 8d 3e e3 32 49 22 32 c4 28 5d 65 e7 12 9f c6 c0 40 5b d8 67 db b1 dc 62 b7 8d 41 f5 e9 7b 5f 1e bd 7b 1c dd 9e 2f e1 1c 6b ca 5e d3 42 79 e3 8c 63 11 eb e7 de 9b 47 df ca 8c 53 c9 Data Ascii: +i$h>0CG=c(IP&;A:F{#[j]#l>GABbb" p37+RV&K\|)\|k~5{"r(%<\|m0+_s>2I"2(]e@[gbA{_{/k^BycGS
2023-07-21 16:50:38 UTC	4017	IN	Data Raw: e3 59 9c 38 01 c2 22 29 36 8c 3e ab 32 ed 65 68 0e b9 e7 91 42 ef 85 fd 71 8d 5b e0 dd a8 3b d2 90 50 ea 7c 6b 5c 01 e4 06 b0 92 87 cc fb 51 2f 82 b0 38 83 30 54 a4 d3 24 97 ba fe 46 fc 4c 32 fa a1 38 f4 88 d1 ba c9 e2 9b 65 d2 92 9e 02 3d 5e 2b ec 98 7b 72 70 58 17 d9 47 0c b0 57 45 07 b7 b2 12 70 73 ae 21 4a 78 67 f1 7d 33 9d 91 4b e5 f6 12 af 8f 05 3e 68 39 ad 2a 07 7e 79 6a 95 45 ce 7e 3c cb ce 0b 33 a4 e3 cd 42 be 44 dc 09 c1 2e c3 43 02 54 fd 29 d0 94 f0 45 0e 97 c6 13 2f cc 21 53 a5 16 0c 39 63 e6 a6 71 60 e6 14 a7 eb 77 31 1b 5d 50 85 8f aa 53 cd 7d f2 d6 70 4d b9 6e 72 97 14 0e d8 a1 71 6d 55 b2 54 c0 3f e4 3d 83 0c 92 f7 22 67 bd 57 72 e5 d0 46 7b 3d d6 e0 87 60 94 1f 48 32 67 2a 4c 8a 2a 10 94 9c 11 02 38 3c 94 7e 7c af c4 57 2a 62 4a bf 31 1b Data Ascii: Y8")6>2ehBq[;P\|k\Q/80T$FL28e=^+{rpXGWEps!Jxg}3K>h9~yjE~<3BD.CT)E/!S9cq`w1]PS}pMnrqmUT?="gWrF{=`H2gL8<~\|WbJ1
2023-07-21 16:50:38 UTC	4032	IN	Data Raw: 38 b5 18 05 bd 4e f3 ef 89 82 17 a3 5d 04 91 be be 16 9c 45 8d 7c 4a e0 4f e8 1b ba 9d bf 7f b6 cc d5 15 55 16 ff 79 38 fc 59 91 e1 5c 86 51 70 ff 4b b1 f7 a6 b4 ca cb f2 f3 86 e2 05 59 06 3e cb bf e7 88 96 e4 e0 4b 8b 99 b4 8b fa 3f 77 19 c5 45 ca ae 1f b0 13 cd d6 33 19 b8 ff 1a 1e be f4 04 26 fe a7 5f 7e bb fc 6a a8 06 74 18 94 87 01 c5 df 3a 7e 19 2f 48 96 79 df bf ba 78 ff fa c8 64 d5 0d 7b 8e ef fd 29 4a 8d 93 79 3b e1 e4 e1 33 5c 42 36 7c 67 84 03 e0 f0 39 1e b7 8c be 0a 06 a6 fd f9 79 f6 99 25 24 be 07 d3 fe 7c 3c 7b e9 9f c9 b4 2f cf b3 97 be 3b d3 fe fd 79 76 91 20 66 2e eb fe e2 45 c5 98 44 46 77 28 36 a7 07 82 57 12 0e 93 1d 9f ab 8b 4a 01 e7 fb 87 cf 20 04 cc e0 45 c5 27 8c 66 98 d5 4c b0 bd 27 f8 28 a3 3e f3 11 22 85 fe 00 cc 52 ff 1a 79 72 Data Ascii: 8N]E\|JOUy8Y\QpKY>K?wE3&_~jt:~/Hyxd{)Jy;3\B6\|g9y%$\|<{/;yv f.EDFw(6WJ E'fL'(>"Ryr

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.5	49879	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:38 UTC	3899	OUT	GET /static/webpack/production/c34bb5d45fc66a39ca35.HaFmluvjFc8mm41OtrDeAfTrAvWXHKYT4YGXIBlSWLA.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:38 UTC	3993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 7053 Connection: close Date: Fri, 21 Jul 2023 16:50:39 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:37 GMT ETag: "709086ea149a74c4ad4b457920c87ded" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 a9717fb92179a05f5da85fabc586e750.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: sbvur6-iuKts97i0f2hSDl5jDLAmdz0A0s58TTcKMZifGvQw1kjI7g==
2023-07-21 16:50:38 UTC	3993	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 3c 69 73 db b8 92 df f5 2b 64 ce ae 8b ac c0 b4 7c c4 93 d0 ab e7 f2 99 e8 c5 89 fd 7c 24 33 eb f2 53 c1 24 24 31 a1 08 0e 08 fa 88 a2 fd ed db 0d 80 12 2f c9 ce cc ec 56 65 46 34 09 36 1a 7d 77 a3 41 fb 21 8c 03 fe e0 f6 fb a7 67 fb 47 fb 07 a7 c7 ea e2 f8 a8 7f f8 fe fa d3 87 cb 7e bf fb ec 88 1f 3f 6e 6e 1d 37 c9 d2 91 7d 73 63 25 34 61 a2 ef 47 3c 0b fa 01 f7 d3 ff d1 37 92 70 90 5a b7 64 b2 d1 e9 6c 78 83 2c f6 65 c8 63 9b 11 49 a8 33 39 bb fb ca 7c e9 06 6c 10 c6 ec 5c 70 78 41 3e d9 92 58 fd 3e 4b 3f f2 20 8b 98 45 26 f7 34 ca 98 b7 d2 99 3a ad dd 7b 2a da 71 97 da 1b af 1d 22 e0 77 db 21 1c 7e 3a 0e 49 f1 ee 8e 43 a2 ee 7c 16 67 82 e3 65 97 b9 34 49 08 ed 72 d7 17 8c 4a 76 1c b1 31 8b a5 9d ba d7 bd 9e cf 63 32 49 Data Ascii: <is+d\|\|$3S$$1/VeF46}wA!gG~?nn7}sc%4aG<7pZdlx,ecI39\|l\pxA>X>K? E&4:{*q"w!~:IC\|ge4IrJv1c2I

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.5	49881	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:38 UTC	3900	OUT	GET /static/webpack/production/32b2c3f54e63e752572e.VMxDU3TeZKfX-lzEjMstleWBFHlXnMK-2oRoVGo7L3w.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:38 UTC	3977	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 11110 Connection: close Date: Fri, 21 Jul 2023 16:50:39 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:10 GMT ETag: "a57961c37a5a1f19731803911ebf9a9d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 633b37c269943f0b3472e0abe1a07b2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 4N270Wcgpd7i509rL4KCGVo5Jy45qz1w_ACv2Dj-a1HlOfJD7fkJYQ==
2023-07-21 16:50:38 UTC	3978	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 7d 69 6f db 4a b2 e8 77 fd 0a 99 17 30 c4 37 14 8f e4 dd 12 38 81 b7 4c 3c c7 8e 7d 63 fb e4 de 17 18 02 45 b6 2c c6 14 a9 e1 62 47 c7 56 7e fb ab ea 85 ec e6 22 c9 4b f2 80 39 13 8b 6c f6 52 5d 5d 7b 55 b7 1e bd c0 0d 1f cd c1 e0 ec e2 e0 f8 e0 f0 ec 84 fe 71 72 3c 38 fa 74 f3 f9 cf ab c1 c0 5a da e2 f9 f9 db ad 6e 4e d3 78 dc fa f6 4d 9b da 53 12 0d 1c 3f 4c dd 81 1b 3a b1 76 6b 3c 75 c9 66 6f 94 06 4e e2 85 41 8b 18 89 fe 74 31 fc 4e 9c c4 74 c9 c8 0b c8 65 14 c2 37 c9 ac 95 18 da 60 40 e2 f3 d0 4d 7d a2 19 4f 0f b6 9f 92 de 5a 67 ae f7 1f ec a8 19 f6 d7 f2 5e f4 a7 06 31 2f 0f 8e 2d 8d b8 5e 12 46 5a 9f 98 27 5f be 5c 7c 81 07 51 04 bf e7 ad f0 f9 b9 15 5a 4f 73 5d ef d3 a1 ec d4 4f ac 70 6e 74 3b 1d 75 3e 46 f8 f2 19 Data Ascii: }ioJw078L<}cE,bGV~"K9lR]]{Uqr<8tZnNxMS?L:vk<ufoNAt1Nte7`@M}OZg^1/-^FZ'_\\|QZOs]Opnt;u>F

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.5	49893	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:42 UTC	4043	OUT	GET /paper/emoji/preferences?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4071	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:43 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/preferences X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: ced240f3-068d-46d6-a148-5f9d0315b27e X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 85 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: d12add6859c64d5080f82d381ab912c0 Connection: close
2023-07-21 16:50:43 UTC	4073	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 7b 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 30 2e 31 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 7d 7d Data Ascii: {"success":true,"preferences":{"fitzpatrick":"base","version":"7.0.1","locale":"en"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.5	49897	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:42 UTC	4044	OUT	GET /paper/ep/stateless/calendars/calendar-events?padId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4070	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:43 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/stateless/calendars/calendar-events X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 31b4d8d5-4238-44fa-adf8-29e0395211ed X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e7b28508915d425ebee8ecefb9282c1e Connection: close
2023-07-21 16:50:43 UTC	4071	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"success":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.5	49774	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	477	OUT	GET /static/fonts/AtlasGrotesk-Regular-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:32 UTC	478	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 78156 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:51 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 14:01:07 GMT Cache-Control: max-age=43200 ETag: "9c03b55db2514e78544fc6ef3688cb3d" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 cb0d3a2bdc5300e2d139e111e94efe5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 24q5ll4F8EutNqt1AZhEN4UqjUcdjD6WdEAvx_5I6T689HtEVcQtCQ== Age: 10166
2023-07-21 16:50:32 UTC	479	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 31 4c 00 10 00 00 00 04 85 70 00 01 30 eb 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 90 5e 1c ce 64 06 60 00 8c 02 08 2e 09 82 73 11 0c 0a 86 db 50 85 fb 0f 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 90 3c 07 eb 00 0c 83 6c 5b e5 49 b4 00 4a 87 ec 1e 96 c2 ba 01 54 74 89 1a 35 da 39 da b6 2a 74 04 fa 7d 2e 12 a0 ea d8 ae e7 44 a3 9a 74 1d dd 67 31 ea 09 c2 8f a0 7a 2d c3 1f 41 e7 6d a2 20 9f ba d8 97 fd ff ff ff ff ff ff ff bf 6e 59 3c 6b be b3 0b 74 f6 5d 1c 72 8a 41 05 63 54 72 fc fc b6 a0 66 e6 54 fa a0 99 45 c5 19 a8 24 83 29 66 c2 a4 95 95 e6 ea e6 d0 5a d7 a3 1a c4 28 ab e2 4d 47 25 62 9a 5d d3 20 a5 62 b7 ee 50 65 f2 85 39 bd 89 45 d2 ea ba 2c cb 3e 15 2f 9d 2f 31 36 33 c2 b9 41 02 af Data Ascii: wOF21Lp0^d`.sP46$d <l[IJTt59*t}.Dtg1z-Am nY<kt]rAcTrfTE$)fZ(MG%b] bPe9E,>//163A
2023-07-21 16:50:32 UTC	494	IN	Data Raw: 3b ca d7 43 3b a2 48 72 bc 3f 29 d9 4f c3 d5 88 a0 23 67 3e 50 a2 72 5f 3a 91 87 14 0b 1f 03 1c 4b 70 31 44 f5 07 c5 1e 65 48 09 12 80 88 9d 4f 41 33 3c b7 1f 6e 8e 6a 2b bb 8e 30 5e 3b 5e ef 46 52 64 8a aa 5d d3 a2 c1 49 02 a5 66 14 03 98 aa db 2d bd a3 af 6e a5 e3 d6 30 6d ad b1 ca 7e 8b 06 56 87 3a 7f 41 e6 cf 9d a4 35 f7 01 4b 41 9e 16 8d 5b cb 2a c2 0d 05 1f 31 0c 2c 32 27 66 ef 1b 49 e5 17 39 f2 8c b7 d5 ed d8 33 a7 9c d1 e8 62 96 bd 63 ef f8 0b 0e f9 2f 80 2a 54 5d 81 0e d6 d0 91 8e 76 ca 49 d6 3a 08 71 41 01 fb 90 c3 ef e4 88 13 83 82 25 42 46 81 2e 14 6d 27 8c 11 1c 72 10 f2 70 19 8f cf d6 10 33 99 28 1a c0 70 88 94 c3 24 1c c1 70 94 94 63 24 9c 22 e2 0c 2e 8d f8 5c cc 9c 58 66 69 a4 bc 1f c2 0c 82 23 00 44 3f 08 02 c0 46 03 b6 3a 90 03 20 1f 44 Data Ascii: ;C;Hr?)O#g>Pr_:Kp1DeHOA3<nj+0^;^FRd]If-n0m~V:A5KA[1,2'fI93bc/T]vI:qA%BF.m'rp3(p$pc$".\Xfi#D?F: D
2023-07-21 16:50:32 UTC	510	IN	Data Raw: 31 9e b7 09 e4 4d 8b e7 db 2f 1d 44 23 ac 66 1f 17 b9 d3 1b ed af 0e e2 11 96 d9 ce 31 ae 72 a7 57 db 57 1d 24 36 c2 3c 2b 59 cf 5e 4e 71 b3 57 db 5f 1d 98 49 36 73 9a bb 67 25 3f b1 5f 08 c8 f7 a8 be 28 4d ec e9 e7 20 00 e1 20 28 80 fd 06 f9 f0 fb 13 f2 be f7 19 f6 05 a9 4f da c8 6d 4a 44 ad fc 0c 2d a1 81 16 4d d3 3c 9a 4f 0b 69 11 2d a6 16 57 d4 a2 c4 94 84 62 28 69 ff 69 d5 dc 2d 68 59 0b 2b fc d9 cd 6d 5e 73 9a dd a8 96 f6 b9 85 3e 4d 6a 09 6d 5f c5 8a ba d5 ab 45 cd bc c8 38 24 bc 2f bd ee 7f ad 48 1a 43 49 28 31 25 22 ab 11 90 cf 41 7e 26 31 45 8e 36 88 d4 df 1b ec 08 70 f1 92 30 04 19 18 fb ff 0b 96 23 83 c3 39 b8 24 c3 e4 1a 07 81 00 e6 79 a8 c4 dc ef 70 89 b9 f4 b0 18 a4 c9 58 1a 51 43 f5 d5 55 53 a4 50 c1 5c d9 b3 66 48 9f 3a 55 e2 84 09 4a cd Data Ascii: 1M/D#f1rWW$6<+Y^NqW_I6sg%?_(M (OmJD-M<Oi-Wb(ii-hY+m^s>Mjm_E8$/HCI(1%"A~&1E6p0#9$ypXQCUSP\fH:UJ
2023-07-21 16:50:32 UTC	526	IN	Data Raw: 3b a1 b2 bb 73 fd b2 28 64 13 b7 35 28 56 26 ab 93 8f c4 23 54 f9 6f bd f3 a9 4c 9b 7c 7c bb 23 5b 6b 00 1f ff 68 10 99 26 55 ca 1b 03 21 49 b3 4e 2d 6e 0e 05 c4 8d fd de f4 6f 00 87 94 4f bd 5e 0f 4e 7c 59 4e 4e 0e ab d2 48 9f da 2f 2f 1b 98 9d 38 f6 22 17 77 0f 3b fe c5 ae 51 da c5 32 ca 1d 66 9b 37 dd a1 f9 ef a2 8b 7d 32 26 56 92 6e 3d f7 4b df a5 3c 34 1d f9 ce 86 db b4 e4 4c 53 9c 12 11 ef 21 52 b1 2d 17 e5 b7 81 79 a3 f3 c2 ef 95 a9 96 de 0b ee 8a 39 91 5a b3 fe a1 f2 91 eb 91 72 fd c3 c8 d1 a4 3d 71 e1 a5 f7 54 f7 5d ef 80 59 ac 23 a5 a5 bb 2a e5 1a 39 0d 4a c0 d7 96 b2 ff d6 da 38 86 7e 55 2e 09 2f cd a4 3d c4 d2 18 a2 44 70 78 db 0c b1 80 04 9b af ce 26 91 d4 d9 fb 70 f2 72 1b 1e f2 e6 87 49 87 d3 7d 19 ce 69 b0 b7 d9 33 7b eb 15 d1 e6 a6 99 b9 Data Ascii: ;s(d5(V&#ToL\|\|#[kh&U!IN-noO^N\|YNNH//8"w;Q2f7}2&Vn=K<4LS!R-y9Zr=qT]Y#*9J8~U./=Dpx&prI}i3{
2023-07-21 16:50:32 UTC	542	IN	Data Raw: e3 82 65 bb 27 c8 05 2d 71 b9 e3 c0 5b 07 22 15 0b b3 f2 41 a9 84 07 6e 27 9e 84 35 d6 ec bd 48 54 ac 40 66 e4 fd 6f 58 9e 86 0f 98 25 c7 1c d4 1f 2f 71 4f 30 58 4d e7 6d e8 50 78 6b 05 04 55 5b 9e 60 a1 ff 01 61 c2 b9 15 2f 3d 28 22 b1 19 50 47 84 71 27 2d 1d 9d 56 26 71 0e 4a 72 41 b2 5c 34 76 2b f1 cc 66 7a 80 b4 1a 8b 8c 81 83 9b 95 67 9b 9f bb c2 76 8c dd dc ef 3e c1 f6 c2 7f 05 df f1 fa ea ed 37 d8 34 bd 62 a3 03 31 ba ed ca 03 05 2d 42 c7 88 ba 2d 08 9a c5 c2 51 69 06 84 dd 76 a1 f7 aa 7c 43 86 12 bb 87 27 0b be 13 cd 93 0c 17 c3 9b 2f 95 3b f6 b2 72 e0 f6 a2 e6 47 4a cc d7 a9 28 53 c0 ed 35 05 47 3f 09 62 3a 92 3b 1b c0 82 85 00 f9 30 6f b9 f3 99 0f 19 58 92 87 a7 d0 ce fd d7 55 bc bf fd 7d f3 25 90 fc 4d b1 d5 e8 71 18 d5 a8 c8 e3 8d ee 6e 93 06 Data Ascii: e'-q["An'5HT@foX%/qO0XMmPxkU[`a/=("PGq'-V&qJrA\4v+fzgv>74b1-B-Qiv\|C'/;rGJ(S5G?b:;0oXU}%Mqn

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.5	49895	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:42 UTC	4046	OUT	GET /paper/cloud-docs/get-filesystem-info?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-pad-id: sPCvEN8YwVSfHh10HNmcF notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 notes-tab-id: PyrhnmTtVxZUnEUavH4O x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4073	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:43 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 300de513-0dba-4252-a28f-bf9a337ad8a9 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 330cf06d1aa8462c88acabc23afe0c42 Connection: close
2023-07-21 16:50:43 UTC	4074	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.5	49892	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:42 UTC	4047	OUT	GET /paper/get-link-tracking-token?localPadId=sPCvEN8YwVSfHh10HNmcF&trafficSource=paper_address_bar&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-pad-id: sPCvEN8YwVSfHh10HNmcF notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 notes-tab-id: PyrhnmTtVxZUnEUavH4O x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4076	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:43 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: afcbbb67-39da-41c4-881d-21730ce11b5b X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: a30394816df1445c9a909d3848979522 Connection: close
2023-07-21 16:50:43 UTC	4078	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.5	49896	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:42 UTC	4048	OUT	POST /paper/cloud-docs/find-and-resolve-scls?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-pad-id: sPCvEN8YwVSfHh10HNmcF notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 notes-tab-id: PyrhnmTtVxZUnEUavH4O x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:42 UTC	4049	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 73 50 43 76 45 4e 38 59 77 56 53 66 48 68 31 30 48 4e 6d 63 46 26 74 3d 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 Data Ascii: localPadId=sPCvEN8YwVSfHh10HNmcF&t=deghsLEKJOGSu-1QvrwgkKX3
2023-07-21 16:50:43 UTC	4075	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:43 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: a7d33037-a176-4a14-9939-fa34fc26e84d X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: edb4b159168d4aa999c0abadccf5176f Connection: close
2023-07-21 16:50:43 UTC	4076	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.5	49894	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:42 UTC	4049	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 698 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:42 UTC	4051	OUT	Data Raw: 1f 8b 08 00 f2 35 bb 64 00 ff ed 97 6f 4f db 30 10 c6 bf 4a 94 57 9b d4 54 49 9a ff ef 50 d9 04 d2 60 48 63 9b 26 54 55 c6 b9 a6 96 52 27 8a 9d 4e 0c f1 dd 79 92 94 2a a3 b0 31 a0 d0 4d eb 8b b4 bd 5c ce 77 bf 7b ce 75 cf 2e cd a9 be 28 c9 4c 4c 5a 92 d4 e6 60 f5 9e 98 a5 98 a9 69 c9 d2 69 5e e0 a2 34 cb c8 38 23 99 4d 0c 56 96 86 90 42 1b e7 94 09 a9 f0 4c 59 15 25 55 5a 90 32 93 4b 93 d7 55 85 18 a7 62 41 78 6c 51 1e c1 ea 04 51 1c c7 76 e0 b9 9e 1d 0d 4c 8d 7b 1f e5 09 62 b6 37 1d 27 08 86 8d c3 ea e5 0d 4c 04 94 87 29 f2 50 54 2d a9 b2 46 34 0a e3 d8 4f ad d8 0f 3d cb e3 8e 6f 31 77 36 b3 82 11 f7 67 51 e4 73 e6 11 32 e1 4c 53 56 54 17 4d 41 32 83 41 b2 a5 c8 98 16 85 54 53 25 24 a7 a9 22 a5 f0 15 b5 65 d4 16 67 26 76 97 51 3f cd a1 67 c7 2b 18 4d 1a Data Ascii: 5doO0JWTIP`Hc&TUR'Ny*1M\w{u.(LLZ`ii^48#MVBLY%UZ2KUbAxlQQvL{b7'L)PT-F4O=o1w6gQs2LSVTMA2ATS%$"eg&vQ?g+M
2023-07-21 16:50:43 UTC	4078	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:43 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 0cce7fd4-95cd-4bce-a132-3008dabeb4d2 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 0a7ad1f234f14b63b0dc1c0f2be40ef4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.5	49898	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4051	OUT	GET /static/webpack/production/3ca391fb196a76f06afb.Sf-O5SKhNZ9n5HaOYmICg0jW_NKUQqCqe-cbrqaYptA.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:43 UTC	4082	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 29248 Connection: close Date: Fri, 21 Jul 2023 16:50:44 GMT Last-Modified: Wed, 12 Jul 2023 17:21:16 GMT ETag: "f5fa5413a58f2ed2efc40f2f4ee098b6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fa2f998214db1c6c6bdb96ceff3ce5d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: -O8hd9G--B3KiqEm_Ll9nAp1bPCLv5b-JgHe-hi2aFPQsHEo1EIvrw==
2023-07-21 16:50:43 UTC	4082	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 7b 7f db c6 95 30 fc 3f 3f 05 c5 a7 cb 12 e5 88 21 dd a4 e9 02 82 b8 8e 9c 34 de 5a b1 6b 29 4d 5b af 5e fd 20 72 24 a2 81 00 16 00 75 31 c9 f7 b3 3f e7 cc 7d 80 01 48 c9 4e db 67 bb 1b 8b 18 0c e6 72 e6 cc 99 33 e7 3a b8 8f d3 79 76 3f ba bc 7c f3 f6 e5 ab 97 df bc f9 96 fd f8 f6 d5 e5 c9 f7 3f fe f0 c7 b3 cb cb 70 67 8d cd e6 c3 85 37 5a ae 8a c5 e0 c3 87 de 1d 85 ea 79 f1 ff e7 34 9a 95 97 77 71 5e ae a2 24 fe 48 e7 bd 0b b2 7e f1 e5 f8 2b ff 7a 95 ce ca 38 4b 07 94 94 de 9a 8e e8 c3 32 cb cb 22 b4 cb 3b f1 f5 e0 60 40 bb 71 5a 94 51 3a a3 d9 75 b7 f4 bc 72 91 67 f7 dd 94 de 77 cf 1f 97 f4 db 3c cf f2 41 ef 24 4a d3 ac ec ce a2 24 e9 46 dd 59 12 15 45 37 82 ff ef ca 16 7b de 96 a8 7e 60 26 b4 38 cd e6 ab 84 86 07 63 Data Ascii: {0??!4Zk)M[^ r$u1?}HNgr3:yv?\|?pg7Zy4wq^$H~+z8K2";`@qZQ:urgw<A$J$FYE7{~`&8c
2023-07-21 16:50:43 UTC	4088	IN	Data Raw: f4 2e ce 56 85 01 a2 bc 52 cc 9a 4a 8d 42 a9 f5 7b 89 47 29 0b d8 90 38 de 72 60 16 e6 1b 6c 48 6b 17 df 4a 61 9c 56 37 ea 16 e7 35 25 e4 2a e4 32 4d b2 10 3f fe 1b 38 e7 d7 29 1a a9 16 74 8e d6 0a 7f a3 79 46 ae 2b ba 4a f6 b1 52 9b a2 ad a0 7d e1 20 77 e1 9c a9 1d e7 47 4b a0 22 18 f8 03 70 ae d8 6c 00 ab 0f 72 87 d2 12 05 1a 07 4c 56 3f e3 ba ce 39 d3 60 4e af 07 73 cf 3f 80 06 96 b8 e5 07 ab 23 68 63 79 84 c1 e9 a2 e3 ac 42 c0 0e 57 fd fe f5 60 89 c2 17 b5 86 2f d9 1a 6a 1d 85 40 66 34 fc 56 0b 29 2d 4b 05 cb 25 0d b8 1d 6b 9b eb 0a 36 66 cb 42 81 54 6c e9 e6 18 2c 13 b8 54 c1 ad b2 30 45 ac 5f 5c bd 45 96 c7 1f 91 76 26 d5 2b 0b 5b cb 58 2c 78 9c de b0 a5 34 9e df 2e cb b7 2b be 94 cb 08 99 2b b6 86 79 76 df 30 e6 85 78 ab 07 7c 2d 4b e4 68 97 a1 88 Data Ascii: .VRJB{G)8r`lHkJaV75%*2M?8)tyF+JR} wGK"plrLV?9`Ns?#hcyBW`/j@f4V)-K%k6fBTl,T0E_\Ev&+[X,x4.++yv0x\|-Kh
2023-07-21 16:50:43 UTC	4099	IN	Data Raw: 31 7b 45 17 3f fe e2 14 28 65 8c bf ba 72 cd ba 51 4e bb c5 6a b9 cc 72 68 61 d4 53 ce 46 36 ba 84 b4 e3 7e f1 24 f4 6a d7 30 bd 76 10 8e 53 16 d9 e8 eb 17 63 8f bc 43 43 f7 74 70 4a 3d f2 f6 b9 e4 a4 b3 1f 3d 49 b2 68 7e 9a e5 f4 7d 76 5f 48 35 73 f8 f3 80 89 26 32 4c 4b 51 c8 03 35 ac 95 d4 64 19 9f 81 38 b1 ec 7e 6f 8c 41 b9 33 1e 6b ab a7 a6 f1 eb f8 62 d9 59 b9 ba 76 d9 67 19 f1 c0 5d 2f 45 2c ef 3d 68 05 9f cb 60 4c 3a 26 63 2e d0 ce c3 20 d5 26 d8 94 79 8a 59 f8 b4 4d 86 b3 fe 31 c5 7f e9 9c a5 5c 69 89 22 2e f8 50 63 64 26 cc 3a 01 75 8b 28 45 f4 00 e6 8e 06 54 7a 54 2e 68 6a 5b 62 64 e1 da 0d 4d 0c 47 d0 00 67 27 84 eb f5 65 e0 76 9d 1c c4 b7 32 85 74 54 9a 10 df 48 19 b2 65 86 b2 0d 3d e7 b5 57 b2 93 94 7b 7e a8 21 b2 47 f5 f2 38 df 6c 92 a3 d8 Data Ascii: 1{E?(erQNjrhaSF6~$j0vScCCtpJ==Ih~}v_H5s&2LKQ5d8~oA3kbYvg]/E,=h`L:&c. &yYM1\i".Pcd&:u(ETzT.hj[bdMGg'ev2tTHe=W{~!G8l

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.5	49899	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4052	OUT	GET /static/webpack/production/0f87dfdb09fdf4689436.XmWd3ZCjNs5ikVl6X4w5UBoJH0WCva2GW011KNNjeIU.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:43 UTC	4111	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 301 Connection: close Date: Fri, 21 Jul 2023 16:50:44 GMT Last-Modified: Wed, 12 Jul 2023 17:21:36 GMT ETag: "6c3194fdc28b6804d557be186d86036e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b03c46754456cd1729ff37c2faafd4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: LnB9FBRwKb-vcZBlmyxrpv6UOH4yRbzDDipbk8JrS-gtPJdv41ZSBg==
2023-07-21 16:50:43 UTC	4111	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 8d cb 6e 82 40 18 85 f7 3e 85 a5 1b 48 c8 30 2a de 30 2c bc 45 5b 15 9b 36 54 53 63 26 23 f3 53 87 22 43 98 01 db 22 ef 5e 6d 1f a0 ab 73 16 e7 3b 9f 7e e6 09 13 67 44 c8 72 3d 9c 0c 47 cb e9 6f 99 4e c8 78 ee 7b 8b 17 42 dc 7f 17 97 cb 6e 6f a0 34 97 47 7d b7 d3 32 a0 81 22 05 cf 54 4e 63 fe 0d 4c db 9b 65 17 db 4e 98 27 81 e2 22 d1 89 09 26 33 ca f5 21 82 40 21 06 21 4f e0 29 13 29 64 ea 4b 07 53 23 04 e4 4a b0 3c 06 cd 2c 0b 1a e7 e0 dc e1 ca 18 14 34 ab 73 97 e9 cd 3e 6e 1a 03 b8 91 34 8f 95 5b d6 66 19 67 0e 47 b7 a8 aa 6a 6f 0c 6a 35 cb ba af 4b 91 67 01 ac 68 9a f2 e4 dd 7f 5e ba 47 a5 52 e9 58 56 4a af 32 c4 ae ce 83 f8 44 81 38 59 52 51 c5 03 eb 8f 38 d1 d4 c2 61 af cb 42 76 c0 fd 90 85 76 a7 d7 b7 5b 1d b4 3d 6d Data Ascii: n@>H0*0,E[6TSc&#S"C"^ms;~gDr=GoNx{Bno4G}2"TNcLeN'"&3!@!!O))dKS#J<,4s>n4[fgGjoj5Kgh^GRXVJ2D8YRQ8aBvv[=m

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.5	49903	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4052	OUT	GET /static/img/ace/emoji/270b.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:43 UTC	4054	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3037 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "c4ce23f7313e8e2319f10e4d8aeb20d1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: RZd6MdOe_WqhgIX_hm0NNB8hEfBSqa2oHgQTwuLDTE8L1PlrTlijkA== Age: 7099
2023-07-21 16:50:43 UTC	4055	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0b 6a 49 44 41 54 78 9c cd 9b 5d 88 1c d9 75 c7 7f e7 d6 47 cf 74 8f 46 33 d2 6c 46 d6 46 2b cb 1a ed 7a ad 8f 75 48 08 49 58 87 b5 8d c3 62 9c 97 2c 21 5e 88 0d b6 31 eb 5d ad 16 c7 18 1c 30 18 85 3c f8 c1 24 04 69 45 88 8d 09 ce 22 e3 0f fc 60 30 04 62 96 3c 84 e0 4d ec c5 f6 48 0a 96 64 59 da 95 57 df d2 8c 76 46 fd 51 55 f7 9e 3c 54 f7 4c 57 77 55 75 cf 4c 8f b4 7f e8 a9 9e aa ae 7b ee ff 7f 4f 9d 73 ee bd dd c2 26 e2 fc b1 27 7e 0f e3 8e 8a f0 47 aa 4c 23 72 0e d5 57 22 71 27 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<jIDATx]uGtF3lFF+zuHIXb,!^1]0<$iE"`0b<MHdYWvFQU<TLWwUuL{Os&'~GL#rW"q'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.5	49900	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4053	OUT	GET /static/img/ace/emoji/270b-1f3fb.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:43 UTC	4062	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3275 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:30 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "beaa0ed7207b6d54f5bc7a8118f30e9d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b50b0f4274b74414c7dcdb544e6090a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: sMNys155XY-o-fz6DtKHcL2jqZMnGCh5vlkcypKZKd6CQnuQWLpDGg== Age: 7099
2023-07-21 16:50:43 UTC	4063	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 58 49 44 41 54 78 9c cd 5b 5b 6c 1c 57 19 fe fe 73 66 f6 e6 7b ec d4 49 43 9a a6 0d 69 84 21 8d 4b b8 2a 45 6d 21 a8 42 f4 85 8a 90 90 0b 2a 55 81 07 2a 55 08 d1 82 d3 6a 21 81 14 2a 78 68 84 10 45 08 41 e2 14 8a fa 50 09 09 a9 50 fa 80 10 85 96 34 a1 2a a2 2d 4d 9b ab 63 3b 8e ef 3b bb 33 73 fe 9f 87 d9 ab 77 67 76 d7 5e 27 f9 e4 f1 ec 7a e6 5c fe ef fc b7 f3 cf 98 b0 8c 38 f1 f4 a3 83 62 24 4d 44 1f 15 96 1e 52 f4 26 20 47 6c db fa e9 c0 8e f4 dc 72 8e dd 28 68 b9 3a 3e 71 6c Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<XIDATx[[lWsf{ICi!KEm!BUUj!xhEAPP4*-Mc;;3swgv^'z\8b$MDR& Glr(h:>ql

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.5	49901	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4054	OUT	GET /static/img/ace/emoji/270b-1f3fc.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:43 UTC	4058	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3361 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:31 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "cd5a34185731b928deaa73d238282ad6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3d994808da6a9ce8c9e7b1364fa689ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: dnUBwvYzyYahSmKDSNcj-0JO9OZdsmbA_mC6UZMTTR-g6lmiKCHoSQ== Age: 7099
2023-07-21 16:50:43 UTC	4059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c ae 49 44 41 54 78 9c cd 5b 69 8c 1c 47 15 fe 5e 55 77 cf ce cc da bb 6b af 63 27 c6 31 ce 61 22 20 89 03 88 4b 09 4a 00 23 04 84 60 47 09 89 04 48 d8 0e 42 08 24 40 06 db 41 42 0b 12 ac 03 82 1f 89 b8 4c 62 02 c1 11 04 81 ed 3f 20 01 81 1f 08 71 0b 45 08 44 22 62 af 9d b5 77 7d ec e1 f5 5c 7d d4 7b fc e8 ee 39 bc 5d b3 bb b3 33 76 9e dc 9e 99 ae ae e3 fb ea 5d 55 d5 4b e8 a1 1c 1d dd 79 9b 28 19 21 e8 37 8b f0 10 11 bd 20 2c 4f 05 7e ee 5b f7 8f 7c bb d4 cb be 17 2b d4 ab 86 7f Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[iG^Uwkc'1a" KJ#`GHB$@ABLb? qED"bw}\}{9]3v]UKy(!7 ,O~[\|+
2023-07-21 16:50:43 UTC	4062	IN	Data Raw: 81 56 8d 97 ed 42 63 8e 99 c8 ff 4e 37 01 2e 24 1d ed 77 3b 5a 3d d7 ed 81 00 80 d2 ea ef db 1f fe d1 54 2f da b6 f6 d9 49 a5 9c ab ff d5 ed 81 00 40 3e e7 fd b9 17 ed b6 93 8e 08 50 45 79 0a a0 43 00 82 2e 8d 23 00 e8 90 d1 ee a1 2e b5 b7 68 59 d6 1e f7 1f be bd 77 28 e7 f9 b7 83 71 ab 10 6d 24 f0 46 06 6d 20 a0 08 a0 1f 40 1f 80 3c 80 1a 80 2a 80 12 80 8a 00 2f 11 70 82 20 27 8c a8 e7 a2 c8 fb c3 1d 9f d8 7f 45 fe 92 fc ff 27 c8 24 49 5b 26 a8 21 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: VBcN7.$w;Z=T/I@>PEyC.#.hYw(qm$Fm @<*/p 'E'$I[&!IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.5	49902	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4058	OUT	GET /static/img/ace/emoji/270b-1f3fd.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:43 UTC	4066	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3254 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:32 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "f8ab974b28712b004af916d2c01d4e86" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9c0ce977a13f3d9bbc6eed6540faf728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 0-GQxKE5ykM5C9QXjuGMZqFTqYDaZXVqaDxo-9pHIgK2iBRCivCk9Q== Age: 7099
2023-07-21 16:50:43 UTC	4066	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 43 49 44 41 54 78 9c cd 5b 6b 6c 1c d5 15 fe ce b9 33 b3 de f5 da 9b 4d 9c 07 81 10 c2 2b 29 b4 09 b4 15 af 38 51 84 1a 54 5a f1 48 23 54 a8 4a a5 b6 02 f5 47 29 04 a1 96 aa 12 72 7f 51 4a 0b 85 88 22 d1 1f 6d 85 82 50 29 24 11 42 95 68 a9 42 02 81 02 7d a0 02 25 a1 31 c4 26 c4 89 4d 6c c7 f6 3e e6 71 4f 7f ec ec 7a 76 77 66 76 d7 de 4d fa 49 23 db 73 67 ee bd e7 bb e7 79 ef 98 d0 41 dc bd 75 e3 a5 9e 96 01 45 74 85 86 64 19 38 e8 89 3c e9 18 c6 63 bf 7e 66 cf 74 27 c7 6e 16 d4 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<CIDATx[kl3M+)8QTZH#TJG)rQJ"mP)$BhB}%1&Ml>qOzvwfvMI#sgyAuEtd8<c~ft'n

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.5	49769	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	478	OUT	GET /static/webpack/production/paper_admin~paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~pap~98bcc4eb.ecb64ac8209d9b08246df37fb6c5ef61e67cc786.P8g-ahw-OP17UflU4vPd6dqc_PiHjZGoAEn-_cwbCW0.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:33 UTC	1027	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 1398 Connection: close Date: Fri, 21 Jul 2023 16:50:33 GMT Last-Modified: Fri, 21 Jul 2023 03:23:50 GMT ETag: "56b677a22d18f69e10bcf63359a75242" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e042bf1e56617a2fbe098f111a30b514.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 6iPzxAss9SPXxQjwkZASUbwoclDWOjTLGOsOXlyDrjQo9o1fNS4M7Q==
2023-07-21 16:50:33 UTC	1028	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 57 5b af db 36 0c 7e ef af 30 5a 14 88 bb e3 d4 ce c5 49 6c 0c 18 da 97 15 e8 b0 a1 db 9e 0d 59 96 13 35 b2 e4 49 72 2e 35 4e 7f fb 28 cb ca 71 72 9c 9d 0e 79 89 24 92 a2 c8 8f 1f e9 69 76 94 a8 ae 89 cc a2 d5 9e c7 59 d4 1e 69 a1 77 49 14 86 6f 1f a7 59 25 0a c4 3e 88 e2 dc 1f 2f db 1a 15 05 e5 db 40 8b 3a c1 88 e1 c9 01 c9 49 10 a8 1a 61 d8 ce b2 1c 29 92 35 9c 6a ff dd dc 07 0b 05 45 4c 6c 3f 48 82 0a 2c 9b 2a ef 0d 6d da 5c c8 82 c8 20 17 5a 8b 2a b1 56 76 75 60 b7 fd 14 0b 26 e4 d3 76 b7 0c 34 39 e9 40 11 2c 78 81 e4 d9 4f 4b c1 61 ad cf 8c 24 54 23 46 71 5a 21 b9 a5 dc 59 8d e2 fa 94 3a 8f fb bd c5 60 8b 91 52 27 11 ec 80 a3 94 d7 8d 76 51 58 b7 60 6d cb 03 aa 49 a5 12 4c b8 26 32 2d a8 aa 19 3a 27 25 23 a7 74 47 e8 Data Ascii: W[6~0ZIlY5Ir.5N(qry$ivYiwIoY%>/@:Ia)5jELl?H,m\ ZVvu`&v49@,xOKa$T#FqZ!Y:`R'vQX`mIL&2-:'%#tG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.5	49904	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4079	OUT	GET /paper/cloud-docs/urls?localPadId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-pad-id: sPCvEN8YwVSfHh10HNmcF notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 notes-tab-id: PyrhnmTtVxZUnEUavH4O x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4119	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:43 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 5c1cf795-7e8b-45ce-8909-ecda1886c5f4 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e2df779c9be045c2a50dbe806abbdd0a Connection: close
2023-07-21 16:50:43 UTC	4120	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.5	49905	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4081	OUT	GET /paper/ep/onboarding?productType=1&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4117	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:43 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: a357d8ee-9068-4e1c-9fde-f9a98cfe4d41 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 0bb7afa68cc6463ea7bc56983e090685 Connection: close
2023-07-21 16:50:43 UTC	4119	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.5	49908	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4112	OUT	GET /paper/ep/stateless/calendars/calendar-events?padId=sPCvEN8YwVSfHh10HNmcF&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4132	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:43 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/stateless/calendars/calendar-events X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 51cbec88-3e56-40eb-baa5-42d73b2e4f85 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: f47de8a9287f43d5a4c5e213a5d63d62 Connection: close
2023-07-21 16:50:43 UTC	4134	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"success":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.5	49909	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4113	OUT	GET /paper/get-link-tracking-token?localPadId=sPCvEN8YwVSfHh10HNmcF&trafficSource=paper_address_bar&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-pad-id: sPCvEN8YwVSfHh10HNmcF notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 notes-tab-id: PyrhnmTtVxZUnEUavH4O x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4135	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:43 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: e2484da4-3b8b-46de-9546-77d8c6946135 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 7a1bc3bd970d483f9b5fcd64af0bc2c3 Connection: close
2023-07-21 16:50:43 UTC	4137	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.5	49910	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4114	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 676 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4115	OUT	Data Raw: 1f 8b 08 00 f3 35 bb 64 00 ff ed 98 df 6b db 30 10 c7 ff 15 a3 a7 0d e2 60 27 76 12 e7 6d a4 eb da 87 74 61 6b 3b 46 29 46 95 2e 8e 98 7d 32 92 9c 51 4a ff f7 9e e2 f4 17 8c 91 d2 64 b4 23 7e 09 be 93 ef c7 f7 63 9f 50 2e 6e 58 ee ae 6b 60 63 06 4b 40 c7 3a eb df 31 bb 00 2c 2e 83 8b 9a cb bc e6 05 e4 57 dc c2 65 50 80 9b 72 85 9f 04 7c f8 18 18 70 8d 41 90 01 36 65 49 8f d6 46 d7 60 9c 02 cb c6 37 0c 9b ea cc 82 b1 5f 71 c6 25 1b f7 3a de 32 d1 88 20 1c c8 a7 ae a8 c3 94 9d 94 ba 91 07 5a b0 b1 33 0d 74 98 01 6e 35 52 21 a8 43 2e 20 e4 ce 71 b1 00 49 79 14 5a c7 51 c0 44 37 be d4 f8 d1 72 4c d1 fc ad 9d 34 c6 50 1f 33 aa fc 3e a0 b2 53 bf 9e 22 ac 0d 82 3b 28 b4 b9 f6 cd 63 d1 d6 2f 1b e1 4e 5b 41 66 9c 9a 21 2b f2 a5 2a b8 53 1a 6d 6e 15 25 c9 2d 58 4b Data Ascii: 5dk0`'vmtak;F)F.}2QJd#~cP.nXk`cK@:1,.WePr\|pA6eIF`7_q%:2 Z3tn5R!C. qIyZQD7rL4P3>S";(c/N[Af!+*Smn%-XK
2023-07-21 16:50:43 UTC	4137	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:43 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: b2cf05df-2a3e-4625-a921-e0bef1eb06a4 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 276996cab059498db5ba8ce8e39702c0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.5	49906	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4116	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 292 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4117	OUT	Data Raw: 1f 8b 08 00 f3 35 bb 64 00 ff 4d 90 cf 6a f3 30 10 c4 5f 25 e8 1c 3e 1c 7f 26 24 be 3a 2d ee a1 a9 a1 4d 4b 09 c1 a8 d2 56 11 c4 2b a1 95 52 42 c8 bb 67 85 d3 3f 27 b3 a3 99 f5 6f 76 7b 16 7d 3c 79 10 b5 80 23 60 14 d3 db b7 16 5b 40 b3 9b 6c bd d4 bd 97 06 fa 0f 49 b0 9b 28 37 78 87 ec 58 59 bd f1 5a 46 e0 88 0f ce 43 88 16 48 d4 67 81 69 d8 10 04 7a c2 4e 6a 51 97 d3 ac 34 0e 11 54 04 fd f7 a9 98 0a 4b cd c1 25 bd 72 4a d4 31 24 60 05 29 4a 54 d0 b8 94 39 66 bf ca 03 47 f2 48 4d 0a 81 11 3a c6 fa 49 d1 63 f6 03 5b 46 41 31 9a 71 e1 94 9b a1 19 21 75 52 f1 65 6c db 49 26 66 15 e5 d1 1a 19 ad 43 ea c9 f2 4f 7a 02 22 1e c7 d2 07 77 e3 8c 76 e0 d8 6c be 58 2e 97 c5 bc fa ff af ac e6 bc 53 ea 0c 25 a8 6b 8e 77 eb c5 fb d7 eb f3 67 bb 9f 15 ed 7a 50 f7 df b7 Data Ascii: 5dMj0_%>&$:-MKV+RBg?'ov{}<y#`[@lI(7xXYZFCHgizNjQ4TK%rJ1$`)JT9fGHM:Ic[FA1q!uRelI&fCOz"wvlX.S%kwgzP
2023-07-21 16:50:43 UTC	4134	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:43 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 242bfb07-e4c9-4ce7-8f3e-b542fce76d80 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 9fce70d274554b1dacf623b687c9b1d9 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.5	49914	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4121	OUT	GET /static/img/ace/emoji/270b-1f3fe.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:43 UTC	4126	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3319 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:33 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "da7f263d7e44eb65e76522941ff95b79" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 49039a44484a184312d8f608c205b640.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ZEaqa6AE57-1NLJUhz07PWdIT_hnEsBPn2MAvkGv0-zqFPHeYtN-Jg== Age: 7097
2023-07-21 16:50:43 UTC	4126	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 84 49 44 41 54 78 9c d5 5b 5d 6c 5c 47 15 fe ce cc bd 7b d7 eb b5 63 3b 4e 93 26 0d 69 4a 49 9c 04 28 6d 51 a1 8d 8b 02 a2 88 82 e0 01 37 40 25 40 02 54 04 12 0f 08 21 51 09 a9 2a 4f 7d 40 f0 40 85 90 ca 03 a0 92 d2 36 0d a5 42 08 09 54 29 52 dd 52 7e 2a a8 aa b4 4e 68 9a bf 36 a6 8e ff 62 af bd 7b 7f e6 1c 1e e6 de f5 ae 7d ef 5d af bd 4e ca 89 ae d7 d9 b9 73 66 ce 37 e7 6f ce 8c 09 1b 48 23 b7 ef bf 99 14 3f 08 c2 87 49 a8 1f c0 29 21 3c 4a 8e fa d9 d1 e3 27 2a 1b 39 f6 6a 89 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[]l\G{c;N&iJI(mQ7@%@T!QO}@@6BT)RR~Nh6b{}]Nsf7oH#?I)!<J'*9j

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.5	49913	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4121	OUT	GET /static/img/ace/emoji/270b-1f3ff.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:43 UTC	4122	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3352 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:34 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 21 Jul 2023 16:50:43 GMT Cache-Control: max-age=43200 ETag: "b735b5f2fd640f4e93bbfa17772e4790" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 49039a44484a184312d8f608c205b640.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: PtLNDnR0HDJuV4JuHqvygFDsqezjVpAa3QDATtLdj4YkakeUR74sQQ== Age: 7097
2023-07-21 16:50:43 UTC	4122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c a5 49 44 41 54 78 9c cd 5b 59 6c 24 c7 79 fe fe aa ee 9e 7b 78 cc 88 a4 78 ec 5a 2b ee 2a d6 ea b0 2d 41 8e 93 75 20 0b 96 60 d8 b0 1f 2c 18 91 80 38 40 10 08 c8 43 1e 94 20 40 f4 24 c8 4f 7e 30 92 87 18 81 01 fb 21 87 a0 20 71 60 04 7a 48 0c d8 30 10 c0 36 7c 09 b6 25 81 3a b8 24 97 bb cb 99 5d 72 97 c7 70 ce be ea f7 43 4f cf f4 70 ba 86 33 bc d6 1f 40 ce b0 7b ba aa fe af be ff a8 aa 21 e1 14 b1 38 7b df c7 41 ea 35 22 fa 43 40 4d 10 c4 b2 02 bf 9e b0 c5 3f 2f dd b9 53 3b cd Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[Yl$y{xxZ+*-Au `,8@C @$O~0! q`zH06\|%:$]rpCOp3@{!8{A5"C@M?/S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.5	49911	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4129	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 368 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4130	OUT	Data Raw: 1f 8b 08 00 f3 35 bb 64 00 ff bd 52 d1 8a db 30 10 fc 95 a2 67 27 38 b6 31 8e 5f d3 86 1c 94 ab a1 69 4b 09 41 28 d2 d6 16 58 92 ab 95 72 3d 8e fb f7 5b d9 39 da b7 b6 0f ed 93 d0 68 76 76 76 47 a7 27 c6 c3 e3 04 ac 65 70 05 1b 58 76 3b 5b 76 02 db 9f df 68 23 7a e0 a3 ee 87 70 71 3f 38 46 29 01 91 68 93 77 13 f8 a0 01 59 fb c4 6c 34 9f 10 3c 7e b0 9d 50 ac 2d b2 84 ec 9c b5 20 03 a8 5f 9f f2 8c 69 dc 8d 2e aa b7 4e b2 36 f8 08 19 7b 10 b8 1f 23 0e 40 84 05 09 da c0 d1 bd 77 a9 a4 ae 36 a9 a8 f3 30 d2 fd 27 c7 c3 f7 08 18 16 da 91 0a 66 f5 db 38 77 c9 38 f9 94 22 40 ef fc 63 9a d0 f6 8b 71 15 65 38 2e b4 4e d0 14 84 5a 71 d5 bd 08 da 59 e4 a8 ad 04 8e 34 27 5d f9 34 2f 60 36 92 d4 e7 36 9b ba d9 6e b7 79 5d 95 eb b2 ac 49 53 a8 3b 7a 67 d8 ed ae ef ee 9b Data Ascii: 5dR0g'81_iKA(Xr=[9hvvvG'epXv;[vh#zpq?8F)hwYl4<~P- _i.N6{#@w60'f8w8"@cqe8.NZqY4']4/`66ny]IS;zg
2023-07-21 16:50:44 UTC	4139	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:43 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 54d8d789-3543-4fce-a9a3-e54ba1f3b5ba X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 682cb92365cc4c5281cff8e0f346aa0c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.5	49912	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:43 UTC	4131	OUT	POST /paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:43 UTC	4132	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 73 50 43 76 45 4e 38 59 77 56 53 66 48 68 31 30 48 4e 6d 63 46 26 74 3d 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 Data Ascii: localPadId=sPCvEN8YwVSfHh10HNmcF&t=deghsLEKJOGSu-1QvrwgkKX3
2023-07-21 16:50:44 UTC	4142	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:43 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:44 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 0ebb79a7-3b27-4edb-bc49-0732d437c5d6 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: a0c5ba1b8bb6428c9be34ce498fae256 Connection: close
2023-07-21 16:50:44 UTC	4143	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.5	49778	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:32 UTC	555	OUT	GET /static/fonts/AtlasGrotesk-RegularItalic-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:32 UTC	556	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 82560 Connection: close Date: Fri, 21 Jul 2023 08:23:09 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:57 GMT ETag: "3777cf6535db972df634d4cb16895797" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: PN-umsi84qs5V1BYofy3CfMRvqnxfmZHnbvU7iiIdab-hBUkX4Fz6A== Age: 30444
2023-07-21 16:50:32 UTC	557	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 42 80 00 10 00 00 00 04 a4 78 00 01 42 1d 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 b9 68 1c ce 64 06 60 00 8c 02 08 2e 09 82 73 11 0c 0a 86 f0 00 86 8d 12 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 91 09 07 eb 00 0c 83 6c 5b bf 67 94 a9 53 64 ed 0b 03 be e1 76 a3 46 ff 1c 4f db bf 0a 7a a4 a8 dd c2 29 d0 48 c6 9e 21 a2 b3 d9 59 ea bc 45 d7 25 63 0a 92 00 aa 63 2d 24 bb 17 21 a2 73 6c 99 21 f0 87 85 10 33 fb ff ff ff ff ff ff 95 c9 97 67 4d 93 07 bc e4 1f 1c 5a 2b 82 58 f1 98 56 bb ba da 5d 42 8a 79 88 96 62 92 ac 42 ac 0d 35 6d 07 1c 2f 0a 10 2e 21 5f 56 e0 d5 d7 de 37 bd 7b 40 1b 95 ac 53 83 1a 5d 9b 32 db b6 6d 3b 35 59 76 ea 4d 1a d9 cf 20 ad 9b 3d 49 ce 07 97 15 d5 d1 55 06 4b 93 00 cc Data Ascii: wOF2BxBhd`.s46$d l[gSdvFOz)H!YE%cc-$!sl!3gMZ+XV]BybB5m/.!_V7{@S]2m;5YvM =IUK
2023-07-21 16:50:32 UTC	573	IN	Data Raw: 1f 7f 5e b3 13 39 d2 f1 1e 1f 95 bb 77 06 a9 f7 e5 98 e2 92 c8 92 0d eb 28 92 0c 50 89 20 c5 a3 a2 08 ed 42 a9 ed a4 6e 65 ea 9d 1c aa 9d 6c 16 11 cf a0 e8 a9 a9 11 6d d2 c5 ea ed cf bf 1a fe df 3b 16 7d aa ec 02 28 f8 6c e7 47 ef 55 c0 a6 ed 01 34 1f 45 c2 49 8b 67 6c e7 e4 a9 ae ab af 3d 1a d0 79 d9 3f fd f6 f1 f1 9e 68 69 c9 36 38 eb 3c 0b 32 2a f3 3f 41 cd 3a 19 ee 6b c2 3a 1c 11 88 52 3b b1 08 10 34 84 78 1c 84 7c 2d 07 d5 a1 de 35 35 50 80 17 da e5 7b 95 7d 42 39 26 14 c4 eb a7 26 81 1e a3 c7 6b cd fe a1 bc 0c 56 ef 24 4a ca c6 a6 ba 89 a5 be b2 b7 06 a9 dd 5b 48 11 46 e1 e8 0c 64 f8 e6 0f e4 3c 6d 35 c2 09 bf 0c b7 a8 1f 8d 66 6a 42 64 66 94 9c d1 bc 33 1c 68 61 99 f6 3e 13 14 71 e8 64 ee b1 98 59 28 b5 2e c0 48 4f 91 26 b5 06 6e ce 60 56 8d 11 7e Data Ascii: ^9w(P Bnelm;}(lGU4EIgl=y?hi68<2*?A:k:R;4x\|-55P{}B9&&kV$J[HFd<m5fjBdf3ha>qdY(.HO&n`V~
2023-07-21 16:50:32 UTC	589	IN	Data Raw: a0 d7 66 19 7c 05 d0 81 1d b2 c1 31 10 26 d2 28 f3 12 45 a4 7a 03 19 08 43 76 94 7e 6b c5 88 93 20 59 95 34 c9 aa bd 03 d9 27 8d 63 f6 28 b8 f3 83 38 6f f6 2a 6a 8a a8 fd d9 6f 0d 2d cb 90 95 de 9d 4f 0a 6b 8d 3a f5 cd a1 bc 5b a6 53 02 38 79 0d cb c9 03 00 e4 75 cb 55 e8 1a 67 03 ec 52 aa e4 24 89 40 eb 28 2f 69 bc 87 58 d9 1e 04 68 76 4e b2 48 22 61 3d d5 ab 01 cd b0 bf 2b cd 75 49 6f 8f 31 cd 22 9d 61 9c 66 f5 61 3f db d9 80 16 51 86 89 22 31 ed 1a f8 c4 43 b3 0c 93 0c 71 cd b8 56 38 d1 45 cc 30 28 88 c3 c6 5d f7 4a 28 33 54 09 b8 09 f3 da d5 10 8b 29 15 e2 0a 61 eb fc b9 ab 56 3a 7d 11 9e 4a 4b 4b c3 a3 5a 68 a9 45 92 25 4e b2 3e 89 fa c4 05 0f b8 9f 0a 4d dc 35 e9 26 d7 a4 89 93 95 cc 34 99 14 9b d8 81 eb 94 ed c6 91 60 85 e4 60 74 37 77 70 91 8f 99 Data Ascii: f\|1&(EzCv~k Y4'c(8o*jo-Ok:[S8yuUgR$@(/iXhvNH"a=+uIo1"afa?Q"1CqV8E0(]J(3T)aV:}JKKZhE%N>M5&4``t7wp
2023-07-21 16:50:32 UTC	605	IN	Data Raw: a5 8a 32 8d 98 df 9e fe fc d7 3d 34 3d f6 e3 01 fd e2 32 16 a7 74 b3 71 80 78 c5 5f b4 f8 59 0a 55 9d 82 4c 9c 9c 66 2e 94 3e 90 ca a2 85 8a 7f f3 77 e7 dd a4 e2 96 e2 ba 67 09 7e f1 c6 7b bf 2f 25 a1 7e c9 3b 87 92 dd e2 e4 9f d9 e4 ee 9c cc ff ed e8 4a 7a ae e1 7f 47 e0 9c 76 5d e1 af c9 a4 4b b0 3c 1a f4 51 0c d0 b3 ad 44 b6 2d 09 2a f0 35 6f 81 59 80 7a e6 3f a4 0b b8 cc 68 ed bf 57 86 3f 3a de d6 7f 5f 8b 97 b6 b4 f5 e9 46 48 3d ad 4d d0 b5 2f ef 6d 9f ce 8a 8c b7 6a d1 fb 3b a7 b3 ee b4 b4 6a b1 fb 87 e4 c6 9d a2 5b 54 92 04 44 9f 44 d7 59 00 df 25 cd 36 9a 26 25 a1 d5 84 05 5b 99 a4 98 5a c3 96 4d a8 bc 7b a5 68 af 04 9f f9 49 39 56 b4 5f 24 79 01 f9 8d c2 33 7f f1 52 57 28 b8 4c 9e 1e e0 02 81 0f d5 45 9d 97 d2 2d c8 c7 27 73 31 6d 61 31 6d 16 56 Data Ascii: 2=4=2tqx_YULf.>wg~{/%~;JzGv]K<QD-*5oYz?hW?:_FH=M/mj;j[TDDY%6&%[ZM{hI9V_$y3RW(LE-'s1ma1mV
2023-07-21 16:50:32 UTC	620	IN	Data Raw: c1 13 32 2c e4 91 f2 0c c6 78 a9 9a 14 7d dc a6 4f f5 66 29 4e da 9f 9c aa dc 6c 8f ed 0c fc cd 3e 42 d8 ff 0d 33 d5 6a 85 54 9a ba 97 12 4c ac 71 d1 27 d5 f4 cb dc 4c 34 f1 50 d8 96 e8 df ff 3c 53 e2 0c 80 d4 cc 3e d7 27 f0 31 1d ff 4c 13 61 7f 7b a6 30 e2 cc d3 eb 21 e0 05 70 a0 07 35 71 15 2c 35 79 d1 c6 af bd 33 d6 b7 77 d7 26 66 6d b7 1f ee 97 53 59 f3 22 7c 8b a1 5f 2d de 91 de e8 0c 2e ce 85 6a 99 0b 6b ac b5 ad 80 d2 6a 62 ac 9d 05 dc fd 9e 3c ff c8 07 00 5a be e3 49 d7 8a 2c d5 78 50 98 3f dc 7e 68 2d 9d d9 d2 2c 5d 2b 18 97 1a 40 f1 00 34 09 6e 1b b5 bd ab 46 45 1b 62 3f b8 4a 6d 5a 78 ca 7a c8 2e eb 5f 8e c5 52 2f e2 f6 ef cb de 91 ce eb 0c df 1d 71 e1 f4 7f b5 00 99 ba 81 5b f2 11 7b ac 18 b7 ee d4 75 be 67 d1 b7 cf 9e 9b e1 84 e9 75 b3 b0 1a Data Ascii: 2,x}Of)Nl>B3jTLq'L4P<S>'1La{0!p5q,5y3w&fmSY"\|_-.jkjb<ZI,xP?~h-,]+@4nFEb?JmZxz._R/q[{ugu
2023-07-21 16:50:32 UTC	636	IN	Data Raw: cf 9d f0 9e 47 97 50 56 bd e6 2f 3f d5 c7 4b 69 89 f2 6c a9 32 51 9e c5 eb 12 19 b9 2d 22 8f 93 7f 7c dc c5 72 de 84 57 3b eb 27 ef e7 49 bf 3c 50 88 5c 4e f0 8a e3 90 13 64 d8 25 e8 4e 16 51 bc 09 9e 01 27 7e b4 e3 0b 14 3c 1a bf de f9 68 23 85 18 61 02 0f f6 8a de c6 b2 58 14 be f0 c5 b2 58 16 be 68 8b b6 bd b7 5d 07 3e fe fb d8 21 94 cb 75 89 c8 71 19 17 ea 74 15 2d 1b 94 d7 11 c8 04 fe a5 a3 59 44 e3 17 40 93 66 38 da b8 72 8d b0 c7 6d d2 5a e4 04 bf d7 46 c5 03 1e 51 6c 3d bf 22 38 57 e0 f0 dc b9 21 3e cf f7 af 53 e9 25 44 3b 13 fe 75 09 7d d6 2e a1 ec e1 ac f7 e7 97 c5 f4 2a 51 f4 08 8d aa be 75 00 80 04 24 01 51 00 00 c1 80 24 00 02 89 72 ae a3 ba c7 8d 00 40 02 92 80 28 00 80 60 40 12 00 01 1c b5 cd 95 ea 56 6d 40 8c f6 f6 be 9b ae b5 1c 4d d7 97 Data Ascii: GPV/?Kil2Q-"\|rW;'I<P\Nd%NQ'~<h#aXXh]>!uqt-YD@f8rmZFQl="8W!>S%D;u}.*Qu$Q$r@(`@Vm@M

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.5	49915	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4140	OUT	POST /paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4142	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 73 50 43 76 45 4e 38 59 77 56 53 66 48 68 31 30 48 4e 6d 63 46 26 74 3d 64 65 67 68 73 4c 45 4b 4a 4f 47 53 75 2d 31 51 76 72 77 67 6b 4b 58 33 Data Ascii: localPadId=sPCvEN8YwVSfHh10HNmcF&t=deghsLEKJOGSu-1QvrwgkKX3
2023-07-21 16:50:44 UTC	4150	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: application/json;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:44 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 21 Jul 2023 16:50:44 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: d070465b-e570-4047-9970-2a638d1830b0 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: fabcaa026ca64d35872add1acadf7758 Connection: close
2023-07-21 16:50:44 UTC	4152	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.5	49919	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4143	OUT	GET /paper/comet/channel?v=2&r=383420915850636593080934&id=359881680158568536413245&channel=shortpolling&seq=0&create=yes&new=yes&tag=sPCvEN8YwVSfHh10HNmcF&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6FlSg4vvDYKoWH8Mebxp4H7IAloBvz Notes-Pad-Id: sPCvEN8YwVSfHh10HNmcF Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 Notes-App-Time: 1689901056000 Notes-Socket-Id: 359881680158568536413245 Notes-Tab-Id: PyrhnmTtVxZUnEUavH4O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4153	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:44 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 2760ed03-cd83-4577-bbc6-b6b7f9c1256d X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 8 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 95a1f017d64642e9bff8b8606aaf84dd Connection: close
2023-07-21 16:50:44 UTC	4154	IN	Data Raw: 36 3a 6f 6f 62 3a 6f 6b Data Ascii: 6:oob:ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.5	49917	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4144	OUT	GET /paper/nginx/ping?tabId=PyrhnmTtVxZUnEUavH4O&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 x-paper-client-capabilities: [1] content-type: application/x-www-form-urlencoded; charset=UTF-8 cache-control: no-cache, no-store, max-age=0 x-requested-with: XMLHttpRequest sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4152	IN	HTTP/1.1 204 No Content Content-Security-Policy: sandbox; frame-ancestors 'self'; Referrer-Policy: origin Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Paper-Request-Id: 0d3ace7d-5034-43d3-b6dc-3949bade8a88 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Fri, 21 Jul 2023 16:50:44 GMT Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote Server: envoy X-Dropbox-Request-Id: 8fc4f3b895184e8aa8beb6317c3933e9 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.5	49916	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4145	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 593 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4147	OUT	Data Raw: 1f 8b 08 00 f3 35 bb 64 00 ff b5 55 ef 6f d3 30 10 fd 57 2a 7f 8e 91 9d 5f 4d f2 b5 0c 15 09 95 4a 03 26 54 55 95 49 6e a9 21 71 22 db 19 4c d3 fe f7 9d e3 ee 07 da 06 6d 29 9f aa dc dd bb 7b f7 fc ec ae 6e c8 c6 5e f7 40 0a 02 57 a0 2c 09 76 bf 05 59 81 aa d7 13 d3 95 3f c0 d2 b2 53 0a 4a 4b 85 b5 d0 f6 ae ac d7 5d 0f da 4a 30 a4 b8 21 6a 68 3f 1b d0 e6 a3 5a 8a 8a 14 61 e0 22 33 0f 82 ea 69 8a 05 44 9a 59 d3 0d d5 db ae 24 85 d5 03 04 44 c3 6e 80 54 f5 f9 38 f1 3d 96 12 c6 42 96 b3 24 c9 f9 94 45 3c 62 59 1c f1 84 25 31 8e f7 bc 3e 79 ea 67 76 0b ba 17 d5 05 7c f3 68 2c 28 85 85 ba d3 d7 6e 33 55 7b c2 d5 50 de 43 96 02 d9 63 54 89 2b 59 0b 2b 3b 65 36 46 aa 12 36 06 8c c1 cf 4d 2f 6a d8 34 dd 8e b3 95 2d c2 78 9a e5 79 ce d2 38 7a 13 4d 33 ec 29 aa 91 Data Ascii: 5dUo0W*_MJ&TUIn!q"Lm){n^@W,vY?SJK]J0!jh?Za"3iDY$DnT8=B$E<bY%1>ygv\|h,(n3U{PCcT+Y+;e6F6M/j4-xy8zM3)
2023-07-21 16:50:44 UTC	4157	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:44 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:44 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: ad893126-0369-49df-95eb-c9f11073664f X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 4398cb0c18104a5ea5f0561190295248 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.5	49918	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4147	OUT	GET /paper/log/latency?metric=initial-page-load-total-latency2&values=%7B%22executed%22%3A11530%2C%22rendered%22%3A11074%2C%22responseStart%22%3A848%7D&tags=%7B%22pageName%22%3A%22editor%22%7D&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4155	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:44 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:44 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/log/latency X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 77454fa9-ffd1-4d0a-9d18-e66c1f40079f X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 820593a951434fe085207778108cd771 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.5	49920	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4149	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 265 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4150	OUT	Data Raw: 1f 8b 08 00 f3 35 bb 64 00 ff 4d 90 cd 6a f3 30 10 45 5f a5 cc 5a 2e b6 6b 4c ac ad db e2 6e d2 40 7f 3e 4a 08 46 48 13 5b 10 4b 46 33 ca 47 08 79 f7 c8 4d 0b 5d 09 dd 3b cc 39 d2 f6 0c 3d 9f 66 04 09 78 44 c7 20 7e 4e 09 db 68 77 77 ec 75 16 d0 19 0c 68 b2 bd 0d c4 19 db 09 d3 d8 1c fc 8c 81 2d 12 c8 33 b8 38 7d 10 06 7a 75 1b 65 40 96 62 49 5a ef 1c 6a 46 f3 b7 ca 05 58 6a 0f 3e 9a 47 af 41 72 88 98 98 8e c3 a9 f5 71 01 d7 02 b4 62 1c 7c 38 25 8b 68 6f 2c 13 35 bf df 44 37 2a 81 53 ea d4 d1 0e 8a ad 77 d4 93 75 1a 7b 42 a2 74 ed 67 35 60 7f f0 0b ae 10 f0 2d 2c 8b 7a d5 34 4d 5e 57 0f f7 75 95 56 2a f3 92 6a a0 4d 7b 7c 5a af be fe 7f be ed bb b1 c8 bb f5 a4 9f 7f 7f 61 99 28 1b 01 a4 03 a2 fb 67 0d 8f 69 51 b9 4a 6f b8 45 1d da 61 4c ce 45 5e 56 97 cb Data Ascii: 5dMj0E_Z.kLn@>JFH[KF3GyM];9=fxD ~Nhwwuh-38}zue@bIZjFXj>GArqb\|8%ho,5D7Swu{Btg5`-,z4M^WuVjM{\|Za(giQJoEaLE^V
2023-07-21 16:50:44 UTC	4165	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:44 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:44 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 82a59e8c-4839-41a2-8a25-79182c5596e8 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: ad2b5e670d0440339a51063758339b37 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.5	49922	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4152	OUT	GET /static/webpack/production/d7c49816088408423a50.cjIp7UHClzqwu3lMbpCuK9_cMgk8uoSvsL8FX5pOS4Y.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-07-21 16:50:44 UTC	4174	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 32961 Connection: close Date: Fri, 21 Jul 2023 16:50:45 GMT Last-Modified: Wed, 12 Jul 2023 17:21:14 GMT ETag: "b6010b0b5317c70dcd524245fafd3077" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 01c82f5226ffef5f7e654ffdbab24db6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: xU2krwnNohmCkEr1Ll4I_1-JaInlM4Bxv5e2xfUorb_istf12_qN-g==
2023-07-21 16:50:44 UTC	4175	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 93 1b 57 76 20 f8 1d bf 02 cc 90 ca 48 22 f1 aa 22 8b 52 82 c9 8c 12 0b 45 52 62 b1 4a 55 45 51 22 0a 62 24 81 04 90 14 90 09 65 26 aa 08 56 96 c3 b3 11 3b d3 eb 6e 8f 1d 33 3b 61 b7 a3 67 bc 13 e1 d9 71 cf 86 27 c6 e1 89 8d f1 da e3 0f d6 3f d9 b5 64 fb 93 ff c2 9e 73 ee bd 99 37 1f 40 15 9f 52 77 4b 8f c2 7d 3f cf 3d af 7b ce cd ca a9 e3 0e bc d3 fa 93 27 f7 f7 b6 b6 b7 3e ba df a1 40 67 fb c9 ed bb 0f 1f 7c 72 f8 e4 89 71 61 89 28 ea f6 d4 fa 6c 1e 8c 2b dd ae d2 1f fb 9e eb 29 3d ed 6c 7d b3 b5 a9 0f e7 6e 3f 74 3c b7 62 6b a1 e6 ab 67 27 96 5f 76 db a5 c6 d5 2b a5 32 fc 73 34 b6 cb bb f7 8e ca f7 9d be ed 06 76 89 12 6f 7b b3 85 ef 8c c6 61 b9 d2 57 cb eb cd d6 35 ad fc c8 72 ad c0 09 cb 47 f0 fb 95 13 fa 73 77 Data Ascii: kWv H""RERbJUEQ"b$e&V;n3;agq'?ds7@RwK}?={'>@g\|rqa(l+)=l}n?t<bkg'_v+2s4vo{aW5rGsw
2023-07-21 16:50:44 UTC	4190	IN	Data Raw: 64 9f 47 39 f4 5c 17 cf 18 ea 16 e0 67 db b1 f1 73 69 10 07 b6 02 cf 4d b4 0d 05 40 be c3 b4 1d df 76 f0 f7 d0 9a 52 fc d0 83 6a 50 05 0a 43 31 c8 86 1c 42 b1 9a 89 7f a9 03 c0 c0 3c 4c b8 9b fc 3d a0 4c 5d c8 39 a6 fe d4 09 92 88 35 8d 5e cc a7 28 ce 1c 1f d7 e0 ff ff f7 77 fe 2d fc 0d 18 e2 4e b7 a0 52 27 95 8f 2d 22 54 96 1f 51 5a b4 63 3f 45 d2 90 24 ec 7e f3 a7 48 92 5e 88 a8 65 fb 2f a2 5d ff 05 44 cd 68 6b 86 79 ce 24 ce 74 a2 8f e7 d8 a0 c3 53 3e 9e 4f a4 d8 d6 1c 49 c9 3c 08 79 fc d0 9e 41 3c 8c 42 88 46 a1 Data Ascii: dG9\gsiM@vRjPC1B<L=L]95^(w-NR'-"TQZc?E$~H^e/]Dhky$tS>OI<yA<BF
2023-07-21 16:50:44 UTC	4190	IN	Data Raw: 8d ee 46 3c 67 ef 2b a4 89 5e 92 f0 c0 3b 41 2a 24 15 d9 b6 5f a4 53 70 73 d8 d2 c5 53 bd 76 5e 31 af 74 bf 84 34 20 da 03 55 ad 60 6e f7 c4 ed e1 e8 31 7c 1b 25 1d 1f d7 a2 6e aa b4 a7 59 82 bb 0e 48 7e 03 c4 a4 6b da d4 b8 ae 8d 8d 4d 6d 68 dc 78 a3 54 ef b2 f4 8d 93 22 22 41 2f 4b cd b4 12 a3 60 45 62 a3 20 66 7d 20 66 d3 5e bb 0f 44 6b 77 ef c1 d1 dd 27 7b 3b 3b 87 9d a3 6e 3f 4d df 7a 44 63 46 50 78 d0 6b 8f 92 b7 cf 46 8c f8 2c e2 4f fe f8 dd 71 4f 3d 5b 18 f8 db 5e 24 05 17 80 83 bb c3 9e d9 38 49 10 e6 90 be 3a b9 30 6a 0b 55 5f dc 6c 35 f1 6b cf 8b aa b1 8e ef cb 42 53 0b 49 90 4a a1 f5 d1 52 9e b7 bf 8c d3 5d f0 87 eb e9 8b a3 8c 52 ce 38 86 ed d7 5a 18 21 6c 3a c2 10 21 66 2c 12 a3 68 ac 75 62 cc 52 2f ba b7 e8 2d 4b ad 93 49 ae b1 f4 52 f2 91 Data Ascii: F<g+^;A*$_SpsSv^1t4 U`n1\|%nYH~kMmhxT""A/K`Eb f} f^Dkw'{;;n?MzDcFPxkF,OqO=[^$8I:0jU_l5kBSIJR]R8Z!l:!f,hubR/-KIR
2023-07-21 16:50:45 UTC	4191	IN	Data Raw: cd 18 c3 9e 66 ad 67 49 6c a6 a6 51 33 7d 08 0c b8 eb 28 5a dc 6a ad cb 0f 19 63 c6 0c 33 66 b7 36 5a a9 0c 09 49 8f 6e 5d 6f 9a ad 0f 9b 4d 1d d1 75 bb 5f c4 6e ce f2 e9 1c 39 2d f2 39 02 51 97 88 66 ac ad 65 f3 63 b6 d1 eb 62 81 0c 85 c2 f6 38 32 2b bc b2 97 50 5a 9f 7f 16 53 40 86 21 ed f8 e5 34 d9 12 66 fb f0 07 c0 08 32 7c 77 e2 f9 ef 5e 85 2d f4 d6 92 2a fb 22 15 36 e9 27 10 71 ad 54 63 8b d9 e4 95 d4 2f a5 a3 2e e8 ef 07 a1 a3 46 06 8a 81 df 2d 38 4f b0 e2 dc 8b 01 58 34 8e 2a 8e 4f 1b a9 d7 c5 5f 47 79 4d 6d 17 6a c4 53 6c 26 47 69 f8 37 ab da 9e 1b f8 05 fa ac 6a 7b be 5c b5 3d cf ab b6 e7 b2 6a 7b 2e ab b6 e7 19 d5 f6 3c a7 da 9e a7 55 db 73 c6 a7 0d 12 d5 36 db 7c 04 86 28 a7 7f dd 60 8a ed ac 82 17 92 4d 7e d7 3a 5f a2 e1 4d 17 59 a1 e2 dd 40 Data Ascii: fgIlQ3}(Zjc3f6ZIn]oMu_n9-9Qfecb82+PZS@!4f2\|w^-"6'qTc/.F-8OX4O_GyMmjSl&Gi7j{\=j{.<Us6\|(`M~:_MY@

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.5	49921	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4154	OUT	POST /paper/logging/event-log?t=deghsLEKJOGSu-1QvrwgkKX3&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 333 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" notes-tab-id: PyrhnmTtVxZUnEUavH4O notes-app-version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 sec-ch-ua-mobile: ?0 notes-app-time: 1689901056000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=e8a8e806414163dd; gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4155	OUT	Data Raw: 1f 8b 08 00 f4 35 bb 64 00 ff bd 51 51 6b f2 40 10 fc 2b b2 cf 41 12 b5 62 f2 1a fb 61 a1 f5 0b b4 b6 7c 48 08 e7 dd 36 1e 4d ee c2 ed c5 22 e2 7f 77 0f ab f4 d1 c2 47 9f c2 cc ce 6e e6 66 d6 07 a8 fc be 43 c8 00 77 68 3c 44 5f df 0c d6 68 ea 72 b0 ee 44 8d 55 63 85 2a 07 68 54 c1 e8 91 41 2e 9a 66 23 e4 07 f1 42 e7 6c 87 ce 6b 24 c8 0e 60 fa 76 45 e8 e8 af 29 84 82 6c 14 05 26 b7 c6 a0 f4 a8 be 8f e2 08 34 e5 8d ed d5 dc 4a c8 bc eb 31 02 29 3c d6 d6 ed 83 21 53 9f af ab 5e fa 97 b3 c9 42 f0 af 98 35 62 a7 6b e1 b5 35 54 91 36 12 2b 42 22 86 d5 d5 2f 64 49 04 5e b7 bc 96 4c 67 69 9a c6 d3 c9 78 98 a6 7c 52 a8 07 1e 03 15 f9 ee 7e 39 fb f7 f9 fa fc be d8 26 f1 62 d9 ca 3f 97 04 82 62 cc 16 49 3a 44 f3 a6 95 df f2 a1 d1 ec 4a 2d 50 d7 5b 0e 2a 89 47 93 e3 Data Ascii: 5dQQk@+Aba\|H6M"wGnfCwh<D_hrDUchTA.f#Blk$`vE)l&4J1)<!S^B5bk5T6+B"/dI^Lgix\|R~9&b?bI:DJ-P[G
2023-07-21 16:50:44 UTC	4171	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-194084b1b08e4d9cfcf37802c66db397399844ad'; Content-Type: text/html;charset=utf-8 Date: Fri, 21 Jul 2023 16:50:44 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Fri, 21 Jul 2023 16:50:44 GMT Notes-App-Time: 1689901056000 Notes-App-Version: ecb64ac8209d9b08246df37fb6c5ef61e67cc786 Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 3d273f4b-7f12-4167-9f63-f4c1a2da34ef X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 757ecf4cfc5343ee962cd4ad65ff67e4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.5	49923	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4158	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 899 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4160	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 72 65 63 65 69 76 65 64 5f 6d 65 73 73 61 67 65 5f 63 6c 69 65 6e 74 5f 72 65 61 64 79 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"EAiNyh0Etp1-SLOVW1yl7","event_name":{".tag":"received_message_client_ready"},"auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu
2023-07-21 16:50:44 UTC	4171	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 32 X-Webkit-Csp: sandbox Content-Length: 21 Date: Fri, 21 Jul 2023 16:50:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8e784ee98a6245599d14952ce0140246 Connection: close
2023-07-21 16:50:44 UTC	4171	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.5	49925	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-21 16:50:44 UTC	4161	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 853 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" X-CSRF-Token: deghsLEKJOGSu-1QvrwgkKX3 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.web_platform-live:prod-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:prod-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Please-find-the-below-shared-Vital-Documents.paper?dl=0&rlkey=6og5cgta4316ahai21ujyinv2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MzEwMzk4NDAxMjY0NDkyNTM1NzQ3Njc3NDgzNjg2MDI4NjU2NDc2; t=deghsLEKJOGSu-1QvrwgkKX3; __Host-js_csrf=deghsLEKJOGSu-1QvrwgkKX3; __Host-ss=O5ZSfGCE1E; locale=en; __Host-logged-out-session=ChBuJZkt4ce0ljqFv8NVEBb0ENru6qUGGi5BSEpUUWlVSVBQa2dCWDEtRl9NRVMwMU9jY0ZIV0dpLW52RFJLREF2elJaem9n
2023-07-21 16:50:44 UTC	4162	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 45 41 69 4e 79 68 30 45 74 70 31 2d 53 4c 4f 56 57 31 79 6c 37 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 73 65 6e 74 5f 6d 65 73 73 61 67 65 5f 68 6f 73 74 5f 72 65 61 64 79 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 37 35 32 67 77 4f 4a 4d 31 33 5f 6f 46 52 77 6c 34 64 63 63 33 5f 4b 31 73 4e 4d 50 79 58 31 42 69 37 31 53 4d 57 46 6a 37 76 62 56 70 41 61 36 43 37 6d 71 4f 4f 66 71 59 7a 67 79 6f 4f 35 6b 61 58 64 74 6a 4f 61 64 61 6d 69 43 44 54 65 39 37 6b 32 52 51 63 55 36 4d 32 65 70 47 44 34 69 46 74 2d 30 32 37 7a 57 41 70 58 37 69 31 49 6b 4e 75 2d 30 38 6e 77 5f Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"EAiNyh0Etp1-SLOVW1yl7","event_name":{".tag":"sent_message_host_ready"},"auth_token":"cd.AD752gwOJM13_oFRwl4dcc3_K1sNMPyX1Bi71SMWFj7vbVpAa6C7mqOOfqYzgyoO5kaXdtjOadamiCDTe97k2RQcU6M2epGD4iFt-027zWApX7i1IkNu-08nw_
2023-07-21 16:50:44 UTC	4173	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 32 X-Webkit-Csp: sandbox Content-Length: 21 Date: Fri, 21 Jul 2023 16:50:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f54c0306d15f43369928b5cd4590e84e Connection: close
2023-07-21 16:50:44 UTC	4174	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Target ID:	0
Start time:	18:50:23
Start date:	21/07/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff7d31b0000
File size:	2'851'656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Target ID:	1
Start time:	18:50:24
Start date:	21/07/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1956 --field-trial-handle=1644,i,6377621369673702105,3951177099500528634,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d31b0000
File size:	2'851'656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Target ID:	2
Start time:	18:50:28
Start date:	21/07/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0
Imagebase:	0x7ff7d31b0000
File size:	2'851'656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Chrome Cache Entry: 369

Chrome Cache Entry: 370

Chrome Cache Entry: 371

Chrome Cache Entry: 372

Chrome Cache Entry: 373

Chrome Cache Entry: 374

Chrome Cache Entry: 375

Chrome Cache Entry: 376

Chrome Cache Entry: 377

Chrome Cache Entry: 378

Chrome Cache Entry: 379

Chrome Cache Entry: 380

Chrome Cache Entry: 381

Chrome Cache Entry: 382

Chrome Cache Entry: 383

Chrome Cache Entry: 384

Chrome Cache Entry: 385

Chrome Cache Entry: 386

Chrome Cache Entry: 387

Chrome Cache Entry: 388

Chrome Cache Entry: 389

Chrome Cache Entry: 390

Chrome Cache Entry: 391

Chrome Cache Entry: 392

Windows Analysis Report
https://www.dropbox.com/scl/fi/riruw1bnwcdb12ry3ug5g/Untitled.paper?rlkey=6og5cgta4316ahai21ujyinv2&dl=0